# 4.17.34

Created: 2025-06-19 14:17:12 +0000 UTC

Image Digest: `sha256:8b32e036f2a0a18fc48e26de96d491ef89d225958c63cf284fefe5b881117e2f`


## Changes from 4.17.2

### Components

* Kubectl upgraded from 1.30.2 to 1.30.5
* Kubernetes upgraded from 1.30.5 to 1.30.12
* Kubernetes Tests upgraded from 1.30.0 to 1.30.12
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202410160352-0 to 417.94.202506170509-0


### New images

* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:70c1800f3047ba6181b2addd8987a4f549c40158356df3d6daefd16193ad64cc`


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:53441e28c964665b59146469f15591b29d4840e1ad17956e701b3f4e7ec57b21`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9d401670](https://github.com/openshift/aws-encryption-provider/commit/9d4016701d355cd3a47f5ebe10f266d8971febc6) `sha256:2f399966e1597bdbafdae4d0c984d50af20ae64c1bb829e6ffcf68985d715687`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d359bfe5](https://github.com/openshift/cluster-api-provider-azure/commit/d359bfe56764238e2881f0f003fd8206b2b40dec) `sha256:ca9f02dcbc02609eb1b62f6269b986649cf7ccf683104cd7541405389f4e86d6`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:71aad92de14eb918a61ca7f18c70da18355bb75cba2090873dc60d16b0bde167`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:cac6de4dcfe50ebc21fb93d4dd9c73bd02e51f27429969eee044d3c11d10513f`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:53cf44cc2e3ad9b984463c72e2f04cd435d356715fd4a1ad345386f01a695025`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:521e4a8dd1dbf218d771fd0d266ef7b260f96d61b78c4309cab2b39da25a0acb`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:5a62f6b56b2c5ee13a2e97812205f67daffc5daa71bfde354ec2c0ce66052229`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [aed5f6c7](https://github.com/openshift/cluster-api-operator/commit/aed5f6c74a0e174901709f18eecad6573cd80784) `sha256:3c3cf95faec783db22f03bc4f28ae01a46b72a14bda05dff9df0693e20a74706`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0a9ed573](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0a9ed573e35751455bfb24842fd2de0b05379ed0) `sha256:ef33a596b85db98ced522167c79444991d2018d263fcaa10f63b30abf1501ff7`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [98ca953b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/98ca953ba6955401023e219f37e0af49879355d2) `sha256:35f3516ca0c3a224cf00b17281726025876f1413d20bea82839ad67f950845a0`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:214e454261ba50677b5617a9ac7b1ef0914af3a6d5586e54985b5f1ec003c7ba`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:fabd1f66559cb30315083951611ba348bb1f9a16c876ba50f02700e66fcfd646`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2ce31fc5](https://github.com/openshift/cluster-update-keys/commit/2ce31fc513224e76ac5924addc6207c205d95742) `sha256:a6cc8dcc82af18bf40f437ca45c7e9c0579bc1b02d9bfc0f370e20c3f3e84435`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [efc99a2a](https://github.com/openshift/csi-driver-manila-operator/commit/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8) `sha256:a5a28ac61e232bb045ffef4771bab94e13145beeab8614013829c4dea68d5608`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:fbe8e5495fb167b6a869045f8b516b8a3289888d85b450d7beb6e537a9164f1d`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:dbe084c2026721bbbcd719565a38287fbbaab7de820a06310627b1d700633a0a`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:01178831200429817b60bbec488350b5123a7eaea9033befab0e67ee24b94fe2`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ab87a938](https://github.com/openshift/csi-external-resizer/commit/ab87a93853882d6ede0a8fe0a61469cd4fa61a62) `sha256:ab0d26987da8eb148b787046dfbf369846fcd9978bb3408db03e89c9b66e17af`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:0f77f8efc52000314018135f96a9d533e9e4e5529b80b6a590eab4909f4703fe`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:000ef6a0f9b529051c13a5a27bdff286b5ee2ab5951e784fba079a20f6957271`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:732ad6819326ab5d044976d050efbae2220e7708188228a2150e123a34b88b48`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:46c06c700b923e1af6ede071f72e47b2fe651b853312202dc09da7f525c5d2ab`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:bd3fdd0f1a8795dc41630a8246151b9d7ab193ac5027e4e58197e24317037b01`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:e2d895d8108dec1097ffe05aef94b7f7f013c4919967a9a0bb2610c1cc4b73c5`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9c561f2d](https://github.com/openshift/cluster-api-provider-gcp/commit/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f) `sha256:9d71dc4b9bd523e795eb6e7cf79e04af1cccf63cb56d11d86fb698d1e9d0b5a6`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c770b412](https://github.com/openshift/gcp-pd-csi-driver/commit/c770b41229e39d8859fc11ec709ab57a0e0ad06a) `sha256:d505df8e5ef04e3d8f3103ca7d6ad31b2152f1f35b869b0ba0e8326287b0b2ae`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:dc8fad6c63730c9b11e487661c42f3fbdfa65a41c48aca4421f795858ef7a9ee`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:f6cd31d00e3839dc583b3faffa33f81f0d1e8df9dd8c272feac8828cc2d40536`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [8443d86b](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/8443d86bf284684b7849fa76d40795d141ef86d2) `sha256:acfed63e8c1798917c305487e516e702f74cdd53ff8e40dd8900130232cf7883`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:4674a9226d970edd1da97895fa826c91a360c9717a9829a6c309563d387e9381`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [462e63f6](https://github.com/openshift/kube-state-metrics/commit/462e63f6223817d3610f030f6166a790d793c572) `sha256:b4dadec150bcef5fab2c9f1e243f67f2cea5ed8826812ae28134bc377d68a65d`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:6d282acc5796ea2fd4f36024441e66bc38e597891786834c6d29ba17b06f8f00`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:e3c7c320622eb5d0ce970efc8ea6da560398d67344607dd8d0f75c658a81ceb3`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:c6c876967e39be84e4a648a07996e0f6b6b8af97e0445ded1f8582eba9d5b0a5`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8630f336](https://github.com/openshift/bond-cni/commit/8630f336431ccca04de465f991dbdf3ab736913b) `sha256:04530908f2e1453d561d594284e0dd57f10f4d9c85e5913e9f0280134ae2ae67`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:b49407bb4296cfff4be1b6716e8edd641c347fce931c16ee081ed19c539fad79`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:c80f22d588948a9ce4c0abd013a07e5dcbd8cdeb6d2f2a2fb80489d99eba0bc5`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [68971874](https://github.com/openshift/machine-api-provider-openstack/commit/689718740b923e516c037d7862d81a462ecdbbd3) `sha256:1b13a900255949f656ed953778ac78a174f02e9ca33a7ac0b704b1fd78c9f891`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:e4f8553658bd85058cd72d85098e637a955cd5d8d7004f336612933e4c89e6c5`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:54632cb1d725d2882d8709e42ffa258fc136e7f9fb84fc33b7909cdf1c2c07ac`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:e8ad887755893e5f401b76ed218fe0850a78269772e670580f6b715742025ab8`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:7f661260a94f11c4e4ee7b95f9554f5e0a7ae404b086d698063208b79bda3f45`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:144cfe9f8e6f218491a4117e05332fcfd74fffe33c71cfc0e8673f249908edca`
* rhel-coreos `sha256:6bfd6115e7feaea56d875393385ffb32a71332f606861bf16770215923d256f9`
* rhel-coreos-extensions `sha256:20b36214ee0982ecf223307e4c4369b69a60cf143ca840a6c73a8a89a8ea4865`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1661cc3f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1661cc3f7997902caf0ea71fbef9ea394f3b14ef) `sha256:2f31db8164f31d258a833b075661116bbf7cb206f2756f968c1e9ada13e0e124`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [cd0df71f](https://github.com/openshift/vsphere-problem-detector/commit/cd0df71f2ec22d84676f40b042d4603e9c94c360) `sha256:33883a6f978e377a7eb4e5b3b8ee4d209adcd0071f9be33cf36b65bb50642e0f`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/a020810d9bf1b2f4b55158e418a5e36ac043385a)

* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Revert go-jose from v4.0.5 to v0.3.04 (#7605) [#7605](https://github.com/openshift/assisted-service/pull/7605)
* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) [#7574](https://github.com/openshift/assisted-service/pull/7574)
* [OCPBUGS-54402](https://issues.redhat.com/browse/OCPBUGS-54402): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) [#7484](https://github.com/openshift/assisted-service/pull/7484)
* [OCPBUGS-48390](https://issues.redhat.com/browse/OCPBUGS-48390): Bump moby from v26.0.0 to v27.2.1 (#7188) [#7188](https://github.com/openshift/assisted-service/pull/7188)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7129) [#7129](https://github.com/openshift/assisted-service/pull/7129)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b2babb90b439acef3b05ccd8400b49b7ef9ecada...a020810d9bf1b2f4b55158e418a5e36ac043385a)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/d1f67808101c36388f42c41db7b326268fcd9e42)

* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) [#1087](https://github.com/openshift/assisted-installer/pull/1087)
* [OCPBUGS-53719](https://issues.redhat.com/browse/OCPBUGS-53719): Bump jwt to 4.5.2 in release-4.17 (#1086) [#1086](https://github.com/openshift/assisted-installer/pull/1086)
* abi: let the bootstrap waiting for workers before rebooting (#1028) [#1028](https://github.com/openshift/assisted-installer/pull/1028)
* [OCPBUGS-47493](https://issues.redhat.com/browse/OCPBUGS-47493): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) [#989](https://github.com/openshift/assisted-installer/pull/989)
* [OCPBUGS-44904](https://issues.redhat.com/browse/OCPBUGS-44904): Rhcos fails to reboot for skip mco reboot on s390x (#942) [#942](https://github.com/openshift/assisted-installer/pull/942)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9614e8b4cd8393727d3fc12ff9df9e647c6f694b...d1f67808101c36388f42c41db7b326268fcd9e42)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/7e55180e6881aca613fa970b573ddc10521632e9)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#986) [#986](https://github.com/openshift/assisted-installer-agent/pull/986)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) [#798](https://github.com/openshift/assisted-installer-agent/pull/798)
* [OCPBUGS-53711](https://issues.redhat.com/browse/OCPBUGS-53711): Bump jwt to 4.5.2 in release-4.17 (#964) [#964](https://github.com/openshift/assisted-installer-agent/pull/964)
* NO-ISSUE: Increase image pull timeout during install (#922) [#922](https://github.com/openshift/assisted-installer-agent/pull/922)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#873) [#873](https://github.com/openshift/assisted-installer-agent/pull/873)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/29149b7793e1f15dcb0e39a54e79fddcac744ff8...7e55180e6881aca613fa970b573ddc10521632e9)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/79b73e6ad3610497323a821409406a1d5d174120)

* append .0 to go.mod version [#110](https://github.com/openshift/agent-installer-utils/pull/110)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3b99303bc6d1c85465139f1e1c4847c038e4dc8f...79b73e6ad3610497323a821409406a1d5d174120)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/ea6605595cf1a0c94fb0fa82a2ceec15970da655)

* append .0 to go.mod version [#82](https://github.com/openshift/apiserver-network-proxy/pull/82)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/cd4264165057a0098c5d6e0b4e8727b4232cc3ce...ea6605595cf1a0c94fb0fa82a2ceec15970da655)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/144bace6c7a2ae52fcab3dabb2d9636a1465365a)

* append .0 to go.mod version [#109](https://github.com/openshift/cloud-provider-aws/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a...144bace6c7a2ae52fcab3dabb2d9636a1465365a)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d09f3179fdc353006b1cbb16bab3e740dcb586be)

* [OCPBUGS-53727](https://issues.redhat.com/browse/OCPBUGS-53727): bump to github.com/golang-jwt/jwt/v4@v4.5.2 [#546](https://github.com/openshift/cluster-api-provider-aws/pull/546)
* [OCPBUGS-51309](https://issues.redhat.com/browse/OCPBUGS-51309): UPSTREAM: 5339: Bump glog for recent fixes [#539](https://github.com/openshift/cluster-api-provider-aws/pull/539)
* [OCPBUGS-43921](https://issues.redhat.com/browse/OCPBUGS-43921): OSD-25934: Only tag NetworkInterfaces in `RunInstances` if IAM Allows It [#528](https://github.com/openshift/cluster-api-provider-aws/pull/528)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b722659d11fcdbc4ed003aa866ed877ce654af3a...d09f3179fdc353006b1cbb16bab3e740dcb586be)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cc862109d5a24f4b246af6bd4b1404dbf4227be0)

* [OCPBUGS-46512](https://issues.redhat.com/browse/OCPBUGS-46512): remove EFS driver metrics [#350](https://github.com/openshift/csi-operator/pull/350)
* [OCPBUGS-44974](https://issues.redhat.com/browse/OCPBUGS-44974): Set separate secrets for file and disk config on HyperShift [#331](https://github.com/openshift/csi-operator/pull/331)
* [OCPBUGS-42949](https://issues.redhat.com/browse/OCPBUGS-42949): add tag matching to Azure File storage class [#291](https://github.com/openshift/csi-operator/pull/291)
* [OCPBUGS-43789](https://issues.redhat.com/browse/OCPBUGS-43789): add ability to control kube rbac proxy container image… [#310](https://github.com/openshift/csi-operator/pull/310)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b6ab34020d440c3a07f60dcbd31682bd117f112e...cc862109d5a24f4b246af6bd4b1404dbf4227be0)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)

* [OCPBUGS-45186](https://issues.redhat.com/browse/OCPBUGS-45186): fix Associate*IpAddress flag when launch EC2 [#118](https://github.com/openshift/machine-api-provider-aws/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7...b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56)

* [OCPBUGS-51232](https://issues.redhat.com/browse/OCPBUGS-51232): github.com/go-jose/go-jose/v4 v4.0.5 [#202](https://github.com/openshift/aws-pod-identity-webhook/pull/202)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/b91c75bd2948189a150061ef799d688d75cf2a1d...80efc4ea7cdec14eb5d552ace3fdac7049b4fb56)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/626ecd1c32f50953e84fd1cb499077d52fe53e43)

* [OCPBUGS-46039](https://issues.redhat.com/browse/OCPBUGS-46039): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#132](https://github.com/openshift/cloud-provider-azure/pull/132)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/b9204e2197b922ecd080fcbe112b4a09e18344db...626ecd1c32f50953e84fd1cb499077d52fe53e43)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/190a0fabf17b28762b5578c0b9ffc25cf35cac64)

* append .0 to go.mod version [#19](https://github.com/openshift/azure-kubernetes-kms/pull/19)
* [OCPBUGS-53495](https://issues.redhat.com/browse/OCPBUGS-53495): bump golang-jwt v4 [#12](https://github.com/openshift/azure-kubernetes-kms/pull/12)
* [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/eab1dcfcf4a5758aad6b50dcefe85c93b7bcce59...190a0fabf17b28762b5578c0b9ffc25cf35cac64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/4018b3642933575afa71ccee4b31efaf841262fb)

* [OCPBUGS-56655](https://issues.redhat.com/browse/OCPBUGS-56655): Fix failure when attempting to modify immutable availabilitySet [#152](https://github.com/openshift/machine-api-provider-azure/pull/152)
* [OCPBUGS-55729](https://issues.redhat.com/browse/OCPBUGS-55729): Update eviction policy for Spot VMs from Deallocate to Delete [#140](https://github.com/openshift/machine-api-provider-azure/pull/140)
* [OCPBUGS-54393](https://issues.redhat.com/browse/OCPBUGS-54393): Re-reconcile machine on NIC provisioning failure [#136](https://github.com/openshift/machine-api-provider-azure/pull/136)
* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unused vnet package [#130](https://github.com/openshift/machine-api-provider-azure/pull/130)
* [OCPBUGS-50017](https://issues.redhat.com/browse/OCPBUGS-50017): dynamically setting the amount of fault domains [#127](https://github.com/openshift/machine-api-provider-azure/pull/127)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/d69a3e35d8cb0c9497eab723563f18d46f860bb8...4018b3642933575afa71ccee4b31efaf841262fb)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/6707f899c269e98a102ac72900bb96fa826ba652)

