# 4.19.0-rc.0
Created: 2025-05-12 15:53:56 +0000 UTC
Image Digest: `sha256:86ef3b06739c0fbcc2bd36c85e2685d19b38f7c776601a8389759648abc8e32b`
## Changes from 4.19.0-ec.3
### Components
* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.2 to 1.32.4
* Kubernetes Tests upgraded from 1.32.2 to 1.32.4
* Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 9.6.20250502-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| VSphereControlPlaneMachineSet
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereStaticIPs
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| CPMSMachineNamePrefix
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ConsolePluginContentSecurityPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| GatewayAPI
(6 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| MetricsCollectionProfiles
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OnClusterBuild
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteExternalCertificate
(19 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ServiceAccountTokenNodeBinding
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallIBMCloud
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| MachineAPIMigration
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| GatewayAPIController
(5 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| DualReplica
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| DyanmicServiceEndpointIBMCloud
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NewOLMOwnSingleNamespace
(0 tests)| | | | Enabled
(New)| | Enabled
(New) |
| NewOLMPreflightPermissionChecks
(6 tests)| | | | Enabled
(New)| | Enabled
(New) |
| SELinuxChangePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| SELinuxMount
(6 tests)| | | Enabled
(New)| Enabled
(New)| | |
| ShortCertRotation
(0 tests)| | | | | | |
| VSphereConfigurableMaxAllowedBlockVolumesPerNode
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [68ae0c26](https://github.com/openshift/aws-karpenter-provider-aws/commit/68ae0c265271b4447f42decf88c6a44b343eeec9) `sha256:c7552822b32360148126a2976424553c0a7c3ed00798832bedfffb464cbf6ec0`
### Removed images
* csi-snapshot-validation-webhook
* installer-altinfra
### Rebuilt images without code change
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:6c0de45c32408ac3ee8dc7c6a0ea5ba6b144c0e0643649b2ea56c5883c7e9d84`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:efc0d2418291c2095283dce08dd2e80e6d43665adc9f1c1ae4009cd9b178506b`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:1cc27e7ca1da218e86fa73ad4e0fb7bb2d13289a4b0fbb04744e6793bce54980`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:b1dfd068817262b62b6f28673eaaaab599d3f6ed5a54a3f16e1860318d31fe98`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:05f77d79f8f8d61ac561e214b7b6d62a4347316624ff58205c332e57c9d40719`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a52da47f](https://github.com/openshift/cluster-machine-approver/commit/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404) `sha256:2db35269e53df4d3c7bb46829a84bbbf091f2d080993d2caba25604a6193e079`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:264423e817ebff4430b18442ff05b72bcf642b59ace403fb74747d114f65c878`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:37754e9d0ea8273a7dd24dbddc52d6e5150fc2a881f1bd41137c55404f9ae96f`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9bfbde86](https://github.com/openshift/configmap-reload/commit/9bfbde8676cca7b45efc4f76f683bd26fe65893d) `sha256:34ba8fe177576f8dfcdbb98c0d8e1ccfe9b0bcdbf7f030733d4954b35ae0f87c`
* [coredns](https://github.com/openshift/coredns) git [7a1451db](https://github.com/openshift/coredns/commit/7a1451db77a68161d58af9b6ca2c9388d578310a) `sha256:b0f4e0293f973ad9adad7410740fd95eaf842d07376876f07a5d45be0a1ee088`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d8d3aeba](https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff) `sha256:a463b627aea716be14d29c5a7b1ee94c82f238287f957977d6a455e4f53b444d`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:af502b14674ee5053f4c9d010336eebe91581caf74fa6f17172c98f1db7891ec`
* [haproxy-router](https://github.com/openshift/router) git [b41f9d05](https://github.com/openshift/router/commit/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6) `sha256:1fbb56bbc30fc4aa4880e29c7a7c2580b6f42c68817ac42801b88d9b6f9dca20`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:74540db2d39ea3e965cae236ed47a39702f8d255d78763504d1b9dd25492bc89`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [0453d282](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/0453d282cbd6e51902d1e8298d15181765e7fe98) `sha256:a72907146a8027e4a301f03c8d52991ef4849195e1e0c9dd8d2695b318206a24`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dbe19772](https://github.com/openshift/ironic-rhcos-downloader/commit/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b) `sha256:1eb866b9b35f37f4f62db5a0cfe1918f5ac76733a5347c858b7bcda0f437e564`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fcd9564e](https://github.com/openshift/ironic-static-ip-manager/commit/fcd9564e3bfa12e45576af376d168b5036dd8206) `sha256:de9ddef092050313ffcadd080635fe9540cce8470c4e9daecda716d486813e48`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [037a0e7e](https://github.com/openshift/kubernetes-metrics-server/commit/037a0e7e4ef401cd81d3e8330eeed26c8c753592) `sha256:9c0292a832e64b9e7f6b9fabfabab6b103bcaa365a5454cb540eed91270b98d1`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:06315ea009f9fc2bec3a673e95ee7a0c63da864a0613605972a3a6a6e69f9a9c`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [c3da3b5f](https://github.com/openshift/kube-state-metrics/commit/c3da3b5fdc5bd2d23966e33b676701a4950b1a53) `sha256:6e1c36a456217e2a315c76d6fe11991dc023d4443e7cf94bbb9f4f12c4e03e58`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [4c521b09](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/4c521b09f4dc55ac69234419e083f3815646f4a9) `sha256:36f3fa9c2c0d3b7e01e1a572044d4c73a142836b23bc10937002f198b11819a7`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:22721e6150dc3afa48aaafac8829d8c157a86a4d7e1ffa387d860892f3fa870f`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:ecc7023c51c3d2a6abbcd9383278cdad3befe4dae14c13111aac3f4b063023eb`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [0b1b812e](https://github.com/openshift/multus-admission-controller/commit/0b1b812e082285fd19da6bde67c905f3893bf0d7) `sha256:32b71c86612562fa6365abc5bbd0788b5e71dda5bd549ca152050b3a3f846bfc`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:b9ba61aa3cc5b3769f3e88ef0cd7fe85762fc1019ae0315ad9f5eb4b8f7551ca`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f575d888](https://github.com/openshift/bond-cni/commit/f575d888893dd427d6cf02271c5b6e64d0baf2c0) `sha256:157b018554a5d1a4be9814ea2668c1702894963eb751cef8a85e494116ab0c98`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5ec8c6bd](https://github.com/openshift/network-metrics-daemon/commit/5ec8c6bde236feab19525c2d84f7d55f430f9e2b) `sha256:9c9907f4fe5b387c0b11886bbb84029998bf3978bc05129ce97d0aac624eb967`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [75914068](https://github.com/openshift/oauth-apiserver/commit/75914068d66a8b5502906526942c2423bec86f7a) `sha256:3338da01f26665c753ac728c1573d195174383c55788967bef745ee7e9a04309`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3d12ccbe](https://github.com/openshift/oauth-proxy/commit/3d12ccbee45c5d4bcea8c232867df58a60c4382b) `sha256:d92764e34a879ff2ce1154e973f8bb8cd7acaf8f73b0b6ba4597b2a1c256ff43`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [85f6eb27](https://github.com/openshift/openshift-apiserver/commit/85f6eb2719a0440565c8b7bf00de954eeb12fdd9) `sha256:de67923b7e977cef605a2f62b22dd9f1ab690b6a4c89aefcc4e27cd5967c71be`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3106bcc3](https://github.com/openshift/openshift-state-metrics/commit/3106bcc3747c3c63e24775f096779b06a2436357) `sha256:04753ddc4be12827cbbdcb456992e27f1e42639b4ba4c0dccb88b9db24ca6e65`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:f6b05c78a3b048c0da1fc35bf71ebf66e176f469e486db5f51290096491f763f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:df9908fec56c069f998b71e336b1ee55cd7237e581cc0dd8ece9d0d6cdada49e`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [7184f58d](https://github.com/openshift/prom-label-proxy/commit/7184f58d8faba1eb73ff9c0ce188af3aa776c4d7) `sha256:210e80297ed28a304d51414df645098e7835c30717a57674f10462f66aadfa46`
* rhel-coreos `sha256:7b1686d15112612ff42eb1d75cf486e9da45036eb4dfb8f0f62456b774810235`
* rhel-coreos-extensions `sha256:541d92dcc8d36c39c197bf6ce490af718d91f83ee072e5d9e631a6ab81bc6015`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bc97534a](https://github.com/openshift/route-controller-manager/commit/bc97534a12a7a6bac096e4ed488b29535c8d4f33) `sha256:4f8b28f09aca684316388fad48d52ba5466a913017f6a84d5583c2334b1ebede`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [2c21c8ce](https://github.com/openshift/cloud-provider-vsphere/commit/2c21c8ce8dd8f7b86483d74336fc4baba9fa009d) `sha256:0f88a7a98794b047914d20e3e101f3367d34fbe89fe9edc303036d385918307c`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [8c61ba3d](https://github.com/openshift/cluster-api-provider-vsphere/commit/8c61ba3dce7d8e838e41827576c18f4a092f36e4) `sha256:be8ea031f35236c4e65dbc6b01523ddda227a461cf1c4a5d128586c174ce9d7f`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/5b1d46609e5fc58a83fdc2ea2159ae652d156a9d)
* [MGMT-20324](https://issues.redhat.com/browse/MGMT-20324): Fix day2 add hosts with P/Z CPU architectures [#7527](https://github.com/openshift/assisted-service/pull/7527)
* [MGMT-20207](https://issues.redhat.com/browse/MGMT-20207): avoid adding system CA bundle to AdditionalTrustBundle [#7448](https://github.com/openshift/assisted-service/pull/7448)
* [MGMT-20009](https://issues.redhat.com/browse/MGMT-20009): Change OCP 4.19 to the default version [#7506](https://github.com/openshift/assisted-service/pull/7506)
* NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator [#7491](https://github.com/openshift/assisted-service/pull/7491)
* [Full changelog](https://github.com/openshift/assisted-service/compare/94d21390c21b6904b3f03744286f9a0c9b1a3b7a...5b1d46609e5fc58a83fdc2ea2159ae652d156a9d)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0de29205c8b99bdfdc12271281d5830f185d8f8c)
* [MGMT-20534](https://issues.redhat.com/browse/MGMT-20534): Move getting Node replicas into waitForNodes (#1113) [#1113](https://github.com/openshift/assisted-installer/pull/1113)
* [MGMT-20479](https://issues.redhat.com/browse/MGMT-20479): Update assisted-installer to allow TNA Clusters (#1106) [#1106](https://github.com/openshift/assisted-installer/pull/1106)
* NO-ISSUE: Update Konflux references (#1112) [#1112](https://github.com/openshift/assisted-installer/pull/1112)
* NO-ISSUE: Apply konflux migration (#1105) [#1105](https://github.com/openshift/assisted-installer/pull/1105)
* NO-ISSUE: Update Konflux references (#1103) [#1103](https://github.com/openshift/assisted-installer/pull/1103)
* NO-ISSUE: Update Konflux references (#1095) [#1095](https://github.com/openshift/assisted-installer/pull/1095)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) [#957](https://github.com/openshift/assisted-installer/pull/957)
* NO-ISSUE: Update Konflux references (#1090) [#1090](https://github.com/openshift/assisted-installer/pull/1090)
* [MGMT-20153](https://issues.redhat.com/browse/MGMT-20153): Fix ostree race between node-image-pull and installing to rootfs (#1076) [#1076](https://github.com/openshift/assisted-installer/pull/1076)
* [OCPBUGS-53720](https://issues.redhat.com/browse/OCPBUGS-53720): Bump jwt to 4.5.2 (#1080) [#1080](https://github.com/openshift/assisted-installer/pull/1080)
* NO-ISSUE: Update Konflux references (#1082) [#1082](https://github.com/openshift/assisted-installer/pull/1082)
* [MGMT-19421](https://issues.redhat.com/browse/MGMT-19421): remove all references of HighAvailabilityMode and the command line argument --high-availability-mode (#1081) [#1081](https://github.com/openshift/assisted-installer/pull/1081)
* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required SAST tasks for Konflux (#1064) [#1064](https://github.com/openshift/assisted-installer/pull/1064)
* NO-ISSUE: Remove Paul account from OWNERS (#1073) [#1073](https://github.com/openshift/assisted-installer/pull/1073)
