# 4.15.65
Created: 2026-06-04 13:21:18 +0000 UTC
Image Digest: `sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac`
## Changes from 4.16.64
### Components
* Kubernetes upgraded from 1.29.14 to 1.28.15
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202606051757-0 to 415.92.202606030318-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| BareMetalLoadBalancer
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ChunkSizeMiB
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallAzure
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallGCP
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallIBMCloud
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallNutanix
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallOpenStack
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallPowerVS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIInstallVSphere
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| DisableKubeletCloudCredentialProviders
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Disabled
(Changed)| Disabled
(Changed) |
| EtcdBackendQuota
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| Example
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalOIDC
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| HardwareSpeed
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImagePolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| InsightsConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| InsightsOnDemandDataGather
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| KMSv1
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MetricsCollectionProfiles
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NetworkDiagnosticsConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NewOLM
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NodeDisruptionPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PinnedImages
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PlatformOperators
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ServiceAccountTokenNodeBinding
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ServiceAccountTokenNodeBindingValidation
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ServiceAccountTokenPodNodeInfo
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| StreamingCollectionEncodingToJSON
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| StreamingCollectionEncodingToProtobuf
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| TranslateStreamCloseWebsocketRequests
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| UpgradeStatus
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereDriverConfiguration
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereMultiVCenters
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VolumeGroupSnapshot
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AdminNetworkPolicy
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| MetricsServer
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| VSphereControlPlaneMachineSet
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| VSphereStaticIPs
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| GatewayAPI
(0 tests)| Disabled| Disabled| Not Available
(Changed)| Not Available
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
### New images
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [4fb95a28](https://github.com/openshift/alibaba-cloud-csi-driver/commit/4fb95a28e02d9f080ca41caa209896c1c5f9a563) `sha256:32e65b585d92694ac2dccebdbf3c59c3beaa5af11d8f06fa402cc2394898b013`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:5b6d809b79b77f6f0c6e899a1b3096211814ec48743d3e29dc006da9ed559990`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:a16bf8f681984defed18e60566d59e308cf0d556915c3a461c8887a0f0169726`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [9b13bd4c](https://github.com/openshift/ibm-vpc-node-label-updater/commit/9b13bd4c73e7fa58c109dc3e3b9221773cd7e0e3) `sha256:90c4a4a559fd93423a6192c6dd271783086108ae04f8ddc1a0ae6bd5faa49483`
* machine-os-content `sha256:6aeffbd6fc962e75ebd894af16aa61c0ab23a8effd68115d6fd7c663ed214638`
### Removed images
* aws-kms-encryption-provider
* azure-kms-encryption-provider
* containernetworking-plugins-microshift
* multus-cni-microshift
* operator-framework-tools
### Rebuilt images without code change
* rhel-coreos `sha256:4a842f074a95ccbb643ec16e406b260625c6ddc69f0f6be8cd510690e7c84579`
* rhel-coreos-extensions `sha256:9f23da6dc4291dc0a6e77b3cc575132ec167697261c291e7b202c5712c3e5f33`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)
* [OCPBUGS-58633](https://issues.redhat.com/browse/OCPBUGS-58633), [OCPBUGS-58638](https://issues.redhat.com/browse/OCPBUGS-58638): Bump glog to v1.2.5 in release-4.15 (#7905) [#7905](https://github.com/openshift/assisted-service/pull/7905)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) [#7487](https://github.com/openshift/assisted-service/pull/7487)
* [OCPBUGS-46940](https://issues.redhat.com/browse/OCPBUGS-46940): OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) [#7199](https://github.com/openshift/assisted-service/pull/7199)
* [OCPBUGS-22539](https://issues.redhat.com/browse/OCPBUGS-22539): Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) [#6858](https://github.com/openshift/assisted-service/pull/6858)
* [OCPBUGS-43022](https://issues.redhat.com/browse/OCPBUGS-43022): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) [#6894](https://github.com/openshift/assisted-service/pull/6894)
* [OCPBUGS-42571](https://issues.redhat.com/browse/OCPBUGS-42571): Libraries bump to mitigate CVE-2024-27289 (#6834) [#6834](https://github.com/openshift/assisted-service/pull/6834)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) [#6753](https://github.com/openshift/assisted-service/pull/6753)
* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6381) [#6381](https://github.com/openshift/assisted-service/pull/6381)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) [#6245](https://github.com/openshift/assisted-service/pull/6245)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) [#6217](https://github.com/openshift/assisted-service/pull/6217)
* 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) [#6211](https://github.com/openshift/assisted-service/pull/6211)
* Revert "MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)" (#6208) [#6194](https://github.com/openshift/assisted-service/pull/6194)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) [#6194](https://github.com/openshift/assisted-service/pull/6194)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6191) [#6191](https://github.com/openshift/assisted-service/pull/6191)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) [#6137](https://github.com/openshift/assisted-service/pull/6137)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) [#6135](https://github.com/openshift/assisted-service/pull/6135)
* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5876) [#5876](https://github.com/openshift/assisted-service/pull/5876)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5c16119aeedc4c30e960a59ca91bbfe704879ad8...b7cfbf8fa8d25329ab1e4e46571e4c4bbdfdc1b2)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/f0b1275e58633382222af71a6cac527e6f8cec24)
* [OCPBUGS-58643](https://issues.redhat.com/browse/OCPBUGS-58643): Bump github.com/golang/glog pkg version to 1.2.4 (#1189) [#1189](https://github.com/openshift/assisted-installer/pull/1189)
* [OCPBUGS-53714](https://issues.redhat.com/browse/OCPBUGS-53714): Bump jwt to 4.5.2 in release-4.15 (#1092) [#1092](https://github.com/openshift/assisted-installer/pull/1092)
* Bump golang.org/x/net to 0.33.0 (#1011) [#1011](https://github.com/openshift/assisted-installer/pull/1011)
* [OCPBUGS-43026](https://issues.redhat.com/browse/OCPBUGS-43026): Pick up latest CVE changes by bumping service (#921) [#921](https://github.com/openshift/assisted-installer/pull/921)
* [OCPBUGS-42301](https://issues.redhat.com/browse/OCPBUGS-42301): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) [#907](https://github.com/openshift/assisted-installer/pull/907)
* [OCPBUGS-36779](https://issues.redhat.com/browse/OCPBUGS-36779): Reload host inventory on conflict (#891) [#891](https://github.com/openshift/assisted-installer/pull/891)
* [OCPBUGS-35894](https://issues.redhat.com/browse/OCPBUGS-35894): Fix race to mark node Joined (#859) [#859](https://github.com/openshift/assisted-installer/pull/859)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#851) [#851](https://github.com/openshift/assisted-installer/pull/851)
* [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) [#833](https://github.com/openshift/assisted-installer/pull/833)
* [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) [#827](https://github.com/openshift/assisted-installer/pull/827)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#824) [#824](https://github.com/openshift/assisted-installer/pull/824)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/302f47ff8d1bf6f69159453722346f850515bcab...f0b1275e58633382222af71a6cac527e6f8cec24)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/051696d004b70c305a2feb80fe6ea4f35f7a1b09)
* run go mod tidy / vendor [#1020](https://github.com/openshift/assisted-installer-agent/pull/1020)
* And 9 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/720b5023664bf91db7bccfed476545bdd21ae94d...051696d004b70c305a2feb80fe6ea4f35f7a1b09)
### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/abf4fa96550caf09e788b66fc06f1df802768397)
* [OCPBUGS-23697](https://issues.redhat.com/browse/OCPBUGS-23697): Add Snyk file to exclude vendor directory on scan [#48](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/48)
* [OCPBUGS-21984](https://issues.redhat.com/browse/OCPBUGS-21984): Bump golang.org/x/net to v0.19.0 [#41](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/41)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/97e8335e2f0bc9ee48fe04f2c19820b557035d37...abf4fa96550caf09e788b66fc06f1df802768397)
### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#57](https://github.com/openshift/cluster-api-provider-alibaba/pull/57)
* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#47](https://github.com/openshift/cluster-api-provider-alibaba/pull/47)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/248372a4f668111a7bf134527911cb656c44d47a...f7f5eed811b33b9beee1ed6a34f956449fbf7fc7)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/adccbd5c16daecfe861fa530acdcbba5ec682a3a)
* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#60](https://github.com/openshift/apiserver-network-proxy/pull/60)
* Update golang Docker tag to v1.23.1 [#58](https://github.com/openshift/apiserver-network-proxy/pull/58)
* [OCPBUGS-31953](https://issues.redhat.com/browse/OCPBUGS-31953): Bump golang.org/x/net to v0.23.0 [#51](https://github.com/openshift/apiserver-network-proxy/pull/51)
* [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/ca81b6a32aff6ccb327f6889ec89c01afedd8efd...adccbd5c16daecfe861fa530acdcbba5ec682a3a)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)
* [OCPBUGS-38577](https://issues.redhat.com/browse/OCPBUGS-38577): Ensure that addresses are added in network device index order [#92](https://github.com/openshift/cloud-provider-aws/pull/92)
* [OCPBUGS-31954](https://issues.redhat.com/browse/OCPBUGS-31954): update for CVE-2023-45288 [release-4.15] [#81](https://github.com/openshift/cloud-provider-aws/pull/81)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Updates build-rpm.sh to set release to build time [#76](https://github.com/openshift/cloud-provider-aws/pull/76)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77)
* [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Adds ecr-credential-plugin .spec [#70](https://github.com/openshift/cloud-provider-aws/pull/70)
* [OCPBUGS-26060](https://issues.redhat.com/browse/OCPBUGS-26060): bump go.opentelemetry.io [#64](https://github.com/openshift/cloud-provider-aws/pull/64)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/a53e9def2e60eecd390575b59c85d54c5412ecd3...fd77d92ced47559dadf53fb8c97d1cbeb64dde8c)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5c673e1d6207e934a4e27da1ef165ddf03bf6a1a)
* [OCPBUGS-78228](https://issues.redhat.com/browse/OCPBUGS-78228): [release-4.15] hermetic 4.15 [#592](https://github.com/openshift/cluster-api-provider-aws/pull/592)
* [OCPBUGS-61943](https://issues.redhat.com/browse/OCPBUGS-61943): UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#573](https://github.com/openshift/cluster-api-provider-aws/pull/573)
* [OCPBUGS-58668](https://issues.redhat.com/browse/OCPBUGS-58668), [OCPBUGS-58673](https://issues.redhat.com/browse/OCPBUGS-58673): bump github.com/golang/glog to v1.2.5 [#562](https://github.com/openshift/cluster-api-provider-aws/pull/562)
* [OCPBUGS-44294](https://issues.redhat.com/browse/OCPBUGS-44294): [release-4.15] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#532](https://github.com/openshift/cluster-api-provider-aws/pull/532)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#511](https://github.com/openshift/cluster-api-provider-aws/pull/511)
* [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#508](https://github.com/openshift/cluster-api-provider-aws/pull/508)
* [OCPBUGS-31036](https://issues.redhat.com/browse/OCPBUGS-31036): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#501](https://github.com/openshift/cluster-api-provider-aws/pull/501)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#504](https://github.com/openshift/cluster-api-provider-aws/pull/504)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8ab43ce562be1e8e4cd2e8bc5ecd434d3db907de...5c673e1d6207e934a4e27da1ef165ddf03bf6a1a)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7043c1cca6e17dd3c90006140f6361cf0e776d69)
* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): UPSTREAM: 1919: Add reserved-volume-attachments [#263](https://github.com/openshift/aws-ebs-csi-driver/pull/263)
* [OCPBUGS-25824](https://issues.redhat.com/browse/OCPBUGS-25824): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#253](https://github.com/openshift/aws-ebs-csi-driver/pull/253)
* [OCPBUGS-25601](https://issues.redhat.com/browse/OCPBUGS-25601): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#251](https://github.com/openshift/aws-ebs-csi-driver/pull/251)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/1d29a74ab7cde7424cac99261b90f23dc7a2fc21...7043c1cca6e17dd3c90006140f6361cf0e776d69)
### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/242c3b9ba85478220ecf75a0a91d5c061615029c)
* [OCPBUGS-67913](https://issues.redhat.com/browse/OCPBUGS-67913): Bumped logrus to 1.9.3 [#492](https://github.com/openshift/csi-operator/pull/492)
* [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): Explicitly reserve 1 attachment for the root disk [#222](https://github.com/openshift/csi-operator/pull/222)
* [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): remove legacy directory and duplicate Dockerfile.*.test files [#201](https://github.com/openshift/csi-operator/pull/201)
* [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): move test manifest to top-level directory [#195](https://github.com/openshift/csi-operator/pull/195)
* [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93)
* [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#90](https://github.com/openshift/csi-operator/pull/90)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#82](https://github.com/openshift/csi-operator/pull/82)
* [OCPBUGS-25234](https://issues.redhat.com/browse/OCPBUGS-25234): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#83](https://github.com/openshift/csi-operator/pull/83)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ea7977e7c6e9e7372498218ac50976fb155815e7...242c3b9ba85478220ecf75a0a91d5c061615029c)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/fb9a59a0f7636ffece8cc585f5ab8844e67cd198)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#153](https://github.com/openshift/machine-api-provider-aws/pull/153)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): revert: client: re-use a single file for building the session instead of randomly named files [#150](https://github.com/openshift/machine-api-provider-aws/pull/150)
* [OCPBUGS-63141](https://issues.redhat.com/browse/OCPBUGS-63141): client: re-use a single file for building the session instead of randomly named files [#143](https://github.com/openshift/machine-api-provider-aws/pull/143)
* [OCPBUGS-47680](https://issues.redhat.com/browse/OCPBUGS-47680): fix Associate*IpAddress flag on launch EC2 [#122](https://github.com/openshift/machine-api-provider-aws/pull/122)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/169f6ab7eda8badff93a34074b03841e8f716dbb...fb9a59a0f7636ffece8cc585f5ab8844e67cd198)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/13385034ec9a843a6b40f8b3aec9966ada785115)
* [OCPBUGS-32886](https://issues.redhat.com/browse/OCPBUGS-32886): Upgrade go-jose module to 2.6.3 [#188](https://github.com/openshift/aws-pod-identity-webhook/pull/188)
* [OCPBUGS-24163](https://issues.redhat.com/browse/OCPBUGS-24163): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#179](https://github.com/openshift/aws-pod-identity-webhook/pull/179)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/459c531487ae4dd94301e2996bf817d47124854c...13385034ec9a843a6b40f8b3aec9966ada785115)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d799a261f70bbdf546d911f5f8b59e2c324bd16)
* [OCPBUGS-33127](https://issues.redhat.com/browse/OCPBUGS-33127): Improvements to client timeouts to prevent hangs [#118](https://github.com/openshift/cloud-provider-azure/pull/118)
* [OCPBUGS-33092](https://issues.redhat.com/browse/OCPBUGS-33092): Bump otelgrpc [#117](https://github.com/openshift/cloud-provider-azure/pull/117)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update acr-credential-provider.spec [#115](https://github.com/openshift/cloud-provider-azure/pull/115)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds acr-credential-provider spec file and build script [#114](https://github.com/openshift/cloud-provider-azure/pull/114)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/e5bac3341fce67c12047caaafcf188c3f3049dc3...0d799a261f70bbdf546d911f5f8b59e2c324bd16)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/7896f4a94ae32cf038daa77e255ec207832c1081)
* [OCPBUGS-78177](https://issues.redhat.com/browse/OCPBUGS-78177): [release-4.15] update go mod dependency for konflux [#365](https://github.com/openshift/cluster-api-provider-azure/pull/365)
* [OCPBUGS-36024](https://issues.redhat.com/browse/OCPBUGS-36024): Update go-retryablehttp to v0.7.7 [#311](https://github.com/openshift/cluster-api-provider-azure/pull/311)
* [OCPBUGS-29502](https://issues.redhat.com/browse/OCPBUGS-29502): Bump helm to v3.14.4 [#303](https://github.com/openshift/cluster-api-provider-azure/pull/303)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/d5d7c1df941bca00c137cff299a5e7c63dc3f077...7896f4a94ae32cf038daa77e255ec207832c1081)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)
* [OCPBUGS-25768](https://issues.redhat.com/browse/OCPBUGS-25768): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#72](https://github.com/openshift/azure-disk-csi-driver/pull/72)
* [OCPBUGS-25236](https://issues.redhat.com/browse/OCPBUGS-25236): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#68](https://github.com/openshift/azure-disk-csi-driver/pull/68)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6b55f6fb004454f743aa0f2e1d96010396be4c45...dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)
### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/160cf624a88f500de7a1f79e6dd9384bb7d17842)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#121](https://github.com/openshift/azure-disk-csi-driver-operator/pull/121)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#114](https://github.com/openshift/azure-disk-csi-driver-operator/pull/114)
* [OCPBUGS-25237](https://issues.redhat.com/browse/OCPBUGS-25237): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#115](https://github.com/openshift/azure-disk-csi-driver-operator/pull/115)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#110](https://github.com/openshift/azure-disk-csi-driver-operator/pull/110)
* [OCPBUGS-22560](https://issues.redhat.com/browse/OCPBUGS-22560): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#107](https://github.com/openshift/azure-disk-csi-driver-operator/pull/107)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#93](https://github.com/openshift/azure-disk-csi-driver-operator/pull/93)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#106](https://github.com/openshift/azure-disk-csi-driver-operator/pull/106)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#100](https://github.com/openshift/azure-disk-csi-driver-operator/pull/100)
* update readme [#99](https://github.com/openshift/azure-disk-csi-driver-operator/pull/99)
* simplify workload identity feature enablement [#92](https://github.com/openshift/azure-disk-csi-driver-operator/pull/92)
* update readme [#94](https://github.com/openshift/azure-disk-csi-driver-operator/pull/94)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#98](https://github.com/openshift/azure-disk-csi-driver-operator/pull/98)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#88](https://github.com/openshift/azure-disk-csi-driver-operator/pull/88)
* [OCPBUGS-16496](https://issues.redhat.com/browse/OCPBUGS-16496): Bump library-go to remove dependency on goproxy [#90](https://github.com/openshift/azure-disk-csi-driver-operator/pull/90)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#89](https://github.com/openshift/azure-disk-csi-driver-operator/pull/89)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#87](https://github.com/openshift/azure-disk-csi-driver-operator/pull/87)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#84](https://github.com/openshift/azure-disk-csi-driver-operator/pull/84)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-disk-csi-driver-operator library-go [#85](https://github.com/openshift/azure-disk-csi-driver-operator/pull/85)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): Unrevert "CCO-324: add support for workload identity" [#83](https://github.com/openshift/azure-disk-csi-driver-operator/pull/83)
* Revert "CCO-324: add support for workload identity" [#82](https://github.com/openshift/azure-disk-csi-driver-operator/pull/82)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): add support for workload identity [#78](https://github.com/openshift/azure-disk-csi-driver-operator/pull/78)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#81](https://github.com/openshift/azure-disk-csi-driver-operator/pull/81)
* [OCPBUGS-12559](https://issues.redhat.com/browse/OCPBUGS-12559): Bump golang.org/x/net@v0.9.0 [#80](https://github.com/openshift/azure-disk-csi-driver-operator/pull/80)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#79](https://github.com/openshift/azure-disk-csi-driver-operator/pull/79)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#74](https://github.com/openshift/azure-disk-csi-driver-operator/pull/74)
* [OCPBUGS-10842](https://issues.redhat.com/browse/OCPBUGS-10842): Reorder static resources to create RBAC first [#75](https://github.com/openshift/azure-disk-csi-driver-operator/pull/75)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#73](https://github.com/openshift/azure-disk-csi-driver-operator/pull/73)
* [STOR-873](https://issues.redhat.com/browse/STOR-873): Implement custom keys in Azure Disk CSI driver operator [#68](https://github.com/openshift/azure-disk-csi-driver-operator/pull/68)
* [OCPBUGS-7617](https://issues.redhat.com/browse/OCPBUGS-7617): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#69](https://github.com/openshift/azure-disk-csi-driver-operator/pull/69)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#67](https://github.com/openshift/azure-disk-csi-driver-operator/pull/67)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#66](https://github.com/openshift/azure-disk-csi-driver-operator/pull/66)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#63](https://github.com/openshift/azure-disk-csi-driver-operator/pull/63)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#64](https://github.com/openshift/azure-disk-csi-driver-operator/pull/64)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#65](https://github.com/openshift/azure-disk-csi-driver-operator/pull/65)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#62](https://github.com/openshift/azure-disk-csi-driver-operator/pull/62)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#61](https://github.com/openshift/azure-disk-csi-driver-operator/pull/61)
* [OCPBUGS-3659](https://issues.redhat.com/browse/OCPBUGS-3659): Don't expose metrics port to whole network [#60](https://github.com/openshift/azure-disk-csi-driver-operator/pull/60)
* [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Only deploy VolumeSnapshotClass when CRD exists [#56](https://github.com/openshift/azure-disk-csi-driver-operator/pull/56)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#55](https://github.com/openshift/azure-disk-csi-driver-operator/pull/55)
* [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#53](https://github.com/openshift/azure-disk-csi-driver-operator/pull/53)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#51](https://github.com/openshift/azure-disk-csi-driver-operator/pull/51)
* [Bug 2095049](https://bugzilla.redhat.com/show_bug.cgi?id=2095049): Only use credentials that are provided by the azure-inject-credential… [#49](https://github.com/openshift/azure-disk-csi-driver-operator/pull/49)
* [Bug 2089973](https://bugzilla.redhat.com/show_bug.cgi?id=2089973): bump libs to k8s 1.24 for OCP 4.11 [#48](https://github.com/openshift/azure-disk-csi-driver-operator/pull/48)
* Mark CSI StorageClass as the default one [#47](https://github.com/openshift/azure-disk-csi-driver-operator/pull/47)
* [Bug 2062152](https://bugzilla.redhat.com/show_bug.cgi?id=2062152): Increase pod startup timeout in e2e tests [#45](https://github.com/openshift/azure-disk-csi-driver-operator/pull/45)
* [Bug 2073373](https://bugzilla.redhat.com/show_bug.cgi?id=2073373): Sync cmdline arguments with upstream [#46](https://github.com/openshift/azure-disk-csi-driver-operator/pull/46)
* Fix CSIDriver fsGroupPolicy [#44](https://github.com/openshift/azure-disk-csi-driver-operator/pull/44)
* [Bug 2043130](https://bugzilla.redhat.com/show_bug.cgi?id=2043130): azure-disk: Add external-snapshotter permissions to patch snapshots [#41](https://github.com/openshift/azure-disk-csi-driver-operator/pull/41)
* [Bug 2038934](https://bugzilla.redhat.com/show_bug.cgi?id=2038934): Bump(library-go): to get leader election changes [#40](https://github.com/openshift/azure-disk-csi-driver-operator/pull/40)
* [Bug 2029570](https://bugzilla.redhat.com/show_bug.cgi?id=2029570): Add custom CA bundle support [#38](https://github.com/openshift/azure-disk-csi-driver-operator/pull/38)
* [Bug 2028484](https://bugzilla.redhat.com/show_bug.cgi?id=2028484): CSI driver's livenessprobe does not respect operator's loglevel [#37](https://github.com/openshift/azure-disk-csi-driver-operator/pull/37)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#36](https://github.com/openshift/azure-disk-csi-driver-operator/pull/36)
* Add volume cloning tests [#21](https://github.com/openshift/azure-disk-csi-driver-operator/pull/21)
* Use WithSecretHashAnnotationHook from library-go [#34](https://github.com/openshift/azure-disk-csi-driver-operator/pull/34)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#33](https://github.com/openshift/azure-disk-csi-driver-operator/pull/33)
* [Bug 1992875](https://bugzilla.redhat.com/show_bug.cgi?id=1992875): Use own cloud credentials [#30](https://github.com/openshift/azure-disk-csi-driver-operator/pull/30)
* [Bug 1993931](https://bugzilla.redhat.com/show_bug.cgi?id=1993931): Storage operators use older kubernetes client [#32](https://github.com/openshift/azure-disk-csi-driver-operator/pull/32)
* [Bug 1948603](https://bugzilla.redhat.com/show_bug.cgi?id=1948603): Re-enable expansion e2e tests [#18](https://github.com/openshift/azure-disk-csi-driver-operator/pull/18)
* [Bug 1992148](https://bugzilla.redhat.com/show_bug.cgi?id=1992148): mount azurestackcloud.json to /etc/azure [#29](https://github.com/openshift/azure-disk-csi-driver-operator/pull/29)
* [Bug 1990146](https://bugzilla.redhat.com/show_bug.cgi?id=1990146): some controllers missing livenessProbe [#28](https://github.com/openshift/azure-disk-csi-driver-operator/pull/28)
* [Bug 1948090](https://bugzilla.redhat.com/show_bug.cgi?id=1948090): Deploy multiple replicas of CSI Controller Service [#27](https://github.com/openshift/azure-disk-csi-driver-operator/pull/27)
* Adding support for Azure Stack Hub (ASH) [#26](https://github.com/openshift/azure-disk-csi-driver-operator/pull/26)
* Use embed for static assets [#25](https://github.com/openshift/azure-disk-csi-driver-operator/pull/25)
* Remove generated API [#24](https://github.com/openshift/azure-disk-csi-driver-operator/pull/24)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#23](https://github.com/openshift/azure-disk-csi-driver-operator/pull/23)
* [Bug 1960732](https://bugzilla.redhat.com/show_bug.cgi?id=1960732): update manifest and readme [#19](https://github.com/openshift/azure-disk-csi-driver-operator/pull/19)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#22](https://github.com/openshift/azure-disk-csi-driver-operator/pull/22)
* [Bug 1969538](https://bugzilla.redhat.com/show_bug.cgi?id=1969538): Include VolumeSnapshotClass by default [#20](https://github.com/openshift/azure-disk-csi-driver-operator/pull/20)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#16](https://github.com/openshift/azure-disk-csi-driver-operator/pull/16)
* [Bug 1948603](https://bugzilla.redhat.com/show_bug.cgi?id=1948603): Disable volume expansion e2e tests [#15](https://github.com/openshift/azure-disk-csi-driver-operator/pull/15)
* [Bug 1948603](https://bugzilla.redhat.com/show_bug.cgi?id=1948603): Fix some failing tests [#14](https://github.com/openshift/azure-disk-csi-driver-operator/pull/14)
* [Bug 1948555](https://bugzilla.redhat.com/show_bug.cgi?id=1948555): Set timeouts according to upstream [#13](https://github.com/openshift/azure-disk-csi-driver-operator/pull/13)
* [Bug 1947756](https://bugzilla.redhat.com/show_bug.cgi?id=1947756): Add maxUnavailable to DaemonSet [#12](https://github.com/openshift/azure-disk-csi-driver-operator/pull/12)
* [Bug 1947767](https://bugzilla.redhat.com/show_bug.cgi?id=1947767): Updates default SC to Premium SKU [#11](https://github.com/openshift/azure-disk-csi-driver-operator/pull/11)
* Azure Disk: Add metrics scraping [#9](https://github.com/openshift/azure-disk-csi-driver-operator/pull/9)
* Add "managed" annotation to CSIDriver [#10](https://github.com/openshift/azure-disk-csi-driver-operator/pull/10)
* Add CSI certification test manifest [#8](https://github.com/openshift/azure-disk-csi-driver-operator/pull/8)
* Include CSIDriver creation in Operator [#7](https://github.com/openshift/azure-disk-csi-driver-operator/pull/7)
* Bumps Dockerfile to OCP 4.8 and go 1.16 [#6](https://github.com/openshift/azure-disk-csi-driver-operator/pull/6)
* Cleanup: Remove serviceName from controller manifest [#4](https://github.com/openshift/azure-disk-csi-driver-operator/pull/4)
* Initial code [#1](https://github.com/openshift/azure-disk-csi-driver-operator/pull/1)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/ea7977e7c6e9e7372498218ac50976fb155815e7...160cf624a88f500de7a1f79e6dd9384bb7d17842)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/491c4df6880bf450a854b8e003e10d880d7e8550)
* [ART-13080](https://issues.redhat.com/browse/ART-13080): Regenerate go.mod to fix build failure [#94](https://github.com/openshift/azure-file-csi-driver/pull/94)
* [OCPBUGS-39444](https://issues.redhat.com/browse/OCPBUGS-39444): bump mount-utils to treat ENODEV error as corrupted mount [#78](https://github.com/openshift/azure-file-csi-driver/pull/78)
* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): Rebase v1.29.5 for OCP 4.15 [#65](https://github.com/openshift/azure-file-csi-driver/pull/65)
* [OCPBUGS-25697](https://issues.redhat.com/browse/OCPBUGS-25697): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#50](https://github.com/openshift/azure-file-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/7a36778add73d12eb08ff6be357d8d351af651a7...491c4df6880bf450a854b8e003e10d880d7e8550)
### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/ef087772a9ed3299d776c28be78f8017762bcd08)
* [OCPBUGS-67918](https://issues.redhat.com/browse/OCPBUGS-67918): Bump github.com/sirupsen/logrus to v1.9.3 [#113](https://github.com/openshift/azure-file-csi-driver-operator/pull/113)
* [OCPBUGS-60544](https://issues.redhat.com/browse/OCPBUGS-60544): add tag matching to Azure File storage class [#110](https://github.com/openshift/azure-file-csi-driver-operator/pull/110)
* [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): add token audience for Azure File [#103](https://github.com/openshift/azure-file-csi-driver-operator/pull/103)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#95](https://github.com/openshift/azure-file-csi-driver-operator/pull/95)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#89](https://github.com/openshift/azure-file-csi-driver-operator/pull/89)
* [OCPBUGS-25238](https://issues.redhat.com/browse/OCPBUGS-25238): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#90](https://github.com/openshift/azure-file-csi-driver-operator/pull/90)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#84](https://github.com/openshift/azure-file-csi-driver-operator/pull/84)
* [OCPBUGS-22562](https://issues.redhat.com/browse/OCPBUGS-22562): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#82](https://github.com/openshift/azure-file-csi-driver-operator/pull/82)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#81](https://github.com/openshift/azure-file-csi-driver-operator/pull/81)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#75](https://github.com/openshift/azure-file-csi-driver-operator/pull/75)
* update readme [#70](https://github.com/openshift/azure-file-csi-driver-operator/pull/70)
* simplify workload identity feature enablement [#69](https://github.com/openshift/azure-file-csi-driver-operator/pull/69)
* [OCPBUGS-19170](https://issues.redhat.com/browse/OCPBUGS-19170): Updating azure-file-csi-driver-operator images to be consistent with ART [#74](https://github.com/openshift/azure-file-csi-driver-operator/pull/74)
* [STOR-1434](https://issues.redhat.com/browse/STOR-1434): Restart controller Pods if metrics-serving-cert changed [#68](https://github.com/openshift/azure-file-csi-driver-operator/pull/68)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#64](https://github.com/openshift/azure-file-csi-driver-operator/pull/64)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#65](https://github.com/openshift/azure-file-csi-driver-operator/pull/65)
* [OCPBUGS-16498](https://issues.redhat.com/browse/OCPBUGS-16498): Bump library-go to remove dependency on goproxy [#66](https://github.com/openshift/azure-file-csi-driver-operator/pull/66)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#63](https://github.com/openshift/azure-file-csi-driver-operator/pull/63)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#60](https://github.com/openshift/azure-file-csi-driver-operator/pull/60)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): Unrevert "CCO-325: add support for workload identity" [#62](https://github.com/openshift/azure-file-csi-driver-operator/pull/62)
* [STOR-989](https://issues.redhat.com/browse/STOR-989): Remove SC and manifest file for NFS backend [#58](https://github.com/openshift/azure-file-csi-driver-operator/pull/58)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-file-csi-driver-operator library-go [#61](https://github.com/openshift/azure-file-csi-driver-operator/pull/61)
* Revert "CCO-325: add support for workload identity" [#59](https://github.com/openshift/azure-file-csi-driver-operator/pull/59)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): add support for workload identity [#54](https://github.com/openshift/azure-file-csi-driver-operator/pull/54)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): Mount serviceaccount token into csi-driver container [#53](https://github.com/openshift/azure-file-csi-driver-operator/pull/53)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#57](https://github.com/openshift/azure-file-csi-driver-operator/pull/57)
* [OCPBUGS-12561](https://issues.redhat.com/browse/OCPBUGS-12561): Bump golang.org/x/net@v0.9.0 [#56](https://github.com/openshift/azure-file-csi-driver-operator/pull/56)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#55](https://github.com/openshift/azure-file-csi-driver-operator/pull/55)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#52](https://github.com/openshift/azure-file-csi-driver-operator/pull/52)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#51](https://github.com/openshift/azure-file-csi-driver-operator/pull/51)