* [OCPBUGS-53799](https://issues.redhat.com/browse/OCPBUGS-53799): github.com/golang-jwt/jwt/v4 v4.5.2 [#32](https://github.com/openshift/azure-workload-identity/pull/32)
* [OCPBUGS-51234](https://issues.redhat.com/browse/OCPBUGS-51234): github.com/go-jose/go-jose/v4 v4.0.5 [#28](https://github.com/openshift/azure-workload-identity/pull/28)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/75b1b4ce871da06195b39da0eddd7a68496e4a59...6707f899c269e98a102ac72900bb96fa826ba652)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/41b3424801977f102b00bb5c7e8fe15d65d3ade5)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#46](https://github.com/openshift/cluster-api-provider-metal3/pull/46)
* [OCPBUGS-47049](https://issues.redhat.com/browse/OCPBUGS-47049): Bump x/net to 0.33.0 [#32](https://github.com/openshift/cluster-api-provider-metal3/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e6d2bd4f848a0137040e618c2df4eecce4caed7...41b3424801977f102b00bb5c7e8fe15d65d3ade5)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/8e61d643cee782cf93da8b2da7a299c2ac4749b2)

* [OCPBUGS-56448](https://issues.redhat.com/browse/OCPBUGS-56448): vsphere - check if host is powered down or on standby before uploading template [#9726](https://github.com/openshift/installer/pull/9726)
* [OCPBUGS-57292](https://issues.redhat.com/browse/OCPBUGS-57292): ensure ctrplane nodes can access bootstrap MCS [#9775](https://github.com/openshift/installer/pull/9775)
* [OCPBUGS-57304](https://issues.redhat.com/browse/OCPBUGS-57304): IBI nmstate unit test fix [#9777](https://github.com/openshift/installer/pull/9777)
* [OCPBUGS-55224](https://issues.redhat.com/browse/OCPBUGS-55224): Fix Load balancer IP setup [#9675](https://github.com/openshift/installer/pull/9675)
* [OCPBUGS-51116](https://issues.redhat.com/browse/OCPBUGS-51116): update resolv.conf every time on bootstrap node [#9504](https://github.com/openshift/installer/pull/9504)
* [OCPBUGS-51210](https://issues.redhat.com/browse/OCPBUGS-51210): Fixes panic during GCP tags fetch due to unstable network [#9512](https://github.com/openshift/installer/pull/9512)
* [OCPBUGS-46375](https://issues.redhat.com/browse/OCPBUGS-46375): Allow spaces in the aws tags [release-4.17] [#9315](https://github.com/openshift/installer/pull/9315)
* [OCPBUGS-54357](https://issues.redhat.com/browse/OCPBUGS-54357): IBMCloud: Move to IBM TF openshift fork [#9613](https://github.com/openshift/installer/pull/9613)
* [OCPBUGS-53378](https://issues.redhat.com/browse/OCPBUGS-53378): Remove error logging when determining image arch [#9581](https://github.com/openshift/installer/pull/9581)
* [OCPBUGS-53459](https://issues.redhat.com/browse/OCPBUGS-53459): aws: fix NLB creation in secret regions [#9071](https://github.com/openshift/installer/pull/9071)
* [OCPBUGS-52961](https://issues.redhat.com/browse/OCPBUGS-52961): Remove tmp directory used for agent pxe files [#9552](https://github.com/openshift/installer/pull/9552)
* [OCPBUGS-43528](https://issues.redhat.com/browse/OCPBUGS-43528): Prevent race with provisioning-interface service [#9110](https://github.com/openshift/installer/pull/9110)
* [OCPBUGS-44058](https://issues.redhat.com/browse/OCPBUGS-44058): Log correct hostname for validation status [#9162](https://github.com/openshift/installer/pull/9162)
* [OCPBUGS-50967](https://issues.redhat.com/browse/OCPBUGS-50967): PowerVS: destroy dhcp hack [#9494](https://github.com/openshift/installer/pull/9494)
* [OCPBUGS-50846](https://issues.redhat.com/browse/OCPBUGS-50846): OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest [#9470](https://github.com/openshift/installer/pull/9470)
* [OCPBUGS-50876](https://issues.redhat.com/browse/OCPBUGS-50876): correct typo [#9484](https://github.com/openshift/installer/pull/9484)
* [OCPBUGS-49975](https://issues.redhat.com/browse/OCPBUGS-49975): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9445](https://github.com/openshift/installer/pull/9445)
* [OCPBUGS-48761](https://issues.redhat.com/browse/OCPBUGS-48761): Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 [#9448](https://github.com/openshift/installer/pull/9448)
* [OCPBUGS-49993](https://issues.redhat.com/browse/OCPBUGS-49993): Disable IP Forwarding for CAPG Machines [#9446](https://github.com/openshift/installer/pull/9446)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure: Update SecurityType passed in at Image creation [#9409](https://github.com/openshift/installer/pull/9409)
* [OCPBUGS-49362](https://issues.redhat.com/browse/OCPBUGS-49362): [Nutanix] Installation failed with timeout when uploading images to PC [#9406](https://github.com/openshift/installer/pull/9406)
* [OCPBUGS-48645](https://issues.redhat.com/browse/OCPBUGS-48645): azure: use separate /var to avoid growfs timeouts [#9381](https://github.com/openshift/installer/pull/9381)
* [OCPBUGS-45340](https://issues.redhat.com/browse/OCPBUGS-45340): move GCP zone filtering client-side [#9264](https://github.com/openshift/installer/pull/9264)
* [OCPBUGS-48257](https://issues.redhat.com/browse/OCPBUGS-48257): remove the types which failed by RHEL-59521 and add the new gpu vm type [#9354](https://github.com/openshift/installer/pull/9354)
* [OCPBUGS-45813](https://issues.redhat.com/browse/OCPBUGS-45813): Remove unused variable from ASH arm template 06_workers.json [#9285](https://github.com/openshift/installer/pull/9285)
* [OCPBUGS-48359](https://issues.redhat.com/browse/OCPBUGS-48359): Allow more time for Service Account Creation [#9362](https://github.com/openshift/installer/pull/9362)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): support additionalNTPSources in node-joiner tool [#9265](https://github.com/openshift/installer/pull/9265)
* [OCPBUGS-48119](https://issues.redhat.com/browse/OCPBUGS-48119): Always set AllowCrossTenantReplication parameter to false [#9346](https://github.com/openshift/installer/pull/9346)
* [OCPBUGS-46432](https://issues.redhat.com/browse/OCPBUGS-46432): Power VS: Create region-zone-sysType hierarchy [#9319](https://github.com/openshift/installer/pull/9319)
* [OCPBUGS-46360](https://issues.redhat.com/browse/OCPBUGS-46360): aws: add ec2:AllocateAddress perm requirement. [#9313](https://github.com/openshift/installer/pull/9313)
* no-jira: Collect bootstrap logs when control plane provisioning fails [#9308](https://github.com/openshift/installer/pull/9308)
* [OCPBUGS-45726](https://issues.redhat.com/browse/OCPBUGS-45726): IBMCloud: Add service overrides [#9267](https://github.com/openshift/installer/pull/9267)
* [OCPBUGS-42117](https://issues.redhat.com/browse/OCPBUGS-42117): Remove destroy search for regional target tcp proxies [#9025](https://github.com/openshift/installer/pull/9025)
* [OCPBUGS-45484](https://issues.redhat.com/browse/OCPBUGS-45484): PowerVS: Listen to machineNetwork [#9271](https://github.com/openshift/installer/pull/9271)
* [OCPBUGS-44848](https://issues.redhat.com/browse/OCPBUGS-44848): aws: user right perm for untagging BYO IAM profiles [#9228](https://github.com/openshift/installer/pull/9228)
* [OCPBUGS-45276](https://issues.redhat.com/browse/OCPBUGS-45276): Bump Azure Machine Timeout [#9257](https://github.com/openshift/installer/pull/9257)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9258](https://github.com/openshift/installer/pull/9258)
* [OCPBUGS-43047](https://issues.redhat.com/browse/OCPBUGS-43047): fix slice init length [#9089](https://github.com/openshift/installer/pull/9089)
* [OCPBUGS-43800](https://issues.redhat.com/browse/OCPBUGS-43800): pkg/asset/installconfig/azure: send full certifcate chain [#9140](https://github.com/openshift/installer/pull/9140)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9219](https://github.com/openshift/installer/pull/9219)
* [OCPBUGS-44611](https://issues.redhat.com/browse/OCPBUGS-44611): [release-4.17] capi/aws: set Node Port Service CIDR override [#9209](https://github.com/openshift/installer/pull/9209)
* [OCPBUGS-44230](https://issues.redhat.com/browse/OCPBUGS-44230): Add C4A instance types [#9181](https://github.com/openshift/installer/pull/9181)
* [OCPBUGS-44231](https://issues.redhat.com/browse/OCPBUGS-44231): [release-4.17]  capi/aws: bump provider for LB DNS lookup fix [#9179](https://github.com/openshift/installer/pull/9179)
* [OCPBUGS-44261](https://issues.redhat.com/browse/OCPBUGS-44261): Ensure rendezvousIP is checked against host IP [#9184](https://github.com/openshift/installer/pull/9184)
* [OCPBUGS-43972](https://issues.redhat.com/browse/OCPBUGS-43972): Cherrypick oci ccm fix to 4.17 [#9152](https://github.com/openshift/installer/pull/9152)
* [OCPBUGS-44247](https://issues.redhat.com/browse/OCPBUGS-44247): PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 [#9182](https://github.com/openshift/installer/pull/9182)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up v4.17 capability sets [#9013](https://github.com/openshift/installer/pull/9013)
* [OCPBUGS-44226](https://issues.redhat.com/browse/OCPBUGS-44226): PowerVS: Fix MissingSecurityGroupRules [#9175](https://github.com/openshift/installer/pull/9175)
* [OCPBUGS-44227](https://issues.redhat.com/browse/OCPBUGS-44227): PowerVS: Fix destroy persistent TG [#9176](https://github.com/openshift/installer/pull/9176)
* [OCPBUGS-44228](https://issues.redhat.com/browse/OCPBUGS-44228): PowerVS: Change CAPI verbosity level [#9177](https://github.com/openshift/installer/pull/9177)
* [OCPBUGS-43846](https://issues.redhat.com/browse/OCPBUGS-43846): add chrony.conf file when additional NTP sources are configured [#9142](https://github.com/openshift/installer/pull/9142)
* [OCPBUGS-43735](https://issues.redhat.com/browse/OCPBUGS-43735): Add C4 instance validation [#9130](https://github.com/openshift/installer/pull/9130)
* [OCPBUGS-43897](https://issues.redhat.com/browse/OCPBUGS-43897): Revendor assisted service external platform oci [#9147](https://github.com/openshift/installer/pull/9147)
* [OCPBUGS-43786](https://issues.redhat.com/browse/OCPBUGS-43786): Limit GCP API firewall rule for internal clusters [#9138](https://github.com/openshift/installer/pull/9138)
* [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112)
* [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091)
* [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096)
* [Full changelog](https://github.com/openshift/installer/compare/f8ab1fbb9672112019dae092e9211e51e6eab5f1...8e61d643cee782cf93da8b2da7a299c2ac4749b2)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/6e7aa77e5e144adc97b498ada5a6ab400f97ca39)

* [OCPBUGS-46646](https://issues.redhat.com/browse/OCPBUGS-46646): Bump x/net to 0.33.0 [#225](https://github.com/openshift/cluster-api-provider-baremetal/pull/225)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/2549061c570a7ff152c66322978bb142647b8b4e...6e7aa77e5e144adc97b498ada5a6ab400f97ca39)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e6e5d54abf92a20d1b0d273a90581206b7ca0b15)

* [OCPBUGS-53325](https://issues.redhat.com/browse/OCPBUGS-53325): BMO can expose any secret via BMCEventSubscription CRD [#406](https://github.com/openshift/baremetal-operator/pull/406)
* [OCPBUGS-42387](https://issues.redhat.com/browse/OCPBUGS-42387): Remove dataImage finalizer if BMH is missing [#390](https://github.com/openshift/baremetal-operator/pull/390)
* [OCPBUGS-49701](https://issues.redhat.com/browse/OCPBUGS-49701): Handle HFC for non-redfish HW [#395](https://github.com/openshift/baremetal-operator/pull/395)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/94748225f29f3a7ef7dfe5844219c3856a421903...e6e5d54abf92a20d1b0d273a90581206b7ca0b15)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/8956d91bd982929d780580b8e2fe5f5351dad881)

* [OCPBUGS-48766](https://issues.redhat.com/browse/OCPBUGS-48766): Extend haproxy-monitor fall time [#340](https://github.com/openshift/baremetal-runtimecfg/pull/340)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/e1f3e0d105247d8a53fafe53de33a4ce92b88c41...8956d91bd982929d780580b8e2fe5f5351dad881)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0000b3ef257d07f423dfdf9b6d274214d1b0c846)

* [OCPBUGS-49607](https://issues.redhat.com/browse/OCPBUGS-49607): Address `golang.org/x/*` CVEs [#1962](https://github.com/openshift/oc/pull/1962)
* [OCPBUGS-50984](https://issues.redhat.com/browse/OCPBUGS-50984): Add HOST env var in oc debug for sos report collects more [#1976](https://github.com/openshift/oc/pull/1976)
* [OCPBUGS-49605](https://issues.redhat.com/browse/OCPBUGS-49605): Address `github.com/docker/docker` CVE [#1968](https://github.com/openshift/oc/pull/1968)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): additional rbac policy rules [#1937](https://github.com/openshift/oc/pull/1937)
* [OCPBUGS-45517](https://issues.redhat.com/browse/OCPBUGS-45517): add retry in case of image pull error [#1940](https://github.com/openshift/oc/pull/1940)
* [OCPBUGS-44508](https://issues.redhat.com/browse/OCPBUGS-44508): Show node-joiner container logs when error occurs [#1912](https://github.com/openshift/oc/pull/1912)
* [OCPBUGS-44830](https://issues.redhat.com/browse/OCPBUGS-44830): Fix newapp unit test failure by using different image [#1913](https://github.com/openshift/oc/pull/1913)
* [OCPBUGS-43696](https://issues.redhat.com/browse/OCPBUGS-43696): Bump k8s dependencies to 1.30.5 [#1902](https://github.com/openshift/oc/pull/1902)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876)
* [Full changelog](https://github.com/openshift/oc/compare/6bf65cc6db4685b4b299e85d71d43d74ce826478...0000b3ef257d07f423dfdf9b6d274214d1b0c846)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/fef48c67e658987c1aba20c7cde074f0f6f2f863)

* [OCPBUGS-56980](https://issues.redhat.com/browse/OCPBUGS-56980): Azure: resolve nil pointer exception when role assignment exists [#868](https://github.com/openshift/cloud-credential-operator/pull/868)
* [OCPBUGS-54828](https://issues.redhat.com/browse/OCPBUGS-54828): Render: configure proxy on bootstrap static pod [#863](https://github.com/openshift/cloud-credential-operator/pull/863)
* [OCPBUGS-53415](https://issues.redhat.com/browse/OCPBUGS-53415): github.com/golang/glog v1.2.4 [#842](https://github.com/openshift/cloud-credential-operator/pull/842)
* [OCPBUGS-53823](https://issues.redhat.com/browse/OCPBUGS-53823): update github.com/golang-jwt/jwt [#838](https://github.com/openshift/cloud-credential-operator/pull/838)
* [OCPBUGS-51548](https://issues.redhat.com/browse/OCPBUGS-51548): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#828](https://github.com/openshift/cloud-credential-operator/pull/828)
* [OCPBUGS-51238](https://issues.redhat.com/browse/OCPBUGS-51238): github.com/go-jose/go-jose/v4 v4.0.5 [#825](https://github.com/openshift/cloud-credential-operator/pull/825)
* [OCPBUGS-47071](https://issues.redhat.com/browse/OCPBUGS-47071): golang.org/x/net v0.33.0 [#804](https://github.com/openshift/cloud-credential-operator/pull/804)
* [OCPBUGS-45938](https://issues.redhat.com/browse/OCPBUGS-45938): Add AWS region to aws-pod-identity-webhook [#799](https://github.com/openshift/cloud-credential-operator/pull/799)
* [OCPBUGS-45006](https://issues.redhat.com/browse/OCPBUGS-45006): Add retry to ccoctl gcp create functions [#793](https://github.com/openshift/cloud-credential-operator/pull/793)
* [OCPBUGS-45001](https://issues.redhat.com/browse/OCPBUGS-45001): github.com/golang-jwt/jwt/v4 v4.5.1 [#787](https://github.com/openshift/cloud-credential-operator/pull/787)
* [OCPBUGS-44123](https://issues.redhat.com/browse/OCPBUGS-44123): Add GCP pod identity webhook [#776](https://github.com/openshift/cloud-credential-operator/pull/776)
* [OCPBUGS-43644](https://issues.redhat.com/browse/OCPBUGS-43644): Only attempt timed token credentials on supported platforms. [#773](https://github.com/openshift/cloud-credential-operator/pull/773)
* [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7...fef48c67e658987c1aba20c7cde074f0f6f2f863)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/225a27a533d123f0b816e59afa431b1c34e9ae5f)