* [MGMT-20198](https://issues.redhat.com/browse/MGMT-20198): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) [#1066](https://github.com/openshift/assisted-installer/pull/1066)
* NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) [#1057](https://github.com/openshift/assisted-installer/pull/1057)
* [OCPBUGS-52696](https://issues.redhat.com/browse/OCPBUGS-52696), [OCPBUGS-52704](https://issues.redhat.com/browse/OCPBUGS-52704): Bump crpto to v0.33.openshift.1 (#1053) [#1053](https://github.com/openshift/assisted-installer/pull/1053)
* NO-ISSUE: Update Konflux references (#1051) [#1051](https://github.com/openshift/assisted-installer/pull/1051)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) [#1049](https://github.com/openshift/assisted-installer/pull/1049)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/c389a38405383961d26191799161c86127451635...0de29205c8b99bdfdc12271281d5830f185d8f8c)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/32842e31cdfe14d8fd7058895af51c1cca1309fe)
* NO-ISSUE: Update assisted-service's version (#997) [#997](https://github.com/openshift/assisted-installer-agent/pull/997)
* [MGMT-20296](https://issues.redhat.com/browse/MGMT-20296): Modify RegisterHostConflict log (#990) [#990](https://github.com/openshift/assisted-installer-agent/pull/990)
* NO-ISSUE: Update Konflux references (#976) [#976](https://github.com/openshift/assisted-installer-agent/pull/976)
* [OCPBUGS-53712](https://issues.redhat.com/browse/OCPBUGS-53712): golang-jwt/jwt/v4 to 4.5.2 (#956) [#956](https://github.com/openshift/assisted-installer-agent/pull/956)
* NO-ISSUE: Update Konflux references (#959) [#959](https://github.com/openshift/assisted-installer-agent/pull/959)
* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#936) [#936](https://github.com/openshift/assisted-installer-agent/pull/936)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required sast tasks for Konflux (#942) [#942](https://github.com/openshift/assisted-installer-agent/pull/942)
* NO-ISSUE: Remove eran ifrach account from OWNERS (#947) [#947](https://github.com/openshift/assisted-installer-agent/pull/947)
* [MGMT-20199](https://issues.redhat.com/browse/MGMT-20199): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) [#943](https://github.com/openshift/assisted-installer-agent/pull/943)
* NO-ISSUE: Update Konflux references (#929) [#929](https://github.com/openshift/assisted-installer-agent/pull/929)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) [#926](https://github.com/openshift/assisted-installer-agent/pull/926)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/cfe93a9779dea6ad2a628280b40071d23f3cb429...32842e31cdfe14d8fd7058895af51c1cca1309fe)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/d7d4c451dfc2dc4365847ab2007390844c630d5d)
* [OCPBUGS-55793](https://issues.redhat.com/browse/OCPBUGS-55793): Use internal image registry [#87](https://github.com/openshift/agent-installer-utils/pull/87)
* [OCPBUGS-55761](https://issues.redhat.com/browse/OCPBUGS-55761): Include RHEL 9 guest image to support VM launches via … [#85](https://github.com/openshift/agent-installer-utils/pull/85)
* NO-ISSUE: Update ISOBuilder appliance image SHA [#83](https://github.com/openshift/agent-installer-utils/pull/83)
* NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming [#79](https://github.com/openshift/agent-installer-utils/pull/79)
* [OCPBUGS-55515](https://issues.redhat.com/browse/OCPBUGS-55515): Include cnv operator in ISO builder script [#80](https://github.com/openshift/agent-installer-utils/pull/80)
* [OCPBUGS-55623](https://issues.redhat.com/browse/OCPBUGS-55623): update to go.mod [#81](https://github.com/openshift/agent-installer-utils/pull/81)
* NO-ISSUE: ISOBuilder-Add support-tools image for oc debug [#77](https://github.com/openshift/agent-installer-utils/pull/77)
* NO-ISSUE: ISOBuilder- Update README.md [#76](https://github.com/openshift/agent-installer-utils/pull/76)
* NO-ISSUE: ISOBuilder: Add Clean targets. [#69](https://github.com/openshift/agent-installer-utils/pull/69)
* [AGENT-1161](https://issues.redhat.com/browse/AGENT-1161): Update ISOBuilder dependencies [#75](https://github.com/openshift/agent-installer-utils/pull/75)
* [AGENT-1154](https://issues.redhat.com/browse/AGENT-1154): Dev docs for ISOBuilder [#74](https://github.com/openshift/agent-installer-utils/pull/74)
* NO-ISSUE: Remove extra doneFunc() call [#73](https://github.com/openshift/agent-installer-utils/pull/73)
* [AGENT-1188](https://issues.redhat.com/browse/AGENT-1188): Add MBR to El Torito ISO to support USB boot alongside VM [#72](https://github.com/openshift/agent-installer-utils/pull/72)
* NO-ISSUE: ISOBuilder: Use libpod registry [#71](https://github.com/openshift/agent-installer-utils/pull/71)
* [AGENT-1114](https://issues.redhat.com/browse/AGENT-1114): Check connectivity to rendezvous node and improvements [#64](https://github.com/openshift/agent-installer-utils/pull/64)
* NO-ISSUE: ISOBuilder: Appliance tweaks [#70](https://github.com/openshift/agent-installer-utils/pull/70)
* [AGENT-1138](https://issues.redhat.com/browse/AGENT-1138): Skip release image checks for interactive disconnected [#52](https://github.com/openshift/agent-installer-utils/pull/52)
* NO-ISSUE: ISOBuilder: idempotency and efficiency [#66](https://github.com/openshift/agent-installer-utils/pull/66)
* NO-ISSUE: ISOBuilder: Support --dir param [#68](https://github.com/openshift/agent-installer-utils/pull/68)
* NO-ISSUE: ISOBuilder: Update operators list [#67](https://github.com/openshift/agent-installer-utils/pull/67)
* [AGENT-1155](https://issues.redhat.com/browse/AGENT-1155): Support release image url with sha digst [#65](https://github.com/openshift/agent-installer-utils/pull/65)
* NO-ISSUE: ISOBuilder: Make sudo optional [#63](https://github.com/openshift/agent-installer-utils/pull/63)
* NO-ISSUE: ISOBuilder: Restructured to resolve right image ref [#62](https://github.com/openshift/agent-installer-utils/pull/62)
* [AGENT-1150](https://issues.redhat.com/browse/AGENT-1150): Move setup-agent-tui.sh into ignition file [#59](https://github.com/openshift/agent-installer-utils/pull/59)
* NO-ISSUE: iso_builder: add ssh key file flag [#53](https://github.com/openshift/agent-installer-utils/pull/53)
* [AGENT-1151](https://issues.redhat.com/browse/AGENT-1151): Use internal appliance registry [#58](https://github.com/openshift/agent-installer-utils/pull/58)
* NO-ISSUE: iso_builder: Remove support for rendezvousIP [#61](https://github.com/openshift/agent-installer-utils/pull/61)
* NO-ISSUE: iso_builder: Revert "Merge pull request #54 from pawanpinjarkar/run-appliance-with… [#60](https://github.com/openshift/agent-installer-utils/pull/60)
* NO-ISSUE: iso_builder: Run appliance without sudo [#54](https://github.com/openshift/agent-installer-utils/pull/54)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Add logging [#50](https://github.com/openshift/agent-installer-utils/pull/50)
* [AGENT-1137](https://issues.redhat.com/browse/AGENT-1137): Support both --ocp-version and --release-image-url [#49](https://github.com/openshift/agent-installer-utils/pull/49)
* [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Ensure the correct selinux labels are applied to agent tui files [#57](https://github.com/openshift/agent-installer-utils/pull/57)
* [OCPBUGS-45505](https://issues.redhat.com/browse/OCPBUGS-45505): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 [#37](https://github.com/openshift/agent-installer-utils/pull/37)
* [AGENT-1147](https://issues.redhat.com/browse/AGENT-1147): Update operators [#51](https://github.com/openshift/agent-installer-utils/pull/51)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Support url in appliance-config.yaml [#47](https://github.com/openshift/agent-installer-utils/pull/47)
* [AGENT-1119](https://issues.redhat.com/browse/AGENT-1119): agent-setup-tui.service typo fix [#48](https://github.com/openshift/agent-installer-utils/pull/48)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Enable agent installer interactive flow [#46](https://github.com/openshift/agent-installer-utils/pull/46)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Refactor UI for Rendezvous node IP entry [#42](https://github.com/openshift/agent-installer-utils/pull/42)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): load agent tui [#44](https://github.com/openshift/agent-installer-utils/pull/44)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): OVE ISO Builder script improvements [#40](https://github.com/openshift/agent-installer-utils/pull/40)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Adds form to agent-tui to enter rendezvous IP address [#38](https://github.com/openshift/agent-installer-utils/pull/38)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087), [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Add script to generate agent-based installer OVE ISO [#39](https://github.com/openshift/agent-installer-utils/pull/39)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...d7d4c451dfc2dc4365847ab2007390844c630d5d)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/1e82311cc3ab84cb3481fb018981d304e075ce4e)
* [OCPBUGS-52573](https://issues.redhat.com/browse/OCPBUGS-52573): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 [#74](https://github.com/openshift/apiserver-network-proxy/pull/74)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...1e82311cc3ab84cb3481fb018981d304e075ce4e)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/005a7656f03fa9b993bceffdc85ff5918e16111a)
* [OCPBUGS-54567](https://issues.redhat.com/browse/OCPBUGS-54567): UPSTREAM: 5374: add marketType field validation [#548](https://github.com/openshift/cluster-api-provider-aws/pull/548)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#545](https://github.com/openshift/cluster-api-provider-aws/pull/545)
* [OCPBUGS-53728](https://issues.redhat.com/browse/OCPBUGS-53728): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master [#544](https://github.com/openshift/cluster-api-provider-aws/pull/544)
* [OCPCLOUD-2855](https://issues.redhat.com/browse/OCPCLOUD-2855): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master [#542](https://github.com/openshift/cluster-api-provider-aws/pull/542)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/cda3c84059275a7171351d3721f2990a7da8ce23...005a7656f03fa9b993bceffdc85ff5918e16111a)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/d686e7d16a00cedcc1c42165e1996a4a9255d1a0)
* [STOR-2253](https://issues.redhat.com/browse/STOR-2253): Rebase to upstream v1.39.0 for OCP 4.19 [#283](https://github.com/openshift/aws-ebs-csi-driver/pull/283)
* [OCPBUGS-51722](https://issues.redhat.com/browse/OCPBUGS-51722): bump golang.org/x/crypto to v0.35.0 [#284](https://github.com/openshift/aws-ebs-csi-driver/pull/284)
* [OCPBUGS-46994](https://issues.redhat.com/browse/OCPBUGS-46994): CVE-2024-45338: bump golang.org/x/net to v0.33.0 [#282](https://github.com/openshift/aws-ebs-csi-driver/pull/282)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/ff230b96ba8c2e1818b7da8edd7df96289228d00...d686e7d16a00cedcc1c42165e1996a4a9255d1a0)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/6bb12490780bbabc88b82bfe51197a961e4e722a)
* [OCPBUGS-50493](https://issues.redhat.com/browse/OCPBUGS-50493): Use 127.0.0.1 for healtz http-endpoints [#364](https://github.com/openshift/csi-operator/pull/364)
* NO-JIRA: build only needed cmd in container image [#329](https://github.com/openshift/csi-operator/pull/329)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382): Correct ASH driver inject env config [#376](https://github.com/openshift/csi-operator/pull/376)
* [OSASINFRA-3652](https://issues.redhat.com/browse/OSASINFRA-3652): openstack-cinder: Use new --with-topology flag [#345](https://github.com/openshift/csi-operator/pull/345)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#370](https://github.com/openshift/csi-operator/pull/370)
* [OCPBUGS-54447](https://issues.redhat.com/browse/OCPBUGS-54447): Enable required driver services [#369](https://github.com/openshift/csi-operator/pull/369)
* [OCPBUGS-54180](https://issues.redhat.com/browse/OCPBUGS-54180): Disable remove-not-ready-taint for azure disk csi driver [#371](https://github.com/openshift/csi-operator/pull/371)
* [OCPBUGS-54230](https://issues.redhat.com/browse/OCPBUGS-54230): Bump library-go [#372](https://github.com/openshift/csi-operator/pull/372)