* [OCPBUGS-10842](https://issues.redhat.com/browse/OCPBUGS-10842): Reorder static resources to create RBAC first [#50](https://github.com/openshift/azure-file-csi-driver-operator/pull/50)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#49](https://github.com/openshift/azure-file-csi-driver-operator/pull/49)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#48](https://github.com/openshift/azure-file-csi-driver-operator/pull/48)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#47](https://github.com/openshift/azure-file-csi-driver-operator/pull/47)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#46](https://github.com/openshift/azure-file-csi-driver-operator/pull/46)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#42](https://github.com/openshift/azure-file-csi-driver-operator/pull/42)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#43](https://github.com/openshift/azure-file-csi-driver-operator/pull/43)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#44](https://github.com/openshift/azure-file-csi-driver-operator/pull/44)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#41](https://github.com/openshift/azure-file-csi-driver-operator/pull/41)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#40](https://github.com/openshift/azure-file-csi-driver-operator/pull/40)
* [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#37](https://github.com/openshift/azure-file-csi-driver-operator/pull/37)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/azure-file-csi-driver-operator/pull/38)
* [Bug 2080449](https://bugzilla.redhat.com/show_bug.cgi?id=2080449): disable VHD disk feature [#33](https://github.com/openshift/azure-file-csi-driver-operator/pull/33)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver-operator/pull/34)
* [Bug 2099968](https://bugzilla.redhat.com/show_bug.cgi?id=2099968): Only use credentials that are provided by the azure-inject-credentials container [#32](https://github.com/openshift/azure-file-csi-driver-operator/pull/32)
* [Bug 2092502](https://bugzilla.redhat.com/show_bug.cgi?id=2092502): Don't ship a StorageClass backed by NFS by default [#30](https://github.com/openshift/azure-file-csi-driver-operator/pull/30)
* [Bug 2089973](https://bugzilla.redhat.com/show_bug.cgi?id=2089973): bump libs to k8s 1.24 for OCP 4.11 [#27](https://github.com/openshift/azure-file-csi-driver-operator/pull/27)
* Fix driver definition manifest: fsGroup is supported, snapshots are not [#28](https://github.com/openshift/azure-file-csi-driver-operator/pull/28)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#29](https://github.com/openshift/azure-file-csi-driver-operator/pull/29)
* disable snapshots [#26](https://github.com/openshift/azure-file-csi-driver-operator/pull/26)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#25](https://github.com/openshift/azure-file-csi-driver-operator/pull/25)
* [Bug 2043130](https://bugzilla.redhat.com/show_bug.cgi?id=2043130): azure-file: Add external-snapshotter permissions to patch snapshots [#24](https://github.com/openshift/azure-file-csi-driver-operator/pull/24)
* [Bug 2042960](https://bugzilla.redhat.com/show_bug.cgi?id=2042960): Remove UID, GID from StorageClass asset [#23](https://github.com/openshift/azure-file-csi-driver-operator/pull/23)
* [Bug 2038934](https://bugzilla.redhat.com/show_bug.cgi?id=2038934): Add custom CA bundle support [#22](https://github.com/openshift/azure-file-csi-driver-operator/pull/22)
* [Bug 2036096](https://bugzilla.redhat.com/show_bug.cgi?id=2036096): Add StorageClass for NFS backed [#21](https://github.com/openshift/azure-file-csi-driver-operator/pull/21)
* [Bug 2036096](https://bugzilla.redhat.com/show_bug.cgi?id=2036096): Disable snapshot testing for NFS backend [#20](https://github.com/openshift/azure-file-csi-driver-operator/pull/20)
* [Bug 2028484](https://bugzilla.redhat.com/show_bug.cgi?id=2028484): CSI driver's livenessprobe does not respect operator's loglevel [#18](https://github.com/openshift/azure-file-csi-driver-operator/pull/18)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#17](https://github.com/openshift/azure-file-csi-driver-operator/pull/17)
* [Bug 2019128](https://bugzilla.redhat.com/show_bug.cgi?id=2019128): Temporarily disable snapshot tests + add manifest for NFS [#15](https://github.com/openshift/azure-file-csi-driver-operator/pull/15)
* Add test image for e2e jobs [#14](https://github.com/openshift/azure-file-csi-driver-operator/pull/14)
* Run `make update-gofmt` [#13](https://github.com/openshift/azure-file-csi-driver-operator/pull/13)
* Fetch metrics from correct upstream ports [#12](https://github.com/openshift/azure-file-csi-driver-operator/pull/12)
* Fix node ports in Azure File controller [#11](https://github.com/openshift/azure-file-csi-driver-operator/pull/11)
* Use different node ports to avoid conflicting with Azure Disk CSI driver [#10](https://github.com/openshift/azure-file-csi-driver-operator/pull/10)
* Revert "Remove unnecessary RBAC permissions" [#9](https://github.com/openshift/azure-file-csi-driver-operator/pull/9)
* Remove unnecessary RBAC permissions [#8](https://github.com/openshift/azure-file-csi-driver-operator/pull/8)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#7](https://github.com/openshift/azure-file-csi-driver-operator/pull/7)
* Use WithSecretHashAnnotationHook from library-go [#6](https://github.com/openshift/azure-file-csi-driver-operator/pull/6)
* Update OWNERS [#5](https://github.com/openshift/azure-file-csi-driver-operator/pull/5)
* Add initial code [#2](https://github.com/openshift/azure-file-csi-driver-operator/pull/2)
* Add OWNERS [#1](https://github.com/openshift/azure-file-csi-driver-operator/pull/1)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/ea7977e7c6e9e7372498218ac50976fb155815e7...ef087772a9ed3299d776c28be78f8017762bcd08)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/9f1015edb8cb141cd6aaff2de7894f32336719c8)
* [OCPBUGS-56657](https://issues.redhat.com/browse/OCPBUGS-56657): Fix failure when attempting to modify immutable availabilitySet [#150](https://github.com/openshift/machine-api-provider-azure/pull/150)
* [OCPBUGS-53226](https://issues.redhat.com/browse/OCPBUGS-53226): dynamically setting the amount of fault domains [#134](https://github.com/openshift/machine-api-provider-azure/pull/134)
* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#110](https://github.com/openshift/machine-api-provider-azure/pull/110)
* [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Remove startupScript vmextension lookup [#103](https://github.com/openshift/machine-api-provider-azure/pull/103)
* [OCPBUGS-25510](https://issues.redhat.com/browse/OCPBUGS-25510): bump x/crypto [#100](https://github.com/openshift/machine-api-provider-azure/pull/100)
* [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Improving performance of VMs created in Azure [#93](https://github.com/openshift/machine-api-provider-azure/pull/93)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/5d4b4f31f704af72810ed3f403aae478e52140b0...9f1015edb8cb141cd6aaff2de7894f32336719c8)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/5db478a9876556666b10f135487a2fd9f82e8653)
* [OCPBUGS-53794](https://issues.redhat.com/browse/OCPBUGS-53794): github.com/golang-jwt/jwt/v4 v4.5.2 [#34](https://github.com/openshift/azure-workload-identity/pull/34)
* [OCPBUGS-32895](https://issues.redhat.com/browse/OCPBUGS-32895): Upgrade go-jose module to 2.6.3 [#17](https://github.com/openshift/azure-workload-identity/pull/17)
* [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/5b8d171e853d10ba151bfac4ac1e76109524ca4b...5db478a9876556666b10f135487a2fd9f82e8653)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/83c823bf5cb70c42dcbbc93306a570759ac6aaf8)
* [OCPBUGS-79036](https://issues.redhat.com/browse/OCPBUGS-79036): Azure UPI ARM template: use storageAccountId [#10418](https://github.com/openshift/installer/pull/10418)
* [OCPBUGS-76929](https://issues.redhat.com/browse/OCPBUGS-76929): terraform/provider/google: Fixing GCP inconsistencies present with the service account creation [#10316](https://github.com/openshift/installer/pull/10316)
* [OCPBUGS-42554](https://issues.redhat.com/browse/OCPBUGS-42554): only allow a single network in failure domain topology [#9060](https://github.com/openshift/installer/pull/9060)
* [OCPBUGS-62849](https://issues.redhat.com/browse/OCPBUGS-62849): Release 4.15 bump terraform provider azurerm [#10007](https://github.com/openshift/installer/pull/10007)
* [OCPBUGS-62410](https://issues.redhat.com/browse/OCPBUGS-62410): Make swift containers removal not fatal for UPI. [#9978](https://github.com/openshift/installer/pull/9978)
* [OCPBUGS-60497](https://issues.redhat.com/browse/OCPBUGS-60497): update resolv.conf every time on bootstrap node [#9885](https://github.com/openshift/installer/pull/9885)
* [OCPBUGS-39416](https://issues.redhat.com/browse/OCPBUGS-39416): OpenStack: Install CI dependencies from rpm [#9103](https://github.com/openshift/installer/pull/9103)
* [OCPBUGS-54353](https://issues.redhat.com/browse/OCPBUGS-54353): aws/edge/byovpc: tag edge subnets with shared value [#9612](https://github.com/openshift/installer/pull/9612)
* [OCPBUGS-54367](https://issues.redhat.com/browse/OCPBUGS-54367): IBMCloud: Move to IBM TF openshift fork [#9614](https://github.com/openshift/installer/pull/9614)
* [OCPBUGS-45961](https://issues.redhat.com/browse/OCPBUGS-45961): Update upi references to api-internal [#9298](https://github.com/openshift/installer/pull/9298)
* [OCPBUGS-50994](https://issues.redhat.com/browse/OCPBUGS-50994): Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation [#9509](https://github.com/openshift/installer/pull/9509)
* [OCPBUGS-41815](https://issues.redhat.com/browse/OCPBUGS-41815): Validate MTU for custom network [#9294](https://github.com/openshift/installer/pull/9294)
* [OCPBUGS-28706](https://issues.redhat.com/browse/OCPBUGS-28706): [azure] update tested x86 instance type on 4.15 [#7966](https://github.com/openshift/installer/pull/7966)
* [OCPBUGS-47716](https://issues.redhat.com/browse/OCPBUGS-47716): [release-4.15] Power VS: Create region-zone-sysType hierarchy [#9340](https://github.com/openshift/installer/pull/9340)
* [OCPBUGS-44259](https://issues.redhat.com/browse/OCPBUGS-44259): IBMCloud: Ignore failed VPC regions [#9183](https://github.com/openshift/installer/pull/9183)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9260](https://github.com/openshift/installer/pull/9260)
* [OCPBUGS-45207](https://issues.redhat.com/browse/OCPBUGS-45207): add chrony.conf file when additional NTP sources are configured [#9251](https://github.com/openshift/installer/pull/9251)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9221](https://github.com/openshift/installer/pull/9221)
* [OCPBUGS-44035](https://issues.redhat.com/browse/OCPBUGS-44035): IBMCloud: Handle pagination for subnets [#9160](https://github.com/openshift/installer/pull/9160)
* [OCPBUGS-43760](https://issues.redhat.com/browse/OCPBUGS-43760): azure: use filter when listing SKUs [#9135](https://github.com/openshift/installer/pull/9135)
* [OCPBUGS-42139](https://issues.redhat.com/browse/OCPBUGS-42139): add tested instance type for IBMCloud [#9032](https://github.com/openshift/installer/pull/9032)
* [OCPBUGS-42335](https://issues.redhat.com/browse/OCPBUGS-42335): Bump extract-machine-os timout to 20m [#9051](https://github.com/openshift/installer/pull/9051)
* [OCPBUGS-42180](https://issues.redhat.com/browse/OCPBUGS-42180): Add AWS r8g to arm tested instance types [#9040](https://github.com/openshift/installer/pull/9040)
* [OCPBUGS-39288](https://issues.redhat.com/browse/OCPBUGS-39288), [OCPBUGS-42011](https://issues.redhat.com/browse/OCPBUGS-42011): Openstack UPI - Reintroduce unique resource names [#9047](https://github.com/openshift/installer/pull/9047)
* [OCPBUGS-38198](https://issues.redhat.com/browse/OCPBUGS-38198): Remove timed context for gcp client [#8824](https://github.com/openshift/installer/pull/8824)
* [OCPBUGS-29591](https://issues.redhat.com/browse/OCPBUGS-29591): vsphere-fix convert if only provided name [#8034](https://github.com/openshift/installer/pull/8034)
* [OCPBUGS-32179](https://issues.redhat.com/browse/OCPBUGS-32179): Fix task for attaching IPv6 subnet to router. [#8262](https://github.com/openshift/installer/pull/8262)
* [OCPBUGS-34721](https://issues.redhat.com/browse/OCPBUGS-34721): fix usage of host and user CA bundle in the agent ignition [#8512](https://github.com/openshift/installer/pull/8512)
* [OCPBUGS-36090](https://issues.redhat.com/browse/OCPBUGS-36090): [release-4.15]: bump go-retryablehttp for CVE fix [#8655](https://github.com/openshift/installer/pull/8655)
* [OCPBUGS-37064](https://issues.redhat.com/browse/OCPBUGS-37064): Changed vsphere CPMS to not include fields controlled by failure domains. [#8735](https://github.com/openshift/installer/pull/8735)
* [OCPBUGS-37182](https://issues.redhat.com/browse/OCPBUGS-37182): ic: fix typo in warning message [#8770](https://github.com/openshift/installer/pull/8770)
* [OCPBUGS-37067](https://issues.redhat.com/browse/OCPBUGS-37067): update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 [#8746](https://github.com/openshift/installer/pull/8746)
* [OCPBUGS-33354](https://issues.redhat.com/browse/OCPBUGS-33354), [OCPBUGS-33402](https://issues.redhat.com/browse/OCPBUGS-33402): Use assisted-image-service for ignition editing [#8635](https://github.com/openshift/installer/pull/8635)
* : OCPBUGS-36400: PowerVS: add ibmcloud plugins [#8687](https://github.com/openshift/installer/pull/8687)
* [OCPBUGS-36225](https://issues.redhat.com/browse/OCPBUGS-36225): Make vSphere default ResourcePool formatting not contain double slash. [#8664](https://github.com/openshift/installer/pull/8664)
* [OCPBUGS-35131](https://issues.redhat.com/browse/OCPBUGS-35131), [OCPBUGS-35141](https://issues.redhat.com/browse/OCPBUGS-35141), [OCPBUGS-35144](https://issues.redhat.com/browse/OCPBUGS-35144): [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 [#8646](https://github.com/openshift/installer/pull/8646)
* [OCPBUGS-35359](https://issues.redhat.com/browse/OCPBUGS-35359): GCP: Prevent cluster installation with mismatched worker assets and worker replicas [#8581](https://github.com/openshift/installer/pull/8581)
* [OCPBUGS-35502](https://issues.redhat.com/browse/OCPBUGS-35502): [release-4.15] azure: bump profile used for network [#8607](https://github.com/openshift/installer/pull/8607)
* [OCPBUGS-35586](https://issues.redhat.com/browse/OCPBUGS-35586): [release-4.15] bump github.com/containers/image for CVE fix [#8621](https://github.com/openshift/installer/pull/8621)
* [OCPBUGS-31387](https://issues.redhat.com/browse/OCPBUGS-31387): If host is offline or disconnected don't check ver [#8208](https://github.com/openshift/installer/pull/8208)
* [OCPBUGS-35355](https://issues.redhat.com/browse/OCPBUGS-35355): baremetal: Don't always enable provisioning-interface.service [#8580](https://github.com/openshift/installer/pull/8580)
* [OCPBUGS-35032](https://issues.redhat.com/browse/OCPBUGS-35032): [release-4.15] aws: terraform: add spot instance support for masters [#8540](https://github.com/openshift/installer/pull/8540)
* [OCPBUGS-35059](https://issues.redhat.com/browse/OCPBUGS-35059): images: change libvirt-installer base [#8550](https://github.com/openshift/installer/pull/8550)
* [OCPBUGS-33672](https://issues.redhat.com/browse/OCPBUGS-33672): add quota support to ca-west-1 [#8412](https://github.com/openshift/installer/pull/8412)
* [OCPBUGS-33454](https://issues.redhat.com/browse/OCPBUGS-33454): go.mod: bump aws-sdk-go for ca-west-1 support [#8381](https://github.com/openshift/installer/pull/8381)
* [OCPBUGS-33205](https://issues.redhat.com/browse/OCPBUGS-33205): Gcp bootstraping release 4.15 [#8339](https://github.com/openshift/installer/pull/8339)
* [OCPBUGS-33542](https://issues.redhat.com/browse/OCPBUGS-33542): images: do not force terraform-providers to be statically linked [#8392](https://github.com/openshift/installer/pull/8392)
* [OCPBUGS-29929](https://issues.redhat.com/browse/OCPBUGS-29929): GCP Destroy cleanup correct zones/records [#8062](https://github.com/openshift/installer/pull/8062)
* [OCPBUGS-32383](https://issues.redhat.com/browse/OCPBUGS-32383): sdk/aws: add ssh security group rule for compute [#8282](https://github.com/openshift/installer/pull/8282)
* [OCPBUGS-32690](https://issues.redhat.com/browse/OCPBUGS-32690): AWS: bump CCO for permission fix [#8302](https://github.com/openshift/installer/pull/8302)
* [OCPBUGS-32264](https://issues.redhat.com/browse/OCPBUGS-32264): always save serial logs if they were gathered [#8274](https://github.com/openshift/installer/pull/8274)
* [OCPBUGS-30944](https://issues.redhat.com/browse/OCPBUGS-30944): Don't run libvirt validations in agent installer [#8167](https://github.com/openshift/installer/pull/8167)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#8285](https://github.com/openshift/installer/pull/8285)
* [OCPBUGS-32259](https://issues.redhat.com/browse/OCPBUGS-32259): escape '%' in proxy settings [#8272](https://github.com/openshift/installer/pull/8272)
* [OCPBUGS-32355](https://issues.redhat.com/browse/OCPBUGS-32355): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8277](https://github.com/openshift/installer/pull/8277)
* [OCPBUGS-31335](https://issues.redhat.com/browse/OCPBUGS-31335): openstack: Honour worker server group policy [#8202](https://github.com/openshift/installer/pull/8202)
* : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest [#8220](https://github.com/openshift/installer/pull/8220)
* [OCPBUGS-30922](https://issues.redhat.com/browse/OCPBUGS-30922): coreos-installer iso kargs show broken on Agent ISO [#8163](https://github.com/openshift/installer/pull/8163)
* [OCPBUGS-30822](https://issues.redhat.com/browse/OCPBUGS-30822): Validate control plane replicas [#8143](https://github.com/openshift/installer/pull/8143)
* [OCPBUGS-31274](https://issues.redhat.com/browse/OCPBUGS-31274): IBMCloud: Restrict CIS and DNS Service lookup [#8197](https://github.com/openshift/installer/pull/8197)
* [OCPBUGS-30605](https://issues.redhat.com/browse/OCPBUGS-30605): upi: aws: fix typo in worker templates [#8125](https://github.com/openshift/installer/pull/8125)
* Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8199](https://github.com/openshift/installer/pull/8199)
* [OCPBUGS-31087](https://issues.redhat.com/browse/OCPBUGS-31087): Fix vsi image missing [#8186](https://github.com/openshift/installer/pull/8186)
* [OCPBUGS-30098](https://issues.redhat.com/browse/OCPBUGS-30098): feat: add check for SNO bootstrap condition [#8089](https://github.com/openshift/installer/pull/8089)
* [OCPBUGS-30601](https://issues.redhat.com/browse/OCPBUGS-30601): update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 [#8122](https://github.com/openshift/installer/pull/8122)
* [OCPBUGS-30854](https://issues.redhat.com/browse/OCPBUGS-30854): Power VS: Fix wait_for_workspace [#8159](https://github.com/openshift/installer/pull/8159)
* [OCPBUGS-29964](https://issues.redhat.com/browse/OCPBUGS-29964): fix Azure API SKU calls timing out [#8086](https://github.com/openshift/installer/pull/8086)
* [OCPBUGS-30792](https://issues.redhat.com/browse/OCPBUGS-30792): Enable deploy by Service ID on PowerVS [#8138](https://github.com/openshift/installer/pull/8138)
* [OCPBUGS-30577](https://issues.redhat.com/browse/OCPBUGS-30577): Authn with platform-services-go-sdk for PowerVS [#8118](https://github.com/openshift/installer/pull/8118)
* [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094)
* [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076)
* [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052)
* Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050)
* [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024)
* Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996)
* [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977)
* [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065)
* [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032)
* [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035)
* [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026)
* [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013)
* [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016)
* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [OCPBUGS-27850](https://issues.redhat.com/browse/OCPBUGS-27850): PowerVS: COS region configurable [#7948](https://github.com/openshift/installer/pull/7948)
* [OCPBUGS-27814](https://issues.redhat.com/browse/OCPBUGS-27814): [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option [#7935](https://github.com/openshift/installer/pull/7935)
* [OCPBUGS-25251](https://issues.redhat.com/browse/OCPBUGS-25251): Changed OKD/FCOS workaround to also support Agent-based Installer [#7830](https://github.com/openshift/installer/pull/7830)
* [OCPBUGS-27299](https://issues.redhat.com/browse/OCPBUGS-27299): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7913](https://github.com/openshift/installer/pull/7913)
* [OCPBUGS-26515](https://issues.redhat.com/browse/OCPBUGS-26515): preserve category name when trying to find tag category [#7885](https://github.com/openshift/installer/pull/7885)
* [OCPBUGS-27311](https://issues.redhat.com/browse/OCPBUGS-27311): Fix depreciated typo [#7912](https://github.com/openshift/installer/pull/7912)
* [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Fix typo in CloudCredential validation [#7916](https://github.com/openshift/installer/pull/7916)
* [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Add load balancer info to cluster infra [#7903](https://github.com/openshift/installer/pull/7903)
* [OCPBUGS-27188](https://issues.redhat.com/browse/OCPBUGS-27188): Redact platform passwords in agent-gather output [#7910](https://github.com/openshift/installer/pull/7910)
* [CORS-3168](https://issues.redhat.com/browse/CORS-3168): build: only rebuild terraform providers if needed [#7853](https://github.com/openshift/installer/pull/7853)
* [OCPBUGS-27148](https://issues.redhat.com/browse/OCPBUGS-27148): baremetal: correct external_http_url for v6-only BMCs [#7906](https://github.com/openshift/installer/pull/7906)
* [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS [#7882](https://github.com/openshift/installer/pull/7882)
* [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Add cloud credential capability validation [#7890](https://github.com/openshift/installer/pull/7890)
* [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883)
* [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868)
* [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863)
* [OCPBUGS-24679](https://issues.redhat.com/browse/OCPBUGS-24679): Modify the terraform variables to support Nutanix Failure Domains [#7813](https://github.com/openshift/installer/pull/7813)
* [OCPBUGS-25463](https://issues.redhat.com/browse/OCPBUGS-25463): IBMCloud: Set IBM TF visibility based on URLs [#7844](https://github.com/openshift/installer/pull/7844)
* [OCPBUGS-25216](https://issues.redhat.com/browse/OCPBUGS-25216): ic: azure: fix retrieving marketplace image [#7829](https://github.com/openshift/installer/pull/7829)
* [OCPBUGS-25192](https://issues.redhat.com/browse/OCPBUGS-25192): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7827](https://github.com/openshift/installer/pull/7827)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/441e0e5469d5698ce147c092c7c802d7c44b1557...83c823bf5cb70c42dcbbc93306a570759ac6aaf8)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/abd5d24efd670cfb719757c0d5af3409ee3c0058)
* [OCPBUGS-78100](https://issues.redhat.com/browse/OCPBUGS-78100): [release-4.15] fix vendor/ for hermetic migration [#244](https://github.com/openshift/cluster-api-provider-baremetal/pull/244)
* [OCPBUGS-46641](https://issues.redhat.com/browse/OCPBUGS-46641): Bump x/net to 0.33.0 [#227](https://github.com/openshift/cluster-api-provider-baremetal/pull/227)
* [OCPBUGS-30876](https://issues.redhat.com/browse/OCPBUGS-30876): Bump golang-protobuf version [#214](https://github.com/openshift/cluster-api-provider-baremetal/pull/214)
* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/e8c0c0eddddf4c23ead0b0d9d63371d18edf2ea9...abd5d24efd670cfb719757c0d5af3409ee3c0058)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)
* [OCPBUGS-53336](https://issues.redhat.com/browse/OCPBUGS-53336): BMO can expose any secret via BMCEventSubscription CRD [#408](https://github.com/openshift/baremetal-operator/pull/408)
* [OCPBUGS-38939](https://issues.redhat.com/browse/OCPBUGS-38939): [OCP] Ability to disable agent power off after deployment [#373](https://github.com/openshift/baremetal-operator/pull/373)
* [OCPBUGS-34682](https://issues.redhat.com/browse/OCPBUGS-34682): PreprovisioningImage should not be created on poweroff [#358](https://github.com/openshift/baremetal-operator/pull/358)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/df0d060090789a9e1e40a9e5939758b8c1259411...880ee0500b561ac9d0dc70d88c3f2fdfa4c7edee)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)
* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Change mechanism of debug flag [#325](https://github.com/openshift/baremetal-runtimecfg/pull/325)
* [OCPBUGS-36278](https://issues.redhat.com/browse/OCPBUGS-36278): Fix handling of ELB Node IP detection [#322](https://github.com/openshift/baremetal-runtimecfg/pull/322)
* [OCPBUGS-35543](https://issues.redhat.com/browse/OCPBUGS-35543): Add support for OVN HostCidrs annotation [#319](https://github.com/openshift/baremetal-runtimecfg/pull/319)
* [OCPBUGS-32024](https://issues.redhat.com/browse/OCPBUGS-32024): Decrease log level when detecting node IP [#304](https://github.com/openshift/baremetal-runtimecfg/pull/304)
* [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299)
* [OCPBUGS-24070](https://issues.redhat.com/browse/OCPBUGS-24070): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#289](https://github.com/openshift/baremetal-runtimecfg/pull/289)
* [OCPBUGS-26927](https://issues.redhat.com/browse/OCPBUGS-26927): Add .snyk file to ignore vendor and test files [#293](https://github.com/openshift/baremetal-runtimecfg/pull/293)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/db2c4c714cfe25c1fc2ab015aadd2c124b6cb5f8...1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/82316376e25f6453b58258df6bf1e11ec4abb670)
* [OCPBUGS-42726](https://issues.redhat.com/browse/OCPBUGS-42726): Check cast result in adm prune deployments to prevent panic [#1893](https://github.com/openshift/oc/pull/1893)
* [OCPBUGS-39426](https://issues.redhat.com/browse/OCPBUGS-39426): Ignore pruning when deployment points to replicationcontroller [#1865](https://github.com/openshift/oc/pull/1865)
* [OCPBUGS-36329](https://issues.redhat.com/browse/OCPBUGS-36329): Set required-scc annotation to privileged for node debug pods [#1818](https://github.com/openshift/oc/pull/1818)
* [OCPBUGS-35201](https://issues.redhat.com/browse/OCPBUGS-35201): Bump joelanford/ignore to bump go-git to 5.11.0 [#1798](https://github.com/openshift/oc/pull/1798)
* [OCPBUGS-32840](https://issues.redhat.com/browse/OCPBUGS-32840): Bump go-jose indirect reference to 2.6.3 [#1749](https://github.com/openshift/oc/pull/1749)
* [OCPBUGS-31879](https://issues.redhat.com/browse/OCPBUGS-31879): Add OIDC specific certificate authority bundle flag [#1730](https://github.com/openshift/oc/pull/1730)
* [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Remove some of newapp unit tests relying on external deprecated images [#1726](https://github.com/openshift/oc/pull/1726)
* [OCPBUGS-30286](https://issues.redhat.com/browse/OCPBUGS-30286): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1698](https://github.com/openshift/oc/pull/1698)
* [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696)
* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [WRKLDS-1041](https://issues.redhat.com/browse/WRKLDS-1041): oc login: Built-in cred exec plugin implementation and wiring [#1658](https://github.com/openshift/oc/pull/1658)
* [OCPBUGS-24695](https://issues.redhat.com/browse/OCPBUGS-24695): Remove deprecated password defaulting in default config flag [#1620](https://github.com/openshift/oc/pull/1620)
* [OCPBUGS-25016](https://issues.redhat.com/browse/OCPBUGS-25016): Bump api to include the new CloudCredential cap [#1623](https://github.com/openshift/oc/pull/1623)
* [Full changelog](https://github.com/openshift/oc/compare/6f88b5846ab96ac1808c20038646d4dd669395cb...82316376e25f6453b58258df6bf1e11ec4abb670)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/cffd42537ac64a3936a12de001db938d0904126e)
* [OCPBUGS-60974](https://issues.redhat.com/browse/OCPBUGS-60974): ccoctl: aws to use proper issuer url on subsequent runs [#910](https://github.com/openshift/cloud-credential-operator/pull/910)
* [OCPBUGS-58678](https://issues.redhat.com/browse/OCPBUGS-58678): github.com/golang/glog v1.2.5 [#894](https://github.com/openshift/cloud-credential-operator/pull/894)
* [OCPBUGS-53417](https://issues.redhat.com/browse/OCPBUGS-53417): github.com/golang/glog v1.2.4 [#844](https://github.com/openshift/cloud-credential-operator/pull/844)
* [OCPBUGS-53818](https://issues.redhat.com/browse/OCPBUGS-53818): update github.com/golang-jwt/jwt [#840](https://github.com/openshift/cloud-credential-operator/pull/840)
* [OCPBUGS-51540](https://issues.redhat.com/browse/OCPBUGS-51540): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#833](https://github.com/openshift/cloud-credential-operator/pull/833)
* [OCPBUGS-47068](https://issues.redhat.com/browse/OCPBUGS-47068): golang.org/x/net v0.33.0 [#806](https://github.com/openshift/cloud-credential-operator/pull/806)
* [OCPBUGS-45940](https://issues.redhat.com/browse/OCPBUGS-45940): Add AWS region to aws-pod-identity-webhook [#802](https://github.com/openshift/cloud-credential-operator/pull/802)
* [OCPBUGS-45008](https://issues.redhat.com/browse/OCPBUGS-45008): Add retry to ccoctl gcp create functions [#795](https://github.com/openshift/cloud-credential-operator/pull/795)
* [OCPBUGS-45003](https://issues.redhat.com/browse/OCPBUGS-45003): github.com/golang-jwt/jwt/v4 v4.5.1 [#784](https://github.com/openshift/cloud-credential-operator/pull/784)
* [OCPBUGS-43646](https://issues.redhat.com/browse/OCPBUGS-43646): Only attempt timed token credentials on supported platforms. [#774](https://github.com/openshift/cloud-credential-operator/pull/774)
* [OCPBUGS-43338](https://issues.redhat.com/browse/OCPBUGS-43338): Update github.com/sirupsen/logrus v1.9.3 [#768](https://github.com/openshift/cloud-credential-operator/pull/768)
* [OCPBUGS-41235](https://issues.redhat.com/browse/OCPBUGS-41235): List secrets in batches to avoid api timeout [#754](https://github.com/openshift/cloud-credential-operator/pull/754)
* [OCPBUGS-38377](https://issues.redhat.com/browse/OCPBUGS-38377): Update google.golang.org/grpc v1.65.0 [#749](https://github.com/openshift/cloud-credential-operator/pull/749)
* [OCPBUGS-37461](https://issues.redhat.com/browse/OCPBUGS-37461): Set required-scc for openshift workloads [#736](https://github.com/openshift/cloud-credential-operator/pull/736)
* [OCPBUGS-37277](https://issues.redhat.com/browse/OCPBUGS-37277): Update to cloud.google.com/go/storage v1.43.0 [#729](https://github.com/openshift/cloud-credential-operator/pull/729)
* [OCPBUGS-37288](https://issues.redhat.com/browse/OCPBUGS-37288): GCP passthrough permissions check to ignore problematic permissions. [#730](https://github.com/openshift/cloud-credential-operator/pull/730)
* [OCPBUGS-37419](https://issues.redhat.com/browse/OCPBUGS-37419): SNYK ignore go-client misreporting [#738](https://github.com/openshift/cloud-credential-operator/pull/738)
* [OCPBUGS-37061](https://issues.redhat.com/browse/OCPBUGS-37061): Update to azidentity v1.7.0 [#728](https://github.com/openshift/cloud-credential-operator/pull/728)
* [OCPBUGS-36030](https://issues.redhat.com/browse/OCPBUGS-36030): IBM/go-sdk-core update to v5.17.4 [#720](https://github.com/openshift/cloud-credential-operator/pull/720)
* [OCPBUGS-36291](https://issues.redhat.com/browse/OCPBUGS-36291): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#709](https://github.com/openshift/cloud-credential-operator/pull/709)
* [OCPBUGS-32900](https://issues.redhat.com/browse/OCPBUGS-32900): Upgrade go-jose module to 2.6.3 [#696](https://github.com/openshift/cloud-credential-operator/pull/696)
* [OCPBUGS-31924](https://issues.redhat.com/browse/OCPBUGS-31924): aws: remove non-existent permission [#691](https://github.com/openshift/cloud-credential-operator/pull/691)
* [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686)
* [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675)
* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [OCPBUGS-27919](https://issues.redhat.com/browse/OCPBUGS-27919): Report manualpodidentity mode in metrics when using Azure Workload Identity [#661](https://github.com/openshift/cloud-credential-operator/pull/661)
* [OCPBUGS-27117](https://issues.redhat.com/browse/OCPBUGS-27117): Write manifests when AWS IAM roles already exist. [#653](https://github.com/openshift/cloud-credential-operator/pull/653)
* [OCPBUGS-26510](https://issues.redhat.com/browse/OCPBUGS-26510): Use live client for metrics [#646](https://github.com/openshift/cloud-credential-operator/pull/646)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d66c192eb6b2d0cba3b77427afcbec914a8b96be...cffd42537ac64a3936a12de001db938d0904126e)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/6864da0642026d6004df171539fa9fd5bcb6c2df)
* [OCPBUGS-33780](https://issues.redhat.com/browse/OCPBUGS-33780): Avoid panic when looking up attachedOutboundRule.ID in azure [#145](https://github.com/openshift/cloud-network-config-controller/pull/145)
* [OCPBUGS-31754](https://issues.redhat.com/browse/OCPBUGS-31754): Avoid nil pointer panic while assigning private IP on Azure [#137](https://github.com/openshift/cloud-network-config-controller/pull/137)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/b3854cc9ce8b5823078d9fe837f43106d807435a...6864da0642026d6004df171539fa9fd5bcb6c2df)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)
* [OCPBUGS-34795](https://issues.redhat.com/browse/OCPBUGS-34795): set required-scc for openshift workloads [#675](https://github.com/openshift/cluster-authentication-operator/pull/675)
* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [OCPBUGS-24081](https://issues.redhat.com/browse/OCPBUGS-24081): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#643](https://github.com/openshift/cluster-authentication-operator/pull/643)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/0e39ace55e81b082a50f67402e7776adb8c6c8a7...7aaa40eb28afdae8c5994b672b33cd4be31cc7d1)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/89149896bc6a3d02ebf117c61d5e9ea50ad73129)
* [OCPBUGS-45149](https://issues.redhat.com/browse/OCPBUGS-45149): [release-4.15] VPA: Update OWNERS file [#326](https://github.com/openshift/kubernetes-autoscaler/pull/326)
* [OCPBUGS-40930](https://issues.redhat.com/browse/OCPBUGS-40930): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#315](https://github.com/openshift/kubernetes-autoscaler/pull/315)
* [OCPBUGS-33885](https://issues.redhat.com/browse/OCPBUGS-33885): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#301](https://github.com/openshift/kubernetes-autoscaler/pull/301)
* [OCPBUGS-31464](https://issues.redhat.com/browse/OCPBUGS-31464): add check for taint.value == nil [#293](https://github.com/openshift/kubernetes-autoscaler/pull/293)
* [OCPBUGS-27750](https://issues.redhat.com/browse/OCPBUGS-27750): Fix unstructured taint parsing in Cluster API provider [#282](https://github.com/openshift/kubernetes-autoscaler/pull/282)
* [OCPBUGS-23576](https://issues.redhat.com/browse/OCPBUGS-23576): Add Snyk file to exclude vendor directory on scan [#275](https://github.com/openshift/kubernetes-autoscaler/pull/275)
* [OCPBUGS-24066](https://issues.redhat.com/browse/OCPBUGS-24066): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#270](https://github.com/openshift/kubernetes-autoscaler/pull/270)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/1f7a1aa91071c56901a8be989beb341731c8a4ff...89149896bc6a3d02ebf117c61d5e9ea50ad73129)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8425d88b5bedd5d22acfb0f6c0edf929ec401288)
* [OCPBUGS-41798](https://issues.redhat.com/browse/OCPBUGS-41798): set required-scc for openshift workloads [#332](https://github.com/openshift/cluster-autoscaler-operator/pull/332)
* [OCPBUGS-31947](https://issues.redhat.com/browse/OCPBUGS-31947): Update x/net to v0.24.0 [#319](https://github.com/openshift/cluster-autoscaler-operator/pull/319)
* [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/70164fc606a7b05352d92a8d07bd6ac42421c0ae...8425d88b5bedd5d22acfb0f6c0edf929ec401288)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/9508bd334d661b6e8e76d452082f9a6f822a7739)
* [OCPBUGS-77448](https://issues.redhat.com/browse/OCPBUGS-77448): Bump github.com/go-errors/errors to v1.5.1 [#563](https://github.com/openshift/cluster-baremetal-operator/pull/563)