* [OCPBUGS-56257](https://issues.redhat.com/browse/OCPBUGS-56257): Increase API call timeout to 30 second [#171](https://github.com/openshift/cloud-network-config-controller/pull/171)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/779b346c8bccdb8590e403661ca57cc6ac544eb9...225a27a533d123f0b816e59afa431b1c34e9ae5f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/f641a4c6f858607f233866bb835704e784d57ef2)

* [OCPBUGS-54580](https://issues.redhat.com/browse/OCPBUGS-54580): Avoid duplicate OAuth client creation [#765](https://github.com/openshift/cluster-authentication-operator/pull/765)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#724](https://github.com/openshift/cluster-authentication-operator/pull/724)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/0ba43254571fa060b1518153c8d701f891589171...f641a4c6f858607f233866bb835704e784d57ef2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/12bd2a96d2cfcd4ca8715cbe144af2d0409d1563)

* [OCPBUGS-54325](https://issues.redhat.com/browse/OCPBUGS-54325): improve replica counting and decrease target size behavior [#352](https://github.com/openshift/kubernetes-autoscaler/pull/352)
* [OCPBUGS-48606](https://issues.redhat.com/browse/OCPBUGS-48606): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#337](https://github.com/openshift/kubernetes-autoscaler/pull/337)
* [OCPBUGS-45147](https://issues.redhat.com/browse/OCPBUGS-45147): [release-4.17] VPA: Update OWNERS file [#324](https://github.com/openshift/kubernetes-autoscaler/pull/324)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9a013d5c1fb2b1a6332d371f882a0cbfee13a0d4...12bd2a96d2cfcd4ca8715cbe144af2d0409d1563)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/ea4a88786cf9b237dc446e01fdacd6fd65b73144)

* [OCPBUGS-45929](https://issues.redhat.com/browse/OCPBUGS-45929): set max soft bulk taint count to zero [#337](https://github.com/openshift/cluster-autoscaler-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99b23ded9fb70aa29622d0f6c4254e54c51d2813...ea4a88786cf9b237dc446e01fdacd6fd65b73144)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/caa33e34f41c689d4043550f1efe4716279a3581)

* [OCPBUGS-54542](https://issues.redhat.com/browse/OCPBUGS-54542): Add missing relatedObjects [#469](https://github.com/openshift/cluster-baremetal-operator/pull/469)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a...caa33e34f41c689d4043550f1efe4716279a3581)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459)

* append .0 to go.mod version [#314](https://github.com/openshift/cluster-capi-operator/pull/314)
* [OCPBUGS-48493](https://issues.redhat.com/browse/OCPBUGS-48493): fix: always update clusteroperator status versions when differing [#250](https://github.com/openshift/cluster-capi-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/f4bca806981f51160b5e5d69aa87d6e3cee15dac...a2cdab1b9e4368bd99a852d4d9080a6ba0bd4459)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c)

* [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/f7fa87e4a55cf18a73fa40d2cf56f603d76c8b7f...32fd83999e7eae9941abe7da915bacae1d50e49c)


### [cluster-config-api](https://github.com/openshift/api/tree/db4fa2d6cce43c412a816c239a564c6f860218f5)

* [OCPBUGS-57285](https://issues.redhat.com/browse/OCPBUGS-57285): Add IPsec API for NAT-T UDP encapsulation support [#2363](https://github.com/openshift/api/pull/2363)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add IdleConnectionTerminationPolicy field to IngressControllerSpec [#2186](https://github.com/openshift/api/pull/2186)
* [OCPBUGS-39130](https://issues.redhat.com/browse/OCPBUGS-39130): Added checks to prevent vCenters from changing after install past 1 vCenter [#2014](https://github.com/openshift/api/pull/2014)
* [Full changelog](https://github.com/openshift/api/compare/0a88001628266522c84e6c6c25ed5a44aced6d8b...db4fa2d6cce43c412a816c239a564c6f860218f5)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/361cecccf6b92ee8783c10324b0db26ccd4f6ab0)

* append .0 to go.mod version [#441](https://github.com/openshift/cluster-config-operator/pull/441)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/0dc084f47be4c5ee02cf40495b6bd8f334c930eb...361cecccf6b92ee8783c10324b0db26ccd4f6ab0)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/f7e01c2f91628b25d1578c0a752f9b55c4233625)

* [OCPBUGS-44047](https://issues.redhat.com/browse/OCPBUGS-44047): relax validation on delete and if failureDomains not configured [#330](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/330)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/a52da80dbb374fcb91b610cc2688cc863615f97d...f7e01c2f91628b25d1578c0a752f9b55c4233625)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/81507f04686df3e16793b270084ead0a2a67fb38)

* [OCPBUGS-52497](https://issues.redhat.com/browse/OCPBUGS-52497): [release-4.17] Add runbook_url for CoreDNSErrorsHigh [#430](https://github.com/openshift/cluster-dns-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7...81507f04686df3e16793b270084ead0a2a67fb38)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/50f554151e66f6339d5d49e9c9d6c8b96ec7e960)

* [OCPBUGS-53511](https://issues.redhat.com/browse/OCPBUGS-53511): fix CVE-2025-30204 [#1414](https://github.com/openshift/cluster-etcd-operator/pull/1414)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/975fc013a240a003f23e51b9dcd9bfcdb112e801...50f554151e66f6339d5d49e9c9d6c8b96ec7e960)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f)

* [OCPBUGS-53871](https://issues.redhat.com/browse/OCPBUGS-53871): bump github.com/golang-jwt/jwt [#1218](https://github.com/openshift/cluster-image-registry-operator/pull/1218)
* [OCPBUGS-51604](https://issues.redhat.com/browse/OCPBUGS-51604): bump golang.org/x/oauth2 [#1209](https://github.com/openshift/cluster-image-registry-operator/pull/1209)
* [OCPBUGS-51103](https://issues.redhat.com/browse/OCPBUGS-51103): ensure that storage names don't end in dashes [#1180](https://github.com/openshift/cluster-image-registry-operator/pull/1180)
* [OCPBUGS-43564](https://issues.redhat.com/browse/OCPBUGS-43564): fix proxy config and leader election test flakes [#1144](https://github.com/openshift/cluster-image-registry-operator/pull/1144)
* [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/944ed01083db89ffda03cb7973084e1fcd0284eb...790f6a59513d7a9d78ba2a5b30d5f0da5a3d481f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/66d1b44d81ca87995d5a9eaade5f3e69bbd279b6)

* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add support for IdleConnectionTerminationPolicy [#1223](https://github.com/openshift/cluster-ingress-operator/pull/1223)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cb5306d7f68ba35b9a065d65f46c69a836556cb2...66d1b44d81ca87995d5a9eaade5f3e69bbd279b6)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)

* [OCPBUGS-50516](https://issues.redhat.com/browse/OCPBUGS-50516): Increase waitForFallbackDegradedConditionTimeout [#1803](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1803)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#1758](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1758)
* [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/937f8a77e3274c3ef8907424f4d3294ef642642e...4fae6738a9ffd1c108cd9ab3ac6c1382c5eece42)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/ab40b61142a30f21eec8301b2e98f2fafb25164b)

* [OCPBUGS-46593](https://issues.redhat.com/browse/OCPBUGS-46593): "gracefully" shutdown KSVM pod. [#123](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/123)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27...ab40b61142a30f21eec8301b2e98f2fafb25164b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)

* [OCPBUGS-48155](https://issues.redhat.com/browse/OCPBUGS-48155): Fix race condition in CO status controller test [#266](https://github.com/openshift/cluster-machine-approver/pull/266)
* [OCPBUGS-46429](https://issues.redhat.com/browse/OCPBUGS-46429): Filter CSRs by signerName [#261](https://github.com/openshift/cluster-machine-approver/pull/261)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Ensure trailing dots on DNS names do not block serving cert auth [#256](https://github.com/openshift/cluster-machine-approver/pull/256)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Client internal DNS checks should ignore trailing dot [#250](https://github.com/openshift/cluster-machine-approver/pull/250)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/32c847111e45313f34d615196d00aeeffd50a281...acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ff3a4f0218f4985874f2ab872f6f6f440a38e17d)

* [OCPBUGS-44971](https://issues.redhat.com/browse/OCPBUGS-44971): Add new metrics for OpenShift logging telemetry [#2526](https://github.com/openshift/cluster-monitoring-operator/pull/2526)
* [OCPBUGS-44003](https://issues.redhat.com/browse/OCPBUGS-44003): fix(monitoring-plugin): disable emitting nginx version on error pages [#2511](https://github.com/openshift/cluster-monitoring-operator/pull/2511)
* [OCPBUGS-43690](https://issues.redhat.com/browse/OCPBUGS-43690): chore: introduce a config parsing check via a strict unmarshaller for… [#2494](https://github.com/openshift/cluster-monitoring-operator/pull/2494)
* [OCPBUGS-43788](https://issues.redhat.com/browse/OCPBUGS-43788): Add runbook url for TelemeterClientFailures [#2507](https://github.com/openshift/cluster-monitoring-operator/pull/2507)
* [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a7ed4a3751af0d5e3d96f07d9b69468397319a2a...ff3a4f0218f4985874f2ab872f6f6f440a38e17d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/82191d8f17c6571d0c6416656fb3dc0619cf80ae)

* [OCPBUGS-55518](https://issues.redhat.com/browse/OCPBUGS-55518): iptables-alerter streamlining [#2698](https://github.com/openshift/cluster-network-operator/pull/2698)
* [OCPBUGS-55033](https://issues.redhat.com/browse/OCPBUGS-55033): Add IPv6 NGINX configuration [#2689](https://github.com/openshift/cluster-network-operator/pull/2689)
* [OCPBUGS-52951](https://issues.redhat.com/browse/OCPBUGS-52951): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2654](https://github.com/openshift/cluster-network-operator/pull/2654)
* [OCPBUGS-49816](https://issues.redhat.com/browse/OCPBUGS-49816): ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs [#2655](https://github.com/openshift/cluster-network-operator/pull/2655)
* [OCPBUGS-49961](https://issues.redhat.com/browse/OCPBUGS-49961): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2642](https://github.com/openshift/cluster-network-operator/pull/2642)
* : OCPBUGS-44863: Add nodeslicepool [#2574](https://github.com/openshift/cluster-network-operator/pull/2574)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807): ovn-k, cudn: Add missing permissions to ovnkube-node [#2575](https://github.com/openshift/cluster-network-operator/pull/2575)
* [OCPBUGS-43714](https://issues.redhat.com/browse/OCPBUGS-43714): Skip including default crypto policies to avoid authby issue [#2597](https://github.com/openshift/cluster-network-operator/pull/2597)
* [OCPBUGS-46146](https://issues.redhat.com/browse/OCPBUGS-46146): Remove ip xfrm state when IPsec is disabled [#2594](https://github.com/openshift/cluster-network-operator/pull/2594)
* [OCPBUGS-44415](https://issues.redhat.com/browse/OCPBUGS-44415): Pass transit_switch_subnet options in ovnkube-node pod [#2561](https://github.com/openshift/cluster-network-operator/pull/2561)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): OVN-Kubernetes node RBAC tightening [#2568](https://github.com/openshift/cluster-network-operator/pull/2568)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5472](https://issues.redhat.com/browse/SDN-5472): bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC [#2566](https://github.com/openshift/cluster-network-operator/pull/2566)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): ovn-k, udn: Update UserDefinedNetwork CRD [#2551](https://github.com/openshift/cluster-network-operator/pull/2551)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): Adds UDN list/watch to ovnknode rbac [#2540](https://github.com/openshift/cluster-network-operator/pull/2540)
* [OCPBUGS-44779](https://issues.redhat.com/browse/OCPBUGS-44779), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2564](https://github.com/openshift/cluster-network-operator/pull/2564)
* [OCPBUGS-44330](https://issues.redhat.com/browse/OCPBUGS-44330): Add controlplane cli image envar for use with hypershift [#2542](https://github.com/openshift/cluster-network-operator/pull/2542)
* [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536)
* [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d9862a44d80e960ae5b3638a081b41671919b6c6...82191d8f17c6571d0c6416656fb3dc0619cf80ae)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b6712f369eddb39fa68021ffb3d31fed7e5663a6)

* use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) [#1290](https://github.com/openshift/cluster-node-tuning-operator/pull/1290)
* Add missing Polarion test case id (#1288) [#1288](https://github.com/openshift/cluster-node-tuning-operator/pull/1288)
* e2e: tuned degraded test fix (#1259) [#1259](https://github.com/openshift/cluster-node-tuning-operator/pull/1259)
* [OCPBUGS-48213](https://issues.redhat.com/browse/OCPBUGS-48213): [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) [#1277](https://github.com/openshift/cluster-node-tuning-operator/pull/1277)
* PPC: correct EnableHardwareTuning flag value (#1271) [#1271](https://github.com/openshift/cluster-node-tuning-operator/pull/1271)
* e2e: add irdma to module_blacklist kernel args (#1266) [#1266](https://github.com/openshift/cluster-node-tuning-operator/pull/1266)
* [OCPBUGS-45964](https://issues.redhat.com/browse/OCPBUGS-45964): performanceprofile cpuset input validation (#1247) [#1247](https://github.com/openshift/cluster-node-tuning-operator/pull/1247)
* [OCPBUGS-43664](https://issues.redhat.com/browse/OCPBUGS-43664): Add vendor and architecture specific tuning options (#1191) [#1191](https://github.com/openshift/cluster-node-tuning-operator/pull/1191)
* [OCPBUGS-44644](https://issues.redhat.com/browse/OCPBUGS-44644): cmd: PPC: support tolerating heterogeneous core IDs (#1252) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* e2e: wait for node inspector deletion (#1205) [#1205](https://github.com/openshift/cluster-node-tuning-operator/pull/1205)
* Fixing empty tuned submodule when using Dockerfile (#1211) [#1211](https://github.com/openshift/cluster-node-tuning-operator/pull/1211)
* E2E: fix modify node selector to use lowercase (#1186) [#1186](https://github.com/openshift/cluster-node-tuning-operator/pull/1186)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1201) [#1201](https://github.com/openshift/cluster-node-tuning-operator/pull/1201)
* Make ocp-tuned-one-shot.service restart on-failure (#1187) [#1187](https://github.com/openshift/cluster-node-tuning-operator/pull/1187)
* Fix context deadlines in ExecCommandOnPod() (#1189) [#1189](https://github.com/openshift/cluster-node-tuning-operator/pull/1189)
* [OCPBUGS-43566](https://issues.redhat.com/browse/OCPBUGS-43566): CI: unblock (#1188) [#1188](https://github.com/openshift/cluster-node-tuning-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d7086bb43aa2ce0fb9f277c170d8d43f5f81be73...b6712f369eddb39fa68021ffb3d31fed7e5663a6)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#599](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/599)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/56a90aeec7f94ddfe1be5365fe81ea3e5e52bea0...2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/b05a249d6919978217aefa7060951af078eac931)

* [OCPBUGS-47770](https://issues.redhat.com/browse/OCPBUGS-47770): Add team members to the OWNERS file [#375](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/375)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2b962c71d5b3ac179898dc1ece6a98de0b33cd70...b05a249d6919978217aefa7060951af078eac931)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6ed1b4ea953a091b617e42adb966fb9ac3bceb49)

* [OCPBUGS-55800](https://issues.redhat.com/browse/OCPBUGS-55800): only update LastTransitionTime if operator status change [#640](https://github.com/openshift/cluster-samples-operator/pull/640)
* [OCPBUGS-55795](https://issues.redhat.com/browse/OCPBUGS-55795): Adding filter to clusterOperatorInformerEventHandler [#639](https://github.com/openshift/cluster-samples-operator/pull/639)
* [OCPBUGS-55894](https://issues.redhat.com/browse/OCPBUGS-55894): Samples Operator should sort failing image imports [#641](https://github.com/openshift/cluster-samples-operator/pull/641)
* [OCPBUGS-55042](https://issues.redhat.com/browse/OCPBUGS-55042): Adding mutex to func createSamples on handler.go [#632](https://github.com/openshift/cluster-samples-operator/pull/632)
* [OCPBUGS-54362](https://issues.redhat.com/browse/OCPBUGS-54362): add rhdmalone to owners [#619](https://github.com/openshift/cluster-samples-operator/pull/619)
* [OCPBUGS-48786](https://issues.redhat.com/browse/OCPBUGS-48786): add shannon and aroyoredhat as owners [#595](https://github.com/openshift/cluster-samples-operator/pull/595)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd...6ed1b4ea953a091b617e42adb966fb9ac3bceb49)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e4b8dceaf16926b5e4b7fc339b240af00e9539c9)