* [STOR-1877](https://issues.redhat.com/browse/STOR-1877): Run operators without root user control [#368](https://github.com/openshift/csi-operator/pull/368)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#367](https://github.com/openshift/csi-operator/pull/367)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#357](https://github.com/openshift/csi-operator/pull/357)
* NO-JIRA: Fixed typo in README.md [#348](https://github.com/openshift/csi-operator/pull/348)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#361](https://github.com/openshift/csi-operator/pull/361)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#363](https://github.com/openshift/csi-operator/pull/363)
* [CFE-1132](https://issues.redhat.com/browse/CFE-1132): EFS Access Point Tags Update DAY2 [#313](https://github.com/openshift/csi-operator/pull/313)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): AWS Tags DAY2 Update [#297](https://github.com/openshift/csi-operator/pull/297)
* [Full changelog](https://github.com/openshift/csi-operator/compare/481b21980a5379f6568258fba9db9d650155e468...6bb12490780bbabc88b82bfe51197a961e4e722a)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/c2e0e74ee2f13e33871fb79196c69ed254f755e6)
* [OCPBUGS-55706](https://issues.redhat.com/browse/OCPBUGS-55706): Update machine-api-operator pkg with fixes [#128](https://github.com/openshift/machine-api-provider-aws/pull/128)
* [OCPBUGS-52454](https://issues.redhat.com/browse/OCPBUGS-52454): Add spotMarketRequest on marketType spot [#126](https://github.com/openshift/machine-api-provider-aws/pull/126)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/d5523dc80e92f4aefb5a92a4b2bec24e0bf2bda8...c2e0e74ee2f13e33871fb79196c69ed254f755e6)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/b0a16d53fbf28a55110bbb36a69f23bc772b3297)
* [OCPBUGS-52509](https://issues.redhat.com/browse/OCPBUGS-52509): github.com/go-jose/go-jose/v4 v4.0.5 [#200](https://github.com/openshift/aws-pod-identity-webhook/pull/200)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/6919bd4b1725fdc9e2990d03884eb9841f9df6e1...b0a16d53fbf28a55110bbb36a69f23bc772b3297)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/7109d6b4eaefda87b235c88b92c2e17fd3dd0117)
* [OCPBUGS-55162](https://issues.redhat.com/browse/OCPBUGS-55162): UPSTREAM: 8920: Fix azure stack hub volume detach failed [#142](https://github.com/openshift/cloud-provider-azure/pull/142)
* [OCPBUGS-51090](https://issues.redhat.com/browse/OCPBUGS-51090): Fix panic for GetZoneByNodeName on Azure Stack [#141](https://github.com/openshift/cloud-provider-azure/pull/141)
* [OCPBUGS-50969](https://issues.redhat.com/browse/OCPBUGS-50969): UPSTREAM: 8504: Fix GovCloud Config [#139](https://github.com/openshift/cloud-provider-azure/pull/139)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2e732f80cc2cf7560751e4579540657cf958d8d1...7109d6b4eaefda87b235c88b92c2e17fd3dd0117)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2c931b4abe5a6618754e79274f7bc9df6c63e296)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#334](https://github.com/openshift/cluster-api-provider-azure/pull/334)
* [CNTRLPLANE-105](https://issues.redhat.com/browse/CNTRLPLANE-105): Add new authentication type UserAssignedIdentityCredentials [#333](https://github.com/openshift/cluster-api-provider-azure/pull/333)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/77fcd62b5f706dd50d2885a979af4bd3e044c48a...2c931b4abe5a6618754e79274f7bc9df6c63e296)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/466334d41a33d801cef0e81bc7186b8fd42b3f30)
* [OCPBUGS-55494](https://issues.redhat.com/browse/OCPBUGS-55494): Correct max data disk count table for L family v4 [#105](https://github.com/openshift/azure-disk-csi-driver/pull/105)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382), [OCPBUGS-55162](https://issues.redhat.com/browse/OCPBUGS-55162): Fix ASH azure disk regression issues [#104](https://github.com/openshift/azure-disk-csi-driver/pull/104)
* [OCPBUGS-51376](https://issues.redhat.com/browse/OCPBUGS-51376): Rebase against v1.32.0 [#102](https://github.com/openshift/azure-disk-csi-driver/pull/102)
* [OCPBUGS-51768](https://issues.redhat.com/browse/OCPBUGS-51768): UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 [#101](https://github.com/openshift/azure-disk-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/d78c707e5667d7596bf88787118699da404504d5...466334d41a33d801cef0e81bc7186b8fd42b3f30)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/762a2b94b237cf16b56bb5085bcaa1471537cb52)
* [OCPBUGS-55831](https://issues.redhat.com/browse/OCPBUGS-55831): UPSTREAM: 2515: allow deleting cross-subscription snapshots [#93](https://github.com/openshift/azure-file-csi-driver/pull/93)
* [OCPBUGS-52654](https://issues.redhat.com/browse/OCPBUGS-52654): Rebase to v1.32.0 [#90](https://github.com/openshift/azure-file-csi-driver/pull/90)
* [OCPBUGS-51782](https://issues.redhat.com/browse/OCPBUGS-51782): UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 [#88](https://github.com/openshift/azure-file-csi-driver/pull/88)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/e02d0dea3a314930e8dcd3e802defaac5f68b99a...762a2b94b237cf16b56bb5085bcaa1471537cb52)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/70c82be884d0b86551e6dc2ccf4f80bec0f26f55)
* NO-JIRA: Add OCP engineers to OWNERS for KMS [#15](https://github.com/openshift/azure-kubernetes-kms/pull/15)
* [CNTRLPLANE-373](https://issues.redhat.com/browse/CNTRLPLANE-373): Add Support for UserAssignedIdentityCredential for Kubernetes-KMS [#14](https://github.com/openshift/azure-kubernetes-kms/pull/14)
* [OCPBUGS-45592](https://issues.redhat.com/browse/OCPBUGS-45592): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 [#9](https://github.com/openshift/azure-kubernetes-kms/pull/9)
* [OCPBUGS-53496](https://issues.redhat.com/browse/OCPBUGS-53496): bump golang-jwt v4 [#10](https://github.com/openshift/azure-kubernetes-kms/pull/10)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...70c82be884d0b86551e6dc2ccf4f80bec0f26f55)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/dd3ca5704052ab83cc829e9be33b127d0d764a2a)
* [OCPBUGS-54617](https://issues.redhat.com/browse/OCPBUGS-54617): Update eviction policy for Spot VMs from Deallocate to Delete [#138](https://github.com/openshift/machine-api-provider-azure/pull/138)
* [OCPBUGS-31515](https://issues.redhat.com/browse/OCPBUGS-31515): Re-reconcile machine on NIC provisioning failure [#132](https://github.com/openshift/machine-api-provider-azure/pull/132)
* [CORS-3883](https://issues.redhat.com/browse/CORS-3883): Allow managed identity from other resource groups [#133](https://github.com/openshift/machine-api-provider-azure/pull/133)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4a61924e88b0529987bede63c148c9cc54d44e3a...dd3ca5704052ab83cc829e9be33b127d0d764a2a)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/0ae129b4768d2e10e0ca215d272e207bfae963a3)
* [OCPBUGS-55334](https://issues.redhat.com/browse/OCPBUGS-55334): Updating ose-azure-service-operator-container image to be consistent with ART for 4.19 [#8](https://github.com/openshift/azure-service-operator/pull/8)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/11ced00e5fa17cb7b854f8a7909f6e9197908036...0ae129b4768d2e10e0ca215d272e207bfae963a3)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/892d3c4dc50827c1069beac55a6a8141cc891b65)
* [OCPBUGS-53800](https://issues.redhat.com/browse/OCPBUGS-53800): github.com/golang-jwt/jwt/v4 v4.5.2 [#30](https://github.com/openshift/azure-workload-identity/pull/30)
* [OCPBUGS-52508](https://issues.redhat.com/browse/OCPBUGS-52508): github.com/go-jose/go-jose/v4 v4.0.5 [#26](https://github.com/openshift/azure-workload-identity/pull/26)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/82268b570843d761ec9523d7729df83c6df42d1c...892d3c4dc50827c1069beac55a6a8141cc891b65)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/9e7170f249a7e61769886d81869ab577949863ab)
* Remove ipam-controller-manager deployment [#43](https://github.com/openshift/cluster-api-provider-metal3/pull/43)
* Add metal3 infra group to IPAM manager RBAC [#42](https://github.com/openshift/cluster-api-provider-metal3/pull/42)
* Remove IPAM deployment [#39](https://github.com/openshift/cluster-api-provider-metal3/pull/39)
* Find Nodes by hostname [#38](https://github.com/openshift/cluster-api-provider-metal3/pull/38)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/3e052bfb7fd2758416e0364c2b3406b1a9445112...9e7170f249a7e61769886d81869ab577949863ab)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f7d148e4c75802c42c5f9546bfbf2da9c43e986)
* [OCPBUGS-55909](https://issues.redhat.com/browse/OCPBUGS-55909): Apply defaults then validate confidentialCompute [#9695](https://github.com/openshift/installer/pull/9695)
* [OCPBUGS-55731](https://issues.redhat.com/browse/OCPBUGS-55731): azure stack: switch cloud provider to standard lb [#9690](https://github.com/openshift/installer/pull/9690)
* [CORS-3633](https://issues.redhat.com/browse/CORS-3633): Fail the install when there are expired certs [#9225](https://github.com/openshift/installer/pull/9225)
* [CORS-3960](https://issues.redhat.com/browse/CORS-3960): Remove Terraform from Dockerfiles [#9673](https://github.com/openshift/installer/pull/9673)
* [OCPBUGS-55492](https://issues.redhat.com/browse/OCPBUGS-55492): sort zone slices extracted from map of byo subnets [#9662](https://github.com/openshift/installer/pull/9662)
* no-jira: IBI nmstate unit test fix [#9680](https://github.com/openshift/installer/pull/9680)
* [OCPBUGS-55324](https://issues.redhat.com/browse/OCPBUGS-55324): fix nil field access when describing security groups [#9676](https://github.com/openshift/installer/pull/9676)
* [OCPBUGS-52203](https://issues.redhat.com/browse/OCPBUGS-52203): Find GCP KMS keys [#9597](https://github.com/openshift/installer/pull/9597)
* [CORS-3855](https://issues.redhat.com/browse/CORS-3855): Remove ARO build flag from installer [#9124](https://github.com/openshift/installer/pull/9124)
* [OCPBUGS-54902](https://issues.redhat.com/browse/OCPBUGS-54902): Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster [#9656](https://github.com/openshift/installer/pull/9656)
* NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 [#9657](https://github.com/openshift/installer/pull/9657)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): validate duplicate AZs if no subnet roles at all or only for subnets of the same role [#9663](https://github.com/openshift/installer/pull/9663)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI AzureStack Support, Take II [#9666](https://github.com/openshift/installer/pull/9666)
* [OCPEDGE-1749](https://issues.redhat.com/browse/OCPEDGE-1749): [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. [#9661](https://github.com/openshift/installer/pull/9661)
* Revert "Merge pull request #9645 from patrickdillon/azurestack-mark-iii" [#9665](https://github.com/openshift/installer/pull/9665)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI-based AzureStack Installs [#9645](https://github.com/openshift/installer/pull/9645)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): add validations for subnets field with AWS API [#9599](https://github.com/openshift/installer/pull/9599)
* [CORS-3871](https://issues.redhat.com/browse/CORS-3871), [CORS-3872](https://issues.redhat.com/browse/CORS-3872), [CORS-3873](https://issues.redhat.com/browse/CORS-3873): place the cluster components on the assigned byo subnets if any [#9633](https://github.com/openshift/installer/pull/9633)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Remove IBM Cloud TF provider [#9649](https://github.com/openshift/installer/pull/9649)
* [OCPBUGS-54606](https://issues.redhat.com/browse/OCPBUGS-54606): convert OVNKubernetes networkType to correct format [#9653](https://github.com/openshift/installer/pull/9653)
* [CORS-3936](https://issues.redhat.com/browse/CORS-3936): Add support for public-only networking [#9544](https://github.com/openshift/installer/pull/9544)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Add DestroyBootstrap for leftover CAPI resources [#9636](https://github.com/openshift/installer/pull/9636)
* [CORS-3854](https://issues.redhat.com/browse/CORS-3854): Enable option to set boot diagnostics [#9125](https://github.com/openshift/installer/pull/9125)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Switch IBMCloud to CAPI [#9652](https://github.com/openshift/installer/pull/9652)