* [OCPBUGS-44046](https://issues.redhat.com/browse/OCPBUGS-44046): SCC-pinning for metal3-baremetal-operator [#454](https://github.com/openshift/cluster-baremetal-operator/pull/454)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#443](https://github.com/openshift/cluster-baremetal-operator/pull/443)
* [OCPBUGS-31948](https://issues.redhat.com/browse/OCPBUGS-31948): bump x/net to 0.23.0 [#437](https://github.com/openshift/cluster-baremetal-operator/pull/437)
* [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405)
* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6f66328514396b014ce76779297f9181d886983...9508bd334d661b6e8e76d452082f9a6f822a7739)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e)
* [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/27bfb59fd0ff399224ee673869b8875ef10f1962...0849c462de13b9a5765b9a8c882acb9e6e8bf39e)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2053e13cb0fda9188e9b685db83c1e1f492e6efa)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#206](https://github.com/openshift/cluster-api/pull/206)
* [OCPBUGS-33200](https://issues.redhat.com/browse/OCPBUGS-33200): Bump protobuf to v1.33.0 [#204](https://github.com/openshift/cluster-api/pull/204)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#201](https://github.com/openshift/cluster-api/pull/201)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198)
* [OCPBUGS-24311](https://issues.redhat.com/browse/OCPBUGS-24311): Updating ose-cluster-api-container image to be consistent with ART [#188](https://github.com/openshift/cluster-api/pull/188)
* [Full changelog](https://github.com/openshift/cluster-api/compare/5830a10a2f545dc25ff4ca4c4efd9005088676aa...2053e13cb0fda9188e9b685db83c1e1f492e6efa)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/e5aeca52d0a0739f1a87f39c9e5d4fa3592370ea)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#561](https://github.com/openshift/cluster-capi-operator/pull/561)
* [OCPBUGS-37849](https://issues.redhat.com/browse/OCPBUGS-37849): fix: sort CredentialsRequest manifests after namespace [#193](https://github.com/openshift/cluster-capi-operator/pull/193)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests-gen: also add CustomNoUpgrade annotation value [#166](https://github.com/openshift/cluster-capi-operator/pull/166)
* [OCPBUGS-30118](https://issues.redhat.com/browse/OCPBUGS-30118): create openshift-cluster-api namespace in CustomNoUpgrade [#167](https://github.com/openshift/cluster-capi-operator/pull/167)
* [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160)
* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155)
* [OCPBUGS-24150](https://issues.redhat.com/browse/OCPBUGS-24150): Updating ose-cluster-capi-operator-container image to be consistent with ART [#147](https://github.com/openshift/cluster-capi-operator/pull/147)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/be91ee59e14dff88506df6e70e35470638bc3589...e5aeca52d0a0739f1a87f39c9e5d4fa3592370ea)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/445ccbfe8aba60c99931701d7728ae7ee012eba8)
* [OCPBUGS-63169](https://issues.redhat.com/browse/OCPBUGS-63169): ccm: disable unused secure-serving port and webhook [#424](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/424)
* [OCPBUGS-36821](https://issues.redhat.com/browse/OCPBUGS-36821): Increase GCP Concurrent Service Syncs to 10 [#359](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/359)
* [OCPBUGS-33547](https://issues.redhat.com/browse/OCPBUGS-33547): update azure and ash tolerations on node manager [#343](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/343)
* Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC [#339](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/339)
* [OCPBUGS-25751](https://issues.redhat.com/browse/OCPBUGS-25751): Add Snyk file to exclude vendor directory on scan [#314](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/314)
* [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320)
* [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/d721cd62b5edec3f1b0b7a61b3e6e2af50bb71bc...445ccbfe8aba60c99931701d7728ae7ee012eba8)
### [cluster-config-api](https://github.com/openshift/api/tree/0a58f8c30a8c309baaa4aecd05580039b4d3888b)
* [CFE-1047](https://issues.redhat.com/browse/CFE-1047): Added new field for capacityReservationGroupID in AzureMachineProviderSpec [#1925](https://github.com/openshift/api/pull/1925)
* [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Ingress - add connect timeout to tuning options [#1937](https://github.com/openshift/api/pull/1937)
* [OCPBUGS-35214](https://issues.redhat.com/browse/OCPBUGS-35214): [Release 4-15] Add transit switch config to 4.15 [#1872](https://github.com/openshift/api/pull/1872)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add UnservableInFutureVersions route status condition type [#1751](https://github.com/openshift/api/pull/1751)
* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1767](https://github.com/openshift/api/pull/1767)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1772](https://github.com/openshift/api/pull/1772)
* [OCPBUGS-29074](https://issues.redhat.com/browse/OCPBUGS-29074): Move network.config conditions to GA [#1756](https://github.com/openshift/api/pull/1756)
* [NP-905](https://issues.redhat.com/browse/NP-905): [release-4.15] Promote Live Migration to GA [#1749](https://github.com/openshift/api/pull/1749)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Allow modified IPv6 address as CPIC name [#1750](https://github.com/openshift/api/pull/1750)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): add separate authentication config manifest for hypershift [#1743](https://github.com/openshift/api/pull/1743)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): respect the cluster profile in rendering [#1735](https://github.com/openshift/api/pull/1735)
* [OCPBUGS-27186](https://issues.redhat.com/browse/OCPBUGS-27186): CNO IPsec API [#1719](https://github.com/openshift/api/pull/1719)
* Add generated featuregate files inertly to payloads [#1723](https://github.com/openshift/api/pull/1723)
* [OCPBUGS-26441](https://issues.redhat.com/browse/OCPBUGS-26441): disable psa [#1717](https://github.com/openshift/api/pull/1717)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1705](https://github.com/openshift/api/pull/1705)
* No-Jira: [release-4.15] Add payload manifests dir [#1702](https://github.com/openshift/api/pull/1702)
* [OCPBUGS-25075](https://issues.redhat.com/browse/OCPBUGS-25075): Generate Tech Preview version of ControllerConfig CRD [#1701](https://github.com/openshift/api/pull/1701)
* [Full changelog](https://github.com/openshift/api/compare/0677a8879a4608a5b6ecafd490fbbeb0ff77c6ef...0a58f8c30a8c309baaa4aecd05580039b4d3888b)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)
* [OCPBUGS-36151](https://issues.redhat.com/browse/OCPBUGS-36151): Set required-scc for openshift workloads [#420](https://github.com/openshift/cluster-config-operator/pull/420)
* [OCPBUGS-26542](https://issues.redhat.com/browse/OCPBUGS-26542): remove duplicate manifests in image [#395](https://github.com/openshift/cluster-config-operator/pull/395)
* [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/441d29c92b1759d1780a525112e764280b78b0d6...0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/e1b692b1e9552db95c17f6a03b41d258237ab480)
* [OCPBUGS-45839](https://issues.redhat.com/browse/OCPBUGS-45839): relax validation on delete and if failureDomains not configured [#336](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/336)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#326](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/326)
* [OCPBUGS-24632](https://issues.redhat.com/browse/OCPBUGS-24632): Prevent rollout due to irrelevant path artifacts [#317](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/317)
* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#318](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/318)
* [OCPBUGS-34971](https://issues.redhat.com/browse/OCPBUGS-34971): Add unreadyNodeGracePeriod for allowing brief node hiccups [#299](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/299)
* [OCPBUGS-35496](https://issues.redhat.com/browse/OCPBUGS-35496): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#308](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/308)
* [OCPBUGS-35255](https://issues.redhat.com/browse/OCPBUGS-35255): Improved debugging of API listing errors [#301](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/301)
* [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec [#290](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/290)
* [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. [#289](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/289)
* [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c...e1b692b1e9552db95c17f6a03b41d258237ab480)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/65dbb12b710b7126f662f5f7f2d8272f9f6868cc)
* [OCPBUGS-36377](https://issues.redhat.com/browse/OCPBUGS-36377): Set required-scc for openshift workloads [#211](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/211)
* [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): create suitable role and roleBinding for csi-snapshot-webhook [#203](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/203)
* [OCPBUGS-25240](https://issues.redhat.com/browse/OCPBUGS-25240): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#180](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/180)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/439826e1a723c094717877db0f2ca1848d0fb10a...65dbb12b710b7126f662f5f7f2d8272f9f6868cc)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/73aa60d1fd4e86aed93d67ddac62586ecbb70644)
* [OCPBUGS-52499](https://issues.redhat.com/browse/OCPBUGS-52499): [release-4.15] Add runbook_url for CoreDNSErrorsHigh [#432](https://github.com/openshift/cluster-dns-operator/pull/432)
* [OCPBUGS-32093](https://issues.redhat.com/browse/OCPBUGS-32093): Add RBAC related to featuregates to fix hypershift upgrade [#407](https://github.com/openshift/cluster-dns-operator/pull/407)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399)
* [OCPBUGS-24082](https://issues.redhat.com/browse/OCPBUGS-24082): Updating ose-cluster-dns-operator-container image to be consistent with ART [#396](https://github.com/openshift/cluster-dns-operator/pull/396)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/a4b1cfb4927052f4e21e919d0af05f78ca4fcace...73aa60d1fd4e86aed93d67ddac62586ecbb70644)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f1569c6cc1c4e98ee538433416165542acf600a9)
* [OCPBUGS-67931](https://issues.redhat.com/browse/OCPBUGS-67931): Update logrus to 1.9.3 to address CVE-2025-65637 [#1547](https://github.com/openshift/cluster-etcd-operator/pull/1547)
* [OCPBUGS-53506](https://issues.redhat.com/browse/OCPBUGS-53506): fix CVE-2025-30204 [#1404](https://github.com/openshift/cluster-etcd-operator/pull/1404)
* [OCPBUGS-33564](https://issues.redhat.com/browse/OCPBUGS-33564): return errors in wait-for-ceo [#1261](https://github.com/openshift/cluster-etcd-operator/pull/1261)
* [OCPBUGS-32952](https://issues.redhat.com/browse/OCPBUGS-32952): remove etcd-health-probe log [#1257](https://github.com/openshift/cluster-etcd-operator/pull/1257)
* [OCPBUGS-31942](https://issues.redhat.com/browse/OCPBUGS-31942): update golang x net [#1253](https://github.com/openshift/cluster-etcd-operator/pull/1253)
* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#1220](https://github.com/openshift/cluster-etcd-operator/pull/1220)
* [OCPBUGS-30915](https://issues.redhat.com/browse/OCPBUGS-30915): CEO aliveness check should only detect deadlocks [#1225](https://github.com/openshift/cluster-etcd-operator/pull/1225)
* [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212)
* [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191)
* [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206)
* [OCPBUGS-24087](https://issues.redhat.com/browse/OCPBUGS-24087): Updating cluster-etcd-operator-container image to be consistent with ART [#1169](https://github.com/openshift/cluster-etcd-operator/pull/1169)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d9e83020b9eb7346dc8ef00961cf7837db18034e...f1569c6cc1c4e98ee538433416165542acf600a9)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/8558f479e1cfc437a898bdf895bfdbd7ae5fb070)
* [OCPBUGS-67932](https://issues.redhat.com/browse/OCPBUGS-67932): Bump logrus to 1.9.1 [#1289](https://github.com/openshift/cluster-image-registry-operator/pull/1289)
* [OCPBUGS-53866](https://issues.redhat.com/browse/OCPBUGS-53866): bump github.com/golang-jwt/jwt [#1220](https://github.com/openshift/cluster-image-registry-operator/pull/1220)
* [OCPBUGS-51596](https://issues.redhat.com/browse/OCPBUGS-51596): bump golang.org/x/oauth2 [#1211](https://github.com/openshift/cluster-image-registry-operator/pull/1211)
* [OCPBUGS-51264](https://issues.redhat.com/browse/OCPBUGS-51264): ensure that storage names don't end in dashes [#1183](https://github.com/openshift/cluster-image-registry-operator/pull/1183)
* [OCPBUGS-43918](https://issues.redhat.com/browse/OCPBUGS-43918): fix proxy config and leader election test flakes [#1150](https://github.com/openshift/cluster-image-registry-operator/pull/1150)
* [OCPBUGS-42930](https://issues.redhat.com/browse/OCPBUGS-42930): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1136](https://github.com/openshift/cluster-image-registry-operator/pull/1136)
* [OCPBUGS-43656](https://issues.redhat.com/browse/OCPBUGS-43656): pkg/storage/azure: also check for auth failure error code on deletion [#1146](https://github.com/openshift/cluster-image-registry-operator/pull/1146)
* [OCPBUGS-42934](https://issues.redhat.com/browse/OCPBUGS-42934): azureclient: stop validating credentials when creating the client [#1135](https://github.com/openshift/cluster-image-registry-operator/pull/1135)
* [OCPBUGS-39099](https://issues.redhat.com/browse/OCPBUGS-39099): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1111](https://github.com/openshift/cluster-image-registry-operator/pull/1111)
* [OCPBUGS-38895](https://issues.redhat.com/browse/OCPBUGS-38895): pkg/resource: invoke update-ca-trust extract with --output [#1105](https://github.com/openshift/cluster-image-registry-operator/pull/1105)
* [OCPBUGS-36325](https://issues.redhat.com/browse/OCPBUGS-36325): Set required-scc for openshift workloads [#1067](https://github.com/openshift/cluster-image-registry-operator/pull/1067)
* [OCPBUGS-36036](https://issues.redhat.com/browse/OCPBUGS-36036): go.*,vendor: bump go-retryablehttp [#1068](https://github.com/openshift/cluster-image-registry-operator/pull/1068)
* [OCPBUGS-34571](https://issues.redhat.com/browse/OCPBUGS-34571): azure-path-fix: get client secret from k8s secret [#1049](https://github.com/openshift/cluster-image-registry-operator/pull/1049)
* [OCPBUGS-34539](https://issues.redhat.com/browse/OCPBUGS-34539): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1048](https://github.com/openshift/cluster-image-registry-operator/pull/1048)
* [OCPBUGS-33208](https://issues.redhat.com/browse/OCPBUGS-33208): azurepathfix: check if platform status is nil before accessing it [#1031](https://github.com/openshift/cluster-image-registry-operator/pull/1031)
* [OCPBUGS-32396](https://issues.redhat.com/browse/OCPBUGS-32396): azure-path-fix: support auth via account key (without clientID) [#1022](https://github.com/openshift/cluster-image-registry-operator/pull/1022)
* [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): bump aws-sdk-go from v1.44 to v1.50 [#1014](https://github.com/openshift/cluster-image-registry-operator/pull/1014)
* [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009)
* [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000)
* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [OCPBUGS-26936](https://issues.redhat.com/browse/OCPBUGS-26936): MULTIARCH-4074: PowerVS: update supported regions [#988](https://github.com/openshift/cluster-image-registry-operator/pull/988)
* [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984)
* [OCPBUGS-25460](https://issues.redhat.com/browse/OCPBUGS-25460): add private endpoint permissions to Azure credentials request [#978](https://github.com/openshift/cluster-image-registry-operator/pull/978)
* [OCPBUGS-24684](https://issues.redhat.com/browse/OCPBUGS-24684): Revert "Merge pull request #965 from jstuever/TRT-1368" [#972](https://github.com/openshift/cluster-image-registry-operator/pull/972)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/ed0afa7a74765b857ec0c51b84151df84d48fb3f...8558f479e1cfc437a898bdf895bfdbd7ae5fb070)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/815632b1ddb29f55ddc7a8fdba63292b4797b3ae)
* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 [#1172](https://github.com/openshift/cluster-ingress-operator/pull/1172)
* [OCPBUGS-42480](https://issues.redhat.com/browse/OCPBUGS-42480): Limit SHA-1 check to the leaf cert in default cert chain [#1154](https://github.com/openshift/cluster-ingress-operator/pull/1154)
* [OCPBUGS-41635](https://issues.redhat.com/browse/OCPBUGS-41635): Refine logging for accurate infra CR status updates [#1141](https://github.com/openshift/cluster-ingress-operator/pull/1141)
* [OCPBUGS-36466](https://issues.redhat.com/browse/OCPBUGS-36466): Allow operator to update Route spec.subdomain [#1100](https://github.com/openshift/cluster-ingress-operator/pull/1100)
* [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Implement connect timeout tuning option [#1097](https://github.com/openshift/cluster-ingress-operator/pull/1097)
* [OCPBUGS-36279](https://issues.redhat.com/browse/OCPBUGS-36279): Add Regexp Anchor to TestAll [#1096](https://github.com/openshift/cluster-ingress-operator/pull/1096)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Prevent upgrades for SHA1 default cert and SHA1 route certs [#1014](https://github.com/openshift/cluster-ingress-operator/pull/1014)
* [OCPBUGS-35028](https://issues.redhat.com/browse/OCPBUGS-35028): internalServiceChanged: Fix target port logic [#1081](https://github.com/openshift/cluster-ingress-operator/pull/1081)
* [OCPBUGS-34887](https://issues.redhat.com/browse/OCPBUGS-34887): TestHostNetworkPortBinding: Delete t.Parallel() [#1075](https://github.com/openshift/cluster-ingress-operator/pull/1075)
* [OCPBUGS-34252](https://issues.redhat.com/browse/OCPBUGS-34252): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1058](https://github.com/openshift/cluster-ingress-operator/pull/1058)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [OCPBUGS-26544](https://issues.redhat.com/browse/OCPBUGS-26544): Replace GCP role with explicit permissions [#1015](https://github.com/openshift/cluster-ingress-operator/pull/1015)
* [OCPBUGS-24167](https://issues.redhat.com/browse/OCPBUGS-24167): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1002](https://github.com/openshift/cluster-ingress-operator/pull/1002)
* [OCPBUGS-25227](https://issues.redhat.com/browse/OCPBUGS-25227): annotate credentials request manifests [#1005](https://github.com/openshift/cluster-ingress-operator/pull/1005)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1708977af70b2de62642dadd29d6f2f25a0240fd...815632b1ddb29f55ddc7a8fdba63292b4797b3ae)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9e3f9ec8a3c1c42643af78c61e984d077a692da2)
* [OCPBUGS-67937](https://issues.redhat.com/browse/OCPBUGS-67937): CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#2044](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2044)
* [OCPBUGS-50661](https://issues.redhat.com/browse/OCPBUGS-50661): Increase waitForFallbackDegradedConditionTimeout [#1806](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1806)
* [OCPBUGS-37566](https://issues.redhat.com/browse/OCPBUGS-37566): add disabled syncer as reason to CFE for PSA [#1716](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1716)
* [OCPBUGS-35832](https://issues.redhat.com/browse/OCPBUGS-35832): add SNO control plane high cpu usage alert [#1706](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1706)
* [OCPBUGS-29361](https://issues.redhat.com/browse/OCPBUGS-29361): operator: stop removing kube-apiserver-slos asset [#1643](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1643)
* [OCPBUGS-34492](https://issues.redhat.com/browse/OCPBUGS-34492): Create one-shot migrations for the flowcontrol group. [#1692](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1692)
* [OCPBUGS-33697](https://issues.redhat.com/browse/OCPBUGS-33697): add a controller that reconciles SCCs' volumes [#1679](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1679)
* [OCPBUGS-33277](https://issues.redhat.com/browse/OCPBUGS-33277): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1672](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1672)
* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): Use RotatedSigningCASecret in update only mode [#1662](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1662)
* [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653)
* [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647)
* [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639)
* [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636)
* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [OCPBUGS-24098](https://issues.redhat.com/browse/OCPBUGS-24098): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1589](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1589)
* [OCPBUGS-18761](https://issues.redhat.com/browse/OCPBUGS-18761): revert dev cert rotation in 4.15 [#1598](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1598)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/d0b79035dcec4011d4968e4701f8ff13d921cf2e...9e3f9ec8a3c1c42643af78c61e984d077a692da2)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e)
* [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34)
* [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7...128d8e08c48e2002c416e84d0dec816bf5999c7e)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/4c1078415f28ca8b9ea051f1a505bee61763ea3c)
* [OCPBUGS-67987](https://issues.redhat.com/browse/OCPBUGS-67987): CVE-2025-65637 openshift4/ose-kube-proxy-rhel9: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#910](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/910)
* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#801](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/801)
* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#797](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/797)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#790](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/790)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/b3faac1f48914e94fa9af074f387c871dad84a9c...4c1078415f28ca8b9ea051f1a505bee61763ea3c)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/183510ee50bb135bfe685bf40b3a7d6aecad27fe)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#625](https://github.com/openshift/cluster-kube-scheduler-operator/pull/625)
* [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#537](https://github.com/openshift/cluster-kube-scheduler-operator/pull/537)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/39dd141c918da30da848fdb87ee333f909a16b84...183510ee50bb135bfe685bf40b3a7d6aecad27fe)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/acf9540b9d87be60f2bee90d38e06eac674a3e20)
* [OCPBUGS-67942](https://issues.redhat.com/browse/OCPBUGS-67942): Bump github.com/sirupsen/logrus to v1.9.1 [#145](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/145)
* [OCPBUGS-36322](https://issues.redhat.com/browse/OCPBUGS-36322): Set required-scc for openshift workloads [#112](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/112)
* [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/a26352fcbeebaab395b88fb011c39ed40185e0dd...acf9540b9d87be60f2bee90d38e06eac674a3e20)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/863813ecd7b4c1416e76120896add365c492a59e)
* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Ensure trailing dots on DNS names do not block serving cert auth [#258](https://github.com/openshift/cluster-machine-approver/pull/258)
* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Client internal DNS checks should ignore trailing dot [#252](https://github.com/openshift/cluster-machine-approver/pull/252)
* [OCPBUGS-44705](https://issues.redhat.com/browse/OCPBUGS-44705): Client internal DNS checks should be case insensitive [#245](https://github.com/openshift/cluster-machine-approver/pull/245)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/7685374f0e84181801b6390876a0d12c61fa9913...863813ecd7b4c1416e76120896add365c492a59e)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/93b9d9424899b6215c1915c21ffe4bece71f7ebf)
* [OCPBUGS-66047](https://issues.redhat.com/browse/OCPBUGS-66047): test: remove image registry e2e tests [#2757](https://github.com/openshift/cluster-monitoring-operator/pull/2757)
* [OCPBUGS-46570](https://issues.redhat.com/browse/OCPBUGS-46570): Add new metrics for OpenShift logging telemetry [#2541](https://github.com/openshift/cluster-monitoring-operator/pull/2541)
* [OCPBUGS-44006](https://issues.redhat.com/browse/OCPBUGS-44006): fix(monitoring-plugin): disable emitting nginx version on error pages [#2519](https://github.com/openshift/cluster-monitoring-operator/pull/2519)
* [OCPBUGS-43876](https://issues.redhat.com/browse/OCPBUGS-43876): Add runbook url for TelemeterClientFail… [#2509](https://github.com/openshift/cluster-monitoring-operator/pull/2509)
* [OCPBUGS-42586](https://issues.redhat.com/browse/OCPBUGS-42586): Exclude windows nodes from kubelet servicemonitor [#2487](https://github.com/openshift/cluster-monitoring-operator/pull/2487)
* [OCPBUGS-41913](https://issues.redhat.com/browse/OCPBUGS-41913): filter alerts sent to Telemeter [#2472](https://github.com/openshift/cluster-monitoring-operator/pull/2472)
* [OCPBUGS-39172](https://issues.redhat.com/browse/OCPBUGS-39172): Backport #2441 for 4.15 [#2448](https://github.com/openshift/cluster-monitoring-operator/pull/2448)
* [OCPBUGS-37608](https://issues.redhat.com/browse/OCPBUGS-37608): set required-scc for openshift workloads [#2420](https://github.com/openshift/cluster-monitoring-operator/pull/2420)
* [OCPBUGS-36563](https://issues.redhat.com/browse/OCPBUGS-36563): add runbook_url annotations [#2406](https://github.com/openshift/cluster-monitoring-operator/pull/2406)
* [OCPBUGS-37194](https://issues.redhat.com/browse/OCPBUGS-37194): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2413](https://github.com/openshift/cluster-monitoring-operator/pull/2413)
* [OCPBUGS-36312](https://issues.redhat.com/browse/OCPBUGS-36312): inject trusted CA bundle into UWM Alertmanager [#2400](https://github.com/openshift/cluster-monitoring-operator/pull/2400)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Ipsec state backport [#2384](https://github.com/openshift/cluster-monitoring-operator/pull/2384)
* [OCPBUGS-33512](https://issues.redhat.com/browse/OCPBUGS-33512): fix Thanos ruler alert generator url [#2343](https://github.com/openshift/cluster-monitoring-operator/pull/2343)
* [OCPBUGS-32055](https://issues.redhat.com/browse/OCPBUGS-32055): backport ols metric allowlist to 4.15 [#2313](https://github.com/openshift/cluster-monitoring-operator/pull/2313)
* [OCPBUGS-28769](https://issues.redhat.com/browse/OCPBUGS-28769): fix generation of telemeter token hash [#2303](https://github.com/openshift/cluster-monitoring-operator/pull/2303)
* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [OCPBUGS-25322](https://issues.redhat.com/browse/OCPBUGS-25322): go.mod: bump prometheus-operator to v0.70.0 [#2201](https://github.com/openshift/cluster-monitoring-operator/pull/2201)
* [OCPBUGS-25309](https://issues.redhat.com/browse/OCPBUGS-25309): additionalArgs: list items must have named fields [#2197](https://github.com/openshift/cluster-monitoring-operator/pull/2197)
* [OCPBUGS-24149](https://issues.redhat.com/browse/OCPBUGS-24149): Updating cluster-monitoring-operator-container image to be consistent with ART [#2170](https://github.com/openshift/cluster-monitoring-operator/pull/2170)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/404da202f052559d390c085a9d22f37e152502ec...93b9d9424899b6215c1915c21ffe4bece71f7ebf)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/aaa0f93307493501fbad73002311b7d65005387e)
* [OCPBUGS-84183](https://issues.redhat.com/browse/OCPBUGS-84183): fix(hypershift): use net.JoinHostPort for URL construction [#2995](https://github.com/openshift/cluster-network-operator/pull/2995)
* [OCPBUGS-62980](https://issues.redhat.com/browse/OCPBUGS-62980): Update CNO reviewers/approvers [#2817](https://github.com/openshift/cluster-network-operator/pull/2817)
* [OCPBUGS-56649](https://issues.redhat.com/browse/OCPBUGS-56649): Fix live migration with feature migration configured explicitly [#2715](https://github.com/openshift/cluster-network-operator/pull/2715)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688), [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2658](https://github.com/openshift/cluster-network-operator/pull/2658)
* [OCPBUGS-53282](https://issues.redhat.com/browse/OCPBUGS-53282): Not update status.migration of the network.config CR to empty [#2669](https://github.com/openshift/cluster-network-operator/pull/2669)
* [Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status [#2653](https://github.com/openshift/cluster-network-operator/pull/2653)
* [OCPBUGS-47633](https://issues.redhat.com/browse/OCPBUGS-47633): Prevent live migration process from flapping between step-2 and step-3 [#2609](https://github.com/openshift/cluster-network-operator/pull/2609)
* [OCPBUGS-45890](https://issues.redhat.com/browse/OCPBUGS-45890): Pass transit_switch_subnet options in ovnkube-node pod [#2587](https://github.com/openshift/cluster-network-operator/pull/2587)
* [OCPBUGS-43716](https://issues.redhat.com/browse/OCPBUGS-43716): Skip including default crypto policies to avoid authby issue [#2599](https://github.com/openshift/cluster-network-operator/pull/2599)
* [OCPBUGS-46149](https://issues.redhat.com/browse/OCPBUGS-46149): Remove ip xfrm state when IPsec is disabled [#2596](https://github.com/openshift/cluster-network-operator/pull/2596)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2539](https://github.com/openshift/cluster-network-operator/pull/2539)
* [OCPBUGS-44973](https://issues.redhat.com/browse/OCPBUGS-44973), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2576](https://github.com/openshift/cluster-network-operator/pull/2576)
* [OCPBUGS-42753](https://issues.redhat.com/browse/OCPBUGS-42753): Set mount propagation to HostToContainer for /var/lib/kubelet [#2520](https://github.com/openshift/cluster-network-operator/pull/2520)
* [OCPBUGS-42865](https://issues.redhat.com/browse/OCPBUGS-42865): Add configurable subnets while running hybrid-overlay-node binary [#2523](https://github.com/openshift/cluster-network-operator/pull/2523)
* [OCPBUGS-43268](https://issues.redhat.com/browse/OCPBUGS-43268): Update network operator status for IPsec [#2530](https://github.com/openshift/cluster-network-operator/pull/2530)
* [OCPBUGS-43099](https://issues.redhat.com/browse/OCPBUGS-43099): Configure narrowing=yes for IPsec connections [#2529](https://github.com/openshift/cluster-network-operator/pull/2529)
* [OCPBUGS-42020](https://issues.redhat.com/browse/OCPBUGS-42020): HyperShift: do not use antiaffinity on single replica control planes [#2504](https://github.com/openshift/cluster-network-operator/pull/2504)
* [OCPBUGS-41947](https://issues.redhat.com/browse/OCPBUGS-41947): Add proxy env vars to onvkube-node [#2503](https://github.com/openshift/cluster-network-operator/pull/2503)
* [OCPBUGS-31447](https://issues.redhat.com/browse/OCPBUGS-31447): Tighten the permissions on whereabouts.conf [#2324](https://github.com/openshift/cluster-network-operator/pull/2324)
* [NP-1064](https://issues.redhat.com/browse/NP-1064), [OCPBUGS-39336](https://issues.redhat.com/browse/OCPBUGS-39336): Remove managed cluster checking for live migration [#2485](https://github.com/openshift/cluster-network-operator/pull/2485)
* [OCPBUGS-34613](https://issues.redhat.com/browse/OCPBUGS-34613), [OCPBUGS-34726](https://issues.redhat.com/browse/OCPBUGS-34726), [OCPBUGS-34727](https://issues.redhat.com/browse/OCPBUGS-34727): Live migration backports [#2393](https://github.com/openshift/cluster-network-operator/pull/2393)
* [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix IC distributed control plane alerts [#2459](https://github.com/openshift/cluster-network-operator/pull/2459)
* [OCPBUGS-35837](https://issues.redhat.com/browse/OCPBUGS-35837): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2420](https://github.com/openshift/cluster-network-operator/pull/2420)
* [OCPBUGS-37205](https://issues.redhat.com/browse/OCPBUGS-37205): Check every MachineConfigPool for IPsec plugin existence [#2439](https://github.com/openshift/cluster-network-operator/pull/2439)
* [OCPBUGS-34809](https://issues.redhat.com/browse/OCPBUGS-34809): Ensure that the node-identity webhook address contains colons for IPv6 [#2396](https://github.com/openshift/cluster-network-operator/pull/2396)
* [OCPBUGS-36347](https://issues.redhat.com/browse/OCPBUGS-36347): Create the configmap mtu if not found [#2426](https://github.com/openshift/cluster-network-operator/pull/2426)
* [OCPBUGS-36499](https://issues.redhat.com/browse/OCPBUGS-36499): [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) [#2375](https://github.com/openshift/cluster-network-operator/pull/2375)
* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): update whereabouts crd [#2427](https://github.com/openshift/cluster-network-operator/pull/2427)
* [OCPBUGS-32989](https://issues.redhat.com/browse/OCPBUGS-32989): Add conditions for ignored-namespaces [#2379](https://github.com/openshift/cluster-network-operator/pull/2379)
* [OCPBUGS-29739](https://issues.redhat.com/browse/OCPBUGS-29739): Run dhcp-daemon pods as system-node-critical priority [#2283](https://github.com/openshift/cluster-network-operator/pull/2283)
* [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Add ipsec state metric [#2389](https://github.com/openshift/cluster-network-operator/pull/2389)
* [OCPBUGS-32515](https://issues.redhat.com/browse/OCPBUGS-32515): Fix wait logic for IPsec certificate signing request [#2348](https://github.com/openshift/cluster-network-operator/pull/2348)
* [OCPBUGS-29092](https://issues.redhat.com/browse/OCPBUGS-29092): Add probes to node-network-identity [#2253](https://github.com/openshift/cluster-network-operator/pull/2253)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): Fully disable network-node-identity on ROKS [#2314](https://github.com/openshift/cluster-network-operator/pull/2314)
* [OCPBUGS-30927](https://issues.redhat.com/browse/OCPBUGS-30927): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2310](https://github.com/openshift/cluster-network-operator/pull/2310)
* [OCPBUGS-30615](https://issues.redhat.com/browse/OCPBUGS-30615): Fix managed cluster detection on ARO [#2304](https://github.com/openshift/cluster-network-operator/pull/2304)
* [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251)
* [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272)
* [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278)
* [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263)
* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [OCPBUGS-25652](https://issues.redhat.com/browse/OCPBUGS-25652): fix whereabouts conformance test failures [#2168](https://github.com/openshift/cluster-network-operator/pull/2168)
* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): [release-4.15] Add ConfigMap mount to the whereabouts-reconciler [#2214](https://github.com/openshift/cluster-network-operator/pull/2214)
* [OCPBUGS-27198](https://issues.redhat.com/browse/OCPBUGS-27198): [release-4.15] Update ovn-k managed control-plane RBAC [#2204](https://github.com/openshift/cluster-network-operator/pull/2204)
* [OCPBUGS-27286](https://issues.redhat.com/browse/OCPBUGS-27286): Use specific permissions for CNCC in GCP [#2190](https://github.com/openshift/cluster-network-operator/pull/2190)
* [OCPBUGS-27001](https://issues.redhat.com/browse/OCPBUGS-27001): Keep the live migration annotation consistant with the enhancement doc [#2194](https://github.com/openshift/cluster-network-operator/pull/2194)
* [OCPBUGS-27186](https://issues.redhat.com/browse/OCPBUGS-27186): Ns ipsec 4.15 [#2200](https://github.com/openshift/cluster-network-operator/pull/2200)
* [OCPBUGS-25864](https://issues.redhat.com/browse/OCPBUGS-25864): HyperShift, network-node-identity: Check the deployment in the management cluster [#2180](https://github.com/openshift/cluster-network-operator/pull/2180)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167)
* [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181)
* [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Set enable-multi-external-gateway flag in ovnkube.conf [#2158](https://github.com/openshift/cluster-network-operator/pull/2158)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/880e60166a881fb00bbb0b15755517870997709b...aaa0f93307493501fbad73002311b7d65005387e)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/e828bd93defc0cc9c3fcf799d9715b95b2c03f79)