* [OCPBUGS-52222](https://issues.redhat.com/browse/OCPBUGS-52222): fix Vsphere cluster Storage operator in Unavailable state [#560](https://github.com/openshift/cluster-storage-operator/pull/560)
* [OCPBUGS-44997](https://issues.redhat.com/browse/OCPBUGS-44997): Fix PodStartupStorageOperationsFailing alert [#543](https://github.com/openshift/cluster-storage-operator/pull/543)
* [OCPBUGS-43794](https://issues.redhat.com/browse/OCPBUGS-43794): add ability to control kube rbac proxy container image on controlplane [#529](https://github.com/openshift/cluster-storage-operator/pull/529)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1490ce00ea780369acae6bd54e06f2fc60e53249...e4b8dceaf16926b5e4b7fc339b240af00e9539c9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b06c46276c7ac146925dc927202af97b66856a38)

* [OCPBUGS-50589](https://issues.redhat.com/browse/OCPBUGS-50589): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1154](https://github.com/openshift/cluster-version-operator/pull/1154)
* [OCPBUGS-39558](https://issues.redhat.com/browse/OCPBUGS-39558): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1114](https://github.com/openshift/cluster-version-operator/pull/1114)
* [OCPBUGS-45328](https://issues.redhat.com/browse/OCPBUGS-45328): deps: bump golang.org/x/net to 0.31.0 [#1117](https://github.com/openshift/cluster-version-operator/pull/1117)
* [OCPBUGS-43586](https://issues.redhat.com/browse/OCPBUGS-43586): Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z' retarget [#1095](https://github.com/openshift/cluster-version-operator/pull/1095)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1e57277c34cb32ee4e5489fb4139a5fe97f338ad...b06c46276c7ac146925dc927202af97b66856a38)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/62d56d6a8b7ce26889cce1ba55ab4c958398967c)

* append .0 to go.mod version [#70](https://github.com/openshift/configmap-reload/pull/70)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/b877222b8c5527450447079e33d86dd9fe288e54...62d56d6a8b7ce26889cce1ba55ab4c958398967c)


### [console](https://github.com/openshift/console/tree/6fc2fb71f25c1a85e1a9654ea686611b20437cc9)

* [OCPBUGS-56895](https://issues.redhat.com/browse/OCPBUGS-56895): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15108](https://github.com/openshift/console/pull/15108)
* [OCPBUGS-57095](https://issues.redhat.com/browse/OCPBUGS-57095): Add all files to `vendor` regardless of gitignore [#15132](https://github.com/openshift/console/pull/15132)
* [OCPBUGS-57114](https://issues.redhat.com/browse/OCPBUGS-57114): Debug pod logs are not accessible when debugging a node via OpenShift Console [#15142](https://github.com/openshift/console/pull/15142)
* [OCPBUGS-56975](https://issues.redhat.com/browse/OCPBUGS-56975): Sample segment sessions [#15114](https://github.com/openshift/console/pull/15114)
* [OCPBUGS-56844](https://issues.redhat.com/browse/OCPBUGS-56844): Enable knative tests [#14387](https://github.com/openshift/console/pull/14387)
* [OCPBUGS-56375](https://issues.redhat.com/browse/OCPBUGS-56375): remove 60 day alert from cluster update modal [#15062](https://github.com/openshift/console/pull/15062)
* [OCPBUGS-55924](https://issues.redhat.com/browse/OCPBUGS-55924): Fetching taskRuns in PLR details page using PLR UID also [#15029](https://github.com/openshift/console/pull/15029)
* [OCPBUGS-55756](https://issues.redhat.com/browse/OCPBUGS-55756): update the Deployment pod on change in imageStream [#15022](https://github.com/openshift/console/pull/15022)
* [OCPBUGS-56238](https://issues.redhat.com/browse/OCPBUGS-56238): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15049](https://github.com/openshift/console/pull/15049)
* [OCPBUGS-55447](https://issues.redhat.com/browse/OCPBUGS-55447): Authenticate user token in openshift Authenticate func [#15010](https://github.com/openshift/console/pull/15010)
* [OCPBUGS-55415](https://issues.redhat.com/browse/OCPBUGS-55415): fix bug where operator appears twice [#15002](https://github.com/openshift/console/pull/15002)
* [OCPBUGS-55202](https://issues.redhat.com/browse/OCPBUGS-55202): Do not load CSRs if user does not have permissions [#14985](https://github.com/openshift/console/pull/14985)
* [OCPBUGS-52999](https://issues.redhat.com/browse/OCPBUGS-52999): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14862](https://github.com/openshift/console/pull/14862)
* [OCPBUGS-53168](https://issues.redhat.com/browse/OCPBUGS-53168): Remove logoutOpenShift method call [#14883](https://github.com/openshift/console/pull/14883)
* [OCPBUGS-51277](https://issues.redhat.com/browse/OCPBUGS-51277): Fix JSON annotation parsing issue and harden related code [#14795](https://github.com/openshift/console/pull/14795)
* [OCPBUGS-53086](https://issues.redhat.com/browse/OCPBUGS-53086): Update the monitoring topic used by the console team [#14871](https://github.com/openshift/console/pull/14871)
* [OCPBUGS-52205](https://issues.redhat.com/browse/OCPBUGS-52205): Show Observe section without PROMETHEUS and MONITORING flags [#14811](https://github.com/openshift/console/pull/14811)
* [OCPBUGS-51292](https://issues.redhat.com/browse/OCPBUGS-51292): fix run time error when no completed version exists [#14796](https://github.com/openshift/console/pull/14796)
* [OCPBUGS-51126](https://issues.redhat.com/browse/OCPBUGS-51126): Fix alert rule link to alert in dev perspective [#14785](https://github.com/openshift/console/pull/14785)
* [OCPBUGS-49795](https://issues.redhat.com/browse/OCPBUGS-49795): 'create a Project' button on Getting started page doesn't work [#14714](https://github.com/openshift/console/pull/14714)
* [OCPBUGS-39602](https://issues.redhat.com/browse/OCPBUGS-39602): Set default build option as BUILDS for Builder Image sample [#14241](https://github.com/openshift/console/pull/14241)
* [OCPBUGS-45740](https://issues.redhat.com/browse/OCPBUGS-45740): Fix Function Import: An error occurred Cannot read properties of undefined (reading 'filter') [#14595](https://github.com/openshift/console/pull/14595)
* [OCPBUGS-45625](https://issues.redhat.com/browse/OCPBUGS-45625): use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate [#14589](https://github.com/openshift/console/pull/14589)
* [OCPBUGS-41596](https://issues.redhat.com/browse/OCPBUGS-41596): No need to supply 'User workload notifications' option on 'User Preference' page for normal user [#14265](https://github.com/openshift/console/pull/14265)
* [OCPBUGS-44220](https://issues.redhat.com/browse/OCPBUGS-44220): disable flaking and change pre-condition test for knative e2e [#14467](https://github.com/openshift/console/pull/14467)
* [OCPBUGS-43751](https://issues.redhat.com/browse/OCPBUGS-43751): Added token to proxy header [#14430](https://github.com/openshift/console/pull/14430)
* [OCPBUGS-48161](https://issues.redhat.com/browse/OCPBUGS-48161): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14667](https://github.com/openshift/console/pull/14667)
* [OCPBUGS-48227](https://issues.redhat.com/browse/OCPBUGS-48227): fix navigation from non-General User Preference tab to… [#14674](https://github.com/openshift/console/pull/14674)
* [OCPBUGS-41672](https://issues.redhat.com/browse/OCPBUGS-41672): Update vendor imports to include all PatternFly components [#14272](https://github.com/openshift/console/pull/14272)
* [OCPBUGS-46344](https://issues.redhat.com/browse/OCPBUGS-46344): OCP web console show pod status as Init:0/1 after using Native sidecars [#14616](https://github.com/openshift/console/pull/14616)
* [OCPBUGS-47497](https://issues.redhat.com/browse/OCPBUGS-47497): Getting `Oh no, something went wrong` error when trying to install operator. [#14645](https://github.com/openshift/console/pull/14645)
* [OCPBUGS-43673](https://issues.redhat.com/browse/OCPBUGS-43673): Disable GQL introspection [#14640](https://github.com/openshift/console/pull/14640)
* [OCPBUGS-45949](https://issues.redhat.com/browse/OCPBUGS-45949): ReRun of Resolver based PipelineRuns fails from UI [#14605](https://github.com/openshift/console/pull/14605)
* [OCPBUGS-45954](https://issues.redhat.com/browse/OCPBUGS-45954): Fixed capitalization in OpenShift Lightspeed [#14607](https://github.com/openshift/console/pull/14607)
* [OCPBUGS-45948](https://issues.redhat.com/browse/OCPBUGS-45948): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14604](https://github.com/openshift/console/pull/14604)
* [OCPBUGS-45667](https://issues.redhat.com/browse/OCPBUGS-45667): Do not pass CSV name to operand list page when an exen… [#14591](https://github.com/openshift/console/pull/14591)
* [OCPBUGS-46000](https://issues.redhat.com/browse/OCPBUGS-46000): The description and name for GCP Pool ID is not consist [#14611](https://github.com/openshift/console/pull/14611)
* [OCPBUGS-42558](https://issues.redhat.com/browse/OCPBUGS-42558): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14344](https://github.com/openshift/console/pull/14344)
* [OCPBUGS-44656](https://issues.redhat.com/browse/OCPBUGS-44656): update ConditionalUpdates release type [#14505](https://github.com/openshift/console/pull/14505)
* [OCPBUGS-43888](https://issues.redhat.com/browse/OCPBUGS-43888): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14444](https://github.com/openshift/console/pull/14444)
* [OCPBUGS-43441](https://issues.redhat.com/browse/OCPBUGS-43441): fix table combination [#14546](https://github.com/openshift/console/pull/14546)
* [OCPBUGS-44169](https://issues.redhat.com/browse/OCPBUGS-44169): use TaskRuns results.tekton.dev/record annotation to get the logs [#14538](https://github.com/openshift/console/pull/14538)
* [OCPBUGS-44873](https://issues.redhat.com/browse/OCPBUGS-44873): Unable to remove finally tasks in pipeline builder mode [#14527](https://github.com/openshift/console/pull/14527)
* [OCPBUGS-42791](https://issues.redhat.com/browse/OCPBUGS-42791): Add missing pipelines plugin name to known plugins [#14377](https://github.com/openshift/console/pull/14377)
* [OCPBUGS-44699](https://issues.redhat.com/browse/OCPBUGS-44699): Add multiline support to template instantiation [#14508](https://github.com/openshift/console/pull/14508)
* [OCPBUGS-44183](https://issues.redhat.com/browse/OCPBUGS-44183): Remove ClusterTask dependency in console from Pipelines 1.17 [#14512](https://github.com/openshift/console/pull/14512)
* [OCPBUGS-44764](https://issues.redhat.com/browse/OCPBUGS-44764): Add IBM Block Storage CSI driver support for RWX [#14517](https://github.com/openshift/console/pull/14517)
* [OCPBUGS-43795](https://issues.redhat.com/browse/OCPBUGS-43795): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14433](https://github.com/openshift/console/pull/14433)
* [OCPBUGS-44722](https://issues.redhat.com/browse/OCPBUGS-44722): include external labels so silenced alerts not displayed in notifications [#14511](https://github.com/openshift/console/pull/14511)
* [OCPBUGS-44358](https://issues.redhat.com/browse/OCPBUGS-44358): BuildConfig form breaks on manually enter the Git URL [#14478](https://github.com/openshift/console/pull/14478)
* [OCPBUGS-43073](https://issues.redhat.com/browse/OCPBUGS-43073): Telemetry userPreference results in empty nodes output to the DOM [#14392](https://github.com/openshift/console/pull/14392)
* [OCPBUGS-44587](https://issues.redhat.com/browse/OCPBUGS-44587): Start last run do not work in buildConfig details page [#14499](https://github.com/openshift/console/pull/14499)
* [OCPBUGS-44586](https://issues.redhat.com/browse/OCPBUGS-44586): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14498](https://github.com/openshift/console/pull/14498)
* [OCPBUGS-44450](https://issues.redhat.com/browse/OCPBUGS-44450): Don't request user settings configmap if no user has been loaded. [#14482](https://github.com/openshift/console/pull/14482)
* [OCPBUGS-44479](https://issues.redhat.com/browse/OCPBUGS-44479): conditionally display MachineConfig details page Confi… [#14488](https://github.com/openshift/console/pull/14488)
* [OCPBUGS-43878](https://issues.redhat.com/browse/OCPBUGS-43878): Add flag to hide the pipelines-plugin pipeline builder extensions [#14457](https://github.com/openshift/console/pull/14457)
* [OCPBUGS-42824](https://issues.redhat.com/browse/OCPBUGS-42824): remove axios as it is no longer in use [#14381](https://github.com/openshift/console/pull/14381)
* [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402)
* [Full changelog](https://github.com/openshift/console/compare/ff091674f9b3e0cf23d9f1cc12b24ec4f4ae2270...6fc2fb71f25c1a85e1a9654ea686611b20437cc9)


### [console-operator](https://github.com/openshift/console-operator/tree/253854e7e529fb42e90b71038eff4aabf8f31cf7)

* [OCPBUGS-45302](https://issues.redhat.com/browse/OCPBUGS-45302): console/status: set initial value of Message field [#943](https://github.com/openshift/console-operator/pull/943)
* [OCPBUGS-46390](https://issues.redhat.com/browse/OCPBUGS-46390): Dont disable console when authConfig type is set to None [#951](https://github.com/openshift/console-operator/pull/951)
* [Full changelog](https://github.com/openshift/console-operator/compare/f41009e8511cf5a042ca81d18e44137b7d11ba05...253854e7e529fb42e90b71038eff4aabf8f31cf7)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/49a6faae9586d07569079904d55907c74328b6ec)

* [OCPBUGS-55622](https://issues.redhat.com/browse/OCPBUGS-55622): Check error returned by ipv6 SettleAddresses [#187](https://github.com/openshift/containernetworking-plugins/pull/187)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...49a6faae9586d07569079904d55907c74328b6ec)


### [coredns](https://github.com/openshift/coredns/tree/dea218b4eeeef8e4ed245389e697c307bcd06552)

* append .0 to go.mod version [#135](https://github.com/openshift/coredns/pull/135)
* [Full changelog](https://github.com/openshift/coredns/compare/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1...dea218b4eeeef8e4ed245389e697c307bcd06552)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/0e338e1e82923f108be2315f7885b8b28e18d159)

* [OCPBUGS-52416](https://issues.redhat.com/browse/OCPBUGS-52416): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#319](https://github.com/openshift/cloud-provider-openstack/pull/319)
* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#314](https://github.com/openshift/cloud-provider-openstack/pull/314)
* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#302](https://github.com/openshift/cloud-provider-openstack/pull/302)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/a13ed564f36bd295b53afde59f4ac90a92cb75b3...0e338e1e82923f108be2315f7885b8b28e18d159)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/798855508da2df01719bf82f6344112a33b5437c)

* append .0 to go.mod version [#156](https://github.com/openshift/csi-driver-nfs/pull/156)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7...798855508da2df01719bf82f6344112a33b5437c)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/66aee5b045bf2b32f6ccbf7a62c1151b8889811a)

* append .0 to go.mod version [#372](https://github.com/openshift/csi-driver-shared-resource/pull/372)
* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#188](https://github.com/openshift/csi-driver-shared-resource/pull/188)
* [OCPBUGS-44510](https://issues.redhat.com/browse/OCPBUGS-44510): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 [#233](https://github.com/openshift/csi-driver-shared-resource/pull/233)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/abbeb17206231cd9d7d8c32bf7cbdc592e121aa4...66aee5b045bf2b32f6ccbf7a62c1151b8889811a)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/e7d841dc545b9fb3a8a3303b8cac62d35620905b)

* append .0 to go.mod version [#73](https://github.com/openshift/csi-livenessprobe/pull/73)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/075ebcdcb83929571fbea0a4d8ef5e2429e7a259...e7d841dc545b9fb3a8a3303b8cac62d35620905b)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/0cdc4f0981e54c33d881e26e4c184eb164316aba)

* append .0 to go.mod version [#80](https://github.com/openshift/csi-node-driver-registrar/pull/80)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/436a1f334dd75ae75206f52223b7933f7ff5036f...0cdc4f0981e54c33d881e26e4c184eb164316aba)