* [CORS-3867](https://issues.redhat.com/browse/CORS-3867): fix CRD descriptor to mention required BootstrapNode role [#9655](https://github.com/openshift/installer/pull/9655)
* [CORS-3886](https://issues.redhat.com/browse/CORS-3886): azure: Set use managed identity to false [#9648](https://github.com/openshift/installer/pull/9648)
* [OCPBUGS-54319](https://issues.redhat.com/browse/OCPBUGS-54319): oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x [#9608](https://github.com/openshift/installer/pull/9608)
* [AGENT-1159](https://issues.redhat.com/browse/AGENT-1159): agent docs update [#9627](https://github.com/openshift/installer/pull/9627)
* [OCPBUGS-53439](https://issues.redhat.com/browse/OCPBUGS-53439): fix inconsistent subnet role name for bootstrap node [#9650](https://github.com/openshift/installer/pull/9650)
* NO-JIRA: fix the platform test assertions to check expected err message [#9639](https://github.com/openshift/installer/pull/9639)
* [OCPBUGS-43990](https://issues.redhat.com/browse/OCPBUGS-43990): Filter out excess CA certs when adding node [#9641](https://github.com/openshift/installer/pull/9641)
* NO-JIRA: add Roshan-R to CoreOS approvers and reviewers [#9642](https://github.com/openshift/installer/pull/9642)
* [OCPEDGE-1506](https://issues.redhat.com/browse/OCPEDGE-1506): Add Platform based validation to fencing credentials [#9624](https://github.com/openshift/installer/pull/9624)
* [CORS-3908](https://issues.redhat.com/browse/CORS-3908): Update gcp cloud provider config map to include new endpoints [#9600](https://github.com/openshift/installer/pull/9600)
* [SPLAT-2121](https://issues.redhat.com/browse/SPLAT-2121): vsphere - if no host group found, append not found [#9638](https://github.com/openshift/installer/pull/9638)
* [OCPBUGS-54541](https://issues.redhat.com/browse/OCPBUGS-54541): Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 [#9632](https://github.com/openshift/installer/pull/9632)
* [OCPBUGS-46601](https://issues.redhat.com/browse/OCPBUGS-46601): IBM Cloud Bump IBM Cloud CAPI [#9623](https://github.com/openshift/installer/pull/9623)
* [OCPBUGS-43724](https://issues.redhat.com/browse/OCPBUGS-43724): Fix Load balancer IP setup [#9144](https://github.com/openshift/installer/pull/9144)
* [OCPBUGS-54407](https://issues.redhat.com/browse/OCPBUGS-54407): Use correct case in path error messages [#9615](https://github.com/openshift/installer/pull/9615)
* [OCPBUGS-54232](https://issues.redhat.com/browse/OCPBUGS-54232): Azure Move BYO VNET SG creation to InfraReady [#9603](https://github.com/openshift/installer/pull/9603)
* [OCPEDGE-1701](https://issues.redhat.com/browse/OCPEDGE-1701): fix: update tnf validation to account for tna install config [#9629](https://github.com/openshift/installer/pull/9629)
* [OCPBUGS-52473](https://issues.redhat.com/browse/OCPBUGS-52473): aarch64 kernel is no longer zipped [#9617](https://github.com/openshift/installer/pull/9617)
* NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers [#9631](https://github.com/openshift/installer/pull/9631)
* [OCPBUGS-53067](https://issues.redhat.com/browse/OCPBUGS-53067): Updating the file names in generic.ins file for s390x ABI for pxe Artifacts [#9586](https://github.com/openshift/installer/pull/9586)
* NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers [#9628](https://github.com/openshift/installer/pull/9628)
* [CORS-3883](https://issues.redhat.com/browse/CORS-3883): Remove user-assigned identity from ARM template [#9625](https://github.com/openshift/installer/pull/9625)
* [OCPBUGS-53303](https://issues.redhat.com/browse/OCPBUGS-53303): Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config [#9577](https://github.com/openshift/installer/pull/9577)
* [OCPBUGS-42241](https://issues.redhat.com/browse/OCPBUGS-42241): Update to cluster-api-provider-azure release-v1.17.5 [#9596](https://github.com/openshift/installer/pull/9596)
* [OCPBUGS-53140](https://issues.redhat.com/browse/OCPBUGS-53140): Validation for API and Ingress VIPs when using user-managed load balancer [#9571](https://github.com/openshift/installer/pull/9571)
* no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers [#9556](https://github.com/openshift/installer/pull/9556)
* [CORS-3923](https://issues.redhat.com/browse/CORS-3923), [CORS-3927](https://issues.redhat.com/browse/CORS-3927): Support confidential cluster installation on SEV-SNP and TDX nodes on GCP [#9395](https://github.com/openshift/installer/pull/9395)
* [AGENT-587](https://issues.redhat.com/browse/AGENT-587): Support Nutanix in Agent-based Installer [#9537](https://github.com/openshift/installer/pull/9537)
* [SPLAT-2000](https://issues.redhat.com/browse/SPLAT-2000): Added vSphere provisioning mode support for data disks [#9439](https://github.com/openshift/installer/pull/9439)
* [OCPEDGE-1496](https://issues.redhat.com/browse/OCPEDGE-1496): [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh [#9546](https://github.com/openshift/installer/pull/9546)
* [OCPBUGS-52356](https://issues.redhat.com/browse/OCPBUGS-52356): IBMCloud: Fix CAPI endpoint overrides [#9540](https://github.com/openshift/installer/pull/9540)
* [OCPEDGE-1505](https://issues.redhat.com/browse/OCPEDGE-1505): Enhance Platform none with Fencing Credentials [#9521](https://github.com/openshift/installer/pull/9521)
* [OSASINFRA-3730](https://issues.redhat.com/browse/OSASINFRA-3730): Add support for storing OpenStack CA bundles [#9194](https://github.com/openshift/installer/pull/9194)
* [OCPBUGS-53258](https://issues.redhat.com/browse/OCPBUGS-53258): IBMCloud: Bump TF provider for CIS fix [#9589](https://github.com/openshift/installer/pull/9589)
* NO-JIRA: update OWNER_ALIASES for azure and aws [#9598](https://github.com/openshift/installer/pull/9598)
* [OCPBUGS-53106](https://issues.redhat.com/browse/OCPBUGS-53106): Create ConfigMap to reference baremetal-installer image [#9563](https://github.com/openshift/installer/pull/9563)
* NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 [#9569](https://github.com/openshift/installer/pull/9569)
* [CORS-3918](https://issues.redhat.com/browse/CORS-3918): Send service endpoint overrides to CAPG through cluster spec [#9528](https://github.com/openshift/installer/pull/9528)
* [OCPBUGS-53465](https://issues.redhat.com/browse/OCPBUGS-53465): Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 [#9593](https://github.com/openshift/installer/pull/9593)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): Fixed topology logic for 2-node installs and added unit tests [#9579](https://github.com/openshift/installer/pull/9579)
* [OCPBUGS-53379](https://issues.redhat.com/browse/OCPBUGS-53379): Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 [#9582](https://github.com/openshift/installer/pull/9582)
* [AGENT-467](https://issues.redhat.com/browse/AGENT-467): show the agent ui url when available [#9584](https://github.com/openshift/installer/pull/9584)
* [CORS-3861](https://issues.redhat.com/browse/CORS-3861), [CORS-3883](https://issues.redhat.com/browse/CORS-3883), [CORS-3937](https://issues.redhat.com/browse/CORS-3937): Azure Machine Identity API [#9538](https://github.com/openshift/installer/pull/9538)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Run agent installer command to create certificates [#9574](https://github.com/openshift/installer/pull/9574)
* [OCPBUGS-52959](https://issues.redhat.com/browse/OCPBUGS-52959): Issue short lived certificates if ShortCertRotation featuregate is enabled [#8784](https://github.com/openshift/installer/pull/8784)
* [OCPBUGS-53173](https://issues.redhat.com/browse/OCPBUGS-53173): PowerVS: remove TF code [#9568](https://github.com/openshift/installer/pull/9568)
* no-jira: add dev docs for bumping CAPI provider version [#9567](https://github.com/openshift/installer/pull/9567)
* [OCPBUGS-53183](https://issues.redhat.com/browse/OCPBUGS-53183): Avoid adding duplicate entries to NO_PROXY [#9573](https://github.com/openshift/installer/pull/9573)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#9560](https://github.com/openshift/installer/pull/9560)
* [OCPBUGS-53280](https://issues.redhat.com/browse/OCPBUGS-53280): PowerVS: Re-enable disconnected installs [#9551](https://github.com/openshift/installer/pull/9551)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Add agent command to generate certificates [#9557](https://github.com/openshift/installer/pull/9557)
* [OCPBUGS-39146](https://issues.redhat.com/browse/OCPBUGS-39146): Validate sgdisk partition start in image based installer config [#9541](https://github.com/openshift/installer/pull/9541)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): additional refinement for loading the agent UI [#9565](https://github.com/openshift/installer/pull/9565)
* [SPLAT-2072](https://issues.redhat.com/browse/SPLAT-2072): Removed VSphereMultiVCenters feature gate [#9553](https://github.com/openshift/installer/pull/9553)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): feat(topologies): add DualReplica topology mode [#9534](https://github.com/openshift/installer/pull/9534)
* [OCPBUGS-45692](https://issues.redhat.com/browse/OCPBUGS-45692): Modified ova template name to use failure domain name [#9300](https://github.com/openshift/installer/pull/9300)
* [OCPBUGS-50552](https://issues.redhat.com/browse/OCPBUGS-50552): Power VS: Disallow clusterOSImage install-configuration parameter [#9417](https://github.com/openshift/installer/pull/9417)
* NO-JIRA: OWNERS: add thuan [#9555](https://github.com/openshift/installer/pull/9555)
* [OCPBUGS-51209](https://issues.redhat.com/browse/OCPBUGS-51209): Changed kernelFileType name from kernel.img to vmlinuz for s390x [#9533](https://github.com/openshift/installer/pull/9533)
* [OCPBUGS-6271](https://issues.redhat.com/browse/OCPBUGS-6271): Adding VIPs Validation for agent based vsphere installation [#9532](https://github.com/openshift/installer/pull/9532)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): enhance the unconfigured-ignition command to support the interactive workflow [#9529](https://github.com/openshift/installer/pull/9529)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): Improve baremetal gather error message [#9120](https://github.com/openshift/installer/pull/9120)
* [OCPBUGS-36553](https://issues.redhat.com/browse/OCPBUGS-36553): VSphere: add vips to machinenetwork [#9526](https://github.com/openshift/installer/pull/9526)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): Custom-DNS: Update master and worker user data secrets [#9451](https://github.com/openshift/installer/pull/9451)
* [CORS-2508](https://issues.redhat.com/browse/CORS-2508): aws: remove unused autoscaling:DescribeAutoScalingGroups perm [#9223](https://github.com/openshift/installer/pull/9223)
* [OCPBUGS-51378](https://issues.redhat.com/browse/OCPBUGS-51378): Change vsphere conversion govmomi err to be clear [#9524](https://github.com/openshift/installer/pull/9524)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Bump IBM Cloud CAPI to v0.10.0 [#9523](https://github.com/openshift/installer/pull/9523)
* [OCPBUGS-44840](https://issues.redhat.com/browse/OCPBUGS-44840): Mount the user-ca-bundle into ICC [#9227](https://github.com/openshift/installer/pull/9227)
* [OCPBUGS-50637](https://issues.redhat.com/browse/OCPBUGS-50637): Remove error logging when determining image arch [#9531](https://github.com/openshift/installer/pull/9531)
* [OCPBUGS-51171](https://issues.redhat.com/browse/OCPBUGS-51171): aws: add ec2:ReplaceRoute permission [#9525](https://github.com/openshift/installer/pull/9525)
* [OCPBUGS-47724](https://issues.redhat.com/browse/OCPBUGS-47724): AWS: Copy static MCO resources needed for custom-dns [#9489](https://github.com/openshift/installer/pull/9489)
* [OCPBUGS-49623](https://issues.redhat.com/browse/OCPBUGS-49623): IBMCloud: Missing ca-mon region due to static region list [#9421](https://github.com/openshift/installer/pull/9421)
* [OCPBUGS-47681](https://issues.redhat.com/browse/OCPBUGS-47681): Support regions only available in v2 of the aws sdk [#9383](https://github.com/openshift/installer/pull/9383)
* [OKD-235](https://issues.redhat.com/browse/OKD-235): Add stream metadata for scos to be used by OKD [#9520](https://github.com/openshift/installer/pull/9520)
* [OCPEDGE-1635](https://issues.redhat.com/browse/OCPEDGE-1635): Set default values for arbiter [#9530](https://github.com/openshift/installer/pull/9530)