* e2e:performance: decode to valid kubeletconfig object (#1275) [#1275](https://github.com/openshift/cluster-node-tuning-operator/pull/1275)
* Fix context deadlines in ExecCommandOnPod() (#1265) [#1265](https://github.com/openshift/cluster-node-tuning-operator/pull/1265)
* [OCPBUGS-44275](https://issues.redhat.com/browse/OCPBUGS-44275): Drop sched_migration_cost_ns setting (#1207) [#1207](https://github.com/openshift/cluster-node-tuning-operator/pull/1207)
* [OCPBUGS-44283](https://issues.redhat.com/browse/OCPBUGS-44283): right-hand-side profile_dirs take precedence (#1208) [#1208](https://github.com/openshift/cluster-node-tuning-operator/pull/1208)
* [OCPBUGS-42284](https://issues.redhat.com/browse/OCPBUGS-42284): Add cluster-wide proxy env file (#1171) [#1171](https://github.com/openshift/cluster-node-tuning-operator/pull/1171)
* TuneD prior to kubelet in one-shot mode (#1125) [#1125](https://github.com/openshift/cluster-node-tuning-operator/pull/1125)
* set required-scc for openshift workloads (#1117) [#1117](https://github.com/openshift/cluster-node-tuning-operator/pull/1117)
* [OCPBUGS-36870](https://issues.redhat.com/browse/OCPBUGS-36870): Remove tuned/rendered object (#1110) [#1110](https://github.com/openshift/cluster-node-tuning-operator/pull/1110)
* [OCPBUGS-36355](https://issues.redhat.com/browse/OCPBUGS-36355): Backport fix for OCPBUGS-30647 (#1095) [#1095](https://github.com/openshift/cluster-node-tuning-operator/pull/1095)
* [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1066) [#1066](https://github.com/openshift/cluster-node-tuning-operator/pull/1066)
* Add a '.snyk' to silence static code analysis warnings (#1001) [#1001](https://github.com/openshift/cluster-node-tuning-operator/pull/1001)
* fix extra-reboot on upgrade with paused mcp worker (#1049) [#1049](https://github.com/openshift/cluster-node-tuning-operator/pull/1049)
* fix rendering extra ctrcfgs (#975) [#975](https://github.com/openshift/cluster-node-tuning-operator/pull/975)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) (#1043) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* Reduce number of reboots in offline tests (#1014) [#1014](https://github.com/openshift/cluster-node-tuning-operator/pull/1014)
* Systemd processes not being moved to cpuset/systemd.slice fix (#1016) [#1016](https://github.com/openshift/cluster-node-tuning-operator/pull/1016)
* Scheduler plugin: ignore IRQs (#983) [#983](https://github.com/openshift/cluster-node-tuning-operator/pull/983)
* e2e: when crun is enabled by default skip checking runc config (#1013) [#1013](https://github.com/openshift/cluster-node-tuning-operator/pull/1013)
* [OCPBUGS-30507](https://issues.redhat.com/browse/OCPBUGS-30507): Add performance real time tuned template (#984) [#984](https://github.com/openshift/cluster-node-tuning-operator/pull/984)
* Report duplicate priority only for multiple matching profiles (#965) [#965](https://github.com/openshift/cluster-node-tuning-operator/pull/965)
* hack: fix backport of render-sync.sh (#996) [#996](https://github.com/openshift/cluster-node-tuning-operator/pull/996)
* [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963)
* Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959)
* Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952)
* [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953)
* [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942)
* makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941)
* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897)
* [OCPBUGS-25596](https://issues.redhat.com/browse/OCPBUGS-25596): Make MC names deterministic (#888) [#888](https://github.com/openshift/cluster-node-tuning-operator/pull/888)
* [OCPBUGS-25552](https://issues.redhat.com/browse/OCPBUGS-25552): rps: fix mask update for SR-IOV devices (#886) [#886](https://github.com/openshift/cluster-node-tuning-operator/pull/886)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#869) [#869](https://github.com/openshift/cluster-node-tuning-operator/pull/869)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b3752a6261e7d7a53f49d535a239aed4041ebbe4...e828bd93defc0cc9c3fcf799d9715b95b2c03f79)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0a6713150279776bada78c64717c2a8af0dce16b)
* [OCPBUGS-86345](https://issues.redhat.com/browse/OCPBUGS-86345): Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 [#208](https://github.com/openshift/cluster-olm-operator/pull/208)
* [OCPBUGS-25399](https://issues.redhat.com/browse/OCPBUGS-25399): [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#40](https://github.com/openshift/cluster-olm-operator/pull/40)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/822ed169b2ecce43e75ad649467712d13c3a32ba...0a6713150279776bada78c64717c2a8af0dce16b)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/031c048d17690cf5601addfe7de3eb6b067fabbd)
* [OCPBUGS-67946](https://issues.redhat.com/browse/OCPBUGS-67946): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] [#655](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/655)
* [OCPBUGS-36150](https://issues.redhat.com/browse/OCPBUGS-36150): Set required-scc for openshift workloads [#581](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/581)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#567](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/567)
* [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/2497afd389d884f90d3b1950f81f2d2b4116fa3d...031c048d17690cf5601addfe7de3eb6b067fabbd)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1ae0ba75cfdb910990437ab2898690b9e3f8f94a)
* [OCPBUGS-48832](https://issues.redhat.com/browse/OCPBUGS-48832): Add new team members to the OWNERS file [#379](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/379)
* [OCPBUGS-35922](https://issues.redhat.com/browse/OCPBUGS-35922): lots of churn during image registry managed/removed transition [#358](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/358)
* [OCPBUGS-35869](https://issues.redhat.com/browse/OCPBUGS-35869): nil pointer reference in ocm-operator [#357](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/357)
* [OCPBUGS-36152](https://issues.redhat.com/browse/OCPBUGS-36152): Set required-scc for openshift workloads [#361](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/361)
* [OCPBUGS-31708](https://issues.redhat.com/browse/OCPBUGS-31708): Update opentelemetry dependency 415 [#342](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/342)
* [OCPBUGS-25985](https://issues.redhat.com/browse/OCPBUGS-25985): Disable deployer-controller when deploymentconfig is disabled [#322](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/322)
* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319)
* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2ed3cf9965f8e6832cffde84f3de2fe210b79b49...1ae0ba75cfdb910990437ab2898690b9e3f8f94a)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)
* [OCPBUGS-63517](https://issues.redhat.com/browse/OCPBUGS-63517): references to github.com/sclorg/django-ex.git now also refer to the branch [#660](https://github.com/openshift/cluster-samples-operator/pull/660)
* [OCPBUGS-55475](https://issues.redhat.com/browse/OCPBUGS-55475): Adding mutex to func createSamples on handler.go [#634](https://github.com/openshift/cluster-samples-operator/pull/634)
* [OCPBUGS-54481](https://issues.redhat.com/browse/OCPBUGS-54481): add rhdmalone to owners [#623](https://github.com/openshift/cluster-samples-operator/pull/623)
* [OCPBUGS-49369](https://issues.redhat.com/browse/OCPBUGS-49369): add shannon and aroyoredhat as owners [#597](https://github.com/openshift/cluster-samples-operator/pull/597)
* [OCPBUGS-37464](https://issues.redhat.com/browse/OCPBUGS-37464): Set required-scc for openshift workloads [#548](https://github.com/openshift/cluster-samples-operator/pull/548)
* [OCPBUGS-38157](https://issues.redhat.com/browse/OCPBUGS-38157): add mfrancisc and metlos as owners add owners 4.15 [#550](https://github.com/openshift/cluster-samples-operator/pull/550)
* [OCPBUGS-22034](https://issues.redhat.com/browse/OCPBUGS-22034): bump K8s version to 29.2 [#538](https://github.com/openshift/cluster-samples-operator/pull/538)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator-container image to be consistent with ART [#523](https://github.com/openshift/cluster-samples-operator/pull/523)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/f9a02d5c843839ee2031995459d38e4bddc6a84a...a01ebb5009c7dd0f0adcd0647660797fb5f3aa74)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cc5d4c754f99044112c10cc19338c5c3370eaa59)
* [OCPBUGS-67955](https://issues.redhat.com/browse/OCPBUGS-67955): bump github.com/sirupsen/logrus to v1.9.3 [#654](https://github.com/openshift/cluster-storage-operator/pull/654)
* [OCPBUGS-36374](https://issues.redhat.com/browse/OCPBUGS-36374): Set required-scc for openshift workloads [#484](https://github.com/openshift/cluster-storage-operator/pull/484)
* [OCPBUGS-33466](https://issues.redhat.com/browse/OCPBUGS-33466): Fix problem-detector proxy setting [#471](https://github.com/openshift/cluster-storage-operator/pull/471)
* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461)
* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [OCPBUGS-27017](https://issues.redhat.com/browse/OCPBUGS-27017): replace instanceAdmin role with specific compute permissions [#439](https://github.com/openshift/cluster-storage-operator/pull/439)
* [OCPBUGS-25241](https://issues.redhat.com/browse/OCPBUGS-25241): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#433](https://github.com/openshift/cluster-storage-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/93a92be898d94f2cf3c2dc2308f597f110fdd0be...cc5d4c754f99044112c10cc19338c5c3370eaa59)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/802233d84243d3eeceef50a29579501e94ebbf26)
* [OCPBUGS-43626](https://issues.redhat.com/browse/OCPBUGS-43626): keys: Update Red Hat keys to use SHA256 signatures [#65](https://github.com/openshift/cluster-update-keys/pull/65)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e8478585cca88314094112aa5933e5281f4707ea...802233d84243d3eeceef50a29579501e94ebbf26)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)
* [OCPBUGS-50591](https://issues.redhat.com/browse/OCPBUGS-50591): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1152](https://github.com/openshift/cluster-version-operator/pull/1152)
* [OCPBUGS-45330](https://issues.redhat.com/browse/OCPBUGS-45330): deps: bump golang.org/x/net to 0.31.0 [#1119](https://github.com/openshift/cluster-version-operator/pull/1119)
* [OCPBUGS-44328](https://issues.redhat.com/browse/OCPBUGS-44328): Fix desired before sync_worker's work is initialized [#1104](https://github.com/openshift/cluster-version-operator/pull/1104)
* [OCPBUGS-36817](https://issues.redhat.com/browse/OCPBUGS-36817): Set required-scc for openshift workloads [#1068](https://github.com/openshift/cluster-version-operator/pull/1068)
* [OCPBUGS-33984](https://issues.redhat.com/browse/OCPBUGS-33984): Add admin-gate for OCP 4.16 [#1049](https://github.com/openshift/cluster-version-operator/pull/1049)
* [OCPBUGS-27359](https://issues.redhat.com/browse/OCPBUGS-27359): CO health: only track current in-progress upgrade start [#1023](https://github.com/openshift/cluster-version-operator/pull/1023)
* [OCPBUGS-26607](https://issues.redhat.com/browse/OCPBUGS-26607): clusterOperatorBuilder: Reconcile metadata on COs [#1017](https://github.com/openshift/cluster-version-operator/pull/1017)
* [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013)
* [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007)
* [OCPBUGS-25690](https://issues.redhat.com/browse/OCPBUGS-25690): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1008](https://github.com/openshift/cluster-version-operator/pull/1008)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/be820285dcf7b0ca4a712192ccb47fd0c843ea02...2cb8ce9ef5c3311be9f1ea266356f1ce95bec1d1)
### [console](https://github.com/openshift/console/tree/c791f422189c2eb9ba92dd74870dd392cf305460)
* NO-JIRA: enable multi-architecture yarn builds [#16425](https://github.com/openshift/console/pull/16425)
* [OCPBUGS-83298](https://issues.redhat.com/browse/OCPBUGS-83298): [release-4.15] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation [#16302](https://github.com/openshift/console/pull/16302)
* [OCPBUGS-76575](https://issues.redhat.com/browse/OCPBUGS-76575): Bump axios [#16033](https://github.com/openshift/console/pull/16033)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16081](https://github.com/openshift/console/pull/16081)
* NO-JIRA: Bump builder image to v29 [#15992](https://github.com/openshift/console/pull/15992)
* [OCPBUGS-74443](https://issues.redhat.com/browse/OCPBUGS-74443): Bump lodash to latest [#15970](https://github.com/openshift/console/pull/15970)
* [OCPBUGS-69767](https://issues.redhat.com/browse/OCPBUGS-69767): Disallowed Pipelines-plugin Pipelines navigation section [#15864](https://github.com/openshift/console/pull/15864)
* [OCPBUGS-65822](https://issues.redhat.com/browse/OCPBUGS-65822): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15749](https://github.com/openshift/console/pull/15749)
* [OCPBUGS-65601](https://issues.redhat.com/browse/OCPBUGS-65601): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15727](https://github.com/openshift/console/pull/15727)
* [OCPBUGS-44159](https://issues.redhat.com/browse/OCPBUGS-44159): bump dompurify to latest [#15592](https://github.com/openshift/console/pull/15592)
* [OCPBUGS-60672](https://issues.redhat.com/browse/OCPBUGS-60672): Secret key with binary file changes when edited via Console [#15422](https://github.com/openshift/console/pull/15422)
* [OCPBUGS-59997](https://issues.redhat.com/browse/OCPBUGS-59997): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15359](https://github.com/openshift/console/pull/15359)
* [OCPBUGS-59564](https://issues.redhat.com/browse/OCPBUGS-59564): Add flags in console static plugin for all the components of this epic [#15306](https://github.com/openshift/console/pull/15306)
* [OCPBUGS-60029](https://issues.redhat.com/browse/OCPBUGS-60029): fix bug where / in console.tab/horizontalNav href brea… [#15353](https://github.com/openshift/console/pull/15353)
* [OCPBUGS-57521](https://issues.redhat.com/browse/OCPBUGS-57521): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15181](https://github.com/openshift/console/pull/15181)
* [OCPBUGS-58223](https://issues.redhat.com/browse/OCPBUGS-58223): Fix TypeError Cannot read properties of null (reading 'metadata') [#15221](https://github.com/openshift/console/pull/15221)
* [OCPBUGS-57097](https://issues.redhat.com/browse/OCPBUGS-57097): Add all files to `vendor` regardless of gitignore [#15134](https://github.com/openshift/console/pull/15134)
* [OCPBUGS-45257](https://issues.redhat.com/browse/OCPBUGS-45257): Enabling topology e2e tests on CI [#14721](https://github.com/openshift/console/pull/14721)
* [OCPBUGS-55733](https://issues.redhat.com/browse/OCPBUGS-55733): fix bug where operator appears twice [#15021](https://github.com/openshift/console/pull/15021)
* [OCPBUGS-55174](https://issues.redhat.com/browse/OCPBUGS-55174): Add missing pipelines plugin name to known plugins [#14982](https://github.com/openshift/console/pull/14982)
* [OCPBUGS-54673](https://issues.redhat.com/browse/OCPBUGS-54673): Added token to proxy header [#14943](https://github.com/openshift/console/pull/14943)
* [OCPBUGS-54252](https://issues.redhat.com/browse/OCPBUGS-54252): Update the monitoring topic used by the console team [#14904](https://github.com/openshift/console/pull/14904)
* [OCPBUGS-53138](https://issues.redhat.com/browse/OCPBUGS-53138): fix run time error when no completed version exists [#14879](https://github.com/openshift/console/pull/14879)
* [OCPBUGS-53055](https://issues.redhat.com/browse/OCPBUGS-53055): Show Observe section without PROMETHEUS and MONITORING flags [#14867](https://github.com/openshift/console/pull/14867)
* [OCPBUGS-52344](https://issues.redhat.com/browse/OCPBUGS-52344): fix alert rule link [#14828](https://github.com/openshift/console/pull/14828)
* [OCPBUGS-51332](https://issues.redhat.com/browse/OCPBUGS-51332): Do not pass CSV name to operand list page when an exen… [#14800](https://github.com/openshift/console/pull/14800)
* [OCPBUGS-49849](https://issues.redhat.com/browse/OCPBUGS-49849): include external labels so silenced alerts not displayed in notifications [#14718](https://github.com/openshift/console/pull/14718)
* [OCPBUGS-48593](https://issues.redhat.com/browse/OCPBUGS-48593): ReRun of Resolver based PipelineRuns fails from UI [#14689](https://github.com/openshift/console/pull/14689)
* [OCPBUGS-48592](https://issues.redhat.com/browse/OCPBUGS-48592): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14688](https://github.com/openshift/console/pull/14688)
* [OCPBUGS-48048](https://issues.redhat.com/browse/OCPBUGS-48048): Update vendor imports to include all PatternFly components [#14662](https://github.com/openshift/console/pull/14662)
* [OCPBUGS-47646](https://issues.redhat.com/browse/OCPBUGS-47646): fix table combination [#14649](https://github.com/openshift/console/pull/14649)
* [OCPBUGS-46430](https://issues.redhat.com/browse/OCPBUGS-46430): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14626](https://github.com/openshift/console/pull/14626)
* [OCPBUGS-45950](https://issues.redhat.com/browse/OCPBUGS-45950): Unable to remove finally tasks in pipeline builder mode [#14606](https://github.com/openshift/console/pull/14606)
* [OCPBUGS-46389](https://issues.redhat.com/browse/OCPBUGS-46389): use TaskRuns results.tekton.dev/record annotation to get the logs [#14622](https://github.com/openshift/console/pull/14622)
* [OCPBUGS-45248](https://issues.redhat.com/browse/OCPBUGS-45248): Remove ClusterTask dependency in console from Pipelines 1.17 [#14564](https://github.com/openshift/console/pull/14564)
* [OCPBUGS-44979](https://issues.redhat.com/browse/OCPBUGS-44979): Don't request user settings configmap if no user has been loaded. [#14534](https://github.com/openshift/console/pull/14534)
* [OCPBUGS-37397](https://issues.redhat.com/browse/OCPBUGS-37397): RWOP accessMode is not available on OpenShift console UI [#14078](https://github.com/openshift/console/pull/14078)
* [OCPBUGS-44998](https://issues.redhat.com/browse/OCPBUGS-44998): Add IBM Block Storage CSI driver support for RWX [#14536](https://github.com/openshift/console/pull/14536)
* [OCPBUGS-44738](https://issues.redhat.com/browse/OCPBUGS-44738): Add flag to hide the pipelines-plugin pipeline builder extensions [#14513](https://github.com/openshift/console/pull/14513)
* [OCPBUGS-44355](https://issues.redhat.com/browse/OCPBUGS-44355): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14476](https://github.com/openshift/console/pull/14476)
* [OCPBUGS-42355](https://issues.redhat.com/browse/OCPBUGS-42355): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14319](https://github.com/openshift/console/pull/14319)
* [OCPBUGS-43414](https://issues.redhat.com/browse/OCPBUGS-43414): Console crashes when ssh is selected in add secret for starting a pipeline run [#14401](https://github.com/openshift/console/pull/14401)
* [OCPBUGS-36559](https://issues.redhat.com/browse/OCPBUGS-36559): Increase login flow state paramater length/entropy [#14422](https://github.com/openshift/console/pull/14422)
* [OCPBUGS-37202](https://issues.redhat.com/browse/OCPBUGS-37202): Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 [#14073](https://github.com/openshift/console/pull/14073)
* [OCPBUGS-42470](https://issues.redhat.com/browse/OCPBUGS-42470): List of default Camel K event sources disappears when adding a custom event source [#14331](https://github.com/openshift/console/pull/14331)
* [OCPBUGS-42471](https://issues.redhat.com/browse/OCPBUGS-42471): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14332](https://github.com/openshift/console/pull/14332)
* [OCPBUGS-33283](https://issues.redhat.com/browse/OCPBUGS-33283): Adjust NAD name to "network-xxx-xxx" when creating [#14020](https://github.com/openshift/console/pull/14020)
* [OCPBUGS-42611](https://issues.redhat.com/browse/OCPBUGS-42611): Topology screen crashes when completed pod is selected [#14353](https://github.com/openshift/console/pull/14353)
* [OCPBUGS-42648](https://issues.redhat.com/browse/OCPBUGS-42648): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14358](https://github.com/openshift/console/pull/14358)
* [OCPBUGS-38764](https://issues.redhat.com/browse/OCPBUGS-38764): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14177](https://github.com/openshift/console/pull/14177)
* [OCPBUGS-41991](https://issues.redhat.com/browse/OCPBUGS-41991): Values entered into the Instantiate Template form are automatically cleared [#14294](https://github.com/openshift/console/pull/14294)
* [OCPBUGS-42384](https://issues.redhat.com/browse/OCPBUGS-42384): Fix updating the "Until" field on the Silence > Edit page [#14322](https://github.com/openshift/console/pull/14322)
* [OCPBUGS-39343](https://issues.redhat.com/browse/OCPBUGS-39343): The filepath including leading slash makes error during parsing devfile using Gitlab [#14227](https://github.com/openshift/console/pull/14227)
* [OCPBUGS-42144](https://issues.redhat.com/browse/OCPBUGS-42144): Use vCenterCluster value from CM as primary resource [#14307](https://github.com/openshift/console/pull/14307)
* [OCPBUGS-38537](https://issues.redhat.com/browse/OCPBUGS-38537): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14158](https://github.com/openshift/console/pull/14158)
* [OCPBUGS-38108](https://issues.redhat.com/browse/OCPBUGS-38108): Revert - terminal: use username if uid is not present [#14114](https://github.com/openshift/console/pull/14114)
* [OCPBUGS-32793](https://issues.redhat.com/browse/OCPBUGS-32793): Fix that telemetry events didn't incl. an userId anymore [#13792](https://github.com/openshift/console/pull/13792)
* [OCPBUGS-38970](https://issues.redhat.com/browse/OCPBUGS-38970): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14195](https://github.com/openshift/console/pull/14195)
* [OCPBUGS-38969](https://issues.redhat.com/browse/OCPBUGS-38969): Tooltip on Pipeline when expression is not shows [#14194](https://github.com/openshift/console/pull/14194)
* [OCPBUGS-39085](https://issues.redhat.com/browse/OCPBUGS-39085): Fix utilization card limits/total display [#14209](https://github.com/openshift/console/pull/14209)
* [OCPBUGS-33938](https://issues.redhat.com/browse/OCPBUGS-33938): Add validation for vSphere fields Handle submit errors correctly [#14210](https://github.com/openshift/console/pull/14210)
* [OCPBUGS-39112](https://issues.redhat.com/browse/OCPBUGS-39112): Disable Knative e2e tests [#14197](https://github.com/openshift/console/pull/14197)
* [OCPBUGS-33076](https://issues.redhat.com/browse/OCPBUGS-33076): Remove deprecated resources from spec of the Pipeline [#13801](https://github.com/openshift/console/pull/13801)
* [OCPBUGS-35495](https://issues.redhat.com/browse/OCPBUGS-35495): fix crash if helm chart metadata is nil [#13977](https://github.com/openshift/console/pull/13977)
* [OCPBUGS-37452](https://issues.redhat.com/browse/OCPBUGS-37452): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14083](https://github.com/openshift/console/pull/14083)
* [OCPBUGS-38496](https://issues.redhat.com/browse/OCPBUGS-38496): Fix password set to Secret created through Start Pipeline form [#14152](https://github.com/openshift/console/pull/14152)
* [OCPBUGS-37399](https://issues.redhat.com/browse/OCPBUGS-37399): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#14079](https://github.com/openshift/console/pull/14079)
* [OCPBUGS-37099](https://issues.redhat.com/browse/OCPBUGS-37099): fix BMH restart annotation [#14071](https://github.com/openshift/console/pull/14071)
* [OCPBUGS-37458](https://issues.redhat.com/browse/OCPBUGS-37458): one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource [#14085](https://github.com/openshift/console/pull/14085)
* [OCPBUGS-34477](https://issues.redhat.com/browse/OCPBUGS-34477): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13897](https://github.com/openshift/console/pull/13897)
* [OCPBUGS-36971](https://issues.redhat.com/browse/OCPBUGS-36971): ensure correct API version for OperandDetails [#14058](https://github.com/openshift/console/pull/14058)
* [OCPBUGS-34912](https://issues.redhat.com/browse/OCPBUGS-34912): Improve Pipeline list page performance [#13929](https://github.com/openshift/console/pull/13929)
* [OCPBUGS-33642](https://issues.redhat.com/browse/OCPBUGS-33642): Patch PF dynamic module parser to exclude 'next' modules [#13849](https://github.com/openshift/console/pull/13849)
* [OCPBUGS-32501](https://issues.redhat.com/browse/OCPBUGS-32501): Pipeline details page Metrics tab crashed due to no custom data [#13781](https://github.com/openshift/console/pull/13781)
* [OCPBUGS-34478](https://issues.redhat.com/browse/OCPBUGS-34478): UI inconsistency in topology when application grouping is collapsed [#13898](https://github.com/openshift/console/pull/13898)
* [OCPBUGS-34350](https://issues.redhat.com/browse/OCPBUGS-34350): Create Serverless form does not create BuildConfig [#13891](https://github.com/openshift/console/pull/13891)
* [OCPBUGS-32029](https://issues.redhat.com/browse/OCPBUGS-32029): Use UserInfo username field when logging out as kubeadmin [#13748](https://github.com/openshift/console/pull/13748)
* [OCPBUGS-30208](https://issues.redhat.com/browse/OCPBUGS-30208): Fix asynccache bugs [#13807](https://github.com/openshift/console/pull/13807)
* [OCPBUGS-33838](https://issues.redhat.com/browse/OCPBUGS-33838): TaskRuns should not be fetched for Failed PLR's [#13863](https://github.com/openshift/console/pull/13863)
* [OCPBUGS-34703](https://issues.redhat.com/browse/OCPBUGS-34703): fix bug where textarea is not resizable [#13913](https://github.com/openshift/console/pull/13913)
* Revert "OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters" [#13905](https://github.com/openshift/console/pull/13905)
* [OCPBUGS-33263](https://issues.redhat.com/browse/OCPBUGS-33263): Pipeline list page is crashed when navigating from Search page [#13819](https://github.com/openshift/console/pull/13819)
* [OCPBUGS-33166](https://issues.redhat.com/browse/OCPBUGS-33166): Fix NAD always on default namespace [#13865](https://github.com/openshift/console/pull/13865)
* [OCPBUGS-31863](https://issues.redhat.com/browse/OCPBUGS-31863): make sure folder is encapsulated with quotas [#13737](https://github.com/openshift/console/pull/13737)
* [OCPBUGS-33506](https://issues.redhat.com/browse/OCPBUGS-33506): Fix Pipeline details page with when expression using CEL expression [#13835](https://github.com/openshift/console/pull/13835)
* [OCPBUGS-32505](https://issues.redhat.com/browse/OCPBUGS-32505): Add visual connector between VMs and non VMs workloads [#13782](https://github.com/openshift/console/pull/13782)
* [OCPBUGS-33548](https://issues.redhat.com/browse/OCPBUGS-33548): restrict Masthead logo to max-height [#13839](https://github.com/openshift/console/pull/13839)
* [OCPBUGS-32497](https://issues.redhat.com/browse/OCPBUGS-32497): Improve Create serverless function error message [#13778](https://github.com/openshift/console/pull/13778)
* [OCPBUGS-33191](https://issues.redhat.com/browse/OCPBUGS-33191): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13810](https://github.com/openshift/console/pull/13810)
* [OCPBUGS-33058](https://issues.redhat.com/browse/OCPBUGS-33058): fix issues with Edit Route form [#13800](https://github.com/openshift/console/pull/13800)
* [OCPBUGS-32187](https://issues.redhat.com/browse/OCPBUGS-32187): Add flag to hide Output tab contributed by pipelines-plugin [#13756](https://github.com/openshift/console/pull/13756)
* [OCPBUGS-32716](https://issues.redhat.com/browse/OCPBUGS-32716): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13788](https://github.com/openshift/console/pull/13788)
* [OCPBUGS-32506](https://issues.redhat.com/browse/OCPBUGS-32506): setting correct image trigger annotation [#13783](https://github.com/openshift/console/pull/13783)
* [OCPBUGS-32933](https://issues.redhat.com/browse/OCPBUGS-32933): change OperatorHub filter FIPS Mode to Designed for FIPS [#13796](https://github.com/openshift/console/pull/13796)
* [OCPBUGS-31799](https://issues.redhat.com/browse/OCPBUGS-31799): Improve PipelineRun list view performance [#13731](https://github.com/openshift/console/pull/13731)
* [OCPBUGS-32796](https://issues.redhat.com/browse/OCPBUGS-32796): auth: fix OIDC logging out [#13793](https://github.com/openshift/console/pull/13793)
* [OCPBUGS-31445](https://issues.redhat.com/browse/OCPBUGS-31445): Upgrade Pipeline trigger resources to v1beta1 [#13704](https://github.com/openshift/console/pull/13704)
* [OCPBUGS-31045](https://issues.redhat.com/browse/OCPBUGS-31045): fix for execute inline markdown syntax issue [#13681](https://github.com/openshift/console/pull/13681)
* [OCPBUGS-32518](https://issues.redhat.com/browse/OCPBUGS-32518): Add warning about service binding operator will not be supported from 4.15 [#13784](https://github.com/openshift/console/pull/13784)
* [OCPBUGS-32391](https://issues.redhat.com/browse/OCPBUGS-32391): Routes created by devfiles do not always use HTTPS [#13771](https://github.com/openshift/console/pull/13771)
* [OCPBUGS-32340](https://issues.redhat.com/browse/OCPBUGS-32340): Increased max nodes limit to 200 in topology page [#13767](https://github.com/openshift/console/pull/13767)
* [OCPBUGS-32399](https://issues.redhat.com/browse/OCPBUGS-32399): Update devfile library to v2.2.2 [#13762](https://github.com/openshift/console/pull/13762)
* [OCPBUGS-32156](https://issues.redhat.com/browse/OCPBUGS-32156): TaskRun status is not displayed near the name [#13752](https://github.com/openshift/console/pull/13752)
* [OCPBUGS-31806](https://issues.redhat.com/browse/OCPBUGS-31806): Use bearer-token for local dev with auth [#13732](https://github.com/openshift/console/pull/13732)
* [OCPBUGS-31839](https://issues.redhat.com/browse/OCPBUGS-31839): fix bug where paused MCPs were incorrectly unpausing w… [#13735](https://github.com/openshift/console/pull/13735)
* [OCPBUGS-31105](https://issues.redhat.com/browse/OCPBUGS-31105): Update to pf5.2 to fix quick starts [#13686](https://github.com/openshift/console/pull/13686)
* [OCPBUGS-31476](https://issues.redhat.com/browse/OCPBUGS-31476): Requesting for country codes in localization of openshift - webconsole [#13707](https://github.com/openshift/console/pull/13707)
* [OCPBUGS-31046](https://issues.redhat.com/browse/OCPBUGS-31046): Application creation fail when manually entering input scaling value in local setup [#13682](https://github.com/openshift/console/pull/13682)
* [OCPBUGS-30916](https://issues.redhat.com/browse/OCPBUGS-30916), [OCPBUGS-30917](https://issues.redhat.com/browse/OCPBUGS-30917): PipelineRuns in Console show wrong status or load indefinitely [#13672](https://github.com/openshift/console/pull/13672)
* [OCPBUGS-30869](https://issues.redhat.com/browse/OCPBUGS-30869): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13668](https://github.com/openshift/console/pull/13668)
* [OCPBUGS-31107](https://issues.redhat.com/browse/OCPBUGS-31107): Upload Jar form's Clear button is not functioning [#13688](https://github.com/openshift/console/pull/13688)
* [OCPBUGS-30759](https://issues.redhat.com/browse/OCPBUGS-30759): Fix bugs in Console dynamic plugin SDK webpack code [#13678](https://github.com/openshift/console/pull/13678)
* [OCPBUGS-30871](https://issues.redhat.com/browse/OCPBUGS-30871): fix Configure link in AlertmanagerReceiversNotConfigur… [#13669](https://github.com/openshift/console/pull/13669)
* [OCPBUGS-29963](https://issues.redhat.com/browse/OCPBUGS-29963): i18n upload/download routine task - chore(i18n): update translations [#13670](https://github.com/openshift/console/pull/13670)
* [OCPBUGS-30801](https://issues.redhat.com/browse/OCPBUGS-30801): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13663](https://github.com/openshift/console/pull/13663)
* [OCPBUGS-30275](https://issues.redhat.com/browse/OCPBUGS-30275): adjusting documentation links for 4.15 [#13648](https://github.com/openshift/console/pull/13648)
* [OCPBUGS-30870](https://issues.redhat.com/browse/OCPBUGS-30870): chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13641](https://github.com/openshift/console/pull/13641)
* [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467)
* [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582)
* [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633)
* [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638)
* [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627)
* [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570)
* [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526)
* [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490)
* [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475)
* [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629)
* [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631)
* [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630)
* [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628)
* [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618)
* [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615)
* [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545)
* chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594)
* [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498)
* [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636)
* [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599)
* [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584)
* [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590)
* [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486)
* [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548)
* [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595)
* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [OCPBUGS-26439](https://issues.redhat.com/browse/OCPBUGS-26439): Add support for custom segment domains (to load JS and make API calls) [#13489](https://github.com/openshift/console/pull/13489)
* [OCPBUGS-27177](https://issues.redhat.com/browse/OCPBUGS-27177): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13508](https://github.com/openshift/console/pull/13508)
* [OCPBUGS-27306](https://issues.redhat.com/browse/OCPBUGS-27306): Copy response code from proxied plugin requests [#13518](https://github.com/openshift/console/pull/13518)
* [OCPBUGS-26591](https://issues.redhat.com/browse/OCPBUGS-26591): add additional check to determine if file is binary [#13499](https://github.com/openshift/console/pull/13499)
* [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433)
* [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465)
* [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479)
* [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484)
* [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463)
* [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461)
* [OCPBUGS-25707](https://issues.redhat.com/browse/OCPBUGS-25707): fix Observe tab in Topology overview [#13462](https://github.com/openshift/console/pull/13462)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13447](https://github.com/openshift/console/pull/13447)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Only show VPAs that are associated with the selected namespace [#13426](https://github.com/openshift/console/pull/13426)
* [OCPBUGS-25324](https://issues.redhat.com/browse/OCPBUGS-25324): fix preferredTab selection on Pipelines page [#13443](https://github.com/openshift/console/pull/13443)
* [OCPBUGS-24680](https://issues.redhat.com/browse/OCPBUGS-24680): Backport Add support for Azure Workload Identity / Federated Identity [#13428](https://github.com/openshift/console/pull/13428)
* [OCPBUGS-25140](https://issues.redhat.com/browse/OCPBUGS-25140): fix runtime error on Node details Overview when Machin… [#13435](https://github.com/openshift/console/pull/13435)
* [OCPBUGS-24678](https://issues.redhat.com/browse/OCPBUGS-24678): Strip 'Server' header from proxy response [#13427](https://github.com/openshift/console/pull/13427)
* [OCPBUGS-25210](https://issues.redhat.com/browse/OCPBUGS-25210), [OCPBUGS-25211](https://issues.redhat.com/browse/OCPBUGS-25211): Fix pipelineRuns loading on repository details page [#13439](https://github.com/openshift/console/pull/13439)
* [Full changelog](https://github.com/openshift/console/compare/074380bc50d40371d721bc44e5fd444f6fce3de7...c791f422189c2eb9ba92dd74870dd392cf305460)
### [console-operator](https://github.com/openshift/console-operator/tree/62e16389f77d5f4b9dfab6a9e902f69bfce2ae0d)
* [OCPBUGS-77993](https://issues.redhat.com/browse/OCPBUGS-77993): [release-4.15] hermetic 4.15 [#1130](https://github.com/openshift/console-operator/pull/1130)