### [docker-builder](https://github.com/openshift/builder/tree/2bfbba1a477574840db035ad1024c9e4b317bc8f)

* [OCPBUGS-53075](https://issues.redhat.com/browse/OCPBUGS-53075): Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 [#465](https://github.com/openshift/builder/pull/465)
* [OCPBUGS-42894](https://issues.redhat.com/browse/OCPBUGS-42894): buildah dependency bump to 1.37.6 [#452](https://github.com/openshift/builder/pull/452)
* [OCPBUGS-33889](https://issues.redhat.com/browse/OCPBUGS-33889): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 [#393](https://github.com/openshift/builder/pull/393)
* [OCPBUGS-47768](https://issues.redhat.com/browse/OCPBUGS-47768): Add team members to the OWNERS file [#423](https://github.com/openshift/builder/pull/423)
* [OCPBUGS-47712](https://issues.redhat.com/browse/OCPBUGS-47712): skipping some unit tests to avoid failures as they are duplicate [#421](https://github.com/openshift/builder/pull/421)
* [Full changelog](https://github.com/openshift/builder/compare/5dec103fe7e811afc7d6886db94c6ffdbfa77c56...2bfbba1a477574840db035ad1024c9e4b317bc8f)


### [docker-registry](https://github.com/openshift/image-registry/tree/e2ce90d03ec705bf612173c523f3a92daeb87d22)

* [OCPBUGS-53655](https://issues.redhat.com/browse/OCPBUGS-53655): bump jwt and oauth dependencies [#431](https://github.com/openshift/image-registry/pull/431)
* [OCPBUGS-49695](https://issues.redhat.com/browse/OCPBUGS-49695): bump docker distribution [#422](https://github.com/openshift/image-registry/pull/422)
* [Full changelog](https://github.com/openshift/image-registry/compare/ef9fa95763754c05beb32e1ddca406de67ae4bd6...e2ce90d03ec705bf612173c523f3a92daeb87d22)


### [etcd](https://github.com/openshift/etcd/tree/0d9e0a907c4aea7c4b2bff627478785fb99511f5)

* DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue [#321](https://github.com/openshift/etcd/pull/321)
* [ETCD-714](https://issues.redhat.com/browse/ETCD-714): Rebase etcd 3.5.18 openshift 4.17 [#310](https://github.com/openshift/etcd/pull/310)
* NO-ISSUE: Add support for cachi2 based deps [#297](https://github.com/openshift/etcd/pull/297)
* [Full changelog](https://github.com/openshift/etcd/compare/c82057da87388662904654d4f01acd06595ee22d...0d9e0a907c4aea7c4b2bff627478785fb99511f5)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/86a1d902ab3989413be802a3daea422bc559012f)

* [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Disable shielded VMs for non-UEFI disks [#115](https://github.com/openshift/machine-api-provider-gcp/pull/115)
* [OCPBUGS-48064](https://issues.redhat.com/browse/OCPBUGS-48064): Refactor exists() to handle gcp API change [#105](https://github.com/openshift/machine-api-provider-gcp/pull/105)
* [OCPBUGS-46082](https://issues.redhat.com/browse/OCPBUGS-46082): update a2 gpu detection logic to be dynamic [#100](https://github.com/openshift/machine-api-provider-gcp/pull/100)
* [OCPBUGS-43738](https://issues.redhat.com/browse/OCPBUGS-43738): Add c4a instance as arm type [#95](https://github.com/openshift/machine-api-provider-gcp/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/f2711c6d7a7ceb809dfe553525157ed88dd3713c...86a1d902ab3989413be802a3daea422bc559012f)


### [haproxy-router](https://github.com/openshift/router/tree/1e29d8cc87a1c9e6645a4b9aa01197d90e366152)

* [OCPBUGS-49390](https://issues.redhat.com/browse/OCPBUGS-49390): Reject All CA-Signed Certs Using SHA1 [#650](https://github.com/openshift/router/pull/650)
* [OCPBUGS-49702](https://issues.redhat.com/browse/OCPBUGS-49702): Add support for IdleCloseTerminationPolicy [#652](https://github.com/openshift/router/pull/652)
* [Full changelog](https://github.com/openshift/router/compare/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a...1e29d8cc87a1c9e6645a4b9aa01197d90e366152)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/1a087a5f1cd7e495b2433236f92b2dc351b457d3)

* [OCPBUGS-55269](https://issues.redhat.com/browse/OCPBUGS-55269): Bump k8s api to 1.30.12 [#2280](https://github.com/openshift/kubernetes/pull/2280)
* [OCPBUGS-53016](https://issues.redhat.com/browse/OCPBUGS-53016): Bump k8s api to 1.30.11 [#2250](https://github.com/openshift/kubernetes/pull/2250)
* [OCPBUGS-51006](https://issues.redhat.com/browse/OCPBUGS-51006): Bump k8s api to 1.30.10 [#2210](https://github.com/openshift/kubernetes/pull/2210)
* [OCPBUGS-49905](https://issues.redhat.com/browse/OCPBUGS-49905): Bump k8s api to 1.30.9 [#2198](https://github.com/openshift/kubernetes/pull/2198)
* : OCPBUGS-46364: Fix grace period used for immediate evictions [#2164](https://github.com/openshift/kubernetes/pull/2164)
* [OCPBUGS-46002](https://issues.redhat.com/browse/OCPBUGS-46002): Bump k8s api to 1.30.7 [#2160](https://github.com/openshift/kubernetes/pull/2160)
* [OCPBUGS-39318](https://issues.redhat.com/browse/OCPBUGS-39318): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2070](https://github.com/openshift/kubernetes/pull/2070)
* [OCPBUGS-43820](https://issues.redhat.com/browse/OCPBUGS-43820): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2126](https://github.com/openshift/kubernetes/pull/2126)
* [OCPBUGS-44897](https://issues.redhat.com/browse/OCPBUGS-44897): Backport format library to enable usage in 4.18 [#2140](https://github.com/openshift/kubernetes/pull/2140)
* [OCPBUGS-44512](https://issues.redhat.com/browse/OCPBUGS-44512): Bump k8s api to 1.30.6 [#2134](https://github.com/openshift/kubernetes/pull/2134)
* [OCPBUGS-42427](https://issues.redhat.com/browse/OCPBUGS-42427): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2097](https://github.com/openshift/kubernetes/pull/2097)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6816ea6a977365195404d43756efd1c42ac0b2a7...1a087a5f1cd7e495b2433236f92b2dc351b457d3)


### [hypershift](https://github.com/openshift/hypershift/tree/a47ea54f36ead6aed5c58ed200ccfbb9eeb48958)

* [OCPBUGS-57432](https://issues.redhat.com/browse/OCPBUGS-57432): Add proxy variables for the MCD Pod [#6258](https://github.com/openshift/hypershift/pull/6258)
* [CNTRLPLANE-918](https://issues.redhat.com/browse/CNTRLPLANE-918): Konflux build pipeline service account migration [#6088](https://github.com/openshift/hypershift/pull/6088)
* [CNTRLPLANE-918](https://issues.redhat.com/browse/CNTRLPLANE-918): Konflux build pipeline service account migration [#6083](https://github.com/openshift/hypershift/pull/6083)
* [OCPBUGS-55723](https://issues.redhat.com/browse/OCPBUGS-55723): Don't check if olm images exist if guest cluster [#6115](https://github.com/openshift/hypershift/pull/6115)
* [OCPBUGS-55500](https://issues.redhat.com/browse/OCPBUGS-55500), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6098](https://github.com/openshift/hypershift/pull/6098)
* [OCPBUGS-51808](https://issues.redhat.com/browse/OCPBUGS-51808): Fix golang crypto dependency go.mod replacement [#5993](https://github.com/openshift/hypershift/pull/5993)
* [OCPBUGS-54841](https://issues.redhat.com/browse/OCPBUGS-54841): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6017](https://github.com/openshift/hypershift/pull/6017)
* [OCPBUGS-53323](https://issues.redhat.com/browse/OCPBUGS-53323): Handle multiple mirror entries for source [#5894](https://github.com/openshift/hypershift/pull/5894)
* [OCPBUGS-54631](https://issues.redhat.com/browse/OCPBUGS-54631): Sync RBAC for attaching volumes on VM level [#5997](https://github.com/openshift/hypershift/pull/5997)
* NO-JIRA: update konflux references [#5479](https://github.com/openshift/hypershift/pull/5479)
* [OCPBUGS-53903](https://issues.redhat.com/browse/OCPBUGS-53903): bump golang-jwt v4 and v5 [#5906](https://github.com/openshift/hypershift/pull/5906)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 [#5959](https://github.com/openshift/hypershift/pull/5959)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5920](https://github.com/openshift/hypershift/pull/5920)
* [OCPBUGS-51737](https://issues.redhat.com/browse/OCPBUGS-51737), [OCPBUGS-51808](https://issues.redhat.com/browse/OCPBUGS-51808): Bump dependencies to OCP fork in backports [#5900](https://github.com/openshift/hypershift/pull/5900)
* [OCPBUGS-48439](https://issues.redhat.com/browse/OCPBUGS-48439): kubevirt, Don't break on hostname NodePort.Address [#5394](https://github.com/openshift/hypershift/pull/5394)
* [OCPBUGS-51240](https://issues.redhat.com/browse/OCPBUGS-51240): bump go-jose [#5863](https://github.com/openshift/hypershift/pull/5863)
* [OCPBUGS-52657](https://issues.redhat.com/browse/OCPBUGS-52657): Make managed-trust-bundle optional [#5794](https://github.com/openshift/hypershift/pull/5794)
* [OCPBUGS-52425](https://issues.redhat.com/browse/OCPBUGS-52425): [release-4.17] refactor aws identity health check into new controller [#5772](https://github.com/openshift/hypershift/pull/5772)
* [OCPBUGS-46340](https://issues.redhat.com/browse/OCPBUGS-46340): change plaform to platform [#5562](https://github.com/openshift/hypershift/pull/5562)
* [OCPBUGS-51339](https://issues.redhat.com/browse/OCPBUGS-51339): [release-4.17] Fix IsProgressing condition in HostedClusters [#5712](https://github.com/openshift/hypershift/pull/5712)
* [OCPBUGS-50697](https://issues.redhat.com/browse/OCPBUGS-50697): add region to AWS creds passed to operators managed by CPO [#5671](https://github.com/openshift/hypershift/pull/5671)
* [OCPBUGS-51098](https://issues.redhat.com/browse/OCPBUGS-51098): 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5675](https://github.com/openshift/hypershift/pull/5675)
* NO-JIRA: Update dependency mkdocs-material to v9.6.5 [#5682](https://github.com/openshift/hypershift/pull/5682)
* [OCPBUGS-50596](https://issues.redhat.com/browse/OCPBUGS-50596): Honor proxy vars in the util insecure http client [#5605](https://github.com/openshift/hypershift/pull/5605)
* [OCPBUGS-49828](https://issues.redhat.com/browse/OCPBUGS-49828): Duplicate hostDevices.name when hostDevices.deviceName has multiple types. [#5558](https://github.com/openshift/hypershift/pull/5558)
* [OCPBUGS-48487](https://issues.redhat.com/browse/OCPBUGS-48487), [OCPBUGS-48488](https://issues.redhat.com/browse/OCPBUGS-48488), [OCPBUGS-48490](https://issues.redhat.com/browse/OCPBUGS-48490): Fix IPv6 Disconnected HCP deployments [#5402](https://github.com/openshift/hypershift/pull/5402)
* [OCPBUGS-47533](https://issues.redhat.com/browse/OCPBUGS-47533): Prevent IgnitionServer from flooding the API server with patch requests [#5332](https://github.com/openshift/hypershift/pull/5332)
* NO-JIRA: Update dependency mkdocs-material to v9.6.3 [#5590](https://github.com/openshift/hypershift/pull/5590)
* [OCPBUGS-45268](https://issues.redhat.com/browse/OCPBUGS-45268): Reconcile proxy CA bundle into hosted cluster [#5228](https://github.com/openshift/hypershift/pull/5228)
* [OCPBUGS-46465](https://issues.redhat.com/browse/OCPBUGS-46465): Consistently look up and dial cloud API hostnames [#5302](https://github.com/openshift/hypershift/pull/5302)
* NO-JIRA: Update dependency mkdocs-material to v9.6.1 [#5528](https://github.com/openshift/hypershift/pull/5528)
* [OCPBUGS-49638](https://issues.redhat.com/browse/OCPBUGS-49638): fix overwriting PKI operator HCP conditions [#5504](https://github.com/openshift/hypershift/pull/5504)
* [OCPBUGS-46440](https://issues.redhat.com/browse/OCPBUGS-46440): Allow ARM64 arch deployment on Agent platform [#5296](https://github.com/openshift/hypershift/pull/5296)
* [OCPBUGS-48170](https://issues.redhat.com/browse/OCPBUGS-48170): fix disconnected via CLI [#5465](https://github.com/openshift/hypershift/pull/5465)
* [OCPBUGS-38810](https://issues.redhat.com/browse/OCPBUGS-38810): nodepoolcontroller: `List()` PerformanceProfile status per NodePool [#4585](https://github.com/openshift/hypershift/pull/4585)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) [#5428](https://github.com/openshift/hypershift/pull/5428)
* NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) [#5427](https://github.com/openshift/hypershift/pull/5427)
* [OCPBUGS-44927](https://issues.redhat.com/browse/OCPBUGS-44927): Add multi-arch validation for HC/NodePool compatibility [#5238](https://github.com/openshift/hypershift/pull/5238)
* NO-JIRA:  [release-4.17] Bump golang.org/x/crypto and golang.org/x/net [#5368](https://github.com/openshift/hypershift/pull/5368)
* NO-JIRA: Update Konflux references (release-4.17) [#5329](https://github.com/openshift/hypershift/pull/5329)
* [OCPBUGS-46412](https://issues.redhat.com/browse/OCPBUGS-46412): Separate CPO containerfiles [#5285](https://github.com/openshift/hypershift/pull/5285)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5289](https://github.com/openshift/hypershift/pull/5289)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) [#5290](https://github.com/openshift/hypershift/pull/5290)
* [OCPBUGS-44114](https://issues.redhat.com/browse/OCPBUGS-44114): Add external kas address to no proxy skip list [#5028](https://github.com/openshift/hypershift/pull/5028)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 [#5174](https://github.com/openshift/hypershift/pull/5174)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5249](https://github.com/openshift/hypershift/pull/5249)
* [OCPBUGS-44630](https://issues.redhat.com/browse/OCPBUGS-44630): Use ingress role in private link controller for DNS operations [#5142](https://github.com/openshift/hypershift/pull/5142)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5183](https://github.com/openshift/hypershift/pull/5183)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5154](https://github.com/openshift/hypershift/pull/5154)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5144](https://github.com/openshift/hypershift/pull/5144)
* [OCPBUGS-44184](https://issues.redhat.com/browse/OCPBUGS-44184): dont use registryOverrides on kube rbac proxy image be… [#5033](https://github.com/openshift/hypershift/pull/5033)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5113](https://github.com/openshift/hypershift/pull/5113)
* [OCPBUGS-43929](https://issues.redhat.com/browse/OCPBUGS-43929): Return the right tagReference on Catalogs ImageStream [#4993](https://github.com/openshift/hypershift/pull/4993)
* [OCPBUGS-44276](https://issues.redhat.com/browse/OCPBUGS-44276): Configure OAuth https proxy to dial cloud endpoints directly [#5070](https://github.com/openshift/hypershift/pull/5070)
* [OCPBUGS-44268](https://issues.redhat.com/browse/OCPBUGS-44268): Fix order rendering HCP objects [#5064](https://github.com/openshift/hypershift/pull/5064)
* NO-JIRA: Update Konflux references (release-4.17) [#5098](https://github.com/openshift/hypershift/pull/5098)
* chore(deps): update konflux references (release-4.17) [#5075](https://github.com/openshift/hypershift/pull/5075)
* [HOSTEDCP-2046](https://issues.redhat.com/browse/HOSTEDCP-2046): CPO 4.17 tekton builds [#5006](https://github.com/openshift/hypershift/pull/5006)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5053](https://github.com/openshift/hypershift/pull/5053)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.17) [#5041](https://github.com/openshift/hypershift/pull/5041)
* chore(deps): update konflux references (release-4.17) [#5023](https://github.com/openshift/hypershift/pull/5023)
* chore(deps): update konflux references to f53fe54 (release-4.17) [#5018](https://github.com/openshift/hypershift/pull/5018)
* NO-JIRA: Update Konflux references (release-4.17) [#5009](https://github.com/openshift/hypershift/pull/5009)
* [OCPBUGS-42879](https://issues.redhat.com/browse/OCPBUGS-42879): Add network policies for konnectivity server and ignition server proxy [#4865](https://github.com/openshift/hypershift/pull/4865)
* NO-JIRA: bump catalog operators version [#4992](https://github.com/openshift/hypershift/pull/4992)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4972](https://github.com/openshift/hypershift/pull/4972)
* [OCPBUGS-43746](https://issues.redhat.com/browse/OCPBUGS-43746): add ValidIDPConfiguration condition to report IDP config issues [#4969](https://github.com/openshift/hypershift/pull/4969)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958)
* [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931)
* [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843)
* [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921)
* [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914)
* [Full changelog](https://github.com/openshift/hypershift/compare/6b836266f68826f83527aefcb2fd2d2d0b83a669...a47ea54f36ead6aed5c58ed200ccfbb9eeb48958)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/5eb7310f1403438f5d7f62f81c362ca6bf2e4e27)