* [OCPBUGS-39583](https://issues.redhat.com/browse/OCPBUGS-39583): Remove tmp directory used for agent pxe files [#9527](https://github.com/openshift/installer/pull/9527)
* No-ISSUE: (dep) Bump openshift/api [#9522](https://github.com/openshift/installer/pull/9522)
* [CORS-3917](https://issues.redhat.com/browse/CORS-3917): Add install config validation for service endpoints [#9517](https://github.com/openshift/installer/pull/9517)
* NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer [#9515](https://github.com/openshift/installer/pull/9515)
* [OCPBUGS-51350](https://issues.redhat.com/browse/OCPBUGS-51350): PowerVS: Extra network routes for disconnected install [#9510](https://github.com/openshift/installer/pull/9510)
* NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage [#9508](https://github.com/openshift/installer/pull/9508)
* [OCPBUGS-50961](https://issues.redhat.com/browse/OCPBUGS-50961): Power VS: Log accurate error when deploying Internal with no vpcName [#9497](https://github.com/openshift/installer/pull/9497)
* [SPLAT-1995](https://issues.redhat.com/browse/SPLAT-1995): vsphere on destroy remove cns volumes [#9425](https://github.com/openshift/installer/pull/9425)
* [OCPBUGS-47459](https://issues.redhat.com/browse/OCPBUGS-47459): IBMCloud: CAPI add permitted network [#9397](https://github.com/openshift/installer/pull/9397)
* [OCPBUGS-47652](https://issues.redhat.com/browse/OCPBUGS-47652): IBMCloud: Set CAPI boot volumes [#9385](https://github.com/openshift/installer/pull/9385)
* [CORS-3869](https://issues.redhat.com/browse/CORS-3869): static validation for new vpc.subnets field [#9505](https://github.com/openshift/installer/pull/9505)
* [OSASINFRA-3695](https://issues.redhat.com/browse/OSASINFRA-3695): openstack: Create security group rules in batches [#9042](https://github.com/openshift/installer/pull/9042)
* [OCPBUGS-46051](https://issues.redhat.com/browse/OCPBUGS-46051): IBMCloud: Fix CAPI AZ handling [#9415](https://github.com/openshift/installer/pull/9415)
* [Full changelog](https://github.com/openshift/installer/compare/b20e29d3c3b19bf389379afe9d5cf103b5489799...3f7d148e4c75802c42c5f9546bfbf2da9c43e986)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/f7a789548f76d3117f3400ac597c0db615778d57)
* [METAL-1300](https://issues.redhat.com/browse/METAL-1300): Update CAPB to support disablePowerOff [#235](https://github.com/openshift/cluster-api-provider-baremetal/pull/235)
* NO-ISSUE: Update OWNERS [#233](https://github.com/openshift/cluster-api-provider-baremetal/pull/233)
* NO-ISSUE: Update BMO and MAO [#232](https://github.com/openshift/cluster-api-provider-baremetal/pull/232)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/9abe67f183455c93f4e11c5ac89bab9022bbc759...f7a789548f76d3117f3400ac597c0db615778d57)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c8dc798c3de5e704c9f88c0c76f42739631882b0)
* [METAL-998](https://issues.redhat.com/browse/METAL-998): Merge upstream [#413](https://github.com/openshift/baremetal-operator/pull/413)
* [OCPBUGS-54582](https://issues.redhat.com/browse/OCPBUGS-54582): Sync apr 2 [#410](https://github.com/openshift/baremetal-operator/pull/410)
* [OCPBUGS-53233](https://issues.redhat.com/browse/OCPBUGS-53233): Sync mar 18 [#403](https://github.com/openshift/baremetal-operator/pull/403)
* NO-ISSUE: Upstream Sync Mar 10 [#401](https://github.com/openshift/baremetal-operator/pull/401)
* [OCPBUGS-52215](https://issues.redhat.com/browse/OCPBUGS-52215): Bump x/oauth2 to 0.27.0 [#400](https://github.com/openshift/baremetal-operator/pull/400)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/307bd7fc9a712104f1beb0297d33d7ff246d51d3...c8dc798c3de5e704c9f88c0c76f42739631882b0)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/b94d92874ab36d9d3ee26dda59f172611fca18fb)
* [OPNET-629](https://issues.redhat.com/browse/OPNET-629): Use HAProxy monitor endpoint instead of API [#343](https://github.com/openshift/baremetal-runtimecfg/pull/343)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Pass in platform as a optional parameter to runtimecfg cmds [#345](https://github.com/openshift/baremetal-runtimecfg/pull/345)
* [OCPEDGE-1689](https://issues.redhat.com/browse/OCPEDGE-1689): Include Arbiter nodes in the API backends if there is only one master [#344](https://github.com/openshift/baremetal-runtimecfg/pull/344)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Include cloud platform specific parameters to argument list for corednsmonitor [#341](https://github.com/openshift/baremetal-runtimecfg/pull/341)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/d49333efda0129d0315b879fb0d79d83a7749c86...b94d92874ab36d9d3ee26dda59f172611fca18fb)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e468aa68e754e22997f526fcdbbd470387ff5e33)
* [OCPBUGS-53106](https://issues.redhat.com/browse/OCPBUGS-53106): Get installer image from configMap for node-image command [#2005](https://github.com/openshift/oc/pull/2005)
* [OCPBUGS-52164](https://issues.redhat.com/browse/OCPBUGS-52164): Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts [#2007](https://github.com/openshift/oc/pull/2007)
* NO-JIRA: `adm release new`: simplify `writePayload` [#2008](https://github.com/openshift/oc/pull/2008)
* [COS-3023](https://issues.redhat.com/browse/COS-3023): Fixing rpmdiff permissions when running in container [#2006](https://github.com/openshift/oc/pull/2006)
* [COS-3023](https://issues.redhat.com/browse/COS-3023): pkg/cli/admin/release/info: support generating RPM diffs [#1966](https://github.com/openshift/oc/pull/1966)
* NO-JIRA: `adm release new`: simplify `writePayload` [#1997](https://github.com/openshift/oc/pull/1997)
* NO-JIRA: `adm release new`: simplify no operator error condition [#1999](https://github.com/openshift/oc/pull/1999)
* [OCPBUGS-54168](https://issues.redhat.com/browse/OCPBUGS-54168): Use ProxyFromEnvironment when creating HTTP transport [#1995](https://github.com/openshift/oc/pull/1995)
* NO-JIRA: debug: suggest nsenter instead of chroot [#1991](https://github.com/openshift/oc/pull/1991)
* [OCPBUGS-53389](https://issues.redhat.com/browse/OCPBUGS-53389): Use fedora image in unit tests instead of centos [#1992](https://github.com/openshift/oc/pull/1992)
* [OCPBUGS-23514](https://issues.redhat.com/browse/OCPBUGS-23514): status: Adjust impact summary for Failing=Unknown [#1989](https://github.com/openshift/oc/pull/1989)
* [OCPBUGS-52504](https://issues.redhat.com/browse/OCPBUGS-52504): pkg/cli/admin/upgrade/recommend: Populate RESTConfig [#1987](https://github.com/openshift/oc/pull/1987)
* [Full changelog](https://github.com/openshift/oc/compare/e7e738cc324d3cde21df43c3e22286ff595d493d...e468aa68e754e22997f526fcdbbd470387ff5e33)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/9c3346aea5a7f9a38713c09d11605b8ee825446c)
* [OCPBUGS-55204](https://issues.redhat.com/browse/OCPBUGS-55204): Revert "Merge pull request #848 from jstuever/OCPBUGS-53429" [#854](https://github.com/openshift/cloud-credential-operator/pull/854)
* [OCPBUGS-53429](https://issues.redhat.com/browse/OCPBUGS-53429): Render: configure proxy on bootstrap static pod [#848](https://github.com/openshift/cloud-credential-operator/pull/848)
* [OCPBUGS-53824](https://issues.redhat.com/browse/OCPBUGS-53824): update github.com/golang-jwt/jwt [#836](https://github.com/openshift/cloud-credential-operator/pull/836)
* NO-JIRA: Report the error when syncing STS secrets [#827](https://github.com/openshift/cloud-credential-operator/pull/827)
* [OSASINFRA-3657](https://issues.redhat.com/browse/OSASINFRA-3657): Add support for storing OpenStack CA bundles [#780](https://github.com/openshift/cloud-credential-operator/pull/780)
* [OCPBUGS-52505](https://issues.redhat.com/browse/OCPBUGS-52505): golang.org/x/oauth2 v0.28.0 [#821](https://github.com/openshift/cloud-credential-operator/pull/821)
* [CCO-647](https://issues.redhat.com/browse/CCO-647): Enable readOnlyRootFilesystem on all containers [#819](https://github.com/openshift/cloud-credential-operator/pull/819)
* [OCPBUGS-52507](https://issues.redhat.com/browse/OCPBUGS-52507): github.com/go-jose/go-jose/v4 v4.0.5 [#823](https://github.com/openshift/cloud-credential-operator/pull/823)
* NO-JIRA: Add dry-run on aws create-all command [#818](https://github.com/openshift/cloud-credential-operator/pull/818)
* NO-JIRA: add example of how to build from source [#820](https://github.com/openshift/cloud-credential-operator/pull/820)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/216fd1a30ec35c25369cd8d4e20ccc140cf4ecc4...9c3346aea5a7f9a38713c09d11605b8ee825446c)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/98ae311b854223a99e258d3c3369455d983de239)
* [OCPBUGS-45891](https://issues.redhat.com/browse/OCPBUGS-45891): Increase API call timeout to 30 second [#168](https://github.com/openshift/cloud-network-config-controller/pull/168)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 authentication from CNCC [#169](https://github.com/openshift/cloud-network-config-controller/pull/169)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#166](https://github.com/openshift/cloud-network-config-controller/pull/166)
* [OSASINFRA-3755](https://issues.redhat.com/browse/OSASINFRA-3755): Prefer CA cert from credentials secret [#167](https://github.com/openshift/cloud-network-config-controller/pull/167)
* [OCPBUGS-53201](https://issues.redhat.com/browse/OCPBUGS-53201): Revert "CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller" [#164](https://github.com/openshift/cloud-network-config-controller/pull/164)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#161](https://github.com/openshift/cloud-network-config-controller/pull/161)
* [SDN-5690](https://issues.redhat.com/browse/SDN-5690): Rebase k8s to 1.32 [#163](https://github.com/openshift/cloud-network-config-controller/pull/163)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/03c3d59cded36b8f157a1e17c08a700bd116295c...98ae311b854223a99e258d3c3369455d983de239)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ceeb021d7562cf3d669ed7293f46b2a50e848c73)
* [OCPBUGS-51203](https://issues.redhat.com/browse/OCPBUGS-51203): fix logo not being correctly aligned in Webkit [#758](https://github.com/openshift/cluster-authentication-operator/pull/758)
* [OCPBUGS-48176](https://issues.redhat.com/browse/OCPBUGS-48176): Avoid duplicate OAuth client creation [#757](https://github.com/openshift/cluster-authentication-operator/pull/757)
* [OCPEDGE-1510](https://issues.redhat.com/browse/OCPEDGE-1510): feat: add minimum count for DualReplica [#761](https://github.com/openshift/cluster-authentication-operator/pull/761)
* [OCPEDGE-1610](https://issues.redhat.com/browse/OCPEDGE-1610): bump(kube,library-go,ocp/api): [#759](https://github.com/openshift/cluster-authentication-operator/pull/759)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/eb6de2ecd5097a3146e330ea24b0e66029ae5152...ceeb021d7562cf3d669ed7293f46b2a50e848c73)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f746d442e69be1cf82cef1c473ddc0ab8a15d22f)
* [OCPBUGS-54231](https://issues.redhat.com/browse/OCPBUGS-54231): Fix cool down status condition to trigger scale down [#355](https://github.com/openshift/kubernetes-autoscaler/pull/355)
* [OCPCLOUD-2835](https://issues.redhat.com/browse/OCPCLOUD-2835): rebase on upstream 1.32.0 release [#340](https://github.com/openshift/kubernetes-autoscaler/pull/340)
* NO-JIRA: improve nodes listing in ClusterAPI provider [#354](https://github.com/openshift/kubernetes-autoscaler/pull/354)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): refactor findScalableResourceProviderIDs [#349](https://github.com/openshift/kubernetes-autoscaler/pull/349)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve failed machine detection in clusterapi [#347](https://github.com/openshift/kubernetes-autoscaler/pull/347)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): make DecreaseTargetSize more accurate [#343](https://github.com/openshift/kubernetes-autoscaler/pull/343)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve replica counting on openshift [#278](https://github.com/openshift/kubernetes-autoscaler/pull/278)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a9375f28dcc57a52262c2c5e1aaa1cb1edbd0163...f746d442e69be1cf82cef1c473ddc0ab8a15d22f)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f64a5c1d1e3a7d34d89582874ac63d70ef9c556e)
* [OCPBUGS-53330](https://issues.redhat.com/browse/OCPBUGS-53330): Update BMO to latest [#468](https://github.com/openshift/cluster-baremetal-operator/pull/468)