* [OCPBUGS-77993](https://issues.redhat.com/browse/OCPBUGS-77993): [release-4.15] NO-JIRA: update go mod dependency for konflux [#1116](https://github.com/openshift/console-operator/pull/1116)
* [OCPBUGS-46482](https://issues.redhat.com/browse/OCPBUGS-46482): Dont disable console when authConfig type is set to None [#953](https://github.com/openshift/console-operator/pull/953)
* [OCPBUGS-37408](https://issues.redhat.com/browse/OCPBUGS-37408): set required-scc for openshift workloads [#924](https://github.com/openshift/console-operator/pull/924)
* [OCPBUGS-31520](https://issues.redhat.com/browse/OCPBUGS-31520): oidc: synchronize the CM with a CA to trust the issuer, if configured [#881](https://github.com/openshift/console-operator/pull/881)
* [OCPBUGS-33720](https://issues.redhat.com/browse/OCPBUGS-33720): Add missing return statement to fix crash in healthcheck controller [#903](https://github.com/openshift/console-operator/pull/903)
* [OCPBUGS-31499](https://issues.redhat.com/browse/OCPBUGS-31499): Update RHDH QuickStarts and add CR examples [#880](https://github.com/openshift/console-operator/pull/880)
* [OCPBUGS-31619](https://issues.redhat.com/browse/OCPBUGS-31619): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#882](https://github.com/openshift/console-operator/pull/882)
* [OCPBUGS-29332](https://issues.redhat.com/browse/OCPBUGS-29332): Remove Janus IDP and update RHDH quickstarts [#863](https://github.com/openshift/console-operator/pull/863)
* [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835)
* [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870)
* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [OCPBUGS-27221](https://issues.redhat.com/browse/OCPBUGS-27221): Bump library-go to deal with GET conflict [#837](https://github.com/openshift/console-operator/pull/837)
* [OCPBUGS-24104](https://issues.redhat.com/browse/OCPBUGS-24104): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#818](https://github.com/openshift/console-operator/pull/818)
* [Full changelog](https://github.com/openshift/console-operator/compare/52a864c8aee7cbf431304b24d16e9d86f8a584f6...62e16389f77d5f4b9dfab6a9e902f69bfce2ae0d)
### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)
* [OCPBUGS-55948](https://issues.redhat.com/browse/OCPBUGS-55948): Check error returned by ipv6 SettleAddresses [#190](https://github.com/openshift/containernetworking-plugins/pull/190)
* [OCPBUGS-37732](https://issues.redhat.com/browse/OCPBUGS-37732): Update owners [#167](https://github.com/openshift/containernetworking-plugins/pull/167)
* [OCPBUGS-30045](https://issues.redhat.com/browse/OCPBUGS-30045): [4.15] cherry-pick containernetworking/plugins#997 [#155](https://github.com/openshift/containernetworking-plugins/pull/155)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b37e7f891eeff87fe5ae0a3ce8f7897933f525cb...bf16e4c1c49319efaa94ccb0ac16dfcdb29dcac6)
### [coredns](https://github.com/openshift/coredns/tree/d3a19e6731ea414a520cfad85c11634f4824c895)
* [OCPBUGS-77512](https://issues.redhat.com/browse/OCPBUGS-77512): Modify .gitignore to not exclude vendor build folders [#169](https://github.com/openshift/coredns/pull/169)
* [OCPBUGS-37158](https://issues.redhat.com/browse/OCPBUGS-37158): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#125](https://github.com/openshift/coredns/pull/125)
* [OCPBUGS-27904](https://issues.redhat.com/browse/OCPBUGS-27904): UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 [#110](https://github.com/openshift/coredns/pull/110)
* [OCPBUGS-24133](https://issues.redhat.com/browse/OCPBUGS-24133): Updating coredns-container image to be consistent with ART [#106](https://github.com/openshift/coredns/pull/106)
* [Full changelog](https://github.com/openshift/coredns/compare/6704e15689cbc58c40c2747d04a39a1d55104fef...d3a19e6731ea414a520cfad85c11634f4824c895)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3cd808550d2eb2749e331be522fe88fb16ba2a6a)
* [OCPBUGS-67958](https://issues.redhat.com/browse/OCPBUGS-67958): fix CVE-2025-65637 [#362](https://github.com/openshift/cloud-provider-openstack/pull/362)
* [OCPBUGS-58885](https://issues.redhat.com/browse/OCPBUGS-58885): CARRY: don't ignore json files [#342](https://github.com/openshift/cloud-provider-openstack/pull/342)
* [OCPBUGS-43375](https://issues.redhat.com/browse/OCPBUGS-43375): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 [#297](https://github.com/openshift/cloud-provider-openstack/pull/297)
* [OCPBUGS-38170](https://issues.redhat.com/browse/OCPBUGS-38170): rebase CPO on 4.15 [#274](https://github.com/openshift/cloud-provider-openstack/pull/274)
* [OCPBUGS-32246](https://issues.redhat.com/browse/OCPBUGS-32246): Remove enforcement of IPv6 LB as internal [#277](https://github.com/openshift/cloud-provider-openstack/pull/277)
* And 25 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/26240f1c3ce8a87b824a9c9371aba13338054d2d...3cd808550d2eb2749e331be522fe88fb16ba2a6a)
### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/0b072d27aceb3e2589c962530a02b2de450d5f08)
* [OCPBUGS-67959](https://issues.redhat.com/browse/OCPBUGS-67959): Bump logrus [#252](https://github.com/openshift/csi-driver-manila-operator/pull/252)
* [OCPBUGS-38023](https://issues.redhat.com/browse/OCPBUGS-38023): Set required-scc for openshift workloads [#236](https://github.com/openshift/csi-driver-manila-operator/pull/236)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#221](https://github.com/openshift/csi-driver-manila-operator/pull/221)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#216](https://github.com/openshift/csi-driver-manila-operator/pull/216)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/c25d1ff2677a882504b18220dcbbe153781f3883...0b072d27aceb3e2589c962530a02b2de450d5f08)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/f55d6f0de700a7d30634a870d5cc5ccb0fc24f98)
* [OCPBUGS-84930](https://issues.redhat.com/browse/OCPBUGS-84930): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#183](https://github.com/openshift/csi-driver-nfs/pull/183)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1c714d2fa98555261d242f730b1a4f567fa53bf...f55d6f0de700a7d30634a870d5cc5ccb0fc24f98)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)
* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [OCPBUGS-26758](https://issues.redhat.com/browse/OCPBUGS-26758), [OCPBUGS-26759](https://issues.redhat.com/browse/OCPBUGS-26759): add snyk config file for SAST scan [#162](https://github.com/openshift/csi-driver-shared-resource/pull/162)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/bc125def6a15a71b2ef8c59e9c1284e471e7d905...260a085ae25606bba7a94cdfed88f67265905ba9)
### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)
* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [OCPBUGS-27035](https://issues.redhat.com/browse/OCPBUGS-27035): add snyk config file for SAST scan [#96](https://github.com/openshift/csi-driver-shared-resource-operator/pull/96)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7...8d017b7f19f0226dfd4fc7933271939c550d180f)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87)
* [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-25232](https://issues.redhat.com/browse/OCPBUGS-25232): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#82](https://github.com/openshift/csi-external-provisioner/pull/82)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/9e8af011e0a0aea96066821b57c42bdaccf24a42...ce5a1a33fadf10bba0c90510c09dfc879dcfec87)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/4f2955c7c90cd150f9dfae782148d0fa8eba7342)
* [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): add cmdline args to enable group snapshot webhooks [#147](https://github.com/openshift/csi-external-snapshotter/pull/147)
* [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143)
* [OCPBUGS-25521](https://issues.redhat.com/browse/OCPBUGS-25521): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#134](https://github.com/openshift/csi-external-snapshotter/pull/134)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/ee32ba01e1f89bac057611ad4580589652f250a3...4f2955c7c90cd150f9dfae782148d0fa8eba7342)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/9005584ee45c4d3158e383870aafa5d78a03b141)
* [OCPBUGS-25231](https://issues.redhat.com/browse/OCPBUGS-25231): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#60](https://github.com/openshift/csi-node-driver-registrar/pull/60)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/d1a2105b2bacd60f02495cbe571960caf41a1830...9005584ee45c4d3158e383870aafa5d78a03b141)
### [docker-builder](https://github.com/openshift/builder/tree/5c5fbe01beb8eb7a82fde14efff6385fed88e72a)
* [OCPBUGS-65960](https://issues.redhat.com/browse/OCPBUGS-65960): BuildConfig inline Dockerfile fails with heredoc syntax [#491](https://github.com/openshift/builder/pull/491)
* [OCPBUGS-58141](https://issues.redhat.com/browse/OCPBUGS-58141): S2I build cpu limits observed by assemble are limited to 1 cpu [#477](https://github.com/openshift/builder/pull/477)
* [OCPBUGS-42917](https://issues.redhat.com/browse/OCPBUGS-42917), [OCPBUGS-43294](https://issues.redhat.com/browse/OCPBUGS-43294): Bump buildah to 1.33.12 [#442](https://github.com/openshift/builder/pull/442)
* [OCPBUGS-43188](https://issues.redhat.com/browse/OCPBUGS-43188): runc library bump to 1.1.12 [#436](https://github.com/openshift/builder/pull/436)
* [OCPBUGS-48298](https://issues.redhat.com/browse/OCPBUGS-48298): skipping some unit tests to avoid failures as they are duplicate [#428](https://github.com/openshift/builder/pull/428)
* [OCPBUGS-48281](https://issues.redhat.com/browse/OCPBUGS-48281): Add team members to the OWNERS file [#427](https://github.com/openshift/builder/pull/427)
* [OCPBUGS-32845](https://issues.redhat.com/browse/OCPBUGS-32845): bump go-jose to fix CVE-2024-28180 [#396](https://github.com/openshift/builder/pull/396)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#381](https://github.com/openshift/builder/pull/381)
* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [Full changelog](https://github.com/openshift/builder/compare/b602ffcb9e84143cff71ce5591836ca876b6056e...5c5fbe01beb8eb7a82fde14efff6385fed88e72a)
### [docker-registry](https://github.com/openshift/image-registry/tree/89c03ea33937f22ce59a0b4faff51cff8c237176)
* [OCPBUGS-53650](https://issues.redhat.com/browse/OCPBUGS-53650): bump jwt and oauth dependencies [#433](https://github.com/openshift/image-registry/pull/433)
* [OCPBUGS-36287](https://issues.redhat.com/browse/OCPBUGS-36287): use SelfSubjectReview to obtain user info #406 [#406](https://github.com/openshift/image-registry/pull/406)
* [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): vendor: bump aws-sdk-go to support ca-west-1 [#396](https://github.com/openshift/image-registry/pull/396)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393)
* [Full changelog](https://github.com/openshift/image-registry/compare/072c544c1eaab6d0e43fc63ab6c12c18bf524afb...89c03ea33937f22ce59a0b4faff51cff8c237176)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/7a448c2ee026c772e293dd344da587493c859f82)
* Add support for 64k pages with ARM64 (#141) [#141](https://github.com/openshift/driver-toolkit/pull/141)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/1d5732f0209bb7d98661a53c66c5ac265272dce6...7a448c2ee026c772e293dd344da587493c859f82)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/f8ec690bc12a13ec7c9c45f0e3696ad02e143581)
* [OCPBUGS-35524](https://issues.redhat.com/browse/OCPBUGS-35524): update to go 1.20 and k8s.io mods to v0.28.3 [#86](https://github.com/openshift/egress-router-cni/pull/86)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/7089efe6100c1f52f28adccf1dccc722b8dcacdc...f8ec690bc12a13ec7c9c45f0e3696ad02e143581)
### [etcd](https://github.com/openshift/etcd/tree/a7005ef1eae85eec6c59411860538169cea182fd)
* [OCPBUGS-32768](https://issues.redhat.com/browse/OCPBUGS-32768): Revert "OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15" [#264](https://github.com/openshift/etcd/pull/264)
* [OCPBUGS-31644](https://issues.redhat.com/browse/OCPBUGS-31644): Rebase etcd 3.5.13 openshift 4.15 [#260](https://github.com/openshift/etcd/pull/260)
* [OCPBUGS-28731](https://issues.redhat.com/browse/OCPBUGS-28731): Rebase etcd 3.5.12 openshift 4.15 [#243](https://github.com/openshift/etcd/pull/243)
* [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232)
* [Full changelog](https://github.com/openshift/etcd/compare/e7911c0d19925c0a67328052a8580a80fb40cb5b...a7005ef1eae85eec6c59411860538169cea182fd)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/fc50272ac32348a96455688c470bf256b1042825)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update gcr-credential-provider.spec [#60](https://github.com/openshift/cloud-provider-gcp/pull/60)
* [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds auth-provider-gcp .spec file and build script [#59](https://github.com/openshift/cloud-provider-gcp/pull/59)
* [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56)
* [OCPBUGS-25808](https://issues.redhat.com/browse/OCPBUGS-25808): Add Snyk file to exclude vendor directory on scan [#55](https://github.com/openshift/cloud-provider-gcp/pull/55)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/26b43dfc7ddce718014b8991db10cbff30b7b117...fc50272ac32348a96455688c470bf256b1042825)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/3a2055f00aa0b2c1960b13639b10603a613eac85)
* [OCPBUGS-78281](https://issues.redhat.com/browse/OCPBUGS-78281): [release-4.15] update go mod dependency for konflux [#268](https://github.com/openshift/cluster-api-provider-gcp/pull/268)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#225](https://github.com/openshift/cluster-api-provider-gcp/pull/225)
* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#223](https://github.com/openshift/cluster-api-provider-gcp/pull/223)
* [OCPBUGS-23650](https://issues.redhat.com/browse/OCPBUGS-23650): Add Snyk file to exclude vendor directory on scan [#217](https://github.com/openshift/cluster-api-provider-gcp/pull/217)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9366599d967db2b09061fef6fb9297963a78d5e4...3a2055f00aa0b2c1960b13639b10603a613eac85)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0af06c047e5f751d77056f4ba288edb17e8d92a1)
* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Disable shielded VMs for non-UEFI disks [#117](https://github.com/openshift/machine-api-provider-gcp/pull/117)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/8851888abd5f7f47edd12a56f515b8f333c09372...0af06c047e5f751d77056f4ba288edb17e8d92a1)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/9016f437233494ce9b224bb1adae6f6e0ac7e102)
* [OCPBUGS-67973](https://issues.redhat.com/browse/OCPBUGS-67973): Update logrus to v1.9.3 [#93](https://github.com/openshift/gcp-pd-csi-driver/pull/93)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/7d08d6facf2acfd6252f401bdbdb4425c059fdb9...9016f437233494ce9b224bb1adae6f6e0ac7e102)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/7cec5854d50298a19ae85290fbdbde5a3de6c898)
* [OCPBUGS-67971](https://issues.redhat.com/browse/OCPBUGS-67971): bump github.com/sirupsen/logrus to v1.9.3 [#161](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/161)
* [OCPBUGS-26993](https://issues.redhat.com/browse/OCPBUGS-26993): Increase data source provision timeout [#114](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/114)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#108](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/108)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#102](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/102)
* [OCPBUGS-25242](https://issues.redhat.com/browse/OCPBUGS-25242): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#103](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/103)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/799327f7c45b362beadc39e85b9e773cab3654c5...7cec5854d50298a19ae85290fbdbde5a3de6c898)
### [haproxy-router](https://github.com/openshift/router/tree/c44d2228d8329af881730014e919c270ce5fae85)
* [OCPBUGS-74950](https://issues.redhat.com/browse/OCPBUGS-74950): Adding escapeHAProxySingleQuotes for sanitize [release-4.15] [#17](https://github.com/openshift/router/pull/17)
* [OCPBUGS-49392](https://issues.redhat.com/browse/OCPBUGS-49392): Block Upgrades for CA-Signed Certs Using SHA1 [#641](https://github.com/openshift/router/pull/641)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Upgrade Validation plugin for SHA1 certs [#585](https://github.com/openshift/router/pull/585)
* [OCPBUGS-32977](https://issues.redhat.com/browse/OCPBUGS-32977): Count active services before setting weight to 1 [#586](https://github.com/openshift/router/pull/586)
* [OCPBUGS-32693](https://issues.redhat.com/browse/OCPBUGS-32693): Reject routes with MD5 certs [#584](https://github.com/openshift/router/pull/584)
* [OCPBUGS-32435](https://issues.redhat.com/browse/OCPBUGS-32435): Introduce 'idle-close-on-response' option for frontends [#579](https://github.com/openshift/router/pull/579)
* [OCPBUGS-31544](https://issues.redhat.com/browse/OCPBUGS-31544): Properly handle rewrite-target annotation [#569](https://github.com/openshift/router/pull/569)
* [Full changelog](https://github.com/openshift/router/compare/cc38043528f91161833d5f2f805b338be26ca028...c44d2228d8329af881730014e919c270ce5fae85)
### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744)
* [OCPBUGS-67902](https://issues.redhat.com/browse/OCPBUGS-67902), [OCPBUGS-67977](https://issues.redhat.com/browse/OCPBUGS-67977): CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] [#2583](https://github.com/openshift/kubernetes/pull/2583)
* [OCPBUGS-74300](https://issues.redhat.com/browse/OCPBUGS-74300): Skip E2e: attach on previously attached volumes should work [#2569](https://github.com/openshift/kubernetes/pull/2569)
* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2358](https://github.com/openshift/kubernetes/pull/2358)
* [OCPBUGS-59147](https://issues.redhat.com/browse/OCPBUGS-59147): UPSTREAM: <carry>: disable some legacy cloud provider Azure tests [#2359](https://github.com/openshift/kubernetes/pull/2359)
* [OCPBUGS-52183](https://issues.redhat.com/browse/OCPBUGS-52183): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2227](https://github.com/openshift/kubernetes/pull/2227)
* [OCPBUGS-53139](https://issues.redhat.com/browse/OCPBUGS-53139): UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm [#2244](https://github.com/openshift/kubernetes/pull/2244)
* [OCPBUGS-44514](https://issues.redhat.com/browse/OCPBUGS-44514): Bump k8s api to 1.28.15 [#2132](https://github.com/openshift/kubernetes/pull/2132)
* [OCPBUGS-42169](https://issues.redhat.com/browse/OCPBUGS-42169): Bump k8s api to 1.28.14 [#2091](https://github.com/openshift/kubernetes/pull/2091)
* [OCPBUGS-39016](https://issues.redhat.com/browse/OCPBUGS-39016): Update to Kubernetes v1.28.13 [#2063](https://github.com/openshift/kubernetes/pull/2063)
* [OCPBUGS-31467](https://issues.redhat.com/browse/OCPBUGS-31467): Return from EnsureHostInPool on all NIC errors [#1964](https://github.com/openshift/kubernetes/pull/1964)
* : OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated [#2058](https://github.com/openshift/kubernetes/pull/2058)
* NO-JIRA: update downstream owners [#2050](https://github.com/openshift/kubernetes/pull/2050)
* [OCPBUGS-37622](https://issues.redhat.com/browse/OCPBUGS-37622): Bump to Kubernetes v1.28.12 [#2037](https://github.com/openshift/kubernetes/pull/2037)
* [OCPBUGS-35552](https://issues.redhat.com/browse/OCPBUGS-35552): Bump to Kubernetes v1.28.11 [#1994](https://github.com/openshift/kubernetes/pull/1994)
* [OCPBUGS-33711](https://issues.redhat.com/browse/OCPBUGS-33711): Bump to Kubernetes v1.28.10 [#1969](https://github.com/openshift/kubernetes/pull/1969)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#1962](https://github.com/openshift/kubernetes/pull/1962)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): UPSTREAM: <carry>: bump structured-merge-diff [#1893](https://github.com/openshift/kubernetes/pull/1893)
* [OCPBUGS-32299](https://issues.redhat.com/browse/OCPBUGS-32299): Bump to k8s 1.28.9 [#1946](https://github.com/openshift/kubernetes/pull/1946)
* [OCPBUGS-29922](https://issues.redhat.com/browse/OCPBUGS-29922): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1897](https://github.com/openshift/kubernetes/pull/1897)
* [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): UPSTREAM: <carry>: allow type mutation for specific secrets [#1939](https://github.com/openshift/kubernetes/pull/1939)
* UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check [#1915](https://github.com/openshift/kubernetes/pull/1915)
* [OCPBUGS-31740](https://issues.redhat.com/browse/OCPBUGS-31740): 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes [#1935](https://github.com/openshift/kubernetes/pull/1935)
* [OCPBUGS-31503](https://issues.redhat.com/browse/OCPBUGS-31503): Bump to 1.28.8 [#1926](https://github.com/openshift/kubernetes/pull/1926)
* Address CVE [#11](https://github.com/openshift/kubernetes/pull/11)
* [OCPBUGS-30963](https://issues.redhat.com/browse/OCPBUGS-30963): Set up CEL IP/CIDR library from 4.14 onwards [#1912](https://github.com/openshift/kubernetes/pull/1912)
* [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884)
* [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854)
* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [OCPBUGS-27368](https://issues.redhat.com/browse/OCPBUGS-27368): Update to kubernetes 1.28.6 [#1857](https://github.com/openshift/kubernetes/pull/1857)
* [OCPBUGS-25812](https://issues.redhat.com/browse/OCPBUGS-25812): Fix device uncertain errors on reboot - 4.15 [#1832](https://github.com/openshift/kubernetes/pull/1832)
* [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843)
* [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837)
* [Full changelog](https://github.com/openshift/kubernetes/compare/41c4e9ba94f4f1bfece6b81f287a9e3cf63e79cd...5cb2ef48f2e7e6cd14abc5e7a5ee90cd25f0d744)
### [hypershift](https://github.com/openshift/hypershift/tree/4f79410a365686bd352061c46650395a04ec7348)
* [OCPBUGS-84183](https://issues.redhat.com/browse/OCPBUGS-84183): fix(cno): use brackets only for IPv6 in server URL [#8308](https://github.com/openshift/hypershift/pull/8308)
* [OCPBUGS-74670](https://issues.redhat.com/browse/OCPBUGS-74670), [OCPBUGS-74671](https://issues.redhat.com/browse/OCPBUGS-74671): Support proxy authentication when user/pass is included in URL [#7606](https://github.com/openshift/hypershift/pull/7606)
* [CNTRLPLANE-1266](https://issues.redhat.com/browse/CNTRLPLANE-1266): Drop extinct mce-2.5 pipeline [#6655](https://github.com/openshift/hypershift/pull/6655)
* [CNTRLPLANE-1232](https://issues.redhat.com/browse/CNTRLPLANE-1232): Move CPO pipeline to hermetic builds [#6601](https://github.com/openshift/hypershift/pull/6601)
* [OCPBUGS-58506](https://issues.redhat.com/browse/OCPBUGS-58506): [release-4.15] Add missing service network DNS entries to KAS cert [#6394](https://github.com/openshift/hypershift/pull/6394)
* [OCPBUGS-57553](https://issues.redhat.com/browse/OCPBUGS-57553): Add proxy variables for the MCD Pod [#6293](https://github.com/openshift/hypershift/pull/6293)
* [OCPBUGS-57121](https://issues.redhat.com/browse/OCPBUGS-57121): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6231](https://github.com/openshift/hypershift/pull/6231)
* [OCPBUGS-46467](https://issues.redhat.com/browse/OCPBUGS-46467): Consistently look up and dial cloud API hostnames [#5300](https://github.com/openshift/hypershift/pull/5300)
* [OCPBUGS-52590](https://issues.redhat.com/browse/OCPBUGS-52590): Honor proxy vars in the util insecure http client [#5791](https://github.com/openshift/hypershift/pull/5791)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6086](https://github.com/openshift/hypershift/pull/6086)
* [CNTRLPLANE-920](https://issues.redhat.com/browse/CNTRLPLANE-920): Konflux build pipeline service account migration [#6081](https://github.com/openshift/hypershift/pull/6081)
* [OCPBUGS-55266](https://issues.redhat.com/browse/OCPBUGS-55266): [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6070](https://github.com/openshift/hypershift/pull/6070)
* [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Fix golang crypto dependency go.mod replacement [#5995](https://github.com/openshift/hypershift/pull/5995)
* [OCPBUGS-53898](https://issues.redhat.com/browse/OCPBUGS-53898): bump golang-jwt v4 and v5 [#5908](https://github.com/openshift/hypershift/pull/5908)
* Red Hat Konflux update control-plane-operator-4-15 [#5955](https://github.com/openshift/hypershift/pull/5955)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5923](https://github.com/openshift/hypershift/pull/5923)
* [OCPBUGS-51729](https://issues.redhat.com/browse/OCPBUGS-51729), [OCPBUGS-51800](https://issues.redhat.com/browse/OCPBUGS-51800): Bump dependencies to OCP fork in backports [#5902](https://github.com/openshift/hypershift/pull/5902)
* [OCPBUGS-50867](https://issues.redhat.com/browse/OCPBUGS-50867): Prevent IgnitionServer from flooding the API server with patch requests [#5633](https://github.com/openshift/hypershift/pull/5633)
* [OCPBUGS-52992](https://issues.redhat.com/browse/OCPBUGS-52992): [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller [#5815](https://github.com/openshift/hypershift/pull/5815)
* [OCPBUGS-52896](https://issues.redhat.com/browse/OCPBUGS-52896): Make managed-trust-bundle optional [#5813](https://github.com/openshift/hypershift/pull/5813)
* [OCPBUGS-50699](https://issues.redhat.com/browse/OCPBUGS-50699): add region to AWS creds passed to operators managed by CPO [#5669](https://github.com/openshift/hypershift/pull/5669)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 [#5729](https://github.com/openshift/hypershift/pull/5729)
* [OCPBUGS-51253](https://issues.redhat.com/browse/OCPBUGS-51253): OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs [#5701](https://github.com/openshift/hypershift/pull/5701)
* [OCPBUGS-52172](https://issues.redhat.com/browse/OCPBUGS-52172): [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5722](https://github.com/openshift/hypershift/pull/5722)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 [#5683](https://github.com/openshift/hypershift/pull/5683)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 [#5624](https://github.com/openshift/hypershift/pull/5624)
* NO-JIRA: chore(deps): update dependency mkdocs-material to v9 [#5642](https://github.com/openshift/hypershift/pull/5642)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 [#5576](https://github.com/openshift/hypershift/pull/5576)
* NO-JIRA: chore(deps): update konflux references [#5588](https://github.com/openshift/hypershift/pull/5588)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 [#5338](https://github.com/openshift/hypershift/pull/5338)
* NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 [#5589](https://github.com/openshift/hypershift/pull/5589)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 [#5586](https://github.com/openshift/hypershift/pull/5586)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 [#5577](https://github.com/openshift/hypershift/pull/5577)
* [OCPBUGS-49668](https://issues.redhat.com/browse/OCPBUGS-49668): fix overwriting PKI operator HCP conditions [#5512](https://github.com/openshift/hypershift/pull/5512)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 [#5486](https://github.com/openshift/hypershift/pull/5486)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5480](https://github.com/openshift/hypershift/pull/5480)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) [#5434](https://github.com/openshift/hypershift/pull/5434)
* NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) [#5429](https://github.com/openshift/hypershift/pull/5429)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5425](https://github.com/openshift/hypershift/pull/5425)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5386](https://github.com/openshift/hypershift/pull/5386)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned [#5380](https://github.com/openshift/hypershift/pull/5380)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) [#5379](https://github.com/openshift/hypershift/pull/5379)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) [#5385](https://github.com/openshift/hypershift/pull/5385)
* NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net [#5371](https://github.com/openshift/hypershift/pull/5371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned [#5344](https://github.com/openshift/hypershift/pull/5344)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) [#5343](https://github.com/openshift/hypershift/pull/5343)
* [OCPBUGS-46075](https://issues.redhat.com/browse/OCPBUGS-46075): Do not send traffic to local audit-webhook through konnectivity [#5274](https://github.com/openshift/hypershift/pull/5274)
* NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.15) [#5327](https://github.com/openshift/hypershift/pull/5327)
* NO-JIRA: Update Konflux references (release-4.15) [#5326](https://github.com/openshift/hypershift/pull/5326)
* [OCPBUGS-47545](https://issues.redhat.com/browse/OCPBUGS-47545): Separate CPO containerfiles [#5334](https://github.com/openshift/hypershift/pull/5334)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.15) [#5292](https://github.com/openshift/hypershift/pull/5292)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5291](https://github.com/openshift/hypershift/pull/5291)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5251](https://github.com/openshift/hypershift/pull/5251)
* [OCPBUGS-44522](https://issues.redhat.com/browse/OCPBUGS-44522): Add network policies for konnectivity server and ignition server proxy [#5120](https://github.com/openshift/hypershift/pull/5120)
* [OCPBUGS-43931](https://issues.redhat.com/browse/OCPBUGS-43931): Return the right tagReference on Catalogs ImageStream [#5187](https://github.com/openshift/hypershift/pull/5187)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) [#5210](https://github.com/openshift/hypershift/pull/5210)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5208](https://github.com/openshift/hypershift/pull/5208)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) [#5190](https://github.com/openshift/hypershift/pull/5190)
* NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) [#5182](https://github.com/openshift/hypershift/pull/5182)
* [OCPBUGS-44278](https://issues.redhat.com/browse/OCPBUGS-44278): Configure OAuth https proxy to dial cloud endpoints directly [#5068](https://github.com/openshift/hypershift/pull/5068)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5159](https://github.com/openshift/hypershift/pull/5159)
* chore(deps): update konflux references (release-4.15) [#5136](https://github.com/openshift/hypershift/pull/5136)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) [#5129](https://github.com/openshift/hypershift/pull/5129)
* chore(deps): update konflux references (release-4.15) [#5118](https://github.com/openshift/hypershift/pull/5118)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) [#5106](https://github.com/openshift/hypershift/pull/5106)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) [#5110](https://github.com/openshift/hypershift/pull/5110)
* NO-JIRA: Update Konflux references (release-4.15) [#5109](https://github.com/openshift/hypershift/pull/5109)
* NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) [#5101](https://github.com/openshift/hypershift/pull/5101)
* chore(deps): update konflux references (release-4.15) [#5077](https://github.com/openshift/hypershift/pull/5077)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#5054](https://github.com/openshift/hypershift/pull/5054)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) [#5060](https://github.com/openshift/hypershift/pull/5060)
* [OCPBUGS-44201](https://issues.redhat.com/browse/OCPBUGS-44201): add ValidIDPConfiguration condition to report IDP config issues [#5037](https://github.com/openshift/hypershift/pull/5037)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) [#5040](https://github.com/openshift/hypershift/pull/5040)
* chore(deps): update konflux references (release-4.15) [#5025](https://github.com/openshift/hypershift/pull/5025)
* chore(deps): update konflux references to f53fe54 (release-4.15) [#5022](https://github.com/openshift/hypershift/pull/5022)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) [#5016](https://github.com/openshift/hypershift/pull/5016)
* NO-JIRA: Update Konflux references (release-4.15) [#5010](https://github.com/openshift/hypershift/pull/5010)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4974](https://github.com/openshift/hypershift/pull/4974)
* [OCPBUGS-43635](https://issues.redhat.com/browse/OCPBUGS-43635): label routes only when HCP router used [#4961](https://github.com/openshift/hypershift/pull/4961)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4957](https://github.com/openshift/hypershift/pull/4957)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) [#4949](https://github.com/openshift/hypershift/pull/4949)
* [OCPBUGS-43468](https://issues.redhat.com/browse/OCPBUGS-43468): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4929](https://github.com/openshift/hypershift/pull/4929)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4932](https://github.com/openshift/hypershift/pull/4932)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) [#4916](https://github.com/openshift/hypershift/pull/4916)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4922](https://github.com/openshift/hypershift/pull/4922)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) [#4909](https://github.com/openshift/hypershift/pull/4909)
* [OCPBUGS-42881](https://issues.redhat.com/browse/OCPBUGS-42881): Let payload generation pick the release for the NodePool [#4867](https://github.com/openshift/hypershift/pull/4867)
* [OCPBUGS-42992](https://issues.redhat.com/browse/OCPBUGS-42992): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4876](https://github.com/openshift/hypershift/pull/4876)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4897](https://github.com/openshift/hypershift/pull/4897)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) [#4881](https://github.com/openshift/hypershift/pull/4881)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) [#4850](https://github.com/openshift/hypershift/pull/4850)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) [#4807](https://github.com/openshift/hypershift/pull/4807)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4815](https://github.com/openshift/hypershift/pull/4815)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) [#4793](https://github.com/openshift/hypershift/pull/4793)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4777](https://github.com/openshift/hypershift/pull/4777)
* chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) [#4766](https://github.com/openshift/hypershift/pull/4766)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) [#4770](https://github.com/openshift/hypershift/pull/4770)
* chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) [#4769](https://github.com/openshift/hypershift/pull/4769)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) [#4767](https://github.com/openshift/hypershift/pull/4767)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4762](https://github.com/openshift/hypershift/pull/4762)
* [OCPBUGS-41373](https://issues.redhat.com/browse/OCPBUGS-41373): CPO oauth idp converter: resolve names before dialing [#4746](https://github.com/openshift/hypershift/pull/4746)
* NO-JIRA: Security fixes for openshift-ci-security job [#4751](https://github.com/openshift/hypershift/pull/4751)
* [OCPBUGS-42214](https://issues.redhat.com/browse/OCPBUGS-42214): Make guest cluster components use the correct KAS port [#4749](https://github.com/openshift/hypershift/pull/4749)
* [OCPBUGS-38059](https://issues.redhat.com/browse/OCPBUGS-38059): Add HTTP konnectivity proxy to OAuth server [#4497](https://github.com/openshift/hypershift/pull/4497)
* [HOSTEDCP-1956](https://issues.redhat.com/browse/HOSTEDCP-1956): bump CCO and go-jose version [#4697](https://github.com/openshift/hypershift/pull/4697)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4719](https://github.com/openshift/hypershift/pull/4719)
* [OCPBUGS-41701](https://issues.redhat.com/browse/OCPBUGS-41701): cmd: report server version, supported OCP [#4702](https://github.com/openshift/hypershift/pull/4702)
* [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): [release-4.15] Use HTTP proxy for ingress controller [#4699](https://github.com/openshift/hypershift/pull/4699)
* [OCPBUGS-41809](https://issues.redhat.com/browse/OCPBUGS-41809): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4706](https://github.com/openshift/hypershift/pull/4706)
* [HOSTEDCP-1896](https://issues.redhat.com/browse/HOSTEDCP-1896): [release-4.15] Allow setting Kube APIServer maximum requests in flight [#4552](https://github.com/openshift/hypershift/pull/4552)
* [OCPBUGS-39463](https://issues.redhat.com/browse/OCPBUGS-39463): handle version skewed NodePools that do not have rhel9 binaries [#4666](https://github.com/openshift/hypershift/pull/4666)