* append .0 to go.mod version [#100](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/100)
* [OCPBUGS-53911](https://issues.redhat.com/browse/OCPBUGS-53911): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#83](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3a3a62f7a200d2042cb64757f2d60faed20b6218...5eb7310f1403438f5d7f62f81c362ca6bf2e4e27)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/14489f69f70f6077bcc81ce2dfa4edba2b330801)

* [OCPBUGS-50566](https://issues.redhat.com/browse/OCPBUGS-50566): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 [#101](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/101)
* [OCPBUGS-44880](https://issues.redhat.com/browse/OCPBUGS-44880): Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id [#94](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/94)
* [OCPBUGS-37369](https://issues.redhat.com/browse/OCPBUGS-37369): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.17 [#86](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/9179e15477e8de38460db74b4ec1ac125ea9d625...14489f69f70f6077bcc81ce2dfa4edba2b330801)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/0b8dd7abc69b9a2369005517846c95c619abf613)

* [OCPBUGS-52957](https://issues.redhat.com/browse/OCPBUGS-52957): IBMCloud: MAPI replacing unhealthy CP nodes [#63](https://github.com/openshift/machine-api-provider-ibmcloud/pull/63)
* [OCPBUGS-37379](https://issues.redhat.com/browse/OCPBUGS-37379): Bump dependency for CVE [#49](https://github.com/openshift/machine-api-provider-ibmcloud/pull/49)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/dce9d33e91d0f6eae88da8d233e7b4b002c5c1b0...0b8dd7abc69b9a2369005517846c95c619abf613)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2b1e2df05f67be7567d234f4150076a5aefd4ee2)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for dataGahtering jobs & pods [#1049](https://github.com/openshift/insights-operator/pull/1049)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4f503fb6f2b83471e24f8418ce57d96ce7e10245...2b1e2df05f67be7567d234f4150076a5aefd4ee2)


### [ironic](https://github.com/openshift/ironic-image/tree/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c)

* [METAL-1305](https://issues.redhat.com/browse/METAL-1305): Do not use openstack packages [#647](https://github.com/openshift/ironic-image/pull/647)
* [OCPBUGS-52292](https://issues.redhat.com/browse/OCPBUGS-52292): Fix runlogwatch script [#643](https://github.com/openshift/ironic-image/pull/643)
* [OCPBUGS-50673](https://issues.redhat.com/browse/OCPBUGS-50673): Install python3-inotify pkg explicitly [#640](https://github.com/openshift/ironic-image/pull/640)
* [OCPBUGS-49998](https://issues.redhat.com/browse/OCPBUGS-49998): Fix runlogwatch failure if LOG_DIR does not exist [#637](https://github.com/openshift/ironic-image/pull/637)
* [OCPBUGS-49822](https://issues.redhat.com/browse/OCPBUGS-49822): Drop quiet option of grep to avoid race condition with pipefail [#633](https://github.com/openshift/ironic-image/pull/633)
* [OCPBUGS-49756](https://issues.redhat.com/browse/OCPBUGS-49756): Use pynotify instead of inotify-tools [#631](https://github.com/openshift/ironic-image/pull/631)
* [OCPBUGS-48149](https://issues.redhat.com/browse/OCPBUGS-48149): Bump jinja2 to 3.1.5 [#622](https://github.com/openshift/ironic-image/pull/622)
* [OCPBUGS-43955](https://issues.redhat.com/browse/OCPBUGS-43955), [OCPBUGS-43963](https://issues.redhat.com/browse/OCPBUGS-43963): Bump python-waitress [4.17] [#603](https://github.com/openshift/ironic-image/pull/603)
* [Full changelog](https://github.com/openshift/ironic-image/compare/90a9bc5f9dd3ad4d65834c3b819054dfa477e9c2...391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/dfc319182f7a1a2bd6b252728d3cd8a03bc9d7c0)

* [OCPBUGS-55680](https://issues.redhat.com/browse/OCPBUGS-55680): Delay determining the hostname to put into ignition [#185](https://github.com/openshift/ironic-agent-image/pull/185)
* [METAL-1305](https://issues.redhat.com/browse/METAL-1305): Do not use openstack packages [#179](https://github.com/openshift/ironic-agent-image/pull/179)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f5f742d8df2b1879a565809632ce2b43b965b4d4...dfc319182f7a1a2bd6b252728d3cd8a03bc9d7c0)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/9e6596c3f9d239d91c358299a19871905fa914fe)

* append .0 to go.mod version [#104](https://github.com/openshift/ironic-rhcos-downloader/pull/104)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818...9e6596c3f9d239d91c358299a19871905fa914fe)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/bc5b8a2c3209873231a7eabd83ace578c8e182f7)

* [OCPBUGS-49350](https://issues.redhat.com/browse/OCPBUGS-49350): Fix subnet validation [#47](https://github.com/openshift/ironic-static-ip-manager/pull/47)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/713378b37863d482b72051e3d7f1d0976abed0ce...bc5b8a2c3209873231a7eabd83ace578c8e182f7)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec)

* append .0 to go.mod version [#43](https://github.com/openshift/kubernetes-metrics-server/pull/43)
* : OCPBUGS-46491: Disable HTTP2 [#40](https://github.com/openshift/kubernetes-metrics-server/pull/40)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c...07f8cd9ecb93587ff0ec42d86a4ff9a292a0ecec)


### [kube-proxy](https://github.com/openshift/sdn/tree/dee082def2014ab85a0e5ff9a056d3fe2461eab7)

* [OCPBUGS-43807](https://issues.redhat.com/browse/OCPBUGS-43807): Revendor to a patched k/k with our prefer-local-DNS hack [#640](https://github.com/openshift/sdn/pull/640)
* [Full changelog](https://github.com/openshift/sdn/compare/307a0b2cdd1d5e97830e940d95ba9985e80f5d19...dee082def2014ab85a0e5ff9a056d3fe2461eab7)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f708b5ecf87b948864e4f68d0724cda5de13a9d9)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#120](https://github.com/openshift/kube-rbac-proxy/pull/120)
* [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b2d2c462e801d7b8890347c017184153c3c8eaab...f708b5ecf87b948864e4f68d0724cda5de13a9d9)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/0b41e7bf19a6bffa060eb26ecd4830634882d4a3)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#217](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/217)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/34fafc04e5f2872e282617da31175a7e091ffdb2...0b41e7bf19a6bffa060eb26ecd4830634882d4a3)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/757a8894fe4f5b569210ec695fe0615e291f42ec)

* [OCPBUGS-54631](https://issues.redhat.com/browse/OCPBUGS-54631): Ensure volume stays attached through reboots [#56](https://github.com/openshift/kubevirt-csi-driver/pull/56)
* [OCPBUGS-44623](https://issues.redhat.com/browse/OCPBUGS-44623): During detach don't return error if VM is not found [#50](https://github.com/openshift/kubevirt-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/02f9a9211a89784aad3272ffe93aa305a00be736...757a8894fe4f5b569210ec695fe0615e291f42ec)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/998cffed3663b5b4332a8eb0d8e7dce489b1bfa9)

* [OCPBUGS-57073](https://issues.redhat.com/browse/OCPBUGS-57073): Updates GCP CredentialsRequest [#1377](https://github.com/openshift/machine-api-operator/pull/1377)
* [OCPBUGS-53036](https://issues.redhat.com/browse/OCPBUGS-53036), [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Updates GCP credentials request [#1345](https://github.com/openshift/machine-api-operator/pull/1345)
* [OCPBUGS-52576](https://issues.redhat.com/browse/OCPBUGS-52576): add image/read permissions [#1344](https://github.com/openshift/machine-api-operator/pull/1344)
* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unneeded VNet permissions from Azure CredentialsRequest [#1337](https://github.com/openshift/machine-api-operator/pull/1337)
* [OCPBUGS-51370](https://issues.redhat.com/browse/OCPBUGS-51370): Drop oVirt support [#1334](https://github.com/openshift/machine-api-operator/pull/1334)
* [OCPBUGS-43851](https://issues.redhat.com/browse/OCPBUGS-43851): vSphere klog initialization preventing verbose log messages [#1302](https://github.com/openshift/machine-api-operator/pull/1302)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/139064c02af33d94baa669cce30967bfea534d13...998cffed3663b5b4332a8eb0d8e7dce489b1bfa9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5f8e2a122d1d8209da920b493cdca8d026836ea5)

* [OCPBUGS-57135](https://issues.redhat.com/browse/OCPBUGS-57135): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5111](https://github.com/openshift/machine-config-operator/pull/5111)
* [OCPBUGS-56901](https://issues.redhat.com/browse/OCPBUGS-56901): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5096](https://github.com/openshift/machine-config-operator/pull/5096)
* [OCPBUGS-56976](https://issues.redhat.com/browse/OCPBUGS-56976): Boot Image Controller should not degrade when golden configmap is slow to update [#5101](https://github.com/openshift/machine-config-operator/pull/5101)
* [OCPBUGS-56990](https://issues.redhat.com/browse/OCPBUGS-56990): Only update boot disks during GCP boot image updates [#5102](https://github.com/openshift/machine-config-operator/pull/5102)
* [OCPBUGS-56828](https://issues.redhat.com/browse/OCPBUGS-56828): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5087](https://github.com/openshift/machine-config-operator/pull/5087)
* [OCPBUGS-52313](https://issues.redhat.com/browse/OCPBUGS-52313): Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 [#4893](https://github.com/openshift/machine-config-operator/pull/4893)
* [OCPBUGS-56665](https://issues.redhat.com/browse/OCPBUGS-56665): Add hot loop detection in the boot image controller [#5077](https://github.com/openshift/machine-config-operator/pull/5077)
* [OCPBUGS-56395](https://issues.redhat.com/browse/OCPBUGS-56395): error from generateAndValidateRenderedMachineConfig function can be misleading [#5060](https://github.com/openshift/machine-config-operator/pull/5060)
* [OCPBUGS-56218](https://issues.redhat.com/browse/OCPBUGS-56218): Rewrote TestFirstBootHasSSHKeys e2e test in pure Go [#5053](https://github.com/openshift/machine-config-operator/pull/5053)
* [OCPBUGS-55615](https://issues.redhat.com/browse/OCPBUGS-55615): MSBIC should not update windows machinesets [#5021](https://github.com/openshift/machine-config-operator/pull/5021)
* [OCPBUGS-55490](https://issues.redhat.com/browse/OCPBUGS-55490): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5020](https://github.com/openshift/machine-config-operator/pull/5020)
* [OCPBUGS-54830](https://issues.redhat.com/browse/OCPBUGS-54830): Make mtu-migration run after wait-for-primary-ip [#4989](https://github.com/openshift/machine-config-operator/pull/4989)
* [OCPBUGS-52314](https://issues.redhat.com/browse/OCPBUGS-52314): on-prem/resolv-prepender: stop leaking tmp files [#4894](https://github.com/openshift/machine-config-operator/pull/4894)
* [OCPBUGS-45989](https://issues.redhat.com/browse/OCPBUGS-45989): Do not run resolv-prepender from NM dispatcher [#4785](https://github.com/openshift/machine-config-operator/pull/4785)
* [OCPBUGS-52188](https://issues.redhat.com/browse/OCPBUGS-52188): ignore mc not found error [#4957](https://github.com/openshift/machine-config-operator/pull/4957)
* [OCPBUGS-52951](https://issues.redhat.com/browse/OCPBUGS-52951): Add ipsec connect wait service [#4930](https://github.com/openshift/machine-config-operator/pull/4930)
* [OCPBUGS-53441](https://issues.redhat.com/browse/OCPBUGS-53441): Fixing typos for MachineConfigNode [#4936](https://github.com/openshift/machine-config-operator/pull/4936)
* [OCPBUGS-53186](https://issues.redhat.com/browse/OCPBUGS-53186): Update ObservedGeneration in KubeletConfig [#4919](https://github.com/openshift/machine-config-operator/pull/4919)
* [OCPBUGS-53225](https://issues.redhat.com/browse/OCPBUGS-53225): daemon: ensure ostree-finalize-staged is started before rebooting [#4920](https://github.com/openshift/machine-config-operator/pull/4920)
* [OCPBUGS-52160](https://issues.redhat.com/browse/OCPBUGS-52160): Enforce VIPs to be collocated at the same host [#4884](https://github.com/openshift/machine-config-operator/pull/4884)
* [OCPBUGS-52303](https://issues.redhat.com/browse/OCPBUGS-52303): Enable nmstate-configuration on all platforms [#4891](https://github.com/openshift/machine-config-operator/pull/4891)
* [OCPBUGS-51003](https://issues.redhat.com/browse/OCPBUGS-51003): daemon: add nil check for annotation fetching [#4862](https://github.com/openshift/machine-config-operator/pull/4862)
* [OCPBUGS-51353](https://issues.redhat.com/browse/OCPBUGS-51353): Update cluster-reader ClusterRole permissions [#4882](https://github.com/openshift/machine-config-operator/pull/4882)
* [OCPBUGS-50955](https://issues.redhat.com/browse/OCPBUGS-50955): create /run/nodeip-configuration before use [#4858](https://github.com/openshift/machine-config-operator/pull/4858)
* [OCPBUGS-51334](https://issues.redhat.com/browse/OCPBUGS-51334): Update format verbs for alert logs [#4880](https://github.com/openshift/machine-config-operator/pull/4880)
* [OCPBUGS-52257](https://issues.redhat.com/browse/OCPBUGS-52257): configure-ovs workaround for ovs-if-br-ex bug [#4889](https://github.com/openshift/machine-config-operator/pull/4889)
* [OCPBUGS-49973](https://issues.redhat.com/browse/OCPBUGS-49973): Update the storage.conf configuration file template [#4836](https://github.com/openshift/machine-config-operator/pull/4836)
* [OCPBUGS-49363](https://issues.redhat.com/browse/OCPBUGS-49363): Auto-recover from MC with invalid extension [#4824](https://github.com/openshift/machine-config-operator/pull/4824)
* [OCPBUGS-49716](https://issues.redhat.com/browse/OCPBUGS-49716): MCO CO degrades are stuck on until master pool updates complete [#4826](https://github.com/openshift/machine-config-operator/pull/4826)
* [OCPBUGS-49639](https://issues.redhat.com/browse/OCPBUGS-49639): Add clarification to invalid maxUnavailable alert [#4820](https://github.com/openshift/machine-config-operator/pull/4820)
* [OCPBUGS-47475](https://issues.redhat.com/browse/OCPBUGS-47475): Pausing Master MCP results in Alerts [#4769](https://github.com/openshift/machine-config-operator/pull/4769)
* [OCPBUGS-47802](https://issues.redhat.com/browse/OCPBUGS-47802): OCPBUGS-47801: trying to wait for sub-controllers [#4775](https://github.com/openshift/machine-config-operator/pull/4775)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4715](https://github.com/openshift/machine-config-operator/pull/4715)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Remove trailing periods from AWS provided hostnames [#4738](https://github.com/openshift/machine-config-operator/pull/4738)
* [OCPBUGS-39223](https://issues.redhat.com/browse/OCPBUGS-39223): Do not enable on-prem-resolv-prepender.path for UPI [#4572](https://github.com/openshift/machine-config-operator/pull/4572)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): Revert "controller: default to runc when upgrading clusters from 4.17 to 4.18" [#4716](https://github.com/openshift/machine-config-operator/pull/4716)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4635](https://github.com/openshift/machine-config-operator/pull/4635)
* [OCPBUGS-44561](https://issues.redhat.com/browse/OCPBUGS-44561): Disable tx chksum for driver IDPF on GCP C3/C4 [#4701](https://github.com/openshift/machine-config-operator/pull/4701)
* [MCO-1343](https://issues.redhat.com/browse/MCO-1343): Backport Telemetry to 4.17 [#4650](https://github.com/openshift/machine-config-operator/pull/4650)
* [OCPBUGS-43917](https://issues.redhat.com/browse/OCPBUGS-43917): Disable ESP offload for OVS attached interfaces [#4667](https://github.com/openshift/machine-config-operator/pull/4667)
* [OCPBUGS-43719](https://issues.redhat.com/browse/OCPBUGS-43719): Soften haproxy timeout for kubeapi probe [#4657](https://github.com/openshift/machine-config-operator/pull/4657)
* [OCPBUGS-42577](https://issues.redhat.com/browse/OCPBUGS-42577): openstack: fix non-old systemd compatible unit [#4620](https://github.com/openshift/machine-config-operator/pull/4620)
* [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615)
* [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/21453ea63d5d082f8cc3ce56ec3c2355686170e0...5f8e2a122d1d8209da920b493cdca8d026836ea5)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1a7239ebe6f6a403b54499fe92267e493293d4b1)