* [OCPBUGS-52216](https://issues.redhat.com/browse/OCPBUGS-52216): Bump x/oauth2 to 0.27.0 [#463](https://github.com/openshift/cluster-baremetal-operator/pull/463)
* [OCPBUGS-51275](https://issues.redhat.com/browse/OCPBUGS-51275): Add new resources to controller relatedObjects [#465](https://github.com/openshift/cluster-baremetal-operator/pull/465)
* [OCPBUGS-44839](https://issues.redhat.com/browse/OCPBUGS-44839): Mount the user-ca-bundle into ICC [#455](https://github.com/openshift/cluster-baremetal-operator/pull/455)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fc6ee14cc11098b5a93c1a2c785285a69b5c19c6...f64a5c1d1e3a7d34d89582874ac63d70ef9c556e)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/8fde9c52fbb6b6044785ebae0751000b049fd0ed)
* [OCPEDGE-1683](https://issues.redhat.com/browse/OCPEDGE-1683): feat: add support for arbiter and dual replica: [#116](https://github.com/openshift/cluster-bootstrap/pull/116)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/5a201a043f2c403d0de1df031071526526ad8af2...8fde9c52fbb6b6044785ebae0751000b049fd0ed)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d)
* [OCPCLOUD-2860](https://issues.redhat.com/browse/OCPCLOUD-2860): Enable propagation of Machine annotations to Nodes [#233](https://github.com/openshift/cluster-api/pull/233)
* [OCPCLOUD-2680](https://issues.redhat.com/browse/OCPCLOUD-2680): Enable machine to node propagation [#229](https://github.com/openshift/cluster-api/pull/229)
* [Full changelog](https://github.com/openshift/cluster-api/compare/242bd7153f250b93070e8d2f57d3969887d469e1...7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/48ffc2eceaa6bfc660bb9aad3b319779de94594b)
* [OCPBUGS-54970](https://issues.redhat.com/browse/OCPBUGS-54970), [OCPBUGS-55349](https://issues.redhat.com/browse/OCPBUGS-55349): Ensure CAPI machine when machine authority is CAPI [#288](https://github.com/openshift/cluster-capi-operator/pull/288)
* NO-JIRA: Prevent caching CAPI objects across namespaces [#285](https://github.com/openshift/cluster-capi-operator/pull/285)
* [METAL-966](https://issues.redhat.com/browse/METAL-966): Reapply "Merge pull request #175 from honza/add-metal3" [#284](https://github.com/openshift/cluster-capi-operator/pull/284)
* [OCPCLOUD-2648](https://issues.redhat.com/browse/OCPCLOUD-2648): Machine sync controller deletion logic [#278](https://github.com/openshift/cluster-capi-operator/pull/278)
* [OCPCLOUD-2713](https://issues.redhat.com/browse/OCPCLOUD-2713): Handle credential fields in both mapi2capi and capi2mapi [#282](https://github.com/openshift/cluster-capi-operator/pull/282)
* [OCPCLOUD-2564](https://issues.redhat.com/browse/OCPCLOUD-2564): add migration controllers [#268](https://github.com/openshift/cluster-capi-operator/pull/268)
* [OCPBUGS-54972](https://issues.redhat.com/browse/OCPBUGS-54972): Revert #175 "METAL-966: Add metal3 provider" [#283](https://github.com/openshift/cluster-capi-operator/pull/283)
* [OCPCLOUD-2880](https://issues.redhat.com/browse/OCPCLOUD-2880): label selector and labels conversion, fixes to sync controllers and conversions [#281](https://github.com/openshift/cluster-capi-operator/pull/281)
* [METAL-966](https://issues.redhat.com/browse/METAL-966): Add metal3 provider [#175](https://github.com/openshift/cluster-capi-operator/pull/175)
* [OCPCLOUD-2895](https://issues.redhat.com/browse/OCPCLOUD-2895): Add AWS networkInterfaceType to conversion [#280](https://github.com/openshift/cluster-capi-operator/pull/280)
* [OCPCLOUD-2712](https://issues.redhat.com/browse/OCPCLOUD-2712): Update comments based on Security Group Investigation [#279](https://github.com/openshift/cluster-capi-operator/pull/279)
* [OCPCLOUD-2716](https://issues.redhat.com/browse/OCPCLOUD-2716): Handle Machine owner references translation between MAPI and CAPI [#271](https://github.com/openshift/cluster-capi-operator/pull/271)
* NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 [#275](https://github.com/openshift/cluster-capi-operator/pull/275)
* [OCPCLOUD-2647](https://issues.redhat.com/browse/OCPCLOUD-2647): CAPI to MAPI Machine Synchronisation [#265](https://github.com/openshift/cluster-capi-operator/pull/265)
* NO-JIRA: Update version variable in generate-ocp-manifests hook script [#277](https://github.com/openshift/cluster-capi-operator/pull/277)
* NO-JIRA: fix: e2e: azure conditionally set identity [#276](https://github.com/openshift/cluster-capi-operator/pull/276)
* [TRT-2048](https://issues.redhat.com/browse/TRT-2048): Revert "OCPCLOUD-2792: corecluster: set controller level conditions + tests" [#273](https://github.com/openshift/cluster-capi-operator/pull/273)
* [OCPBUGS-53057](https://issues.redhat.com/browse/OCPBUGS-53057): Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic [#266](https://github.com/openshift/cluster-capi-operator/pull/266)
* [OCPCLOUD-2858](https://issues.redhat.com/browse/OCPCLOUD-2858): Bump dependencies to CAPI v1.9.z [#270](https://github.com/openshift/cluster-capi-operator/pull/270)
* NO-JIRA: Update TODOs with new Jira issues [#269](https://github.com/openshift/cluster-capi-operator/pull/269)
* [OCPCLOUD-2718](https://issues.redhat.com/browse/OCPCLOUD-2718): Add default VolumeSize for MAPI to CAPI conversion [#260](https://github.com/openshift/cluster-capi-operator/pull/260)
* [OCPCLOUD-2792](https://issues.redhat.com/browse/OCPCLOUD-2792): corecluster: set controller level conditions + tests [#256](https://github.com/openshift/cluster-capi-operator/pull/256)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/1ca4e107158834200ae8343e7d385d62cd15a0e2...48ffc2eceaa6bfc660bb9aad3b319779de94594b)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/7ddcbe3dd3a7b836ec0c882032944dcded78f866)
* [OCPBUGS-54427](https://issues.redhat.com/browse/OCPBUGS-54427): Add rbac leases rbac for cloud-provider on Azure stack hub [#387](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/387)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#380](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e938398a53735d2f448fcf924b54f34b5b93af06...7ddcbe3dd3a7b836ec0c882032944dcded78f866)
### [cluster-config-api](https://github.com/openshift/api/tree/d22fca85e3b9f77f0cf2b43759a5ff927e605f57)
* Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter [#2297](https://github.com/openshift/api/pull/2297)
* [OCPBUGS-48286](https://issues.redhat.com/browse/OCPBUGS-48286): feature-gates - enable ServiceAccountTokenNodeBinding [#2139](https://github.com/openshift/api/pull/2139)
* [OPRUN-3766](https://issues.redhat.com/browse/OPRUN-3766): Add FeatureFlag for OLMv1 Single/OwnNamespace [#2264](https://github.com/openshift/api/pull/2264)
* [MCO-1518](https://issues.redhat.com/browse/MCO-1518): Create V1 MachineConfigNodes API & deploy V1 MCN CRDs [#2255](https://github.com/openshift/api/pull/2255)
* Fix broken ControlPlaneMachineSet integration tests [#2296](https://github.com/openshift/api/pull/2296)
* [OAPE-148](https://issues.redhat.com/browse/OAPE-148): Promote CPMSMachineNamePrefix feature gate to default feature set [#2254](https://github.com/openshift/api/pull/2254)
* features: remove ShortCertRotation from DevPreviewNoUpgrade [#2270](https://github.com/openshift/api/pull/2270)
* [NE-2017](https://issues.redhat.com/browse/NE-2017): Enable GatewayAPIController featuregate in Default featureset [#2284](https://github.com/openshift/api/pull/2284)
* [OCPCLOUD-2914](https://issues.redhat.com/browse/OCPCLOUD-2914): Add MAPI to CAPI migration to TechPreview [#2279](https://github.com/openshift/api/pull/2279)
* [OCPEDGE-1775](https://issues.redhat.com/browse/OCPEDGE-1775): Enable separation of conflicting enum values, and drop DualReplica to DevPreview [#2283](https://github.com/openshift/api/pull/2283)
* [OAPE-92](https://issues.redhat.com/browse/OAPE-92): Promote RouteExternalCertificate feature gate to default feature set [#2268](https://github.com/openshift/api/pull/2268)
* [CONSOLE-4523](https://issues.redhat.com/browse/CONSOLE-4523): Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API [#2275](https://github.com/openshift/api/pull/2275)
* [MON-4071](https://issues.redhat.com/browse/MON-4071): GA `MetricsCollectionProfiles` [#2286](https://github.com/openshift/api/pull/2286)
* [CNTRLPLANE-332](https://issues.redhat.com/browse/CNTRLPLANE-332): Add uid and extra claim mappings for external OIDC configuration [#2234](https://github.com/openshift/api/pull/2234)
* Promote OnClusterBuild featuregate to default [#2192](https://github.com/openshift/api/pull/2192)
* trt-2080: check devlopment start date for latest release [#2285](https://github.com/openshift/api/pull/2285)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Re-enable GatewayAPI featuregate in Default featureset [#2281](https://github.com/openshift/api/pull/2281)
* [TRT-2081](https://issues.redhat.com/browse/TRT-2081): Revert #2261 "NE-2009: Enable GatewayAPI featuregate in Default featureset" [#2277](https://github.com/openshift/api/pull/2277)
* Temporarily pin feature-gate-analyzer to 4.19 [#2276](https://github.com/openshift/api/pull/2276)
* image/v1/types: improve documentation [#2240](https://github.com/openshift/api/pull/2240)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Enable GatewayAPI featuregate in Default featureset [#2261](https://github.com/openshift/api/pull/2261)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#2232](https://github.com/openshift/api/pull/2232)
* [OPRUN-3780](https://issues.redhat.com/browse/OPRUN-3780): Add feature flag for NewOLMPreflightPermissionCheck [#2242](https://github.com/openshift/api/pull/2242)
* [SPLAT-2079](https://issues.redhat.com/browse/SPLAT-2079): Removed VSphereControlPlaneMachineSet feature gate [#2236](https://github.com/openshift/api/pull/2236)
* [MCO-1630](https://issues.redhat.com/browse/MCO-1630): Generate v1 crds for PIS [#2257](https://github.com/openshift/api/pull/2257)
* IBMCloud: Add IBM Cloud CAPI install TechPreview FG [#2104](https://github.com/openshift/api/pull/2104)
* NO-ISSUE: tools: bump openshift controller-tools to latest commit [#2260](https://github.com/openshift/api/pull/2260)
* NO ISSUE: Tombstone `Spec.PinnedImageSets` in MCN v1alpha1 API [#2256](https://github.com/openshift/api/pull/2256)
* [OCPNODE-2877](https://issues.redhat.com/browse/OCPNODE-2877): Remove support to configure cgroupsv1 in OCP [#2181](https://github.com/openshift/api/pull/2181)
* Ignore partial manifests when running schemacheck [#2251](https://github.com/openshift/api/pull/2251)
* [MCO-1543](https://issues.redhat.com/browse/MCO-1543): Update v1alpha1 MCN API [#2201](https://github.com/openshift/api/pull/2201)
* Migrate DeepCopy and Compatibility gen to Gengo v2 [#1776](https://github.com/openshift/api/pull/1776)
* [CCXDEV-10455](https://issues.redhat.com/browse/CCXDEV-10455): update insightsDataGather to v1alpha2 with GathererConfig [#2195](https://github.com/openshift/api/pull/2195)
* [API-1843](https://issues.redhat.com/browse/API-1843): FeatureGate(d) KMS encryption [#2035](https://github.com/openshift/api/pull/2035)
* [CONSOLE-4448](https://issues.redhat.com/browse/CONSOLE-4448), [OCPBUGS-53412](https://issues.redhat.com/browse/OCPBUGS-53412): Add the ability to specify a second custom logo for PatternFly 6 [#2177](https://github.com/openshift/api/pull/2177)
* [MCO-1521](https://issues.redhat.com/browse/MCO-1521): Promote PinnedImageSet to GA [#2198](https://github.com/openshift/api/pull/2198)
* Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven [#2238](https://github.com/openshift/api/pull/2238)
* Update KAL and remove patch strategy tags [#2241](https://github.com/openshift/api/pull/2241)
* [STOR-2141](https://issues.redhat.com/browse/STOR-2141): add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec [#2190](https://github.com/openshift/api/pull/2190)
* [MCO-1590](https://issues.redhat.com/browse/MCO-1590): Add explicit opt-out & status field for boot image update configuration [#2223](https://github.com/openshift/api/pull/2223)
* [API-1689](https://issues.redhat.com/browse/API-1689): features: add ShortCertRotation [#1977](https://github.com/openshift/api/pull/1977)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Introduce GatewayAPIController feature gate [#2219](https://github.com/openshift/api/pull/2219)
* [CCXDEV-14850](https://issues.redhat.com/browse/CCXDEV-14850): insights add storage spec [#2200](https://github.com/openshift/api/pull/2200)