* [OCPBUGS-39077](https://issues.redhat.com/browse/OCPBUGS-39077): Set KCM node monitor grace period [#4628](https://github.com/openshift/hypershift/pull/4628)
* [OCPBUGS-30465](https://issues.redhat.com/browse/OCPBUGS-30465): fix: bump google.golang.org/protobuf [#4616](https://github.com/openshift/hypershift/pull/4616)
* [OCPBUGS-39171](https://issues.redhat.com/browse/OCPBUGS-39171): fix: bump github.com/IBM/go-sdk-core/v5 [#4625](https://github.com/openshift/hypershift/pull/4625)
* [OCPBUGS-35815](https://issues.redhat.com/browse/OCPBUGS-35815): Add hypershift-cluster-version-operator image to release providers [#4243](https://github.com/openshift/hypershift/pull/4243)
* NO-JIRA: test: relax mgmt KAS egress check [#4631](https://github.com/openshift/hypershift/pull/4631)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#4200](https://github.com/openshift/hypershift/pull/4200)
* NO-JIRA: Flaky cert validation test [#4630](https://github.com/openshift/hypershift/pull/4630)
* [OCPBUGS-38943](https://issues.redhat.com/browse/OCPBUGS-38943): copy oapi ca-trust recursively when building trust anchor [#4613](https://github.com/openshift/hypershift/pull/4613)
* [OCPBUGS-39041](https://issues.redhat.com/browse/OCPBUGS-39041): set proxy envvars on aws and azure CCMs [#4624](https://github.com/openshift/hypershift/pull/4624)
* [OCPBUGS-38613](https://issues.redhat.com/browse/OCPBUGS-38613): hcco: reconcile apiserver config into hosted cluster [#4567](https://github.com/openshift/hypershift/pull/4567)
* [OCPBUGS-38561](https://issues.redhat.com/browse/OCPBUGS-38561): Let the CPO oidc check resolve through data plane [#4564](https://github.com/openshift/hypershift/pull/4564)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak ciphers from security profile [#4547](https://github.com/openshift/hypershift/pull/4547)
* [OCPBUGS-37171](https://issues.redhat.com/browse/OCPBUGS-37171): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4489](https://github.com/openshift/hypershift/pull/4489)
* NO-JIRA: Update Konflux 4.15 and perform migration [#4487](https://github.com/openshift/hypershift/pull/4487)
* NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 [#4469](https://github.com/openshift/hypershift/pull/4469)
* [OCPBUGS-36938](https://issues.redhat.com/browse/OCPBUGS-36938): [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4358](https://github.com/openshift/hypershift/pull/4358)
* [OCPBUGS-37174](https://issues.redhat.com/browse/OCPBUGS-37174): Delete IDMS in dataplane once HCP ICS field is removed [#4457](https://github.com/openshift/hypershift/pull/4457)
* NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4279](https://github.com/openshift/hypershift/pull/4279)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4444](https://github.com/openshift/hypershift/pull/4444)
* [OCPBUGS-36916](https://issues.redhat.com/browse/OCPBUGS-36916): Add newline after TLS certs referenced by image.config [#4443](https://github.com/openshift/hypershift/pull/4443)
* [OCPBUGS-37695](https://issues.redhat.com/browse/OCPBUGS-37695): Set right endpointSlice port [#4441](https://github.com/openshift/hypershift/pull/4441)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#4433](https://github.com/openshift/hypershift/pull/4433)
* NO-JIRA: [release-4.15] test/e2e: remove api budget checks [#4413](https://github.com/openshift/hypershift/pull/4413)
* [OCPBUGS-37266](https://issues.redhat.com/browse/OCPBUGS-37266): extract rhel9 MCO binaries for rhel8 based MCO images [#4385](https://github.com/openshift/hypershift/pull/4385)
* [OCPBUGS-36606](https://issues.redhat.com/browse/OCPBUGS-36606): enable audit log for oauth-openshift [#4320](https://github.com/openshift/hypershift/pull/4320)
* [HOSTEDCP-1714](https://issues.redhat.com/browse/HOSTEDCP-1714): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 [#4178](https://github.com/openshift/hypershift/pull/4178)
* [OCPBUGS-35736](https://issues.redhat.com/browse/OCPBUGS-35736): Complete KAS migration to none endpoint reconciler type [#4228](https://github.com/openshift/hypershift/pull/4228)
* [OCPBUGS-35935](https://issues.redhat.com/browse/OCPBUGS-35935): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4265](https://github.com/openshift/hypershift/pull/4265)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4259](https://github.com/openshift/hypershift/pull/4259)
* [OCPBUGS-35714](https://issues.redhat.com/browse/OCPBUGS-35714): Generate default worker security group rules based on machineCIDR [#4266](https://github.com/openshift/hypershift/pull/4266)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4252](https://github.com/openshift/hypershift/pull/4252)
* [OCPBUGS-32404](https://issues.redhat.com/browse/OCPBUGS-32404): Fix failure to create a second hostedcluster in the same namespace [#3907](https://github.com/openshift/hypershift/pull/3907)
* NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) [#4246](https://github.com/openshift/hypershift/pull/4246)
* NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4231](https://github.com/openshift/hypershift/pull/4231)
* chore(deps): update konflux references to 2be7c9c (release-4.15) [#4224](https://github.com/openshift/hypershift/pull/4224)
* [OCPBUGS-34580](https://issues.redhat.com/browse/OCPBUGS-34580): Add TrustedBundles to OAS container [#4211](https://github.com/openshift/hypershift/pull/4211)
* NO-JIRA: hack: make the e2e script generic [#4199](https://github.com/openshift/hypershift/pull/4199)
* [OCPBUGS-33627](https://issues.redhat.com/browse/OCPBUGS-33627): Restrict image registry overrides to control plane components [#4131](https://github.com/openshift/hypershift/pull/4131)
* [OCPBUGS-34156](https://issues.redhat.com/browse/OCPBUGS-34156): fix router on 4.14 y-stream upgrade [#4077](https://github.com/openshift/hypershift/pull/4077)
* [OCPBUGS-35002](https://issues.redhat.com/browse/OCPBUGS-35002): [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller [#4162](https://github.com/openshift/hypershift/pull/4162)
* NO-JIRA: Update Konflux references to 1025001 (release-4.15) [#4180](https://github.com/openshift/hypershift/pull/4180)
* NO-JIRA: chore(deps): update konflux references (release-4.15) [#4167](https://github.com/openshift/hypershift/pull/4167)
* [OCPBUGS-34997](https://issues.redhat.com/browse/OCPBUGS-34997): add AWS STS URL to OIDC provider audiences [#4157](https://github.com/openshift/hypershift/pull/4157)
* [OCPBUGS-35074](https://issues.redhat.com/browse/OCPBUGS-35074): Fix disconnected metadata inspection for nodepool [#4175](https://github.com/openshift/hypershift/pull/4175)
* [HOSTEDCP-1708](https://issues.redhat.com/browse/HOSTEDCP-1708): remove liveness and readiness probes that use the metrics [#4128](https://github.com/openshift/hypershift/pull/4128)
* [OCPBUGS-34423](https://issues.redhat.com/browse/OCPBUGS-34423): Fixed audit-logs sigterm failing to terminate gracefully [#4089](https://github.com/openshift/hypershift/pull/4089)
* [OCPBUGS-33526](https://issues.redhat.com/browse/OCPBUGS-33526): Disable DNS resolving for CNO [#4148](https://github.com/openshift/hypershift/pull/4148)
* [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak cipher [#4156](https://github.com/openshift/hypershift/pull/4156)
* [OCPBUGS-34510](https://issues.redhat.com/browse/OCPBUGS-34510): Reconcile KAS endpoints and endpoint slice [#4097](https://github.com/openshift/hypershift/pull/4097)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4151](https://github.com/openshift/hypershift/pull/4151)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4120](https://github.com/openshift/hypershift/pull/4120)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4072](https://github.com/openshift/hypershift/pull/4072)
* [OCPBUGS-33510](https://issues.redhat.com/browse/OCPBUGS-33510): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4014](https://github.com/openshift/hypershift/pull/4014)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) [#4064](https://github.com/openshift/hypershift/pull/4064)
* NO-JIRA: Remove CLI inspection of release image [#4056](https://github.com/openshift/hypershift/pull/4056)
* [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#4032](https://github.com/openshift/hypershift/pull/4032)
* NO-JIRA: Update RHTAP references (release-4.15) [#4041](https://github.com/openshift/hypershift/pull/4041)
* [OCPBUGS-33118](https://issues.redhat.com/browse/OCPBUGS-33118): Recycler-pod image now points to the OCP Payload reference [#3963](https://github.com/openshift/hypershift/pull/3963)
* [OCPBUGS-32220](https://issues.redhat.com/browse/OCPBUGS-32220): Fix disconnected metadata inspection [#3881](https://github.com/openshift/hypershift/pull/3881)
* NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) [#4030](https://github.com/openshift/hypershift/pull/4030)
* [OCPBUGS-33117](https://issues.redhat.com/browse/OCPBUGS-33117): Reconcile over ICSP/IDMS [#3962](https://github.com/openshift/hypershift/pull/3962)
* NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) [#4022](https://github.com/openshift/hypershift/pull/4022)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4017](https://github.com/openshift/hypershift/pull/4017)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support hypershift-operator scoping for hostedclusters [#3998](https://github.com/openshift/hypershift/pull/3998)
* Revert "[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable" [#3939](https://github.com/openshift/hypershift/pull/3939)
* [OCPBUGS-33207](https://issues.redhat.com/browse/OCPBUGS-33207): Remove kube-scheduler readiness probe [#3955](https://github.com/openshift/hypershift/pull/3955)
* NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) [#3989](https://github.com/openshift/hypershift/pull/3989)
* [OCPBUGS-25858](https://issues.redhat.com/browse/OCPBUGS-25858): Improve description for agent APIServerAddress CLI flag [#3977](https://github.com/openshift/hypershift/pull/3977)
* [OCPBUGS-33224](https://issues.redhat.com/browse/OCPBUGS-33224): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3976](https://github.com/openshift/hypershift/pull/3976)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3982](https://github.com/openshift/hypershift/pull/3982)
* [OCPBUGS-31747](https://issues.redhat.com/browse/OCPBUGS-31747): update desired image even when HCP doesn't exist yet [#3839](https://github.com/openshift/hypershift/pull/3839)
* NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) [#3974](https://github.com/openshift/hypershift/pull/3974)
* [OCPBUGS-32229](https://issues.redhat.com/browse/OCPBUGS-32229): disable autoscaler when no nodepool require it [#3884](https://github.com/openshift/hypershift/pull/3884)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3967](https://github.com/openshift/hypershift/pull/3967)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3957](https://github.com/openshift/hypershift/pull/3957)
* [OCPBUGS-31826](https://issues.redhat.com/browse/OCPBUGS-31826): use dnsPolicy: Default for konnectivity-agent in data plane [#3845](https://github.com/openshift/hypershift/pull/3845)
* NO-JIRA: Update RHTAP references (release-4.15) [#3935](https://github.com/openshift/hypershift/pull/3935)
* [OCPBUGS-32715](https://issues.redhat.com/browse/OCPBUGS-32715): Fix OLM intilization args [#3923](https://github.com/openshift/hypershift/pull/3923)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation [#3908](https://github.com/openshift/hypershift/pull/3908)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3921](https://github.com/openshift/hypershift/pull/3921)
* [OCPBUGS-32164](https://issues.redhat.com/browse/OCPBUGS-32164): Fix ICSP and IDMS inclusion as registriesOverrides [#3870](https://github.com/openshift/hypershift/pull/3870)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3904](https://github.com/openshift/hypershift/pull/3904)
* [OCPBUGS-30280](https://issues.redhat.com/browse/OCPBUGS-30280): Switch to use service endpoint for Konnectivity [#3692](https://github.com/openshift/hypershift/pull/3692)
* [OCPBUGS-32191](https://issues.redhat.com/browse/OCPBUGS-32191): Kas disable audit cherry pick release 4.15 [#3875](https://github.com/openshift/hypershift/pull/3875)
* [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): Add new permission required in CAPA [#3861](https://github.com/openshift/hypershift/pull/3861)
* NO-JIRA: Update RHTAP references (release-4.15) [#3887](https://github.com/openshift/hypershift/pull/3887)
* NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster [#3893](https://github.com/openshift/hypershift/pull/3893)
* [HOSTEDCP-1524](https://issues.redhat.com/browse/HOSTEDCP-1524): [release-4.15] Support additional node selectors for request serving nodes [#3883](https://github.com/openshift/hypershift/pull/3883)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3873](https://github.com/openshift/hypershift/pull/3873)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3868](https://github.com/openshift/hypershift/pull/3868)
* [OCPBUGS-32013](https://issues.redhat.com/browse/OCPBUGS-32013): Set OPERATOR_IMAGE environment variable [#3853](https://github.com/openshift/hypershift/pull/3853)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3857](https://github.com/openshift/hypershift/pull/3857)
* NO-JIRA: Update RHTAP references (release-4.15) [#3835](https://github.com/openshift/hypershift/pull/3835)
* [OCPBUGS-31766](https://issues.redhat.com/browse/OCPBUGS-31766): include hostnetwork SCC CPO role for 4.13 and earlier [#3840](https://github.com/openshift/hypershift/pull/3840)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): [release-4.15] Preserve container resources for more hosted control plane components [#3828](https://github.com/openshift/hypershift/pull/3828)
* [OCPBUGS-31324](https://issues.redhat.com/browse/OCPBUGS-31324): Add missing PodSecurityViolation alert [#3798](https://github.com/openshift/hypershift/pull/3798)
* NO-JIRA: Increase stability in autoscaled environments [#3777](https://github.com/openshift/hypershift/pull/3777)
* [OCPBUGS-31471](https://issues.redhat.com/browse/OCPBUGS-31471): Reduce log file size for hypershift apiservers [#3816](https://github.com/openshift/hypershift/pull/3816)
* [OCPBUGS-31604](https://issues.redhat.com/browse/OCPBUGS-31604): disable http2 for ignition server and proxy [#3825](https://github.com/openshift/hypershift/pull/3825)
* [OCPBUGS-31426](https://issues.redhat.com/browse/OCPBUGS-31426): copy issuerCertificateAuthority configmap into HC openshift-config [#3808](https://github.com/openshift/hypershift/pull/3808)
* [OCPBUGS-31265](https://issues.redhat.com/browse/OCPBUGS-31265): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3802](https://github.com/openshift/hypershift/pull/3802)
* NO-JIRA: Update RHTAP references (release-4.15) [#3812](https://github.com/openshift/hypershift/pull/3812)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3796](https://github.com/openshift/hypershift/pull/3796)
* [OCPBUGS-31064](https://issues.redhat.com/browse/OCPBUGS-31064): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3774](https://github.com/openshift/hypershift/pull/3774)
* [OCPBUGS-31377](https://issues.redhat.com/browse/OCPBUGS-31377): Manually cherry pick #3782 to 4.15 [#3803](https://github.com/openshift/hypershift/pull/3803)
* [OCPBUGS-31326](https://issues.redhat.com/browse/OCPBUGS-31326): fix(ignition): Fix priority class override [#3800](https://github.com/openshift/hypershift/pull/3800)
* [OCPBUGS-30804](https://issues.redhat.com/browse/OCPBUGS-30804): honor HC image configuration [#3730](https://github.com/openshift/hypershift/pull/3730)
* "[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used" [#3677](https://github.com/openshift/hypershift/pull/3677)
* [OCPBUGS-31116](https://issues.redhat.com/browse/OCPBUGS-31116): external OIDC: fix certificateAuthority field in structured auth config [#3783](https://github.com/openshift/hypershift/pull/3783)
* [OCPBUGS-30862](https://issues.redhat.com/browse/OCPBUGS-30862): Manual cherry pick 3685&3727 to release 4.15 [#3740](https://github.com/openshift/hypershift/pull/3740)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3791](https://github.com/openshift/hypershift/pull/3791)
* NO-JIRA: Update RHTAP references (release-4.15) [#3785](https://github.com/openshift/hypershift/pull/3785)
* [OCPBUGS-29881](https://issues.redhat.com/browse/OCPBUGS-29881): feat(ho): Add flag for dedicated request serving isolation [#3633](https://github.com/openshift/hypershift/pull/3633)
* [OCPBUGS-30742](https://issues.redhat.com/browse/OCPBUGS-30742): [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group [#3726](https://github.com/openshift/hypershift/pull/3726)
* [OCPBUGS-30650](https://issues.redhat.com/browse/OCPBUGS-30650): Set KAS config pod security Enforce to privileged [#3719](https://github.com/openshift/hypershift/pull/3719)
* NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget [#3741](https://github.com/openshift/hypershift/pull/3741)
* [OCPBUGS-30651](https://issues.redhat.com/browse/OCPBUGS-30651): Remove EnsurePSANotPrivileged [#3744](https://github.com/openshift/hypershift/pull/3744)
* NO-JIRA: Update RHTAP references (release-4.15) [#3754](https://github.com/openshift/hypershift/pull/3754)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3747](https://github.com/openshift/hypershift/pull/3747)
* NO-JIRA: Update RHTAP references (release-4.15) [#3738](https://github.com/openshift/hypershift/pull/3738)
* [OCPBUGS-30581](https://issues.redhat.com/browse/OCPBUGS-30581): [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP [#3684](https://github.com/openshift/hypershift/pull/3684)
* [OCPBUGS-30572](https://issues.redhat.com/browse/OCPBUGS-30572): [release-4.15] Update OLM Default Catalog Sources to 4.15 [#3696](https://github.com/openshift/hypershift/pull/3696)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705)
* [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673)
* "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549)
* [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694)
* [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675)
* Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645)
* [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648)
* [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653)
* NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646)
* [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632)
* [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522)
* [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606)
* [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626)
* NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628)
* [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607)
* [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480)
* [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529)
* NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579)
* [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421)
* [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565)
* [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566)
* [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533)
* [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558)
* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [OCPBUGS-27432](https://issues.redhat.com/browse/OCPBUGS-27432): consider HCP upgradeable if CVO has no upgradable condition [#3444](https://github.com/openshift/hypershift/pull/3444)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3393](https://github.com/openshift/hypershift/pull/3393)
* [OCPBUGS-27076](https://issues.redhat.com/browse/OCPBUGS-27076): availability-prober: wait for infrastructure name to be set [#3419](https://github.com/openshift/hypershift/pull/3419)
* [OCPBUGS-27155](https://issues.redhat.com/browse/OCPBUGS-27155): Change KAS bootstrap image to cluster-config-api [#3423](https://github.com/openshift/hypershift/pull/3423)
* [OCPBUGS-27071](https://issues.redhat.com/browse/OCPBUGS-27071): Apply Scheduling Configuration for kCCM [#3417](https://github.com/openshift/hypershift/pull/3417)
* [OCPBUGS-26600](https://issues.redhat.com/browse/OCPBUGS-26600): set KAS runtime-config in alignment with feature gates [#3399](https://github.com/openshift/hypershift/pull/3399)
* [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379)
* [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376)
* [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321)
* [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336)
* NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 [#3338](https://github.com/openshift/hypershift/pull/3338)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3324](https://github.com/openshift/hypershift/pull/3324)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3311](https://github.com/openshift/hypershift/pull/3311)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating ose-hypershift-container image to be consistent with ART [#3247](https://github.com/openshift/hypershift/pull/3247)
* [Full changelog](https://github.com/openshift/hypershift/compare/52c371cd44ab6b929477e194c8ac17e6e649d79f...4f79410a365686bd352061c46650395a04ec7348)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/cc0d54159c5d626aaa91eef94a92a80b3d1a3870)
* : OCPBUGS-37311: Bump otelgrpc to v0.49.0 [#74](https://github.com/openshift/cloud-provider-ibm/pull/74)
* [OCPBUGS-23610](https://issues.redhat.com/browse/OCPBUGS-23610): Add Snyk file to exclude vendor directory on scan [#64](https://github.com/openshift/cloud-provider-ibm/pull/64)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494...cc0d54159c5d626aaa91eef94a92a80b3d1a3870)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/5b58d112224287f6d6491b0143c73d37817cb3fd)
* [OCPBUGS-79893](https://issues.redhat.com/browse/OCPBUGS-79893): Bump google.golang.org/grpc to v1.79.3 [#148](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/148)
* [OCPBUGS-77211](https://issues.redhat.com/browse/OCPBUGS-77211): [release-4.15] standardize build paths [#125](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/125)
* [OCPBUGS-58739](https://issues.redhat.com/browse/OCPBUGS-58739): bump github.com/golang/glog to version v1.2.4 [#107](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/107)
* [OCPBUGS-56064](https://issues.redhat.com/browse/OCPBUGS-56064): tech debt: rework vendor patches [#92](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/92)
* [OCPBUGS-53906](https://issues.redhat.com/browse/OCPBUGS-53906): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#85](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/85)
* [OCPBUGS-36066](https://issues.redhat.com/browse/OCPBUGS-36066): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#72](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/eb7b9c09f81b2e9a78bfa75d57cd4eab37989b52...5b58d112224287f6d6491b0143c73d37817cb3fd)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/b039b8e368063df3ef5985600250515680f7fa25)
* [OCPBUGS-67980](https://issues.redhat.com/browse/OCPBUGS-67980), [OCPBUGS-67981](https://issues.redhat.com/browse/OCPBUGS-67981): bump github.com/sirupsen/logrus to v1.9.3 [#165](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/165)
* [OCPBUGS-59775](https://issues.redhat.com/browse/OCPBUGS-59775): [IBM VPC] set offlineExpansion to false in e2e test manifest [#150](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/150)
* [OCPBUGS-42438](https://issues.redhat.com/browse/OCPBUGS-42438): Reorder static resources to create RBAC first [#130](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/130)
* [OCPBUGS-36072](https://issues.redhat.com/browse/OCPBUGS-36072): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#121](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/121)
* [OCPBUGS-33641](https://issues.redhat.com/browse/OCPBUGS-33641): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#116](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/116)
* [OCPBUGS-25604](https://issues.redhat.com/browse/OCPBUGS-25604): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#103](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/103)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#99](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/9ca537683fc2ae2e7847032441fde42ff3171a48...b039b8e368063df3ef5985600250515680f7fa25)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/bdc981bde680b3a1bc3a80a2c2cfd1c7b2c110e8)
* [OCPBUGS-67289](https://issues.redhat.com/browse/OCPBUGS-67289): [release-4.15] Fix incomplete vendor/ [#137](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/137)
* [OCPBUGS-51814](https://issues.redhat.com/browse/OCPBUGS-51814): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#122](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/122)
* [OCPBUGS-36078](https://issues.redhat.com/browse/OCPBUGS-36078): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.15 [#87](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/87)
* [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78)
* [OCPBUGS-23685](https://issues.redhat.com/browse/OCPBUGS-23685): Add Snyk file to exclude vendor directory on scan [#72](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/72)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/6d2887ad5bd40e9e2f8edfe1aab24d1f3675cc4f...bdc981bde680b3a1bc3a80a2c2cfd1c7b2c110e8)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6846b9a79e2f2dfc39061fe7625202db30a9a6b4)
* [OCPBUGS-36084](https://issues.redhat.com/browse/OCPBUGS-36084): Bump dependency for CVE [#54](https://github.com/openshift/machine-api-provider-ibmcloud/pull/54)
* [OCPBUGS-43675](https://issues.redhat.com/browse/OCPBUGS-43675): IBMCloud: Handle pagination for subnets [#48](https://github.com/openshift/machine-api-provider-ibmcloud/pull/48)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/d29506e7fea609bc8f004256c9c057e5429f72a1...6846b9a79e2f2dfc39061fe7625202db30a9a6b4)
### [insights-operator](https://github.com/openshift/insights-operator/tree/975bba9802ebd6c0f1e52117584b82c38831eda8)
* Ignore previous status when disabling alerts (#1060) [#1060](https://github.com/openshift/insights-operator/pull/1060)
* [OCPBUGS-45204](https://issues.redhat.com/browse/OCPBUGS-45204): LokiStack gatherer (#1057) [#1057](https://github.com/openshift/insights-operator/pull/1057)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1056) [#1056](https://github.com/openshift/insights-operator/pull/1056)
* gather selected clusterroles (#1024) [#1024](https://github.com/openshift/insights-operator/pull/1024)
* [OCPBUGS-39565](https://issues.redhat.com/browse/OCPBUGS-39565): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) [#1015](https://github.com/openshift/insights-operator/pull/1015)
* [OCPBUGS-39395](https://issues.redhat.com/browse/OCPBUGS-39395): collect some nmstate customresources (#986) (#989) (#995) (#1002) [#986](https://github.com/openshift/insights-operator/pull/986)
* Add haproxy metric (#983) [#983](https://github.com/openshift/insights-operator/pull/983)
* [OCPBUGS-37672](https://issues.redhat.com/browse/OCPBUGS-37672): Ingress controller related certificates' validate dates gathering (#972) [#972](https://github.com/openshift/insights-operator/pull/972)
* fix the configmapobserver notifications (#971) [#971](https://github.com/openshift/insights-operator/pull/971)
* manifests: set required-scc for openshift workloads (#967) [#967](https://github.com/openshift/insights-operator/pull/967)
* [OCPBUGS-35882](https://issues.redhat.com/browse/OCPBUGS-35882): properly encode the URL for the advisor links (#958) [#958](https://github.com/openshift/insights-operator/pull/958)
* [OCPBUGS-35865](https://issues.redhat.com/browse/OCPBUGS-35865): Collect aggregated Prometheus Alertmanager instances (#950) [#950](https://github.com/openshift/insights-operator/pull/950)
* [OCPBUGS-32702](https://issues.redhat.com/browse/OCPBUGS-32702): anonymization - externalIP can be nil (#931) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31946](https://issues.redhat.com/browse/OCPBUGS-31946): bump golang.org/x/net version (#925) [#925](https://github.com/openshift/insights-operator/pull/925)
* Add extra check in ids to bypass validations (#901) [#901](https://github.com/openshift/insights-operator/pull/901)
* gather etcd_server_slow metrics (#900) [#900](https://github.com/openshift/insights-operator/pull/900)
* Updating ose-insights-operator-container image to be consistent with ART (#884) [#884](https://github.com/openshift/insights-operator/pull/884)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a06a980f229864e7e5894416f2583e03f4b03fcd...975bba9802ebd6c0f1e52117584b82c38831eda8)
### [ironic](https://github.com/openshift/ironic-image/tree/943b1100380f2d3d02d524bbff2a8553cdde2718)
* [OCPBUGS-69784](https://issues.redhat.com/browse/OCPBUGS-69784): Bump eventlet version to 0.33.1-7 [#764](https://github.com/openshift/ironic-image/pull/764)
* [OCPBUGS-48148](https://issues.redhat.com/browse/OCPBUGS-48148), [OCPBUGS-48597](https://issues.redhat.com/browse/OCPBUGS-48597): Bump jinja2 to 3.0.1-6.el9.2 [#624](https://github.com/openshift/ironic-image/pull/624)
* [OCPBUGS-43953](https://issues.redhat.com/browse/OCPBUGS-43953), [OCPBUGS-43961](https://issues.redhat.com/browse/OCPBUGS-43961): Bump python-waitress [4.15] [#605](https://github.com/openshift/ironic-image/pull/605)
* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#570](https://github.com/openshift/ironic-image/pull/570)
* [OCPBUGS-38798](https://issues.redhat.com/browse/OCPBUGS-38798): redfish-virtualmedia fails on XFusion nodes [#565](https://github.com/openshift/ironic-image/pull/565)
* [OCPBUGS-37761](https://issues.redhat.com/browse/OCPBUGS-37761), [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#583](https://github.com/openshift/ironic-image/pull/583)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set min version for python3-webob [#554](https://github.com/openshift/ironic-image/pull/554)
* [OCPBUGS-33332](https://issues.redhat.com/browse/OCPBUGS-33332): bump werkzeug [#536](https://github.com/openshift/ironic-image/pull/536)
* [OCPBUGS-37407](https://issues.redhat.com/browse/OCPBUGS-37407): bump jinja2 [#529](https://github.com/openshift/ironic-image/pull/529)
* [OCPBUGS-37113](https://issues.redhat.com/browse/OCPBUGS-37113): Update eventlet version [#523](https://github.com/openshift/ironic-image/pull/523)
* Bug OCPBUGS-33736: Disable installation of .pyc files through pip [#511](https://github.com/openshift/ironic-image/pull/511)
* [OCPBUGS-32365](https://issues.redhat.com/browse/OCPBUGS-32365): [4.15] Remove unused prometheus exporter [#485](https://github.com/openshift/ironic-image/pull/485)
* [OCPBUGS-32351](https://issues.redhat.com/browse/OCPBUGS-32351): [4.15] Update to include fixes for ironic servicing feature [#479](https://github.com/openshift/ironic-image/pull/479)
* [OCPBUGS-32389](https://issues.redhat.com/browse/OCPBUGS-32389): Use unix sockets by default for reverse proxy communication [#474](https://github.com/openshift/ironic-image/pull/474)
* [OCPBUGS-31686](https://issues.redhat.com/browse/OCPBUGS-31686), [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802), [OCPBUGS-31830](https://issues.redhat.com/browse/OCPBUGS-31830): [4.15] install ironic projects from source [#470](https://github.com/openshift/ironic-image/pull/470)
* [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802): [4.15] Add requirements placeholders for cachito [#467](https://github.com/openshift/ironic-image/pull/467)
* [OCPBUGS-27772](https://issues.redhat.com/browse/OCPBUGS-27772): Update packages to include most recent bug fixes [#450](https://github.com/openshift/ironic-image/pull/450)
* [OCPBUGS-27060](https://issues.redhat.com/browse/OCPBUGS-27060): Fix Inspector iPXE config for IPv6 addresses [#447](https://github.com/openshift/ironic-image/pull/447)
* [OCPBUGS-24648](https://issues.redhat.com/browse/OCPBUGS-24648): Stuck deployment [#439](https://github.com/openshift/ironic-image/pull/439)
* [OCPBUGS-25606](https://issues.redhat.com/browse/OCPBUGS-25606): Relax packages requirements [#442](https://github.com/openshift/ironic-image/pull/442)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8820e32ef2642f38d44e378dd03b0ff10262da6d...943b1100380f2d3d02d524bbff2a8553cdde2718)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/1b2bae2c44e836fcde4df24e6f2075c38ed27140)
* [OCPBUGS-69782](https://issues.redhat.com/browse/OCPBUGS-69782): Bump eventlet version to 0.33.1-7 [#233](https://github.com/openshift/ironic-agent-image/pull/233)
* [OCPBUGS-39018](https://issues.redhat.com/browse/OCPBUGS-39018): Bump ironic-lib to fix utf8 decoding issue [#157](https://github.com/openshift/ironic-agent-image/pull/157)
* [OCPBUGS-39381](https://issues.redhat.com/browse/OCPBUGS-39381): Include fixes for CVE-2024-44082 [#162](https://github.com/openshift/ironic-agent-image/pull/162)
* [OCPBUGS-38512](https://issues.redhat.com/browse/OCPBUGS-38512): set webob and bump werkzeug [#150](https://github.com/openshift/ironic-agent-image/pull/150)
* [OCPBUGS-33133](https://issues.redhat.com/browse/OCPBUGS-33133): update ironic-lib with latest fixes [#131](https://github.com/openshift/ironic-agent-image/pull/131)
* [OCPBUGS-32173](https://issues.redhat.com/browse/OCPBUGS-32173): [4.15] Fix name in setup.cfg [#123](https://github.com/openshift/ironic-agent-image/pull/123)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add makefile [#126](https://github.com/openshift/ironic-agent-image/pull/126)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Install ironic-python-agent from source [#125](https://github.com/openshift/ironic-agent-image/pull/125)
* [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add requirements placeholders for cachito [#121](https://github.com/openshift/ironic-agent-image/pull/121)
* [OCPBUGS-30078](https://issues.redhat.com/browse/OCPBUGS-30078): [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config [#115](https://github.com/openshift/ironic-agent-image/pull/115)
* [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108)
* [OCPBUGS-27781](https://issues.redhat.com/browse/OCPBUGS-27781): Update ironic-python-agent with latest bug fixes [#105](https://github.com/openshift/ironic-agent-image/pull/105)
* [OCPBUGS-25351](https://issues.redhat.com/browse/OCPBUGS-25351): 502 proxy error [#99](https://github.com/openshift/ironic-agent-image/pull/99)
* [OCPBUGS-25684](https://issues.redhat.com/browse/OCPBUGS-25684): Relax packages requirements [#102](https://github.com/openshift/ironic-agent-image/pull/102)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/5f60db9c1a7fbbbd1364da33265e303472dda5f0...1b2bae2c44e836fcde4df24e6f2075c38ed27140)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/989bcb4f50a98c741f3c9c02c2f0fb118be216c8)
* [OCPBUGS-49836](https://issues.redhat.com/browse/OCPBUGS-49836): Fix subnet validation [#49](https://github.com/openshift/ironic-static-ip-manager/pull/49)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/f44e8a08c3d82378c8404ed7e3e8ab1f1fb3f28f...989bcb4f50a98c741f3c9c02c2f0fb118be216c8)
### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/34e201936898455995cd60c6699c6329a696f288)
* [OCPBUGS-35820](https://issues.redhat.com/browse/OCPBUGS-35820): Fix the podmetrics and nodemetrics command [#109](https://github.com/openshift/k8s-prometheus-adapter/pull/109)
* [OCPBUGS-32214](https://issues.redhat.com/browse/OCPBUGS-32214), [OCPBUGS-32215](https://issues.redhat.com/browse/OCPBUGS-32215): upgrade deps [#102](https://github.com/openshift/k8s-prometheus-adapter/pull/102)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/e4f859be4f56d1fc65138f99f5331baf17c15885...34e201936898455995cd60c6699c6329a696f288)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/87c23b5aa611556ff5013822c7779e6c7551a0f0)
* [OCPBUGS-19254](https://issues.redhat.com/browse/OCPBUGS-19254): Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#152](https://github.com/openshift/images/pull/152)
* [OCPBUGS-30413](https://issues.redhat.com/browse/OCPBUGS-30413): update unit tests in egress/dns-proxy [#168](https://github.com/openshift/images/pull/168)
* [Full changelog](https://github.com/openshift/images/compare/b58673a314f0e8253fabadada2ee1a9e5b11c5cf...87c23b5aa611556ff5013822c7779e6c7551a0f0)
### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/53680a50f8ca7bbcfa6c258c557c765fa6f8471a)
* [OCPBUGS-54868](https://issues.redhat.com/browse/OCPBUGS-54868): Handle `openshift-host-network` namespace as special when it modifies [#654](https://github.com/openshift/sdn/pull/654)
* [OCPBUGS-46576](https://issues.redhat.com/browse/OCPBUGS-46576): Get rid of deps.diff so it doesn't keep causing problems [4.15] [#646](https://github.com/openshift/sdn/pull/646)
* [OCPBUGS-45955](https://issues.redhat.com/browse/OCPBUGS-45955): Stop checking ruleVersion [4.16] [#644](https://github.com/openshift/sdn/pull/644)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): backport fix for network policy during live migration [#642](https://github.com/openshift/sdn/pull/642)