* append .0 to go.mod version [#135](https://github.com/openshift/image-customization-controller/pull/135)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/74bee37482b0e9d581c2e12c8040195169e49032...1a7239ebe6f6a403b54499fe92267e493293d4b1)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/f85666be7889cd6ba95926546a005fed5f3cb68a)

* [OCPBUGS-54146](https://issues.redhat.com/browse/OCPBUGS-54146): Change rhcos release browser url [#56](https://github.com/openshift/machine-os-images/pull/56)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9e76dac7c015538cea342bb0d4b226a9ffe58754...f85666be7889cd6ba95926546a005fed5f3cb68a)


### [metallb-frr](https://github.com/openshift/frr/tree/c0182036769726484b96a20db5e8be211d2f88b6)

* [OCPBUGS-55021](https://issues.redhat.com/browse/OCPBUGS-55021): Backport DynamicASN [#92](https://github.com/openshift/frr/pull/92)
* [OCPBUGS-55344](https://issues.redhat.com/browse/OCPBUGS-55344): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#89](https://github.com/openshift/frr/pull/89)
* [OCPBUGS-44111](https://issues.redhat.com/browse/OCPBUGS-44111): Use metrics for readiness/liveness probes [#77](https://github.com/openshift/frr/pull/77)
* [Full changelog](https://github.com/openshift/frr/compare/377d02f94181d26dac3ab2e2067ced9fe8d73763...c0182036769726484b96a20db5e8be211d2f88b6)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/32463001843feb1cf87b175d75187fc35cfa3caf)

* [OCPBUGS-54211](https://issues.redhat.com/browse/OCPBUGS-54211): fix issue preventing dev silences from loading [#374](https://github.com/openshift/monitoring-plugin/pull/374)
* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#377](https://github.com/openshift/monitoring-plugin/pull/377)
* [OCPBUGS-51117](https://issues.redhat.com/browse/OCPBUGS-51117): Fix overview links [#357](https://github.com/openshift/monitoring-plugin/pull/357)
* [OCPBUGS-44394](https://issues.redhat.com/browse/OCPBUGS-44394): remove unused package and upgrade vulnerable dependency [#271](https://github.com/openshift/monitoring-plugin/pull/271)
* [OCPBUGS-43238](https://issues.redhat.com/browse/OCPBUGS-43238): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 [#216](https://github.com/openshift/monitoring-plugin/pull/216)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c7bc7fcb6419b15cf0bf708ad1fb24a4f912e508...32463001843feb1cf87b175d75187fc35cfa3caf)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/83d9a7204c37530e37c31f3f755d96c3fe4f699d)

* append .0 to go.mod version [#97](https://github.com/openshift/multus-admission-controller/pull/97)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7...83d9a7204c37530e37c31f3f755d96c3fe4f699d)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/af7b9cbf4fc26091e78c2db9e7742df969a27888)

* [OCPBUGS-47471](https://issues.redhat.com/browse/OCPBUGS-47471): adds getcontext (backport 4.17) [#260](https://github.com/openshift/multus-cni/pull/260)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b8d8d5c0128743d5d3c188ad37004c0a4bc00337...af7b9cbf4fc26091e78c2db9e7742df969a27888)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/4d0b170379c4e158d976b4dd7bccbed5835fdede)

* append .0 to go.mod version [#71](https://github.com/openshift/multus-networkpolicy/pull/71)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8...4d0b170379c4e158d976b4dd7bccbed5835fdede)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/df78f6433df7f12de63f06fbc62d0f63c0642dd2)

* [OCPBUGS-55617](https://issues.redhat.com/browse/OCPBUGS-55617): Fixes leftover podref issue [#364](https://github.com/openshift/whereabouts-cni/pull/364)
* [OCPBUGS-48745](https://issues.redhat.com/browse/OCPBUGS-48745): [Release-4.17]Kubeconfig loop [#334](https://github.com/openshift/whereabouts-cni/pull/334)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/b950d50da905e2174df6f93a1f49f69332f65f42...df78f6433df7f12de63f06fbc62d0f63c0642dd2)


### [must-gather](https://github.com/openshift/must-gather/tree/2665354a16c71bb1d9af8c476bb30fa8835a00fb)

* NO-JIRA: append .0 to go.mod version [#492](https://github.com/openshift/must-gather/pull/492)
* [OCPBUGS-48068](https://issues.redhat.com/browse/OCPBUGS-48068): Update owners [#452](https://github.com/openshift/must-gather/pull/452)
* [OCPBUGS-46281](https://issues.redhat.com/browse/OCPBUGS-46281): Support gathering IPsec data [#467](https://github.com/openshift/must-gather/pull/467)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): Removes reference to gather_multus_logs in 4.17 [#459](https://github.com/openshift/must-gather/pull/459)
* [OCPBUGS-42964](https://issues.redhat.com/browse/OCPBUGS-42964): Collect etcd object count [#453](https://github.com/openshift/must-gather/pull/453)
* [Full changelog](https://github.com/openshift/must-gather/compare/cd767264beedca7d5554ccd0f6bf736861710c04...2665354a16c71bb1d9af8c476bb30fa8835a00fb)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/a611001e87473383a347698d766ce95c6756579d)

* append .0 to go.mod version [#105](https://github.com/openshift/network-metrics-daemon/pull/105)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/ddb486ae8c68d228a1421c779ec8fe35fc436ccb...a611001e87473383a347698d766ce95c6756579d)


### [network-tools](https://github.com/openshift/network-tools/tree/e59e7b258e2baa5815bc13763804694615896ab0)

* append .0 to go.mod version [#148](https://github.com/openshift/network-tools/pull/148)
* [Full changelog](https://github.com/openshift/network-tools/compare/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1...e59e7b258e2baa5815bc13763804694615896ab0)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/869e77a9ace27adc4844c075587874832341fab7)

* Add translations 4.17 [#239](https://github.com/openshift/networking-console-plugin/pull/239)
* Add translations scripts [#235](https://github.com/openshift/networking-console-plugin/pull/235)
* [OCPBUGS-49758](https://issues.redhat.com/browse/OCPBUGS-49758): Fix weight width [#208](https://github.com/openshift/networking-console-plugin/pull/208)
* [OCPBUGS-45791](https://issues.redhat.com/browse/OCPBUGS-45791): fix path-to-regex CVE [#196](https://github.com/openshift/networking-console-plugin/pull/196)
* [OCPBUGS-48704](https://issues.redhat.com/browse/OCPBUGS-48704): fix service name [#188](https://github.com/openshift/networking-console-plugin/pull/188)
* [OCPBUGS-48267](https://issues.redhat.com/browse/OCPBUGS-48267): UI crash accessing a Service in pending state [#168](https://github.com/openshift/networking-console-plugin/pull/168)
* [OCPBUGS-46553](https://issues.redhat.com/browse/OCPBUGS-46553): fix ports as number instead of strings [#169](https://github.com/openshift/networking-console-plugin/pull/169)
* [OCPBUGS-45876](https://issues.redhat.com/browse/OCPBUGS-45876): Bump nanoid from 3.3.7 to 3.3.8 [#172](https://github.com/openshift/networking-console-plugin/pull/172)
* [OCPBUGS-44140](https://issues.redhat.com/browse/OCPBUGS-44140): Bump dompurify from 2.4.9 to 2.5.8 [#166](https://github.com/openshift/networking-console-plugin/pull/166)
* [OCPBUGS-44397](https://issues.redhat.com/browse/OCPBUGS-44397): OCPBUGS-44679: upgrade packages for cve [#141](https://github.com/openshift/networking-console-plugin/pull/141)
* [OCPBUGS-44650](https://issues.redhat.com/browse/OCPBUGS-44650): Routes list page shows correct status and location [#139](https://github.com/openshift/networking-console-plugin/pull/139)
* [OCPBUGS-44648](https://issues.redhat.com/browse/OCPBUGS-44648): Add Route Filter in route list [#138](https://github.com/openshift/networking-console-plugin/pull/138)
* [OCPBUGS-43037](https://issues.redhat.com/browse/OCPBUGS-43037): hide routes metrics non-admin users [#129](https://github.com/openshift/networking-console-plugin/pull/129)
* [OCPBUGS-43065](https://issues.redhat.com/browse/OCPBUGS-43065): Routes list sort by status [#131](https://github.com/openshift/networking-console-plugin/pull/131)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/426d13819907247cfcefcdc67d194a2d222e001b...869e77a9ace27adc4844c075587874832341fab7)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/e796d3f685b14d97d877e5b9fd7df3200a901a44)

* [OCPBUGS-47267](https://issues.redhat.com/browse/OCPBUGS-47267): fixing CVE-2024-45338 [#92](https://github.com/openshift/machine-api-provider-nutanix/pull/92)
* [OCPBUGS-55728](https://issues.redhat.com/browse/OCPBUGS-55728): Fix link-local addresses being added to machine [#102](https://github.com/openshift/machine-api-provider-nutanix/pull/102)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0...e796d3f685b14d97d877e5b9fd7df3200a901a44)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/54bd97ae5d17c2f81da04697333cb0809c3867dc)

* append .0 to go.mod version [#133](https://github.com/openshift/oauth-apiserver/pull/133)
* [OCPBUGS-46044](https://issues.redhat.com/browse/OCPBUGS-46044): Update dependencies to address CVE-2024-24786 [#127](https://github.com/openshift/oauth-apiserver/pull/127)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e37ccb455e1b48d1af032315987baf1e93b4084f...54bd97ae5d17c2f81da04697333cb0809c3867dc)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/07d03d7169fcc6dd7733f09df47c2ffad46fda34)

* [OCPBUGS-30443](https://issues.redhat.com/browse/OCPBUGS-30443): Update dependencies to address CVE-2024-24786 [#298](https://github.com/openshift/oauth-proxy/pull/298)
* [OCPBUGS-46659](https://issues.redhat.com/browse/OCPBUGS-46659): Fix oauth-proxy e2e-component tests [#303](https://github.com/openshift/oauth-proxy/pull/303)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/30f8012482023689655252dc2af2f17fe6a09253...07d03d7169fcc6dd7733f09df47c2ffad46fda34)


### [oauth-server](https://github.com/openshift/oauth-server/tree/ad578443e28abb61745f24caf9126dd8476b9197)

* append .0 to go.mod version [#185](https://github.com/openshift/oauth-server/pull/185)
* [OCPBUGS-44118](https://issues.redhat.com/browse/OCPBUGS-44118): escape spaces in oauth callback path [#167](https://github.com/openshift/oauth-server/pull/167)
* [OCPBUGS-43587](https://issues.redhat.com/browse/OCPBUGS-43587): Fix login path for go1.22 mux pattern matching [#162](https://github.com/openshift/oauth-server/pull/162)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a44685102fbccd24a68207eacdc0a63435af5dde...ad578443e28abb61745f24caf9126dd8476b9197)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/39bedc78d79bd13ea7271e5d4c72a12890b05631)

* fixes CVEs upgrading go-git dependency (#1033) [#1033](https://github.com/openshift/oc-mirror/pull/1033)
* [OCPBUGS-47453](https://issues.redhat.com/browse/OCPBUGS-47453): Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) [#1000](https://github.com/openshift/oc-mirror/pull/1000)
* changes the owners file (#1017) [#1017](https://github.com/openshift/oc-mirror/pull/1017)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1020) [#1020](https://github.com/openshift/oc-mirror/pull/1020)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2...39bedc78d79bd13ea7271e5d4c72a12890b05631)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5b1f00eae6a9d69874f42c5df2078c2b91c3aa85)

* append .0 to go.mod version [#525](https://github.com/openshift/openshift-apiserver/pull/525)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): prevent panic when no image and error are set [#488](https://github.com/openshift/openshift-apiserver/pull/488)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): validate image property isn't nil before using [#489](https://github.com/openshift/openshift-apiserver/pull/489)
* [OCPBUGS-49399](https://issues.redhat.com/browse/OCPBUGS-49399): move on to the next digest/tag during failures [#487](https://github.com/openshift/openshift-apiserver/pull/487)
* [OCPBUGS-42752](https://issues.redhat.com/browse/OCPBUGS-42752): Pass expected type to deploymentconfig/scale object validation. [#457](https://github.com/openshift/openshift-apiserver/pull/457)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/cd1a4bc86137d83c2243c76b069a8ce6785a1658...5b1f00eae6a9d69874f42c5df2078c2b91c3aa85)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/a1438e643feb6dc992e2c723618b5f4e81bb31c7)

* [OCPBUGS-57480](https://issues.redhat.com/browse/OCPBUGS-57480): Set node-pullsecrets volume to read-only to protect image pull credentials [#393](https://github.com/openshift/openshift-controller-manager/pull/393)
* [OCPBUGS-55826](https://issues.redhat.com/browse/OCPBUGS-55826): Empty proxy variables are causing issues during the build [#379](https://github.com/openshift/openshift-controller-manager/pull/379)
* [OCPBUGS-47769](https://issues.redhat.com/browse/OCPBUGS-47769): Add team members to the OWNERS file [#357](https://github.com/openshift/openshift-controller-manager/pull/357)
* [OCPBUGS-44093](https://issues.redhat.com/browse/OCPBUGS-44093): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#350](https://github.com/openshift/openshift-controller-manager/pull/350)
* NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/055cf1d48da110fc6fbb02577e6176b80ed9db09...a1438e643feb6dc992e2c723618b5f4e81bb31c7)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/adf649209467aef8d5da1d17851fa991285edbc2)

* append .0 to go.mod version [#124](https://github.com/openshift/openshift-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/1e963eb5839e2408734e37765d4d6b8fc48b343d...adf649209467aef8d5da1d17851fa991285edbc2)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/55ac6fc97c610173e98611c26692d6271d0883e6)

* append .0 to go.mod version [#364](https://github.com/openshift/cluster-api-provider-openstack/pull/364)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#342](https://github.com/openshift/cluster-api-provider-openstack/pull/342)
* [OCPBUGS-44959](https://issues.redhat.com/browse/OCPBUGS-44959): Makefile changes for merge-bot [#340](https://github.com/openshift/cluster-api-provider-openstack/pull/340)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#329](https://github.com/openshift/cluster-api-provider-openstack/pull/329)
* [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9db571c5fc2ce02aa3296ced348d082ee4cddaba...55ac6fc97c610173e98611c26692d6271d0883e6)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cd52f1260803e03c8dd8e48aa801492baff09893)