* Support SEV_SNP and TDX confidential instance type selection on GCP [#2165](https://github.com/openshift/api/pull/2165)
* [OCPBUGS-48641](https://issues.redhat.com/browse/OCPBUGS-48641): config/v1/types_cluster_version: Explain image and version both set [#2158](https://github.com/openshift/api/pull/2158)
* [OCPEDGE-1512](https://issues.redhat.com/browse/OCPEDGE-1512): feat: add dualreplica featuregate [#2196](https://github.com/openshift/api/pull/2196)
* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Add SELinuxMount and SELinuxChangePolicy to DevPreview [#2212](https://github.com/openshift/api/pull/2212)
* Add changes to infrastructure object to contain service endpoints and feature flag added [#2078](https://github.com/openshift/api/pull/2078)
* [Full changelog](https://github.com/openshift/api/compare/f587fb60f627fcdcff72a34293cb0771a8897338...d22fca85e3b9f77f0cf2b43759a5ff927e605f57)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/96607b590ba35a8f008073e105e01e72a5bfba2e)
* [OCPEDGE-1833](https://issues.redhat.com/browse/OCPEDGE-1833): feat: bump api dep to pull in change in DualReplica [#439](https://github.com/openshift/cluster-config-operator/pull/439)
* [OCPBUGS-52744](https://issues.redhat.com/browse/OCPBUGS-52744): Bump golang.org/x/crypto [#433](https://github.com/openshift/cluster-config-operator/pull/433)
* [OCPEDGE-1643](https://issues.redhat.com/browse/OCPEDGE-1643): bump: ocp/api ocp/library-go k8s [#431](https://github.com/openshift/cluster-config-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/1af8cf3ae4240132ef86786112b2a6e75d17a2fd...96607b590ba35a8f008073e105e01e72a5bfba2e)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)
* [OCPBUGS-55017](https://issues.redhat.com/browse/OCPBUGS-55017): Wait for operators to be stable for 2 minutes before accepting cluster is stable [#358](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/358)
* [OAPE-163](https://issues.redhat.com/browse/OAPE-163): Extend E2E tests for MachineNamePrefix when the field is reset [#355](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/355)
* [SPLAT-2079](https://issues.redhat.com/browse/SPLAT-2079): Removed VSphereControlPlaneMachineset feature gate [#354](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/354)
* [OAPE-147](https://issues.redhat.com/browse/OAPE-147): Add E2E tests for MachineNamePrefix with OnDelete update strategy [#353](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/353)
* [OCPBUGS-52224](https://issues.redhat.com/browse/OCPBUGS-52224): Bump to golang.org/x/oauth2@v0.27.0 [#352](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/6bf1961f27a4d358221b7d4b056785f10f6dcba7...1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/cf99de974354133f853928cff9e19ad19c5347d9)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#229](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/229)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#235](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/235)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#234](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/234)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook references [#231](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/231)
* [OCPBUGS-24588](https://issues.redhat.com/browse/OCPBUGS-24588): bump library-go [#233](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/233)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#228](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/a68ffe82329d198f79508daeb6c63c6bc2a4e19a...cf99de974354133f853928cff9e19ad19c5347d9)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/659813065170f4e52f80b7a29bbab64bfa9aa172)
* [OCPBUGS-51193](https://issues.redhat.com/browse/OCPBUGS-51193): Add runbook_url for CoreDNSErrorsHigh [#426](https://github.com/openshift/cluster-dns-operator/pull/426)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0a9deeea4c335e259747b35267811a4a040289fd...659813065170f4e52f80b7a29bbab64bfa9aa172)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/145959693ebe5a4412c468f4ec5cd4163cb68acc)
* [OCPEDGE-1773](https://issues.redhat.com/browse/OCPEDGE-1773): Fix arbiter field in install-config [#1409](https://github.com/openshift/cluster-etcd-operator/pull/1409)
* [OCPBUGS-53512](https://issues.redhat.com/browse/OCPBUGS-53512): fix CVE-2025-30204 [#1412](https://github.com/openshift/cluster-etcd-operator/pull/1412)
* [OCPBUGS-54222](https://issues.redhat.com/browse/OCPBUGS-54222): increase etcdGRPCRequestsSlow duration [#1402](https://github.com/openshift/cluster-etcd-operator/pull/1402)
* [OCPEDGE-1498](https://issues.redhat.com/browse/OCPEDGE-1498): support updates to external etcd [#1399](https://github.com/openshift/cluster-etcd-operator/pull/1399)
* [OCPEDGE-1500](https://issues.redhat.com/browse/OCPEDGE-1500): Added scaling strategies for TNF [#1396](https://github.com/openshift/cluster-etcd-operator/pull/1396)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/5bbe49442101475febb89bba3be808aa121f5c0c...145959693ebe5a4412c468f4ec5cd4163cb68acc)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/85ac017f7c393b18696bf77a6e6415d05418dd0b)
* [OSASINFRA-3747](https://issues.redhat.com/browse/OSASINFRA-3747): Prefer CA cert from credentials secret [#1190](https://github.com/openshift/cluster-image-registry-operator/pull/1190)
* [OCPBUGS-45409](https://issues.redhat.com/browse/OCPBUGS-45409): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 [#1196](https://github.com/openshift/cluster-image-registry-operator/pull/1196)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Authenticate to Azure only once in CPO [#1194](https://github.com/openshift/cluster-image-registry-operator/pull/1194)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Bump msi-dataplane dependency [#1187](https://github.com/openshift/cluster-image-registry-operator/pull/1187)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication [#1186](https://github.com/openshift/cluster-image-registry-operator/pull/1186)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e23f7e61cb1589b7068183aed4bd9f4c0fe00553...85ac017f7c393b18696bf77a6e6415d05418dd0b)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2e6bd66d4ad11f58b8dea2677a94751bb372dca5)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication for Ingress Operator [#1222](https://github.com/openshift/cluster-ingress-operator/pull/1222)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cluster-ingress [#1191](https://github.com/openshift/cluster-ingress-operator/pull/1191)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Relax pod bound validating admission rule for HyperShift [#1221](https://github.com/openshift/cluster-ingress-operator/pull/1221)
* [NE-1969](https://issues.redhat.com/browse/NE-1969): Set Degraded=True if unmanaged Gateway API CRDs exist [#1205](https://github.com/openshift/cluster-ingress-operator/pull/1205)
* [NE-1957](https://issues.redhat.com/browse/NE-1957): Add Gateway API DNS Feature e2e tests [#1213](https://github.com/openshift/cluster-ingress-operator/pull/1213)
* [OCPBUGS-54650](https://issues.redhat.com/browse/OCPBUGS-54650), [OCPBUGS-54651](https://issues.redhat.com/browse/OCPBUGS-54651), [OCPBUGS-54652](https://issues.redhat.com/browse/OCPBUGS-54652): desiredSubscription: Specify annotations and SCC [#1214](https://github.com/openshift/cluster-ingress-operator/pull/1214)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Move VAP to Default featureset [#1216](https://github.com/openshift/cluster-ingress-operator/pull/1216)
* [OCPBUGS-54568](https://issues.redhat.com/browse/OCPBUGS-54568): desiredIstio: Specify priorityClassName [#1211](https://github.com/openshift/cluster-ingress-operator/pull/1211)
* [OCPBUGS-53424](https://issues.redhat.com/browse/OCPBUGS-53424): Wait for install plans to enter the "Requires Approval" phase before approving them [#1203](https://github.com/openshift/cluster-ingress-operator/pull/1203)
* [NE-2008](https://issues.redhat.com/browse/NE-2008): Add GRPC conformance tests [#1208](https://github.com/openshift/cluster-ingress-operator/pull/1208)
* [NE-1277](https://issues.redhat.com/browse/NE-1277): status: Add Gateway API objects to relatedObjects [#933](https://github.com/openshift/cluster-ingress-operator/pull/933)
* [NE-1994](https://issues.redhat.com/browse/NE-1994): Add E2E test for Istio manual deployment [#1204](https://github.com/openshift/cluster-ingress-operator/pull/1204)
* [NE-1969](https://issues.redhat.com/browse/NE-1969): Add "v1" version to OpenShift GatewayClass controller name [#1202](https://github.com/openshift/cluster-ingress-operator/pull/1202)
* [NE-1934](https://issues.redhat.com/browse/NE-1934): Bump to OSSM 3.0 for Gateway API support [#1152](https://github.com/openshift/cluster-ingress-operator/pull/1152)
* [CORS-3907](https://issues.redhat.com/browse/CORS-3907): Update ingress operator to with custom endpoints [#1197](https://github.com/openshift/cluster-ingress-operator/pull/1197)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add experimental Gateway API group to Validating Admission Policy [#1200](https://github.com/openshift/cluster-ingress-operator/pull/1200)
* [NE-1907](https://issues.redhat.com/browse/NE-1907): Manage OSSM operator subscription manually to ensure a compatible version is installed [#1112](https://github.com/openshift/cluster-ingress-operator/pull/1112)
* [NE-1981](https://issues.redhat.com/browse/NE-1981): Move controller test helpers to dedicated package [#1199](https://github.com/openshift/cluster-ingress-operator/pull/1199)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add Validating Admission Policy for Gateway API CRDs [#1192](https://github.com/openshift/cluster-ingress-operator/pull/1192)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Implement GatewayAPIController feature gate [#1198](https://github.com/openshift/cluster-ingress-operator/pull/1198)
* [NE-1936](https://issues.redhat.com/browse/NE-1936): Bump k8s.io dependencies to v0.32.1 [#1184](https://github.com/openshift/cluster-ingress-operator/pull/1184)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/26f8b0f9c9fa30ff84f08f7e1f9da87aef431891...2e6bd66d4ad11f58b8dea2677a94751bb372dca5)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/23b5175aa2d5b8f7364ef4aed1966745d6735c2a)
* [OCPBUGS-45911](https://issues.redhat.com/browse/OCPBUGS-45911): revert dev cert rotation [#1835](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1835)
* Revert "OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects" [#1830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1830)
* [OCPBUGS-43777](https://issues.redhat.com/browse/OCPBUGS-43777): certrotationcontroller: run tests which runs deployment and creates projects [#1759](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1759)
* [CNTRLPLANE-347](https://issues.redhat.com/browse/CNTRLPLANE-347): Issue short lived certificates if ShortCertRotation featuregate is enabled [#1823](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1823)
* [MON-4161](https://issues.redhat.com/browse/MON-4161): add `cluster:controlplane_topology:sum` recording rule [#1829](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1829)
* [MON-4160](https://issues.redhat.com/browse/MON-4160): operator: add topology metrics [#1827](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1827)
* [OCPBUGS-35102](https://issues.redhat.com/browse/OCPBUGS-35102): Bump library-go [#1824](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/c13665bdedd2ee30d28ff83c187ea739d9b8094d...23b5175aa2d5b8f7364ef4aed1966745d6735c2a)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/cec410b7f877a6eef57968889a644b848bdb540a)
* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#838](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/838)
* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Run SELinux warning controller [#834](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/834)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/84e020145ed33c98597f675fff638c83f4d351a4...cec410b7f877a6eef57968889a644b848bdb540a)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/8740a60de76690a17d5081db078eb93dfdb7a066)
* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#560](https://github.com/openshift/cluster-kube-scheduler-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4210c04aec1c7fde8f4c294421e090ebf9248285...8740a60de76690a17d5081db078eb93dfdb7a066)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e4a04ee55a933a45a3b9b8e65ab994223c71196b)