* [OCPBUGS-42171](https://issues.redhat.com/browse/OCPBUGS-42171): fix redundant router-default iptables rule [4.15] [#634](https://github.com/openshift/sdn/pull/634)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [OCPBUGS-27459](https://issues.redhat.com/browse/OCPBUGS-27459): Metrics: Add metric for multicast enabled netnamespaces [#606](https://github.com/openshift/sdn/pull/606)
* [OCPBUGS-24172](https://issues.redhat.com/browse/OCPBUGS-24172): Updating kube-proxy-container image to be consistent with ART [#592](https://github.com/openshift/sdn/pull/592)
* [Full changelog](https://github.com/openshift/sdn/compare/53fea06bf50bdeff168cdf1ca3f5e19375c56f02...53680a50f8ca7bbcfa6c258c557c765fa6f8471a)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)
* [OCPBUGS-31941](https://issues.redhat.com/browse/OCPBUGS-31941): bump golang.org/x/net [4.15] [#109](https://github.com/openshift/kube-rbac-proxy/pull/109)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/c38f4734c6b6931c75d46674122fb4b838b6e64b...9308e7f2a6d984fa7b8ddc125524d7b7356f92ce)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/037b59c265454c599dfb0829a856e14b1ab07896)
* [OCPBUGS-24158](https://issues.redhat.com/browse/OCPBUGS-24158): Updating kube-state-metrics-container image to be consistent with ART [#105](https://github.com/openshift/kube-state-metrics/pull/105)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/7861a865875eaa2b5ce956f842fd2b3bb588192a...037b59c265454c599dfb0829a856e14b1ab07896)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)
* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). [#228](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/228)
* [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/6f2133209d90d822e79d679ed483eeb755ceaaf8...a6a9ab1a765ea5bf5815e6b15a5a39840a03bb3e)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/dbaf9ea1edd5a953606a80cb45f723c934a73ded)
* [OCPBUGS-31801](https://issues.redhat.com/browse/OCPBUGS-31801): Bump opentelemetry [#39](https://github.com/openshift/cloud-provider-kubevirt/pull/39)
* [OCPBUGS-24118](https://issues.redhat.com/browse/OCPBUGS-24118): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#28](https://github.com/openshift/cloud-provider-kubevirt/pull/28)
* [OCPBUGS-22061](https://issues.redhat.com/browse/OCPBUGS-22061): Bump golang.org/x/net to v0.18.0 [#34](https://github.com/openshift/cloud-provider-kubevirt/pull/34)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3db76104a38bd9160ca24e2ed4a33649843f210a...dbaf9ea1edd5a953606a80cb45f723c934a73ded)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/23b66bfa19c2eae23dc9ef715f244e937dee9e64)
* fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver [#69](https://github.com/openshift/kubevirt-csi-driver/pull/69)
* [OCPBUGS-29793](https://issues.redhat.com/browse/OCPBUGS-29793): [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#33](https://github.com/openshift/kubevirt-csi-driver/pull/33)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d474c42ed4486f36cbcc8bfecac6b184483e92ee...23b66bfa19c2eae23dc9ef715f244e937dee9e64)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/416999a8de40238abc7be3b24e54857f8e5e97e6)
* [OCPBUGS-77197](https://issues.redhat.com/browse/OCPBUGS-77197): Fix incomplete vendor [#303](https://github.com/openshift/cluster-api-provider-libvirt/pull/303)
* [OCPBUGS-26506](https://issues.redhat.com/browse/OCPBUGS-26506): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 [#282](https://github.com/openshift/cluster-api-provider-libvirt/pull/282)
* [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272)
* [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/0e11df99c202c12d1d58dd6e46d3e6d50b2ad252...416999a8de40238abc7be3b24e54857f8e5e97e6)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d2712ea2ad4c4a93524ae363f617e1e82aa28458)
* [OCPBUGS-67989](https://issues.redhat.com/browse/OCPBUGS-67989): bumped logrus to v1.9.3 [#1460](https://github.com/openshift/machine-api-operator/pull/1460)
* [OCPBUGS-59861](https://issues.redhat.com/browse/OCPBUGS-59861): Updates GCP CredentialsRequest [#1397](https://github.com/openshift/machine-api-operator/pull/1397)
* [OCPBUGS-55410](https://issues.redhat.com/browse/OCPBUGS-55410), [OCPBUGS-55411](https://issues.redhat.com/browse/OCPBUGS-55411): Updates GCP credentials request [#1356](https://github.com/openshift/machine-api-operator/pull/1356)
* [OCPBUGS-53251](https://issues.redhat.com/browse/OCPBUGS-53251): add image/read permissions [#1349](https://github.com/openshift/machine-api-operator/pull/1349)
* [OCPBUGS-52481](https://issues.redhat.com/browse/OCPBUGS-52481): Drop oVirt support [#1340](https://github.com/openshift/machine-api-operator/pull/1340)
* [OCPBUGS-48105](https://issues.redhat.com/browse/OCPBUGS-48105): Vsphere: Handle cloned instance with lost taskID [#1321](https://github.com/openshift/machine-api-operator/pull/1321)
* [OCPBUGS-46080](https://issues.redhat.com/browse/OCPBUGS-46080): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1314](https://github.com/openshift/machine-api-operator/pull/1314)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#1288](https://github.com/openshift/machine-api-operator/pull/1288)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1261](https://github.com/openshift/machine-api-operator/pull/1261)
* [OCPBUGS-31949](https://issues.redhat.com/browse/OCPBUGS-31949): Update x/net to v0.24.0 [#1231](https://github.com/openshift/machine-api-operator/pull/1231)
* [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1222](https://github.com/openshift/machine-api-operator/pull/1222)
* [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Add AddWithActuatorOpts to allow overriding Machine controller options [#1209](https://github.com/openshift/machine-api-operator/pull/1209)
* [OCPBUGS-27405](https://issues.redhat.com/browse/OCPBUGS-27405): Add useExternalIp gcp permission [#1207](https://github.com/openshift/machine-api-operator/pull/1207)
* [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196)
* [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/0a4aa23ad99180a52233fea29f738350b7397273...d2712ea2ad4c4a93524ae363f617e1e82aa28458)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/717ca858c5e2c15c97f82b880ffc8b5b901fd59e)
* [OCPBUGS-77636](https://issues.redhat.com/browse/OCPBUGS-77636): Machine-config controller should not log about non-existent pull-secret changes [#5573](https://github.com/openshift/machine-config-operator/pull/5573)
* [OCPBUGS-60214](https://issues.redhat.com/browse/OCPBUGS-60214): [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host [#4988](https://github.com/openshift/machine-config-operator/pull/4988)
* [OCPBUGS-59737](https://issues.redhat.com/browse/OCPBUGS-59737): Remove MachineConfigNode CRD from manifests [#5188](https://github.com/openshift/machine-config-operator/pull/5188)
* [OCPBUGS-48284](https://issues.redhat.com/browse/OCPBUGS-48284): Do not run resolv-prepender from NM dispatcher [#4783](https://github.com/openshift/machine-config-operator/pull/4783)
* [OCPBUGS-57340](https://issues.redhat.com/browse/OCPBUGS-57340): Do not enable on-prem-resolv-prepender.path for UPI [#5115](https://github.com/openshift/machine-config-operator/pull/5115)
* [OCPBUGS-36688](https://issues.redhat.com/browse/OCPBUGS-36688): Add ipsec connect wait service [#4937](https://github.com/openshift/machine-config-operator/pull/4937)
* [OCPBUGS-54206](https://issues.redhat.com/browse/OCPBUGS-54206): Update format verbs for alert logs [#4943](https://github.com/openshift/machine-config-operator/pull/4943)
* [OCPBUGS-54176](https://issues.redhat.com/browse/OCPBUGS-54176): Update ObservedGeneration in KubeletConfig [#4944](https://github.com/openshift/machine-config-operator/pull/4944)
* [OCPBUGS-43742](https://issues.redhat.com/browse/OCPBUGS-43742): Soften haproxy timeout for kubeapi probe [#4663](https://github.com/openshift/machine-config-operator/pull/4663)
* [OCPBUGS-50526](https://issues.redhat.com/browse/OCPBUGS-50526): Add clarification to invalid maxUnavailable alert [#4842](https://github.com/openshift/machine-config-operator/pull/4842)
* [OCPBUGS-48583](https://issues.redhat.com/browse/OCPBUGS-48583): trying to wait for sub-contorllers [#4796](https://github.com/openshift/machine-config-operator/pull/4796)
* [OCPBUGS-46034](https://issues.redhat.com/browse/OCPBUGS-46034): Remove trailing periods from AWS provided hostnames [#4745](https://github.com/openshift/machine-config-operator/pull/4745)
* [OCPBUGS-44565](https://issues.redhat.com/browse/OCPBUGS-44565): Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously [#4702](https://github.com/openshift/machine-config-operator/pull/4702)
* [OCPBUGS-42137](https://issues.redhat.com/browse/OCPBUGS-42137): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4687](https://github.com/openshift/machine-config-operator/pull/4687)
* [OCPBUGS-44240](https://issues.redhat.com/browse/OCPBUGS-44240): Disable ESP offload for OVS attached interfaces [#4684](https://github.com/openshift/machine-config-operator/pull/4684)
* [MCO-1341](https://issues.redhat.com/browse/MCO-1341): Backport Telemetry to 4.15 [#4648](https://github.com/openshift/machine-config-operator/pull/4648)
* [OCPBUGS-42110](https://issues.redhat.com/browse/OCPBUGS-42110): Do not use 'restart' for 'oneshot' service [#4621](https://github.com/openshift/machine-config-operator/pull/4621)
* [OCPBUGS-43582](https://issues.redhat.com/browse/OCPBUGS-43582): Panic seen in CI job for MCC pod [#4653](https://github.com/openshift/machine-config-operator/pull/4653)
* [OCPBUGS-43575](https://issues.redhat.com/browse/OCPBUGS-43575): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4647](https://github.com/openshift/machine-config-operator/pull/4647)
* [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Make logging configurable for on-prem components [#4501](https://github.com/openshift/machine-config-operator/pull/4501)
* [OCPBUGS-32329](https://issues.redhat.com/browse/OCPBUGS-32329): Fix configure-ip-forwarding.sh [#4324](https://github.com/openshift/machine-config-operator/pull/4324)
* [OCPBUGS-37551](https://issues.redhat.com/browse/OCPBUGS-37551): On-Prem resolv prepender to watch for NM changes [#4499](https://github.com/openshift/machine-config-operator/pull/4499)
* [OCPBUGS-38712](https://issues.redhat.com/browse/OCPBUGS-38712): SCC-pinning for openshift workloads [#4540](https://github.com/openshift/machine-config-operator/pull/4540)
* [OCPBUGS-38370](https://issues.redhat.com/browse/OCPBUGS-38370): Revert "MCD-pull: run after network-online.target in Azure" [#4525](https://github.com/openshift/machine-config-operator/pull/4525)
* [OCPBUGS-37768](https://issues.redhat.com/browse/OCPBUGS-37768): Move StartLimitIntervalSec to Unit section [#4506](https://github.com/openshift/machine-config-operator/pull/4506)
* [OCPBUGS-37629](https://issues.redhat.com/browse/OCPBUGS-37629): Openshift uncordoned compute-node that was intentionally cordoned [#4495](https://github.com/openshift/machine-config-operator/pull/4495)
* [OCPBUGS-36863](https://issues.redhat.com/browse/OCPBUGS-36863): Copy RHEL9 binaries used in HCP [#4476](https://github.com/openshift/machine-config-operator/pull/4476)
* [OCPBUGS-35220](https://issues.redhat.com/browse/OCPBUGS-35220): Check both ready and health ingress endpoints [#4398](https://github.com/openshift/machine-config-operator/pull/4398)
* [OCPBUGS-30139](https://issues.redhat.com/browse/OCPBUGS-30139): [release-4.15] Use NM's dns-change event for resolv.conf [#4220](https://github.com/openshift/machine-config-operator/pull/4220)
* [OCPBUGS-36769](https://issues.redhat.com/browse/OCPBUGS-36769): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4461](https://github.com/openshift/machine-config-operator/pull/4461)
* [OCPBUGS-36550](https://issues.redhat.com/browse/OCPBUGS-36550): MCD-pull: run after network-online.target in Azure [#4454](https://github.com/openshift/machine-config-operator/pull/4454)
* [OCPBUGS-27436](https://issues.redhat.com/browse/OCPBUGS-27436): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4431](https://github.com/openshift/machine-config-operator/pull/4431)
* [OCPBUGS-36258](https://issues.redhat.com/browse/OCPBUGS-36258): daemon/update: disable systemd unit before overwriting [#4441](https://github.com/openshift/machine-config-operator/pull/4441)
* [OCPBUGS-32092](https://issues.redhat.com/browse/OCPBUGS-32092): Decrease logs of haproxy [#4313](https://github.com/openshift/machine-config-operator/pull/4313)
* [OCPBUGS-35010](https://issues.redhat.com/browse/OCPBUGS-35010): set required-scc for openshift workloads [#4393](https://github.com/openshift/machine-config-operator/pull/4393)
* [OCPBUGS-31461](https://issues.redhat.com/browse/OCPBUGS-31461): Remove weights from ingress check script [#4290](https://github.com/openshift/machine-config-operator/pull/4290)
* [OCPBUGS-33847](https://issues.redhat.com/browse/OCPBUGS-33847): If multiple hostnames are returned, use the first one for the Node name [#4373](https://github.com/openshift/machine-config-operator/pull/4373)
* [OCPBUGS-20152](https://issues.redhat.com/browse/OCPBUGS-20152): Don't error if the certs.d dir doesn't exist yet [#4358](https://github.com/openshift/machine-config-operator/pull/4358)
* [OCPBUGS-32922](https://issues.redhat.com/browse/OCPBUGS-32922): [release-4.15] add cluster fleet evaluation support to mco [#4334](https://github.com/openshift/machine-config-operator/pull/4334)
* [OCPBUGS-28926](https://issues.redhat.com/browse/OCPBUGS-28926): [4.15] crio: update pids limit to be -1 [#4163](https://github.com/openshift/machine-config-operator/pull/4163)
* [OCPBUGS-28545](https://issues.redhat.com/browse/OCPBUGS-28545): Delete state files on reboot only [#4311](https://github.com/openshift/machine-config-operator/pull/4311)
* [OCPBUGS-31820](https://issues.redhat.com/browse/OCPBUGS-31820): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4309](https://github.com/openshift/machine-config-operator/pull/4309)
* [OCPBUGS-27029](https://issues.redhat.com/browse/OCPBUGS-27029): Log network service output to console [#4113](https://github.com/openshift/machine-config-operator/pull/4113)
* [OCPBUGS-31646](https://issues.redhat.com/browse/OCPBUGS-31646): fix: resources were in the wrong indentation level [#4301](https://github.com/openshift/machine-config-operator/pull/4301)
* : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet's prestart [#4297](https://github.com/openshift/machine-config-operator/pull/4297)
* [OCPBUGS-30884](https://issues.redhat.com/browse/OCPBUGS-30884): Prevent OVS-configuration to run before kdump [#4259](https://github.com/openshift/machine-config-operator/pull/4259)
* [OCPBUGS-31383](https://issues.redhat.com/browse/OCPBUGS-31383): make verify should use MCO's kube version [#4282](https://github.com/openshift/machine-config-operator/pull/4282)
* [OCPBUGS-30971](https://issues.redhat.com/browse/OCPBUGS-30971): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4264](https://github.com/openshift/machine-config-operator/pull/4264)
* [OCPBUGS-29731](https://issues.redhat.com/browse/OCPBUGS-29731): Delete image openshift/openshift-proxy-pull-test [#4199](https://github.com/openshift/machine-config-operator/pull/4199)
* [OCPBUGS-30093](https://issues.redhat.com/browse/OCPBUGS-30093): Mount /run/nodeip-configuration into coredns containers [#4229](https://github.com/openshift/machine-config-operator/pull/4229)
* [OCPBUGS-30761](https://issues.redhat.com/browse/OCPBUGS-30761): add static pods for rbacproxy [#4252](https://github.com/openshift/machine-config-operator/pull/4252)
* [OCPBUGS-30017](https://issues.redhat.com/browse/OCPBUGS-30017): CRI-O: Add missing Devices annotation to CRI-O configuration [#4227](https://github.com/openshift/machine-config-operator/pull/4227)
* [OCPBUGS-29339](https://issues.redhat.com/browse/OCPBUGS-29339): annotate on-prem static pods for workload partitioning [#4179](https://github.com/openshift/machine-config-operator/pull/4179)
* [OCPBUGS-29797](https://issues.redhat.com/browse/OCPBUGS-29797): set nodeStatusReportFrequency [#4211](https://github.com/openshift/machine-config-operator/pull/4211)
* [OCPBUGS-29166](https://issues.redhat.com/browse/OCPBUGS-29166): ovs-configure: fix `vlan_parent` calculation [#4171](https://github.com/openshift/machine-config-operator/pull/4171)
* [OCPBUGS-29651](https://issues.redhat.com/browse/OCPBUGS-29651): nmstate, configure nmstate to keep service yamls [#4192](https://github.com/openshift/machine-config-operator/pull/4192)
* [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166)
* [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174)
* [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169)
* [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155)
* [OCPBUGS-28237](https://issues.redhat.com/browse/OCPBUGS-28237): daemon: allow the user to override drains on IR changes [#4148](https://github.com/openshift/machine-config-operator/pull/4148)
* [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Add Image Credential Provider flags for Kubelet on AWS [#4134](https://github.com/openshift/machine-config-operator/pull/4134)
* [OCPBUGS-27307](https://issues.redhat.com/browse/OCPBUGS-27307): Fix typo in AWS node env unit [#4130](https://github.com/openshift/machine-config-operator/pull/4130)
* [OCPBUGS-25424](https://issues.redhat.com/browse/OCPBUGS-25424): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4077](https://github.com/openshift/machine-config-operator/pull/4077)
* [OCPBUGS-26240](https://issues.redhat.com/browse/OCPBUGS-26240): Azure Run ovs-configuration.service before dnsmasq.service [#4101](https://github.com/openshift/machine-config-operator/pull/4101)
* [OCPBUGS-25948](https://issues.redhat.com/browse/OCPBUGS-25948): kubelet: fix kubelet labels [#4090](https://github.com/openshift/machine-config-operator/pull/4090)
* [OCPBUGS-25228](https://issues.redhat.com/browse/OCPBUGS-25228): crio: drop automatic image cleanup on upgrades [#4072](https://github.com/openshift/machine-config-operator/pull/4072)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/78fbacbd0f5193fd96d988dc861f92152ce9bbd2...717ca858c5e2c15c97f82b880ffc8b5b901fd59e)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/213f5c866a3ae996170f6a28ffb7048327ae66d2)
* [OCPBUGS-67983](https://issues.redhat.com/browse/OCPBUGS-67983): [4.15] uplift logrus [#154](https://github.com/openshift/image-customization-controller/pull/154)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/5460f7c3af5d8f6e63bff592373141bf23a3d192...213f5c866a3ae996170f6a28ffb7048327ae66d2)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b7f83c7d1c2df17f824f4e427433973b848f44cb)
* [OCPBUGS-54170](https://issues.redhat.com/browse/OCPBUGS-54170): Change rhcos release browser url [#58](https://github.com/openshift/machine-os-images/pull/58)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/a99847b4450d58dbd0e487dd7e834586cd3e9289...b7f83c7d1c2df17f824f4e427433973b848f44cb)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f19703f53dbf0943b02d42ec301af453dc7d697b)
* [OCPBUGS-74446](https://issues.redhat.com/browse/OCPBUGS-74446): [release-4.15] fix: upgrade lodash to remove vulnerable code [#907](https://github.com/openshift/monitoring-plugin/pull/907)
* [OCPBUGS-78493](https://issues.redhat.com/browse/OCPBUGS-78493): fix for CVE-2025-69873 [#850](https://github.com/openshift/monitoring-plugin/pull/850)
* [OCPBUGS-44393](https://issues.redhat.com/browse/OCPBUGS-44393): Manual cherry pick cross spawn 4.15 [#277](https://github.com/openshift/monitoring-plugin/pull/277)
* [OCPBUGS-43242](https://issues.redhat.com/browse/OCPBUGS-43242): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.15 [#218](https://github.com/openshift/monitoring-plugin/pull/218)
* [OU-417](https://issues.redhat.com/browse/OU-417): throw an error when a custom datasource is not found [#118](https://github.com/openshift/monitoring-plugin/pull/118)
* [OU-415](https://issues.redhat.com/browse/OU-415): Add datasource parameter to handle metrics from custom datasources [#116](https://github.com/openshift/monitoring-plugin/pull/116)
* [OCPBUGS-32097](https://issues.redhat.com/browse/OCPBUGS-32097): make createdBy mandatory and auto fill with the current user [#115](https://github.com/openshift/monitoring-plugin/pull/115)
* [OCPBUGS-31310](https://issues.redhat.com/browse/OCPBUGS-31310): upgrade sanitize-html vulnerable dependency [#107](https://github.com/openshift/monitoring-plugin/pull/107)
* [OCPBUGS-27202](https://issues.redhat.com/browse/OCPBUGS-27202): upgrade follow-redirects parent dependency [#94](https://github.com/openshift/monitoring-plugin/pull/94)
* [OU-318](https://issues.redhat.com/browse/OU-318): consider all metric keys to display all results on dashboards tables [#97](https://github.com/openshift/monitoring-plugin/pull/97)
* [OU-312](https://issues.redhat.com/browse/OU-312): Revert "fix default nginx path to look for static files" [#93](https://github.com/openshift/monitoring-plugin/pull/93)
* [OCPBUGS-25643](https://issues.redhat.com/browse/OCPBUGS-25643): On the alert details page, don't require all alert labels in URL [#89](https://github.com/openshift/monitoring-plugin/pull/89)
* [OCPBUGS-24658](https://issues.redhat.com/browse/OCPBUGS-24658): remove regex from console page route path so plugin pages are found [#85](https://github.com/openshift/monitoring-plugin/pull/85)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2d6815c5a861cecd98a4a29c08ae251f78a03b0a...f19703f53dbf0943b02d42ec301af453dc7d697b)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)
* [OCPBUGS-58769](https://issues.redhat.com/browse/OCPBUGS-58769): Update the github.com/golang/glog module to v1.2.4 [#104](https://github.com/openshift/multus-admission-controller/pull/104)
* [OCPBUGS-37727](https://issues.redhat.com/browse/OCPBUGS-37727): Update owners [#88](https://github.com/openshift/multus-admission-controller/pull/88)
* [OCPBUGS-24069](https://issues.redhat.com/browse/OCPBUGS-24069): Updating ose-multus-admission-controller-container image to be consistent with ART [#77](https://github.com/openshift/multus-admission-controller/pull/77)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/a15bf454ad4446cefdb708ea3f121d08a0df83ee...a2e3c6e5d5dcb6dd059f87a2f5a519482d955c45)
### [multus-cni](https://github.com/openshift/multus-cni/tree/d7c59498b60c2a93bfdfe49f2d9ab5c923239b66)
* [OCPBUGS-85252](https://issues.redhat.com/browse/OCPBUGS-85252): Fix server url in kubeconfig [#301](https://github.com/openshift/multus-cni/pull/301)
* no-issue: [release-4.15] Bump Go to 1.20 and fix CI build root image [#294](https://github.com/openshift/multus-cni/pull/294)
* [OCPBUGS-35047](https://issues.redhat.com/browse/OCPBUGS-35047): Update owners file [#240](https://github.com/openshift/multus-cni/pull/240)
* [OCPBUGS-35258](https://issues.redhat.com/browse/OCPBUGS-35258): Thick plugin should not wait for API readiness on CNI DEL [#242](https://github.com/openshift/multus-cni/pull/242)
* [OCPBUGS-33477](https://issues.redhat.com/browse/OCPBUGS-33477): Fix CNI cache update function to prevent nil access [#234](https://github.com/openshift/multus-cni/pull/234)
* [OCPBUGS-30237](https://issues.redhat.com/browse/OCPBUGS-30237): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#223](https://github.com/openshift/multus-cni/pull/223)
* [OCPBUGS-28271](https://issues.redhat.com/browse/OCPBUGS-28271): Fix SAST scan issues for multus-cni-container [4.15] [#219](https://github.com/openshift/multus-cni/pull/219)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#210](https://github.com/openshift/multus-cni/pull/210)
* [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206)
* [Full changelog](https://github.com/openshift/multus-cni/compare/89c3e1cc0eb7a7c8b0686916bfcb375edb78f7dd...d7c59498b60c2a93bfdfe49f2d9ab5c923239b66)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)
* Update owners (#58) [#58](https://github.com/openshift/multus-networkpolicy/pull/58)
* Updating ose-multus-networkpolicy-container image to be consistent with ART (#44) [#44](https://github.com/openshift/multus-networkpolicy/pull/44)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/f988f894ded7e6645a1b3cc0d6090601809d4e7c...b377b4b5fd3029cd5cabc773ca6223cabd6b2af7)
### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)
* [OCPBUGS-41804](https://issues.redhat.com/browse/OCPBUGS-41804): [release-4.15]Update owners [#59](https://github.com/openshift/route-override-cni/pull/59)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/73594f7759e76600c95601138ab5be4969978f63...1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/cfa4f975508177d8daee9652ca75fe16f9e5dc27)
* [OCPBUGS-55619](https://issues.redhat.com/browse/OCPBUGS-55619): Fixes leftover podref issue [#366](https://github.com/openshift/whereabouts-cni/pull/366)
* [OCPBUGS-37729](https://issues.redhat.com/browse/OCPBUGS-37729): Update owners [#305](https://github.com/openshift/whereabouts-cni/pull/305)
* [OCPBUGS-37813](https://issues.redhat.com/browse/OCPBUGS-37813), [OCPBUGS-37816](https://issues.redhat.com/browse/OCPBUGS-37816): [release-4.15] align api calls timeout and skip pods marked for deletion [#308](https://github.com/openshift/whereabouts-cni/pull/308)
* [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): [release-4.15] Return previous IP allocation for add cmd [#295](https://github.com/openshift/whereabouts-cni/pull/295)
* [OCPBUGS-35081](https://issues.redhat.com/browse/OCPBUGS-35081): [release-4.15] Use IP to identify orphaned allocation to be deleted [#288](https://github.com/openshift/whereabouts-cni/pull/288)
* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): Enable whereabouts-reconciler configuration 4.15 [#239](https://github.com/openshift/whereabouts-cni/pull/239)
* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Assignment error fix [#228](https://github.com/openshift/whereabouts-cni/pull/228)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/b8c8fc124b5933ae8bc08107b1d992bc607b325b...cfa4f975508177d8daee9652ca75fe16f9e5dc27)
### [must-gather](https://github.com/openshift/must-gather/tree/0f70f31cc6a01d849fef5262e20f934bf87a91ee)
* [OCPBUGS-36371](https://issues.redhat.com/browse/OCPBUGS-36371): Run ppc node collection in parallel [#430](https://github.com/openshift/must-gather/pull/430)
* [OCPBUGS-42970](https://issues.redhat.com/browse/OCPBUGS-42970): Collect etcd object count [#456](https://github.com/openshift/must-gather/pull/456)
* [OCPBUGS-48083](https://issues.redhat.com/browse/OCPBUGS-48083): Update owners [#474](https://github.com/openshift/must-gather/pull/474)
* [OCPBUGS-46451](https://issues.redhat.com/browse/OCPBUGS-46451): Support gathering IPsec data [#471](https://github.com/openshift/must-gather/pull/471)
* [OCPBUGS-43057](https://issues.redhat.com/browse/OCPBUGS-43057): [Relase-4.15] Multus is now a Pod and will be captured by normal [#450](https://github.com/openshift/must-gather/pull/450)
* [Full changelog](https://github.com/openshift/must-gather/compare/fd6cbc7b46924094c746ae024c80a4b8a5e57ce6...0f70f31cc6a01d849fef5262e20f934bf87a91ee)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/1b188fa1f7efdda0dafbdd409deed32450017dfc)
* [OCPBUGS-58779](https://issues.redhat.com/browse/OCPBUGS-58779): Bump github.com/golang/glog to v1.2.4 (#114) [#114](https://github.com/openshift/network-metrics-daemon/pull/114)
* [OCPBUGS-60374](https://issues.redhat.com/browse/OCPBUGS-60374): Replace e2e test image (#126) [#126](https://github.com/openshift/network-metrics-daemon/pull/126)
* swtich golint install method (#124) [#124](https://github.com/openshift/network-metrics-daemon/pull/124)
* Correct 4.16 owners file (#99) [#99](https://github.com/openshift/network-metrics-daemon/pull/99)
* Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) [#87](https://github.com/openshift/network-metrics-daemon/pull/87)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/1210db38beff72968f1227f10312a9086b1b914e...1b188fa1f7efdda0dafbdd409deed32450017dfc)
### [network-tools](https://github.com/openshift/network-tools/tree/17536c8dff76d50efb604187ba763020bd084771)
* [OCPBUGS-31764](https://issues.redhat.com/browse/OCPBUGS-31764): replace wireshark with wireshark-cli [#118](https://github.com/openshift/network-tools/pull/118)
* [Full changelog](https://github.com/openshift/network-tools/compare/234ed43e3e7b2cfcb76a19c80fcdb573a625309f...17536c8dff76d50efb604187ba763020bd084771)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/040d4e016058c188d2ba0a7575054ee44b94af9e)
* [OCPBUGS-22078](https://issues.redhat.com/browse/OCPBUGS-22078): bump golang.org/x/net to v0.17.0 [#40](https://github.com/openshift/cloud-provider-nutanix/pull/40)
* [OCPBUGS-23652](https://issues.redhat.com/browse/OCPBUGS-23652): Add Snyk file to exclude vendor directory on scan [#27](https://github.com/openshift/cloud-provider-nutanix/pull/27)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/28bf5963c7f82ae8d966a69562a19f038d819950...040d4e016058c188d2ba0a7575054ee44b94af9e)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/ec58a6114b305b91d9a476e5f29c98b1a059c2ad)
* [OCPBUGS-47264](https://issues.redhat.com/browse/OCPBUGS-47264): fixing CVE-2024-45338 [#117](https://github.com/openshift/machine-api-provider-nutanix/pull/117)
* [OCPBUGS-51850](https://issues.redhat.com/browse/OCPBUGS-51850): CVE-2025-22868 [#109](https://github.com/openshift/machine-api-provider-nutanix/pull/109)
* [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#81](https://github.com/openshift/machine-api-provider-nutanix/pull/81)
* [OCPBUGS-29548](https://issues.redhat.com/browse/OCPBUGS-29548): IPI install fails on Nutanix when using DHCP [#69](https://github.com/openshift/machine-api-provider-nutanix/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/2f2e121b6caea7073a5b7d64312f08f9d91233bb...ec58a6114b305b91d9a476e5f29c98b1a059c2ad)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/2a98b2ccd96215b432c018b817d238766613df5d)
* [OCPBUGS-74925](https://issues.redhat.com/browse/OCPBUGS-74925): bump kubernetes-apiserver to pick up loopback cert expiration update [#173](https://github.com/openshift/oauth-apiserver/pull/173)
* NO-JIRA: (chore): update OWNERS [#175](https://github.com/openshift/oauth-apiserver/pull/175)
* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#114](https://github.com/openshift/oauth-apiserver/pull/114)
* [OCPBUGS-31951](https://issues.redhat.com/browse/OCPBUGS-31951): bump x/net to 0.24.0 [#109](https://github.com/openshift/oauth-apiserver/pull/109)
* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#96](https://github.com/openshift/oauth-apiserver/pull/96)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/6f6120779248fcd0941c6d4f507f56e66cb06cc7...2a98b2ccd96215b432c018b817d238766613df5d)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2e0585db0922491e4ad26a969678df629c78c637)
* [OCPBUGS-61447](https://issues.redhat.com/browse/OCPBUGS-61447): Update x/crypto to v0.31.0 [#336](https://github.com/openshift/oauth-proxy/pull/336)
* [OCPBUGS-24067](https://issues.redhat.com/browse/OCPBUGS-24067): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#269](https://github.com/openshift/oauth-proxy/pull/269)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/565f7ed40b9ae8b3a0c146e0495334bd58b40d36...2e0585db0922491e4ad26a969678df629c78c637)
### [oauth-server](https://github.com/openshift/oauth-server/tree/c055dbb9a84e04575ade106e9a43cc638a8aeaef)
* [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#148](https://github.com/openshift/oauth-server/pull/148)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3739138c8ebbeb73f6e89f61591dd16a3ece32e3...c055dbb9a84e04575ade106e9a43cc638a8aeaef)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/18d55d6a096fa9713d9fbd8e9bd35f9c6112706d)
* [OCPBUGS-77858](https://issues.redhat.com/browse/OCPBUGS-77858): fix vendor for hermetic 4.15 [#1361](https://github.com/openshift/oc-mirror/pull/1361)
* And 17 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b137a53a5360a41a70432ea2bfc98a6cee6f7a4a...18d55d6a096fa9713d9fbd8e9bd35f9c6112706d)
### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd)
* [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44)
* [OCPBUGS-27586](https://issues.redhat.com/browse/OCPBUGS-27586), [OCPBUGS-27671](https://issues.redhat.com/browse/OCPBUGS-27671): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#39](https://github.com/openshift/operator-framework-catalogd/pull/39)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/79975a511e1d31a09ef9b3b9e01262c8c69ff633...035d3835e581bee8ba59ec8919b43c8d7ce4ecfd)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/303b954fa5a92e810aebbe55ab8fafe8dbc06c58)
* [OCPBUGS-27591](https://issues.redhat.com/browse/OCPBUGS-27591), [OCPBUGS-27676](https://issues.redhat.com/browse/OCPBUGS-27676): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#68](https://github.com/openshift/operator-framework-operator-controller/pull/68)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/80b8649cf7a57098d03eff0d155531cf63728f41...303b954fa5a92e810aebbe55ab8fafe8dbc06c58)
### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)
* : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79)
* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/282cc84cf92dc963f5fd719e103c91b6cc0e6dc6...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/38f778ce61623e5c7d473fb15593239d87a5dd32)
* [OCPBUGS-67998](https://issues.redhat.com/browse/OCPBUGS-67998): CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] [#611](https://github.com/openshift/openshift-apiserver/pull/611)
* [OCPBUGS-74923](https://issues.redhat.com/browse/OCPBUGS-74923): bump kubernetes-apiserver to pick up loopback cert expiration update [#600](https://github.com/openshift/openshift-apiserver/pull/600)
* [OCPBUGS-58822](https://issues.redhat.com/browse/OCPBUGS-58822): Fix image reference in TestImageStreamImportQuayIO [#517](https://github.com/openshift/openshift-apiserver/pull/517)
* [OCPBUGS-47766](https://issues.redhat.com/browse/OCPBUGS-47766): Pass expected type to deploymentconfig/scale object validation. [#466](https://github.com/openshift/openshift-apiserver/pull/466)
* [OCPBUGS-32444](https://issues.redhat.com/browse/OCPBUGS-32444): Bump golang/x/net to v0.23.0 [#428](https://github.com/openshift/openshift-apiserver/pull/428)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Bump openshift/api to get updated docs for UnservableInFutureVersions [#436](https://github.com/openshift/openshift-apiserver/pull/436)
* [OCPBUGS-31469](https://issues.redhat.com/browse/OCPBUGS-31469): vendor upgrade runtime-utils [#422](https://github.com/openshift/openshift-apiserver/pull/422)
* [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#413](https://github.com/openshift/openshift-apiserver/pull/413)
* [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0ad84b4cbf54ee8a8a09e32ebc15d4b9e4898f8e...38f778ce61623e5c7d473fb15593239d87a5dd32)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/110a10ad9c720400f87e3428354ccff051b70af3)
* [OCPBUGS-57761](https://issues.redhat.com/browse/OCPBUGS-57761): Set node-pullsecrets volume to read-only to protect image pull credentials [#396](https://github.com/openshift/openshift-controller-manager/pull/396)
* [OCPBUGS-56474](https://issues.redhat.com/browse/OCPBUGS-56474): Empty proxy variables are causing issues during the build [#383](https://github.com/openshift/openshift-controller-manager/pull/383)
* [OCPBUGS-54344](https://issues.redhat.com/browse/OCPBUGS-54344): Unable to look up the service account secrets for build [#370](https://github.com/openshift/openshift-controller-manager/pull/370)
* [OCPBUGS-48280](https://issues.redhat.com/browse/OCPBUGS-48280): Add team members to the OWNERS file [#359](https://github.com/openshift/openshift-controller-manager/pull/359)
* NO-JIRA: cleanup root and app OWNERS [#348](https://github.com/openshift/openshift-controller-manager/pull/348)
* [OCPBUGS-32871](https://issues.redhat.com/browse/OCPBUGS-32871): replaces deprecated square/go-jose wtih go-jose/go-jose [#333](https://github.com/openshift/openshift-controller-manager/pull/333)
* [OCPBUGS-41949](https://issues.redhat.com/browse/OCPBUGS-41949): Add adambkaplan as approver [#291](https://github.com/openshift/openshift-controller-manager/pull/291)
* [OCPBUGS-32807](https://issues.redhat.com/browse/OCPBUGS-32807), [OCPBUGS-33371](https://issues.redhat.com/browse/OCPBUGS-33371): Rollback state of managed image pull secrets after downgrade [#303](https://github.com/openshift/openshift-controller-manager/pull/303)
* [OCPBUGS-31490](https://issues.redhat.com/browse/OCPBUGS-31490): Bumps opentelemetry dependencies [#294](https://github.com/openshift/openshift-controller-manager/pull/294)
* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281)
* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/90f73f7ea939b221b79684ebe6d2feb843fc1f83...110a10ad9c720400f87e3428354ccff051b70af3)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/1915f64591a18c11138d10c00c50b3f5cff632ce)