* [OCPBUGS-56250](https://issues.redhat.com/browse/OCPBUGS-56250): fix(olm): improve error logging for missing olm.managed label (#3558) [#1004](https://github.com/openshift/operator-framework-olm/pull/1004)
* [OCPBUGS-51226](https://issues.redhat.com/browse/OCPBUGS-51226), [OCPBUGS-51228](https://issues.redhat.com/browse/OCPBUGS-51228), [OCPBUGS-51246](https://issues.redhat.com/browse/OCPBUGS-51246): (vendor) pin go-jose/v4@v4.0.5 [#998](https://github.com/openshift/operator-framework-olm/pull/998)
* [OCPBUGS-53071](https://issues.redhat.com/browse/OCPBUGS-53071): add missing pod disruption reasons to isPodDead [#982](https://github.com/openshift/operator-framework-olm/pull/982)
* [OCPBUGS-53283](https://issues.redhat.com/browse/OCPBUGS-53283): Ensure that PSA label is latest instead of pinning versions [#985](https://github.com/openshift/operator-framework-olm/pull/985)
* [OCPBUGS-50829](https://issues.redhat.com/browse/OCPBUGS-50829), [OCPBUGS-50831](https://issues.redhat.com/browse/OCPBUGS-50831), [OCPBUGS-50835](https://issues.redhat.com/browse/OCPBUGS-50835): CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] [#968](https://github.com/openshift/operator-framework-olm/pull/968)
* [OCPBUGS-48695](https://issues.redhat.com/browse/OCPBUGS-48695): Fix excessive catalog source snapshots cause severe performance regression [#956](https://github.com/openshift/operator-framework-olm/pull/956)
* [OCPBUGS-45845](https://issues.redhat.com/browse/OCPBUGS-45845): Fix concurrent namespace resolution [#944](https://github.com/openshift/operator-framework-olm/pull/944)
* [OCPBUGS-46929](https://issues.redhat.com/browse/OCPBUGS-46929), [OCPBUGS-46936](https://issues.redhat.com/browse/OCPBUGS-46936), [OCPBUGS-47316](https://issues.redhat.com/browse/OCPBUGS-47316): x/net bump to v0.34.0 [release-4.17] [#938](https://github.com/openshift/operator-framework-olm/pull/938)
* [OCPBUGS-46598](https://issues.redhat.com/browse/OCPBUGS-46598): catalog-operator: Delete Pods that were evicted (#3459) [#922](https://github.com/openshift/operator-framework-olm/pull/922)
* [OCPBUGS-46054](https://issues.redhat.com/browse/OCPBUGS-46054): CRD upgrade existing CR validation fix [#913](https://github.com/openshift/operator-framework-olm/pull/913)
* [OCPBUGS-44760](https://issues.redhat.com/browse/OCPBUGS-44760): fix: call TokenRequest API when service account token secret is missing [#898](https://github.com/openshift/operator-framework-olm/pull/898)
* [OCPBUGS-43965](https://issues.redhat.com/browse/OCPBUGS-43965): Return an error when the IP status cannot be updated [#885](https://github.com/openshift/operator-framework-olm/pull/885)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b0d86a042d2b36be77b3b5bca74e73194bfdeee8...cd52f1260803e03c8dd8e48aa801492baff09893)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/456fd6e675f4fe0e5422b86ab1aae4bab49a3ddc)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): append .0 to go.mod version [#638](https://github.com/operator-framework/operator-marketplace/pull/638)
* [OCPBUGS-53179](https://issues.redhat.com/browse/OCPBUGS-53179): Ensure that PSA label is latest instead of pinning versions [#607](https://github.com/operator-framework/operator-marketplace/pull/607)
* [OCPBUGS-49431](https://issues.redhat.com/browse/OCPBUGS-49431): Upgrade golang.org/x/net [release-4.17] [#585](https://github.com/operator-framework/operator-marketplace/pull/585)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/51f871a51fdfec73932100e13201301ddeb35fa1...456fd6e675f4fe0e5422b86ab1aae4bab49a3ddc)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/90e42f21caa95ab5238670ef5bb88c00e19d9052)

* [OCPBUGS-56443](https://issues.redhat.com/browse/OCPBUGS-56443): Fix predicate for cluster subnet route to gateway router [#2578](https://github.com/openshift/ovn-kubernetes/pull/2578)
* [OCPBUGS-56244](https://issues.redhat.com/browse/OCPBUGS-56244): Allow default network pods to reach localnet on the same node [#2572](https://github.com/openshift/ovn-kubernetes/pull/2572)
* [OCPBUGS-52480](https://issues.redhat.com/browse/OCPBUGS-52480): Handles unspecified protocol in network policy port [#2478](https://github.com/openshift/ovn-kubernetes/pull/2478)
* [OCPBUGS-54203](https://issues.redhat.com/browse/OCPBUGS-54203): Update OVN to FDP25.A.1 24.03.5-40. [#2496](https://github.com/openshift/ovn-kubernetes/pull/2496)
* [OCPBUGS-52409](https://issues.redhat.com/browse/OCPBUGS-52409): Change dynamic_neigh_routers to false for the Interconnect topology. [#2476](https://github.com/openshift/ovn-kubernetes/pull/2476)
* [OCPBUGS-50519](https://issues.redhat.com/browse/OCPBUGS-50519): kubevirt, localnet: Reduce live migration downtime [#2458](https://github.com/openshift/ovn-kubernetes/pull/2458)
* [OCPBUGS-48777](https://issues.redhat.com/browse/OCPBUGS-48777): Fixes unexpected mp0 route removal during start up [#2423](https://github.com/openshift/ovn-kubernetes/pull/2423)
* [OCPBUGS-48828](https://issues.redhat.com/browse/OCPBUGS-48828): fixes overzealous deletion of SNAT in egressIP [#2425](https://github.com/openshift/ovn-kubernetes/pull/2425)
* [OCPBUGS-47506](https://issues.redhat.com/browse/OCPBUGS-47506): Let OVN-northd bind remote ports [#2404](https://github.com/openshift/ovn-kubernetes/pull/2404)
* [OCPBUGS-45953](https://issues.redhat.com/browse/OCPBUGS-45953): bump OVS version to 3.4.0-18 [#2393](https://github.com/openshift/ovn-kubernetes/pull/2393)
* [OCPBUGS-45312](https://issues.redhat.com/browse/OCPBUGS-45312): pin libreswan to 4.6-3.el9_0.3 [#2384](https://github.com/openshift/ovn-kubernetes/pull/2384)
* [OCPBUGS-45339](https://issues.redhat.com/browse/OCPBUGS-45339): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2376](https://github.com/openshift/ovn-kubernetes/pull/2376)
* [OCPBUGS-43454](https://issues.redhat.com/browse/OCPBUGS-43454): Ignore cluster manager topology not managed errors for localnet with no subnets [#2362](https://github.com/openshift/ovn-kubernetes/pull/2362)
* [OCPBUGS-44303](https://issues.redhat.com/browse/OCPBUGS-44303): Add hybird overlay pod IPs to the namespace address_set [#2340](https://github.com/openshift/ovn-kubernetes/pull/2340)
* [OCPBUGS-42931](https://issues.redhat.com/browse/OCPBUGS-42931): Add static route to the hairpin masquerade IPs to pod [#2315](https://github.com/openshift/ovn-kubernetes/pull/2315)
* [OCPBUGS-39200](https://issues.redhat.com/browse/OCPBUGS-39200): Dockerfile: Bump OVS to 3.4.0-1 [#2287](https://github.com/openshift/ovn-kubernetes/pull/2287)
* [OCPBUGS-42940](https://issues.redhat.com/browse/OCPBUGS-42940): Fix egress gateway pod cleanup for remote zone pods. [#2316](https://github.com/openshift/ovn-kubernetes/pull/2316)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/62451d12851aebdd1a3b009a9829f8df796998ad...90e42f21caa95ab5238670ef5bb88c00e19d9052)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/1e7605e7952818875c9ec934567145bff190962a)

* append .0 to go.mod version [#117](https://github.com/openshift/machine-api-provider-powervs/pull/117)
* [OCPBUGS-54750](https://issues.redhat.com/browse/OCPBUGS-54750): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 [#113](https://github.com/openshift/machine-api-provider-powervs/pull/113)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea...1e7605e7952818875c9ec934567145bff190962a)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/c84c4898843d6a1b0d16a59e3c42d99d1f636c43)

* append .0 to go.mod version [#381](https://github.com/openshift/prom-label-proxy/pull/381)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d80e904430effd51a5f00bf6345a2108b33bc15e...c84c4898843d6a1b0d16a59e3c42d99d1f636c43)


### [prometheus](https://github.com/openshift/prometheus/tree/9c44bf669fb475c9982d97b99ceff6904545ad13)

* append .0 to go.mod version [#258](https://github.com/openshift/prometheus/pull/258)
* [OCPBUGS-56738](https://issues.redhat.com/browse/OCPBUGS-56738): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#254](https://github.com/openshift/prometheus/pull/254)
* [OCPBUGS-54941](https://issues.redhat.com/browse/OCPBUGS-54941): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#249](https://github.com/openshift/prometheus/pull/249)
* [OCPBUGS-43667](https://issues.redhat.com/browse/OCPBUGS-43667): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#230](https://github.com/openshift/prometheus/pull/230)
* [Full changelog](https://github.com/openshift/prometheus/compare/6853164ae2073146f78cbe9cbda92ebfe1e744d7...9c44bf669fb475c9982d97b99ceff6904545ad13)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d7a9814460f9581491830f57d4e8e210a73750d9)

* append .0 to go.mod version [#102](https://github.com/openshift/prometheus-alertmanager/pull/102)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d7c1a7c6ac4b5482174797649834a47fc39d2575...d7a9814460f9581491830f57d4e8e210a73750d9)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)

* [OCPBUGS-48069](https://issues.redhat.com/browse/OCPBUGS-48069): fix: validate smtp smarthost and smtp from fields [#323](https://github.com/openshift/prometheus-operator/pull/323)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c...77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/8f095361ae68660fbcf0c3e32020a3df9568ae90)

* append .0 to go.mod version [#167](https://github.com/openshift/node_exporter/pull/167)
* [Full changelog](https://github.com/openshift/node_exporter/compare/d88fd69b579485146a584e8640c82a09daed2d5e...8f095361ae68660fbcf0c3e32020a3df9568ae90)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/02bbf80ada3d5acaf36873b1fe69c71badc6d8d7)

* [OCPBUGS-55943](https://issues.redhat.com/browse/OCPBUGS-55943): Added error event for failed ingress to route conversion [#60](https://github.com/openshift/route-controller-manager/pull/60)
* [OCPBUGS-53077](https://issues.redhat.com/browse/OCPBUGS-53077): ingress: Reset metrics when ingress is deleted [#57](https://github.com/openshift/route-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/a47f6be3676d3eabb864ca339584fe857e1076c5...02bbf80ada3d5acaf36873b1fe69c71badc6d8d7)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e)

* append .0 to go.mod version [#266](https://github.com/openshift/service-ca-operator/pull/266)
* [OCPBUGS-34228](https://issues.redhat.com/browse/OCPBUGS-34228): Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 [#261](https://github.com/openshift/service-ca-operator/pull/261)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1f7d6472fea332fc307d9c8911f8c3cf57347755...6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e)


### [telemeter](https://github.com/openshift/telemeter/tree/0238640e519c01f3eedd00b8dc82f34d2c502daf)

* [ART-13124](https://issues.redhat.com/browse/ART-13124): Update go.mod to include patch version in go directive [#562](https://github.com/openshift/telemeter/pull/562)
* [Full changelog](https://github.com/openshift/telemeter/compare/e2b25245eb81ba6bc3821574f889678ceae1b16a...0238640e519c01f3eedd00b8dc82f34d2c502daf)


### [tests](https://github.com/openshift/origin/tree/04e98fbfa749501f5218da28c600bcf295001d09)

* [OCPBUGS-50664](https://issues.redhat.com/browse/OCPBUGS-50664): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29539](https://github.com/openshift/origin/pull/29539)
* [OCPBUGS-56221](https://issues.redhat.com/browse/OCPBUGS-56221): aws/edge: prevent test using unschedulable nodes [#29792](https://github.com/openshift/origin/pull/29792)
* [OCPBUGS-55451](https://issues.redhat.com/browse/OCPBUGS-55451): support provider type external [#29737](https://github.com/openshift/origin/pull/29737)
* [OCPBUGS-55269](https://issues.redhat.com/browse/OCPBUGS-55269): Bump to Kubernetes v1.30.12 [#29771](https://github.com/openshift/origin/pull/29771)
* [OCPBUGS-55498](https://issues.redhat.com/browse/OCPBUGS-55498): [build] Ensure Git Clone Does Not Run Privileged [#29743](https://github.com/openshift/origin/pull/29743)
* [OCPBUGS-54767](https://issues.redhat.com/browse/OCPBUGS-54767): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29660](https://github.com/openshift/origin/pull/29660)
* [OCPBUGS-52580](https://issues.redhat.com/browse/OCPBUGS-52580): Use payload pullspec for image info test [#29588](https://github.com/openshift/origin/pull/29588)
* [OCPBUGS-38835](https://issues.redhat.com/browse/OCPBUGS-38835): Try also user CA for getting openshift-tests image [#29029](https://github.com/openshift/origin/pull/29029)
* [OCPBUGS-49411](https://issues.redhat.com/browse/OCPBUGS-49411): Add a monitor test to detect concurrent installer pod or static pod [#29487](https://github.com/openshift/origin/pull/29487)
* [OCPBUGS-48634](https://issues.redhat.com/browse/OCPBUGS-48634): Revert "[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion" [#29453](https://github.com/openshift/origin/pull/29453)
* [OCPBUGS-48459](https://issues.redhat.com/browse/OCPBUGS-48459), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): ovn-k, udn crd e2e: Fix status report consumer assertion [#29301](https://github.com/openshift/origin/pull/29301)
* [OCPBUGS-48345](https://issues.redhat.com/browse/OCPBUGS-48345): Add team members to the OWNERS file for PR approvals [#29430](https://github.com/openshift/origin/pull/29430)
* [OCPBUGS-48188](https://issues.redhat.com/browse/OCPBUGS-48188): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29409](https://github.com/openshift/origin/pull/29409)
* : OCPBUGS-48093: fix unit test for compare against string [#29405](https://github.com/openshift/origin/pull/29405)
* [OCPBUGS-44190](https://issues.redhat.com/browse/OCPBUGS-44190): Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable [#29306](https://github.com/openshift/origin/pull/29306)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Don't modify pod routes in tests [#29250](https://github.com/openshift/origin/pull/29250)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Set startup probe for UDN tests [#29244](https://github.com/openshift/origin/pull/29244)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 [#29241](https://github.com/openshift/origin/pull/29241)
* [OCPBUGS-44795](https://issues.redhat.com/browse/OCPBUGS-44795): fix: adding oslat updates and outputting test results to the artifacts [#29193](https://github.com/openshift/origin/pull/29193)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): network_segmentation: allow multiple UDN status conditions [#29259](https://github.com/openshift/origin/pull/29259)
* [OCPBUGS-44494](https://issues.redhat.com/browse/OCPBUGS-44494): removing rteval from the realtime test suite [#29194](https://github.com/openshift/origin/pull/29194)
* [OCPBUGS-44496](https://issues.redhat.com/browse/OCPBUGS-44496): fix: adding in a SNO time override for AWS Metal [#29192](https://github.com/openshift/origin/pull/29192)
* [OCPBUGS-44062](https://issues.redhat.com/browse/OCPBUGS-44062): Adjust createDNSPod() to support hypershift dual-stack test [#29254](https://github.com/openshift/origin/pull/29254)
* [OCPBUGS-44045](https://issues.redhat.com/browse/OCPBUGS-44045): Ignore infra nodes on tap cni tests [#29251](https://github.com/openshift/origin/pull/29251)
* [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181)
* [Full changelog](https://github.com/openshift/origin/compare/ca5b14bc70c6868f419247ee333b5b81e2d2cf98...04e98fbfa749501f5218da28c600bcf295001d09)


### [thanos](https://github.com/openshift/thanos/tree/98c993712257ae4c1335e493d037ee1f71284793)

* append .0 to go.mod version [#161](https://github.com/openshift/thanos/pull/161)
* [Full changelog](https://github.com/openshift/thanos/compare/5b567365230115e5c242dd719110bac52fc2a4ef...98c993712257ae4c1335e493d037ee1f71284793)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/097d823bd10abbc6cd016c34a1c5c3cd1b514031)

* [OCPBUGS-43432](https://issues.redhat.com/browse/OCPBUGS-43432): update check-fmt goimports command [#78](https://github.com/openshift/cloud-provider-vsphere/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/07abced061d16b906b19d1eb49f9bea5c2c77662...097d823bd10abbc6cd016c34a1c5c3cd1b514031)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/039ee3684d5addee3ff8436b19462def77bd5804)

* [OCPBUGS-43705](https://issues.redhat.com/browse/OCPBUGS-43705): redact sensitive information when logging VCenter config [#133](https://github.com/openshift/vmware-vsphere-csi-driver/pull/133)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/738c43cfac38f92f5304935368bb3c41a147069f...039ee3684d5addee3ff8436b19462def77bd5804)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)

* [OCPBUGS-52207](https://issues.redhat.com/browse/OCPBUGS-52207): fix panic when vcenter address is incorrect [#295](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/295)
* [OCPBUGS-50593](https://issues.redhat.com/browse/OCPBUGS-50593): Set reconcile-sync to 10 minute for ListVolume [#291](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/291)
* [OCPBUGS-49858](https://issues.redhat.com/browse/OCPBUGS-49858): Escape backslash in vCenter username [#288](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/288)
* [OCPBUGS-49685](https://issues.redhat.com/browse/OCPBUGS-49685): List only linux nodes [#285](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/285)
* [OCPBUGS-43778](https://issues.redhat.com/browse/OCPBUGS-43778): Fix panic on nil infrastructure Spec.PlatformSpec.VSphere [#264](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/264)
* [OCPBUGS-42327](https://issues.redhat.com/browse/OCPBUGS-42327): Fix the config loading warning [#259](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/259)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d97d4cee0769099004a39fcf7ff1d8f48cb0f3cc...e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)