* [OCPBUGS-24079](https://issues.redhat.com/browse/OCPBUGS-24079): Updating openshift-state-metrics-container image to be consistent with ART [#111](https://github.com/openshift/openshift-state-metrics/pull/111)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/59b8a0ffc0a472e819e0c30911201c34c85a4684...1915f64591a18c11138d10c00c50b3f5cff632ce)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/c44a604df76d9f889e8366387396d2cfdb5a6424)
* [OCPBUGS-68000](https://issues.redhat.com/browse/OCPBUGS-68000): CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] [#192](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/192)
* [OCPBUGS-36586](https://issues.redhat.com/browse/OCPBUGS-36586): Add config map hooks [#175](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/175)
* [OCPBUGS-34927](https://issues.redhat.com/browse/OCPBUGS-34927): Correct out-of-bounds check [#172](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/172)
* [OCPBUGS-32744](https://issues.redhat.com/browse/OCPBUGS-32744): Relax requirement to enable topology [#165](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/165)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7...c44a604df76d9f889e8366387396d2cfdb5a6424)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/232472ea527aa86764d93e77dc67b0c7db9cc050)
* [OCPBUGS-25859](https://issues.redhat.com/browse/OCPBUGS-25859): CARRY: Add Snyk security scan config [#299](https://github.com/openshift/cluster-api-provider-openstack/pull/299)
* [OCPBUGS-26208](https://issues.redhat.com/browse/OCPBUGS-26208): openshift/manifests: CloudCredential capability for CredentialsRequest [#297](https://github.com/openshift/cluster-api-provider-openstack/pull/297)
* 🐛 Persist API FloatingIP immediately on creation [#1846](https://github.com/openshift/cluster-api-provider-openstack/pull/1846)
* :bug: Fix potential panic during instance create [#1808](https://github.com/openshift/cluster-api-provider-openstack/pull/1808)
* fix --short flag is removed issue for CI [#1811](https://github.com/openshift/cluster-api-provider-openstack/pull/1811)
* 🐛 Only delete all ports when deleting cluster network [#1683](https://github.com/openshift/cluster-api-provider-openstack/pull/1683)
* 🌱Fix various issues with CRD generation [#1671](https://github.com/openshift/cluster-api-provider-openstack/pull/1671)
* 🌱Bump CAPI to v1.5.1 [#1667](https://github.com/openshift/cluster-api-provider-openstack/pull/1667)
* ⚠️ Merge all changes from main since v0.8.0-alpha.0 [#1664](https://github.com/openshift/cluster-api-provider-openstack/pull/1664)
* And 27 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/3b972b2bcb5c5d779ea4335faf71abab4d9e5a1c...232472ea527aa86764d93e77dc67b0c7db9cc050)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/bf81e212f644e7d09a66fd111566e71f0538851e)
* [OCPBUGS-78171](https://issues.redhat.com/browse/OCPBUGS-78171): hermetic 4.15 [#164](https://github.com/openshift/machine-api-provider-openstack/pull/164)
* [OCPBUGS-34665](https://issues.redhat.com/browse/OCPBUGS-34665): Failure to get bootstrap is non-fatal [#120](https://github.com/openshift/machine-api-provider-openstack/pull/120)
* [OCPBUGS-30857](https://issues.redhat.com/browse/OCPBUGS-30857): Ensure portSecurity is correctly set in the Port [#108](https://github.com/openshift/machine-api-provider-openstack/pull/108)
* [OCPBUGS-28326](https://issues.redhat.com/browse/OCPBUGS-28326): Add snyk configuration file [#105](https://github.com/openshift/machine-api-provider-openstack/pull/105)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/84d4c65669fd54d91e33bc378d7eb45a3974399a...bf81e212f644e7d09a66fd111566e71f0538851e)
### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/50081ce66f99566a5653202a6fc140691c99b2bd)
* [OCPBUGS-82056](https://issues.redhat.com/browse/OCPBUGS-82056): Drop github.com/distribution/distribution dep [#1303](https://github.com/openshift/operator-framework-olm/pull/1303)
* [OCPBUGS-61466](https://issues.redhat.com/browse/OCPBUGS-61466): [release-4.15] Add NetworkPolicy as a supported kind [#1051](https://github.com/openshift/operator-framework-olm/pull/1051)
* [OCPBUGS-61389](https://issues.redhat.com/browse/OCPBUGS-61389): [4.15] e2e stability fixes [#1084](https://github.com/openshift/operator-framework-olm/pull/1084)
* [OCPBUGS-57430](https://issues.redhat.com/browse/OCPBUGS-57430): reduce cache expiry frequency [release-4.19] [#1023](https://github.com/openshift/operator-framework-olm/pull/1023)
* [OCPBUGS-56463](https://issues.redhat.com/browse/OCPBUGS-56463): fix(olm): improve error logging for missing olm.managed label (#3558) [#1010](https://github.com/openshift/operator-framework-olm/pull/1010)
* [OCPBUGS-48662](https://issues.redhat.com/browse/OCPBUGS-48662): Fix concurrent namespace resolution [#948](https://github.com/openshift/operator-framework-olm/pull/948)
* [OCPBUGS-48697](https://issues.redhat.com/browse/OCPBUGS-48697): Fix excessive catalog source snapshots cause severe performance regression [#958](https://github.com/openshift/operator-framework-olm/pull/958)
* [OCPBUGS-46926](https://issues.redhat.com/browse/OCPBUGS-46926), [OCPBUGS-46933](https://issues.redhat.com/browse/OCPBUGS-46933), [OCPBUGS-47313](https://issues.redhat.com/browse/OCPBUGS-47313): x/net bump to v0.34.0 [release-4.15] [#940](https://github.com/openshift/operator-framework-olm/pull/940)
* [OCPBUGS-46479](https://issues.redhat.com/browse/OCPBUGS-46479): CRD upgrade existing CR validation fix [#917](https://github.com/openshift/operator-framework-olm/pull/917)
* [OCPBUGS-42114](https://issues.redhat.com/browse/OCPBUGS-42114): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata [#874](https://github.com/openshift/operator-framework-olm/pull/874)
* [OCPBUGS-41981](https://issues.redhat.com/browse/OCPBUGS-41981): (fix) registry pods do not come up again after node failure (#3366) [#868](https://github.com/openshift/operator-framework-olm/pull/868)
* [OCPBUGS-41819](https://issues.redhat.com/browse/OCPBUGS-41819): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#864](https://github.com/openshift/operator-framework-olm/pull/864)
* [OCPBUGS-41598](https://issues.redhat.com/browse/OCPBUGS-41598): Fix e2e flake: upgrade CRD with deprecated version [#862](https://github.com/openshift/operator-framework-olm/pull/862)
* [OCPBUGS-38383](https://issues.redhat.com/browse/OCPBUGS-38383): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#840](https://github.com/openshift/operator-framework-olm/pull/840)
* [OCPBUGS-38323](https://issues.redhat.com/browse/OCPBUGS-38323): Update junit report file name to show spec results on Test Grid [#839](https://github.com/openshift/operator-framework-olm/pull/839)
* [OCPBUGS-37677](https://issues.redhat.com/browse/OCPBUGS-37677): [release-4.15] Update e2e config and backport list of flakes [#829](https://github.com/openshift/operator-framework-olm/pull/829)
* [OCPBUGS-37554](https://issues.redhat.com/browse/OCPBUGS-37554): Set required-scc for openshift workloads [#828](https://github.com/openshift/operator-framework-olm/pull/828)
* [OCPBUGS-37017](https://issues.redhat.com/browse/OCPBUGS-37017): Bump github.com/containers/image/v5 [#823](https://github.com/openshift/operator-framework-olm/pull/823)
* [OCPBUGS-36812](https://issues.redhat.com/browse/OCPBUGS-36812): fix sorting unpack jobs [#817](https://github.com/openshift/operator-framework-olm/pull/817)
* [OCPBUGS-36451](https://issues.redhat.com/browse/OCPBUGS-36451): Can't install operator on 4.15 after uninstalling it on a prior version [#810](https://github.com/openshift/operator-framework-olm/pull/810)
* [OCPBUGS-36813](https://issues.redhat.com/browse/OCPBUGS-36813): [CARRY] perform operator apiService certificate validity checks directly [#819](https://github.com/openshift/operator-framework-olm/pull/819)
* [OCPBUGS-35305](https://issues.redhat.com/browse/OCPBUGS-35305): [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node [#779](https://github.com/openshift/operator-framework-olm/pull/779)
* [OCPBUGS-35720](https://issues.redhat.com/browse/OCPBUGS-35720): Warn and allow CRD upgrade if validation fails but webhook is specified [#789](https://github.com/openshift/operator-framework-olm/pull/789)
* [OCPBUGS-31939](https://issues.redhat.com/browse/OCPBUGS-31939), [OCPBUGS-31940](https://issues.redhat.com/browse/OCPBUGS-31940): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#747](https://github.com/openshift/operator-framework-olm/pull/747)
* [OCPBUGS-35229](https://issues.redhat.com/browse/OCPBUGS-35229): Unblock CI [#768](https://github.com/openshift/operator-framework-olm/pull/768)
* [OCPBUGS-32860](https://issues.redhat.com/browse/OCPBUGS-32860): UPSTREAM: <carry>: bump go-jose [#740](https://github.com/openshift/operator-framework-olm/pull/740)
* [OCPBUGS-32311](https://issues.redhat.com/browse/OCPBUGS-32311): [release-4.15]: Update if AlreadyExists [#736](https://github.com/openshift/operator-framework-olm/pull/736)
* [OCPBUGS-31842](https://issues.redhat.com/browse/OCPBUGS-31842): copy-content: delete destination dirs before copying (#3197) [#728](https://github.com/openshift/operator-framework-olm/pull/728)
* [OCPBUGS-31651](https://issues.redhat.com/browse/OCPBUGS-31651): [release-4.15] Correctly detect catalog image ID for extractContent catalog pods [#726](https://github.com/openshift/operator-framework-olm/pull/726)
* [OCPBUGS-30219](https://issues.redhat.com/browse/OCPBUGS-30219): bump otelgrpc to 0.46.0 [#712](https://github.com/openshift/operator-framework-olm/pull/712)
* [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711)
* [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707)
* [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710)
* NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694)
* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798): Fix snapshot failure, backport e2es [#670](https://github.com/openshift/operator-framework-olm/pull/670)
* [OCPBUGS-27435](https://issues.redhat.com/browse/OCPBUGS-27435): OCPBUGS-25989: operators/olm: filter RBAC lists by namespace [#664](https://github.com/openshift/operator-framework-olm/pull/664)
* [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648)
* [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643)
* NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642)
* [OCPBUGS-25367](https://issues.redhat.com/browse/OCPBUGS-25367): [CARRY] Fix panic issue when annotations map is nil [#636](https://github.com/openshift/operator-framework-olm/pull/636)
* [OCPBUGS-24121](https://issues.redhat.com/browse/OCPBUGS-24121): Updating operator-registry-container image to be consistent with ART [#621](https://github.com/openshift/operator-framework-olm/pull/621)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/49b453662f1eae64212bf12cc96ce7f327f342d1...50081ce66f99566a5653202a6fc140691c99b2bd)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5c7af29b454e253322d8650c7d125c842eca92c8)
* [OCPBUGS-68005](https://issues.redhat.com/browse/OCPBUGS-68005): CVE-2025-65637 fixed in logrus v1.9.3+ [#733](https://github.com/operator-framework/operator-marketplace/pull/733)
* [OCPBUGS-62221](https://issues.redhat.com/browse/OCPBUGS-62221): Remove Expect func so that the test case can use the retry logic [#672](https://github.com/operator-framework/operator-marketplace/pull/672)
* [OCPBUGS-62119](https://issues.redhat.com/browse/OCPBUGS-62119): Update memoryTarget on catalog source pods [#666](https://github.com/operator-framework/operator-marketplace/pull/666)
* [OCPBUGS-49428](https://issues.redhat.com/browse/OCPBUGS-49428): Upgrade golang.org/x/net [release-4.15] [#588](https://github.com/operator-framework/operator-marketplace/pull/588)
* [OCPBUGS-24144](https://issues.redhat.com/browse/OCPBUGS-24144): Updating marketplace-operator-container image to be consistent with ART [4.15] [#553](https://github.com/operator-framework/operator-marketplace/pull/553)
* [OCPBUGS-37524](https://issues.redhat.com/browse/OCPBUGS-37524): Set required-scc for openshift workloads [#570](https://github.com/operator-framework/operator-marketplace/pull/570)
* [OCPBUGS-32060](https://issues.redhat.com/browse/OCPBUGS-32060): update golang.org/x/net for CVE-2023-45288 [#564](https://github.com/operator-framework/operator-marketplace/pull/564)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5d0e13792f967e2809b99f2b4cb43b00e2e5ef8d...5c7af29b454e253322d8650c7d125c842eca92c8)
### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/4385a4ac61cf5693ab694d381f8f9e69a826cbe3)
* [OCPBUGS-68032](https://issues.redhat.com/browse/OCPBUGS-68032): Bump github.com/sirupsen/logrus to v1.8.3 [#144](https://github.com/openshift/ovirt-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/ede26b68639e90546599718bc052e471a0964dee...4385a4ac61cf5693ab694d381f8f9e69a826cbe3)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/001b26d3d149d45e94b00d3c03f2837623d63741)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-76403](https://issues.redhat.com/browse/OCPBUGS-76403): [release-4.15] Dockerfile: Unpin OVN and consume the latest from FDP [#2974](https://github.com/openshift/ovn-kubernetes/pull/2974)
* [OCPBUGS-56660](https://issues.redhat.com/browse/OCPBUGS-56660), [OCPBUGS-58162](https://issues.redhat.com/browse/OCPBUGS-58162): Unpin OVS patch versions #2649 [#2649](https://github.com/openshift/ovn-kubernetes/pull/2649)
* [OCPBUGS-56419](https://issues.redhat.com/browse/OCPBUGS-56419): Update to FDP25.A.1 24.03.5-40. [#2573](https://github.com/openshift/ovn-kubernetes/pull/2573)
* [OCPBUGS-50583](https://issues.redhat.com/browse/OCPBUGS-50583): Bump OVN to 23.09.6-12 to consume fix for FDP-905 [#2454](https://github.com/openshift/ovn-kubernetes/pull/2454)
* [OCPBUGS-53384](https://issues.redhat.com/browse/OCPBUGS-53384): [release-4.15] Dockerfile.base: bump OVS version to 3.3 [#2492](https://github.com/openshift/ovn-kubernetes/pull/2492)
* [OCPBUGS-43605](https://issues.redhat.com/browse/OCPBUGS-43605): Add SDN node subnet gateway IP to host-network address_set [#2419](https://github.com/openshift/ovn-kubernetes/pull/2419)
* [OCPBUGS-46403](https://issues.redhat.com/browse/OCPBUGS-46403): Add static route to the hairpin masquerade IPs to pod [#2396](https://github.com/openshift/ovn-kubernetes/pull/2396)
* [OCPBUGS-47799](https://issues.redhat.com/browse/OCPBUGS-47799): Let OVN-northd bind remote ports [#2407](https://github.com/openshift/ovn-kubernetes/pull/2407)
* [OCPBUGS-44708](https://issues.redhat.com/browse/OCPBUGS-44708): Add hybird overlay pod IPs to the namespace address_set [#2399](https://github.com/openshift/ovn-kubernetes/pull/2399)
* [OCPBUGS-45097](https://issues.redhat.com/browse/OCPBUGS-45097): pin libreswan to 4.6-3.el9_0.3 [#2374](https://github.com/openshift/ovn-kubernetes/pull/2374)
* [OCPBUGS-44782](https://issues.redhat.com/browse/OCPBUGS-44782): Bump ovs to 3.1.0-137 [#2359](https://github.com/openshift/ovn-kubernetes/pull/2359)
* [OCPBUGS-42943](https://issues.redhat.com/browse/OCPBUGS-42943): Fix egress gateway pod cleanup for remote zone pods. [#2342](https://github.com/openshift/ovn-kubernetes/pull/2342)
* [OCPBUGS-41838](https://issues.redhat.com/browse/OCPBUGS-41838): Use more exact name match when deleting static routes to HO nodes. [#2298](https://github.com/openshift/ovn-kubernetes/pull/2298)
* [OCPBUGS-42780](https://issues.redhat.com/browse/OCPBUGS-42780): Add subnet overlap check for transit switch subnet [#2313](https://github.com/openshift/ovn-kubernetes/pull/2313)
* [OCPBUGS-41340](https://issues.redhat.com/browse/OCPBUGS-41340): Delete EgressIP LRP stale nexthops when node is not found [#2288](https://github.com/openshift/ovn-kubernetes/pull/2288)
* [OCPBUGS-38262](https://issues.redhat.com/browse/OCPBUGS-38262): [release-4.15] Bump OVSDBTimeout and make it configurable. [#2252](https://github.com/openshift/ovn-kubernetes/pull/2252)
* [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix registering northd metrics on appropriate nodes [#2246](https://github.com/openshift/ovn-kubernetes/pull/2246)
* [OCPBUGS-37196](https://issues.redhat.com/browse/OCPBUGS-37196): [release-4.15] ovspinning: Set affinity of each thread [#2235](https://github.com/openshift/ovn-kubernetes/pull/2235)
* [OCPBUGS-35902](https://issues.redhat.com/browse/OCPBUGS-35902): Bump ovn to 23.09.4-16 [#2216](https://github.com/openshift/ovn-kubernetes/pull/2216)
* [OCPBUGS-36382](https://issues.redhat.com/browse/OCPBUGS-36382): Handle IP fragments in SGW mode [#2215](https://github.com/openshift/ovn-kubernetes/pull/2215)
* [OCPBUGS-33619](https://issues.redhat.com/browse/OCPBUGS-33619): EgressIP: Reload certificates for the grpc heatlhcheck server [#2167](https://github.com/openshift/ovn-kubernetes/pull/2167)
* [OCPBUGS-33623](https://issues.redhat.com/browse/OCPBUGS-33623), [OCPBUGS-33624](https://issues.redhat.com/browse/OCPBUGS-33624): Improve CI signal by removing/suppressing signals [#2168](https://github.com/openshift/ovn-kubernetes/pull/2168)
* [OCPBUGS-31814](https://issues.redhat.com/browse/OCPBUGS-31814): ipv6+all protocols conntrack flush [#2131](https://github.com/openshift/ovn-kubernetes/pull/2131)
* [OCPBUGS-34404](https://issues.redhat.com/browse/OCPBUGS-34404): [release-4.15] dns: fix deadlock in case of error [#2182](https://github.com/openshift/ovn-kubernetes/pull/2182)
* [OCPBUGS-33294](https://issues.redhat.com/browse/OCPBUGS-33294): Reuse node-subnet from cache if exists [#2163](https://github.com/openshift/ovn-kubernetes/pull/2163)
* [OCPBUGS-33960](https://issues.redhat.com/browse/OCPBUGS-33960): Egressip garp fix 4.15 [#2175](https://github.com/openshift/ovn-kubernetes/pull/2175)
* [OCPBUGS-30899](https://issues.redhat.com/browse/OCPBUGS-30899): use a forked version of j-keck/arping that fixes a threading issue [#2105](https://github.com/openshift/ovn-kubernetes/pull/2105)
* [OCPBUGS-32426](https://issues.redhat.com/browse/OCPBUGS-32426): [release-4.15] Improves service iptables efficiency on start up [#2156](https://github.com/openshift/ovn-kubernetes/pull/2156)
* [Release 4.15] OCPBUGS-32986: Bump OVS [#2147](https://github.com/openshift/ovn-kubernetes/pull/2147)
* [OCPBUGS-27852](https://issues.redhat.com/browse/OCPBUGS-27852): [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2025](https://github.com/openshift/ovn-kubernetes/pull/2025)
* [OCPBUGS-29316](https://issues.redhat.com/browse/OCPBUGS-29316): [release-4.15] Ignore missing live migratable pod annotation on AddNode [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065)
* [OCPBUGS-32202](https://issues.redhat.com/browse/OCPBUGS-32202): [release-4.15] Bump OVN to 23.09.0-139 [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121)
* [OCPBUGS-33020](https://issues.redhat.com/browse/OCPBUGS-33020): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2141](https://github.com/openshift/ovn-kubernetes/pull/2141)
* [OCPBUGS-32154](https://issues.redhat.com/browse/OCPBUGS-32154): Custom v4 and v6 transit switch subnets while creating kind cluster [#2094](https://github.com/openshift/ovn-kubernetes/pull/2094)
* [OCPBUGS-31081](https://issues.redhat.com/browse/OCPBUGS-31081): Periodically check the ovnkube-node certificate is not expired [#2099](https://github.com/openshift/ovn-kubernetes/pull/2099)
* [OCPBUGS-31033](https://issues.redhat.com/browse/OCPBUGS-31033): Remove OVN topology version reporting/detection [#2098](https://github.com/openshift/ovn-kubernetes/pull/2098)
* [OCPBUGS-31500](https://issues.redhat.com/browse/OCPBUGS-31500), [OCPBUGS-31501](https://issues.redhat.com/browse/OCPBUGS-31501): EIP multi NIC IPv6 support and default route with next hop [#2103](https://github.com/openshift/ovn-kubernetes/pull/2103)
* [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050)
* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [OCPBUGS-27255](https://issues.redhat.com/browse/OCPBUGS-27255): Ensure session affinity cleanup on backend removal [#2020](https://github.com/openshift/ovn-kubernetes/pull/2020)
* [OCPBUGS-25938](https://issues.redhat.com/browse/OCPBUGS-25938): CARRY: Updates owners and adds Surya [#2005](https://github.com/openshift/ovn-kubernetes/pull/2005)
* [OCPBUGS-25395](https://issues.redhat.com/browse/OCPBUGS-25395): [release-4.15] Update namespace-owned port group (that used to be managed by multicast) [#1998](https://github.com/openshift/ovn-kubernetes/pull/1998)
* [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* [OCPBUGS-25700](https://issues.redhat.com/browse/OCPBUGS-25700), [OCPBUGS-25701](https://issues.redhat.com/browse/OCPBUGS-25701): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1994](https://github.com/openshift/ovn-kubernetes/pull/1994)
* [OCPBUGS-24610](https://issues.redhat.com/browse/OCPBUGS-24610): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1963](https://github.com/openshift/ovn-kubernetes/pull/1963)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5b36fd8eb481809b4d2e2d65c5a6ce8f03407749...001b26d3d149d45e94b00d3c03f2837623d63741)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5)
* [OCPBUGS-36096](https://issues.redhat.com/browse/OCPBUGS-36096): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#89](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/89)
* [OCPBUGS-33622](https://issues.redhat.com/browse/OCPBUGS-33622): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 [#80](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/80)
* [OCPBUGS-25978](https://issues.redhat.com/browse/OCPBUGS-25978): Rebase with upstream: Fix snyk code issue: Path Traversal [#71](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/26162badb8422f36d9b52fac8467d48bf6078f5a...38bee567a703d3d5ab2ca6e1e047eea8e799c3c5)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/766c2e6af74efa696364cef21c2b9915ed886e42)
* [OCPBUGS-68006](https://issues.redhat.com/browse/OCPBUGS-68006): Fix CVE-2025-65637 by bumping logrus to v1.9.1 [#99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/99)
* [OCPBUGS-25714](https://issues.redhat.com/browse/OCPBUGS-25714): snyk: ignore vendor dir [#59](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/59)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#56](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/56)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525...766c2e6af74efa696364cef21c2b9915ed886e42)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/1d6a7ed991427b1c8048b0b44b706228e5c2a001)
* [OCPBUGS-36106](https://issues.redhat.com/browse/OCPBUGS-36106): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 [#74](https://github.com/openshift/cloud-provider-powervs/pull/74)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/20e6dc70d665e5d085df17d757a07e17c0e18fe0...1d6a7ed991427b1c8048b0b44b706228e5c2a001)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/5c68b044b7fc3e70e39f6d67e4df440d8206d929)
* [OCPBUGS-61702](https://issues.redhat.com/browse/OCPBUGS-61702): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#128](https://github.com/openshift/machine-api-provider-powervs/pull/128)
* [OCPBUGS-54753](https://issues.redhat.com/browse/OCPBUGS-54753): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 [#115](https://github.com/openshift/machine-api-provider-powervs/pull/115)
* [OCPBUGS-41977](https://issues.redhat.com/browse/OCPBUGS-41977): Update go.mod to fix CVE - 4.15 [#85](https://github.com/openshift/machine-api-provider-powervs/pull/85)
* [OCPBUGS-26555](https://issues.redhat.com/browse/OCPBUGS-26555): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#72](https://github.com/openshift/machine-api-provider-powervs/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/2bfcc0f832d5237690ea900996e7679a5b5f0cd7...5c68b044b7fc3e70e39f6d67e4df440d8206d929)
### [prometheus](https://github.com/openshift/prometheus/tree/79fa623a51580ca0cfc30609b27da0a56a4f2282)
* [OCPBUGS-56740](https://issues.redhat.com/browse/OCPBUGS-56740): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#256](https://github.com/openshift/prometheus/pull/256)
* [OCPBUGS-43669](https://issues.redhat.com/browse/OCPBUGS-43669): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#233](https://github.com/openshift/prometheus/pull/233)
* [Full changelog](https://github.com/openshift/prometheus/compare/e9fa80af084868b1e0f69e35b69e8ebca5ae1ddc...79fa623a51580ca0cfc30609b27da0a56a4f2282)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/7dd2d96be59404ff22748eb9f0a853da5b238572)
* [OCPBUGS-77058](https://issues.redhat.com/browse/OCPBUGS-77058): Include go-verify-deps expected files in gitignore [#117](https://github.com/openshift/prometheus-alertmanager/pull/117)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/013dd1abf97523078d57d3170c22befd951fb062...7dd2d96be59404ff22748eb9f0a853da5b238572)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/902436ac6a8eec8f2f3f8b91f519a3d319924833)
* [OCPBUGS-38400](https://issues.redhat.com/browse/OCPBUGS-38400): feat: sync proxy settings in Alertmanager configuration [#300](https://github.com/openshift/prometheus-operator/pull/300)
* [OCPBUGS-36719](https://issues.redhat.com/browse/OCPBUGS-36719): add proxyURL validation for smon,pmon and probe [#298](https://github.com/openshift/prometheus-operator/pull/298)
* [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276)
* [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/c7262a43c0ddf2adc6be3863ac9a5056cb89c177...902436ac6a8eec8f2f3f8b91f519a3d319924833)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/57a122c2a6c6a2fe0c6ab11946859c435cf593b9)
* [OCPBUGS-68019](https://issues.redhat.com/browse/OCPBUGS-68019): update logrus to v1.9.1 [#321](https://github.com/openshift/service-ca-operator/pull/321)
* [OCPBUGS-34797](https://issues.redhat.com/browse/OCPBUGS-34797): set required-scc for openshift workloads [#243](https://github.com/openshift/service-ca-operator/pull/243)
* [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/538c7b98a689e573b61e1abb1cb649da470c5fac...57a122c2a6c6a2fe0c6ab11946859c435cf593b9)
### [telemeter](https://github.com/openshift/telemeter/tree/14489f7dc656175e11a3ef962fcbcd113b3651a9)
* [OCPBUGS-34831](https://issues.redhat.com/browse/OCPBUGS-34831): fix issuer check during JWT authentication for 4.15 [#538](https://github.com/openshift/telemeter/pull/538)
* : OCPBUGS-35076: Release Fix CVE go-jose [#542](https://github.com/openshift/telemeter/pull/542)
* [OCPBUGS-32890](https://issues.redhat.com/browse/OCPBUGS-32890): CVE-2024-28180 bump go-jose to v3.0.3 [#531](https://github.com/openshift/telemeter/pull/531)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515)
* [Full changelog](https://github.com/openshift/telemeter/compare/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a...14489f7dc656175e11a3ef962fcbcd113b3651a9)
### [tests](https://github.com/openshift/origin/tree/8acddbb71da35dcc067d5009b72ad5917674faf9)
* [OCPBUGS-74300](https://issues.redhat.com/browse/OCPBUGS-74300): Skip E2e: attach on previously attached volumes should work [#30725](https://github.com/openshift/origin/pull/30725)
* [OCPBUGS-66329](https://issues.redhat.com/browse/OCPBUGS-66329): Replace RunHostCmd with Exec function to censor bearer token being exposed [#30528](https://github.com/openshift/origin/pull/30528)
* [OCPBUGS-57335](https://issues.redhat.com/browse/OCPBUGS-57335): Fix regex parser for censoring private key [#29913](https://github.com/openshift/origin/pull/29913)
* [OCPBUGS-61229](https://issues.redhat.com/browse/OCPBUGS-61229): images/tests: Remove rteval [#30207](https://github.com/openshift/origin/pull/30207)
* [OCPBUGS-57136](https://issues.redhat.com/browse/OCPBUGS-57136): aws/edge: prevent test using unschedulable nodes [#29897](https://github.com/openshift/origin/pull/29897)
* [OCPBUGS-55477](https://issues.redhat.com/browse/OCPBUGS-55477): support provider type external [#29739](https://github.com/openshift/origin/pull/29739)
* NO-JIRA: Sync OWNERS from main branch [#29856](https://github.com/openshift/origin/pull/29856)
* [OCPBUGS-55695](https://issues.redhat.com/browse/OCPBUGS-55695): [build] Ensure Git Clone Does Not Run Privileged [#29752](https://github.com/openshift/origin/pull/29752)
* [OCPBUGS-54769](https://issues.redhat.com/browse/OCPBUGS-54769): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29664](https://github.com/openshift/origin/pull/29664)
* [OCPBUGS-52582](https://issues.redhat.com/browse/OCPBUGS-52582): Use payload pullspec for image info test [#29590](https://github.com/openshift/origin/pull/29590)
* [OCPBUGS-41614](https://issues.redhat.com/browse/OCPBUGS-41614): Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [#29502](https://github.com/openshift/origin/pull/29502)
* [OCPBUGS-49647](https://issues.redhat.com/browse/OCPBUGS-49647): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29503](https://github.com/openshift/origin/pull/29503)
* [OCPBUGS-48749](https://issues.redhat.com/browse/OCPBUGS-48749): Add/remove team members to the OWNERS file for Builds [#29551](https://github.com/openshift/origin/pull/29551)
* [OCPBUGS-44106](https://issues.redhat.com/browse/OCPBUGS-44106): Adjust createDNSPod() to support hypershift dual-stack test [#29257](https://github.com/openshift/origin/pull/29257)
* [OCPBUGS-38086](https://issues.redhat.com/browse/OCPBUGS-38086): vertical scaling test should not rely on CPMS replicas [#28985](https://github.com/openshift/origin/pull/28985)
* [OCPBUGS-39136](https://issues.redhat.com/browse/OCPBUGS-39136): Bump timeout for the pod-network-service endpoints check [#29053](https://github.com/openshift/origin/pull/29053)
* [OCPBUGS-38787](https://issues.redhat.com/browse/OCPBUGS-38787): [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28994](https://github.com/openshift/origin/pull/28994)
* [OCPBUGS-36264](https://issues.redhat.com/browse/OCPBUGS-36264): add Proxy config [#28912](https://github.com/openshift/origin/pull/28912)
* [OCPBUGS-37630](https://issues.redhat.com/browse/OCPBUGS-37630): remove unused in-cluster monitoring code [#28956](https://github.com/openshift/origin/pull/28956)
* #28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary [#28898](https://github.com/openshift/origin/pull/28898)
* [OCPBUGS-36724](https://issues.redhat.com/browse/OCPBUGS-36724): Removes dependency on samples operator images [#28927](https://github.com/openshift/origin/pull/28927)
* [OCPBUGS-36319](https://issues.redhat.com/browse/OCPBUGS-36319): Only look for thanos connections to platform monitoring stack [#28915](https://github.com/openshift/origin/pull/28915)
* [OCPBUGS-34949](https://issues.redhat.com/browse/OCPBUGS-34949): test/extended: skip etcd leader change check on hypershift [#28919](https://github.com/openshift/origin/pull/28919)
* [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add test for UpgradeValidation contention [#28820](https://github.com/openshift/origin/pull/28820)
* [OCPBUGS-33368](https://issues.redhat.com/browse/OCPBUGS-33368): [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs [#28821](https://github.com/openshift/origin/pull/28821)
* #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28791](https://github.com/openshift/origin/pull/28791)
* [OCPBUGS-26520](https://issues.redhat.com/browse/OCPBUGS-26520): Kuryr: Ignore Upgradeable=False on operators tests [#28512](https://github.com/openshift/origin/pull/28512)
* [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#28780](https://github.com/openshift/origin/pull/28780)
* [OCPBUGS-33541](https://issues.redhat.com/browse/OCPBUGS-33541): Adjust the method of get the apiServer (release-4.15) [#28762](https://github.com/openshift/origin/pull/28762)
* [OCPBUGS-33473](https://issues.redhat.com/browse/OCPBUGS-33473): [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs [#28666](https://github.com/openshift/origin/pull/28666)
* : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test [#28724](https://github.com/openshift/origin/pull/28724)
* [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Use centos7 tag instead of latest for cmd images tests [#28688](https://github.com/openshift/origin/pull/28688)
* [OCPBUGS-30892](https://issues.redhat.com/browse/OCPBUGS-30892): fix panic on non-standard node-role labels [#28656](https://github.com/openshift/origin/pull/28656)
* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637)
* [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633)
* [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610)
* [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545)
* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28549](https://github.com/openshift/origin/pull/28549)
* [OCPBUGS-27348](https://issues.redhat.com/browse/OCPBUGS-27348): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28531](https://github.com/openshift/origin/pull/28531)
* fix jira components to match actual jira components [#28455](https://github.com/openshift/origin/pull/28455)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28533](https://github.com/openshift/origin/pull/28533)
* [OCPBUGS-27217](https://issues.redhat.com/browse/OCPBUGS-27217): [4.15] Live migration suite e2e [#28524](https://github.com/openshift/origin/pull/28524)
* [OCPBUGS-26043](https://issues.redhat.com/browse/OCPBUGS-26043): Adding test case for when exceed openshift.io/image-tags will ban to … [#28492](https://github.com/openshift/origin/pull/28492)
* [OCPBUGS-25724](https://issues.redhat.com/browse/OCPBUGS-25724): Cherrypick Ruby 3.0 ImageStream Fix [#28483](https://github.com/openshift/origin/pull/28483)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28520](https://github.com/openshift/origin/pull/28520)
* [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504)
* [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506)
* [Full changelog](https://github.com/openshift/origin/compare/3a9e3762f33a64340ca3271282a15246fb73307e...8acddbb71da35dcc067d5009b72ad5917674faf9)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/429abecf805b4a6876c576f3f1c572866e23f235)
* [OCPBUGS-78030](https://issues.redhat.com/browse/OCPBUGS-78030): hermetic migration 4.15 [#108](https://github.com/openshift/cloud-provider-vsphere/pull/108)
* [OCPBUGS-37659](https://issues.redhat.com/browse/OCPBUGS-37659): Bump otelgrpc to v0.49.0 [#71](https://github.com/openshift/cloud-provider-vsphere/pull/71)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/54af90db28cb799836ebce77ae9a266f106d8cc5...429abecf805b4a6876c576f3f1c572866e23f235)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c0212e3276d0270d369d306317026a87d727d180)
* [OCPBUGS-78021](https://issues.redhat.com/browse/OCPBUGS-78021): hermetic migration 4.15 [#87](https://github.com/openshift/cluster-api-provider-vsphere/pull/87)
* [OCPBUGS-61654](https://issues.redhat.com/browse/OCPBUGS-61654): Fix unit tests [#73](https://github.com/openshift/cluster-api-provider-vsphere/pull/73)
* [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#38](https://github.com/openshift/cluster-api-provider-vsphere/pull/38)
* [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/dc5cdf19ea688fbbd2bceb7209d09611647a9d51...c0212e3276d0270d369d306317026a87d727d180)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/870ede98a449b038c0c3c2fd058bb4580e17d9ab)
* [OCPBUGS-68022](https://issues.redhat.com/browse/OCPBUGS-68022): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 [#159](https://github.com/openshift/vmware-vsphere-csi-driver/pull/159)
* [OCPBUGS-33604](https://issues.redhat.com/browse/OCPBUGS-33604): FailedPrecondition volume does not appear staged [#118](https://github.com/openshift/vmware-vsphere-csi-driver/pull/118)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5a7e624152717123899ac967d24be592456da44b...870ede98a449b038c0c3c2fd058bb4580e17d9ab)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/cb86a71f40db49e599591fd59a70ffc56a7fa99f)
* [OCPBUGS-68020](https://issues.redhat.com/browse/OCPBUGS-68020), [OCPBUGS-68024](https://issues.redhat.com/browse/OCPBUGS-68024): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#323](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/323)
* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/7940ea1685dee6d3f29a6360dac9a82dd1b09230...cb86a71f40db49e599591fd59a70ffc56a7fa99f)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/b5411c84f19f7b7eb550a9ea5eff273bec67c7ce)
* [OCPBUGS-68031](https://issues.redhat.com/browse/OCPBUGS-68031): bump github.com/sirupsen/logrus to v1.9.3 [#201](https://github.com/openshift/vsphere-problem-detector/pull/201)
* [OCPBUGS-37760](https://issues.redhat.com/browse/OCPBUGS-37760): Drop event when CheckDefaultDatastore fails [#170](https://github.com/openshift/vsphere-problem-detector/pull/170)
* [OCPBUGS-35732](https://issues.redhat.com/browse/OCPBUGS-35732): Fix missing failure-domains [#161](https://github.com/openshift/vsphere-problem-detector/pull/161)
* [OCPBUGS-25648](https://issues.redhat.com/browse/OCPBUGS-25648): Fix VPD crash when vm is not found [#149](https://github.com/openshift/vsphere-problem-detector/pull/149)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/34a9237a6b8b23b5056be2158b6cfe8679038140...b5411c84f19f7b7eb550a9ea5eff273bec67c7ce)