* [OCPBUGS-55737](https://issues.redhat.com/browse/OCPBUGS-55737): [release-4.19] MON-4200: disable --auto-gomemlimit for Prometheus on SNO until we can ensure it won't result in excessive CPU usage [#2597](https://github.com/openshift/cluster-monitoring-operator/pull/2597)
* NO-JIRA: Synchronize versions of the downstream components [#2594](https://github.com/openshift/cluster-monitoring-operator/pull/2594)
* [MON-4207](https://issues.redhat.com/browse/MON-4207): Bump prometheus-operator to v0.81.0 [#2593](https://github.com/openshift/cluster-monitoring-operator/pull/2593)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2589](https://github.com/openshift/cluster-monitoring-operator/pull/2589)
* [MON-4161](https://issues.redhat.com/browse/MON-4161): add topology telemetry signals [#2588](https://github.com/openshift/cluster-monitoring-operator/pull/2588)
* [MON-4126](https://issues.redhat.com/browse/MON-4126): set fallbackScrapeProtocol: 'PrometheusText1.0.0' as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available [#2590](https://github.com/openshift/cluster-monitoring-operator/pull/2590)
* [MON-4150](https://issues.redhat.com/browse/MON-4150): chore: update prometheus-operator go dep [#2586](https://github.com/openshift/cluster-monitoring-operator/pull/2586)
* [OCPBUGS-54516](https://issues.redhat.com/browse/OCPBUGS-54516): provide context-rich and case-sensitive config validation [#2584](https://github.com/openshift/cluster-monitoring-operator/pull/2584)
* [MON-4149](https://issues.redhat.com/browse/MON-4149): chore: update library-go [#2587](https://github.com/openshift/cluster-monitoring-operator/pull/2587)
* [OCPBUGS-54223](https://issues.redhat.com/browse/OCPBUGS-54223): Fix opentelemetry processor/receiver/exporter/extensions labels [#2583](https://github.com/openshift/cluster-monitoring-operator/pull/2583)
* [MON-4188](https://issues.redhat.com/browse/MON-4188): Add docs for proxy_url alertmanager [#2582](https://github.com/openshift/cluster-monitoring-operator/pull/2582)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2577](https://github.com/openshift/cluster-monitoring-operator/pull/2577)
* [MON-4189](https://issues.redhat.com/browse/MON-4189): Updating node-exporter accelerators configmap [#2558](https://github.com/openshift/cluster-monitoring-operator/pull/2558)
* [MON-4043](https://issues.redhat.com/browse/MON-4043): Configuring external Alertmangers with proxy_url [#2580](https://github.com/openshift/cluster-monitoring-operator/pull/2580)
* [MON-4136](https://issues.redhat.com/browse/MON-4136): set up the PrometheusPossibleNarrowSelectors alert [#2554](https://github.com/openshift/cluster-monitoring-operator/pull/2554)
* [MON-3960](https://issues.redhat.com/browse/MON-3960): test: enable back TestTLSSecurityProfileConfiguration and m… [#2545](https://github.com/openshift/cluster-monitoring-operator/pull/2545)
* NO-JIRA: chore: versions: kubeRbacProxy's primary branch isn't main yet [#2574](https://github.com/openshift/cluster-monitoring-operator/pull/2574)
* [OU-515](https://issues.redhat.com/browse/OU-515): remove old nginx configmap deletion [#2575](https://github.com/openshift/cluster-monitoring-operator/pull/2575)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4e74c9de1fbda42550b21a48bb76aeef708e60cd...e4a04ee55a933a45a3b9b8e65ab994223c71196b)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/2a1d6159a44bf8aa26bba9981f144006a1d99990)
* [OCPBUGS-55285](https://issues.redhat.com/browse/OCPBUGS-55285): bindata,ovn-k,cudn: Validate loclanet topology's excludeSubnet match specified subnets [#2692](https://github.com/openshift/cluster-network-operator/pull/2692)
* [OCPBUGS-40906](https://issues.redhat.com/browse/OCPBUGS-40906): Implement IPsec NAT-Traversal encapsulation option [#2573](https://github.com/openshift/cluster-network-operator/pull/2573)
* [OCPBUGS-55090](https://issues.redhat.com/browse/OCPBUGS-55090): Configures subdirectory based CNI chain loading [#2690](https://github.com/openshift/cluster-network-operator/pull/2690)
* [OCPBUGS-54238](https://issues.redhat.com/browse/OCPBUGS-54238): Update CSR status condition appropriately [#2674](https://github.com/openshift/cluster-network-operator/pull/2674)
* [CORENET-5914](https://issues.redhat.com/browse/CORENET-5914): bindata,ovn-k: Update CUDN CRD following localnet support [#2678](https://github.com/openshift/cluster-network-operator/pull/2678)
* [SDN-5701](https://issues.redhat.com/browse/SDN-5701): [multus-networkpolicy] Update CRD to the latest v1beta1 [#2668](https://github.com/openshift/cluster-network-operator/pull/2668)
* [CNF-16707](https://issues.redhat.com/browse/CNF-16707): frr-k8s: wire the frr-status sidecar container [#2687](https://github.com/openshift/cluster-network-operator/pull/2687)
* [CORENET-5856](https://issues.redhat.com/browse/CORENET-5856): Update RouteAdvertisements schema [#2685](https://github.com/openshift/cluster-network-operator/pull/2685)
* [OCPBUGS-54837](https://issues.redhat.com/browse/OCPBUGS-54837): Add missing backendAddressPools read permission on azure [#2684](https://github.com/openshift/cluster-network-operator/pull/2684)
* [CORENET-4481](https://issues.redhat.com/browse/CORENET-4481): update install-cni script [#2676](https://github.com/openshift/cluster-network-operator/pull/2676)
* [SDN-5342](https://issues.redhat.com/browse/SDN-5342): Signer username validation [#2560](https://github.com/openshift/cluster-network-operator/pull/2560)
* [OCPBUGS-53180](https://issues.redhat.com/browse/OCPBUGS-53180): Add IPv6 NGINX configuration [#2681](https://github.com/openshift/cluster-network-operator/pull/2681)
* [CNF-16707](https://issues.redhat.com/browse/CNF-16707): frr-k8s: Add BGPSessionState CRD [#2671](https://github.com/openshift/cluster-network-operator/pull/2671)
* [SDN-5689](https://issues.redhat.com/browse/SDN-5689): Rebase k8s v1.32 [#2656](https://github.com/openshift/cluster-network-operator/pull/2656)
* [OCPBUGS-54159](https://issues.redhat.com/browse/OCPBUGS-54159): frr-k8s: tolerate all taints [#2677](https://github.com/openshift/cluster-network-operator/pull/2677)
* [OCPBUGS-5241](https://issues.redhat.com/browse/OCPBUGS-5241): Auto opt in for whereabouts-controller [#2670](https://github.com/openshift/cluster-network-operator/pull/2670)
* [OCPBUGS-52280](https://issues.redhat.com/browse/OCPBUGS-52280): Move to use newer IPsec DaemonSets irrespective of MCP state [#2454](https://github.com/openshift/cluster-network-operator/pull/2454)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Update managed Azure HCP cloud network config [#2647](https://github.com/openshift/cluster-network-operator/pull/2647)
* [OCPBUGS-52972](https://issues.redhat.com/browse/OCPBUGS-52972): Correct namespace ref and cert dir [#2665](https://github.com/openshift/cluster-network-operator/pull/2665)
* NO-JIRA: ovn-k: sync EgressService with upstream [#2664](https://github.com/openshift/cluster-network-operator/pull/2664)
* [OCPBUGS-52361](https://issues.redhat.com/browse/OCPBUGS-52361): frr-k8s: rename validatingwebhook name [#2659](https://github.com/openshift/cluster-network-operator/pull/2659)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/972dea1fa5ac0b403496f88b2b0c59e1aa471de8...2a1d6159a44bf8aa26bba9981f144006a1d99990)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/7172669c93307a2474c48911fd95f04a40aa4ea7)
* Fixed rcu_nocbs cpu parsing (#1317) [#1317](https://github.com/openshift/cluster-node-tuning-operator/pull/1317)
* Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) [#1321](https://github.com/openshift/cluster-node-tuning-operator/pull/1321)
* Make the e2e/basic/modules.go test reentrant (#1322) [#1322](https://github.com/openshift/cluster-node-tuning-operator/pull/1322)
* Enhance hugepages validation error message (#1320) [#1320](https://github.com/openshift/cluster-node-tuning-operator/pull/1320)
* Bump to k8s 1.32.3 (#1318) [#1318](https://github.com/openshift/cluster-node-tuning-operator/pull/1318)
* Unblock production image generation (#1319) [#1319](https://github.com/openshift/cluster-node-tuning-operator/pull/1319)
* [OCPBUGS-54628](https://issues.redhat.com/browse/OCPBUGS-54628): Add retry method if we hit jira rate limit (#1313) [#1313](https://github.com/openshift/cluster-node-tuning-operator/pull/1313)
* Ignore *-server-ose* repos in the CI (#1314) [#1314](https://github.com/openshift/cluster-node-tuning-operator/pull/1314)
* [CNF-17417](https://issues.redhat.com/browse/CNF-17417): Enhanced utility function for fetching container runtime (#1279) [#1279](https://github.com/openshift/cluster-node-tuning-operator/pull/1279)
* Obsolete pod label-based matching (#1304) [#1304](https://github.com/openshift/cluster-node-tuning-operator/pull/1304)
* Revert "e2e: skip RHEL-79032 jira issue in irqbalance (#1312)" (#1315) [#1312](https://github.com/openshift/cluster-node-tuning-operator/pull/1312)
* Remove pinning of all dependencies (#1309) [#1309](https://github.com/openshift/cluster-node-tuning-operator/pull/1309)
* e2e: arm: Add kernel page size e2e testing suite (#1307) [#1307](https://github.com/openshift/cluster-node-tuning-operator/pull/1307)
* e2e: skip RHEL-79032 jira issue in irqbalance (#1312) [#1312](https://github.com/openshift/cluster-node-tuning-operator/pull/1312)
* [CNF-16638](https://issues.redhat.com/browse/CNF-16638): Reduce code duplication of RPS enabled checks (#1301) [#1301](https://github.com/openshift/cluster-node-tuning-operator/pull/1301)
* Add observedGeneration to Profile status (#1305) [#1305](https://github.com/openshift/cluster-node-tuning-operator/pull/1305)
* Manage TuneD profiles with the same name and different content (#1216) [#1216](https://github.com/openshift/cluster-node-tuning-operator/pull/1216)
* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) [#1217](https://github.com/openshift/cluster-node-tuning-operator/pull/1217)
* Switch builder image to multi-arch image (#1297) [#1297](https://github.com/openshift/cluster-node-tuning-operator/pull/1297)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f166846b7256402cd37db880edc94752cbf481bc...7172669c93307a2474c48911fd95f04a40aa4ea7)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/de5d2f2d5dd0dc7fce6860fbce10dff1e092b123)
* [OPRUN-3821](https://issues.redhat.com/browse/OPRUN-3821): Add FeatureFlag for OLMv1 Single/OwnNamespace [#110](https://github.com/openshift/cluster-olm-operator/pull/110)
* [OCPBUGS-54877](https://issues.redhat.com/browse/OCPBUGS-54877): Increase debug logging level for op-con/catd [#114](https://github.com/openshift/cluster-olm-operator/pull/114)
* [OPRUN-3782](https://issues.redhat.com/browse/OPRUN-3782): Watch for permissions preflight feature gate [#113](https://github.com/openshift/cluster-olm-operator/pull/113)
* [OCPBUGS-54781](https://issues.redhat.com/browse/OCPBUGS-54781): Revert #111 "OPRUN-3782: Watch for permissions preflight feature gate" [#112](https://github.com/openshift/cluster-olm-operator/pull/112)
* [OPRUN-3782](https://issues.redhat.com/browse/OPRUN-3782): Watch for permissions preflight feature gate [#111](https://github.com/openshift/cluster-olm-operator/pull/111)
* [OCPBUGS-54179](https://issues.redhat.com/browse/OCPBUGS-54179): Add openshift node selector annotation [#109](https://github.com/openshift/cluster-olm-operator/pull/109)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f498726f0e0c7aa06824bde34ef15f2a477f2d6d...de5d2f2d5dd0dc7fce6860fbce10dff1e092b123)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/748524784686a5f397490563882cbfb88f9acd01)
* [CNTRLPLANE-55](https://issues.redhat.com/browse/CNTRLPLANE-55): Add MinimallySufficientPodSecurityStandard annotation to namespaces [#161](https://github.com/openshift/cluster-policy-controller/pull/161)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/5cc0d0ecd3cdfe8e2fbb55bb62de7fb047b2a127...748524784686a5f397490563882cbfb88f9acd01)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/4cb291973ad887b3506af1d0f86ba5c3e326d372)
* [OCPBUGS-54590](https://issues.redhat.com/browse/OCPBUGS-54590): Samples Operator should sort failing image imports [#627](https://github.com/openshift/cluster-samples-operator/pull/627)
* [OCPBUGS-54589](https://issues.redhat.com/browse/OCPBUGS-54589): Adding filter to clusterOperatorInformerEventHandler [#626](https://github.com/openshift/cluster-samples-operator/pull/626)
* [OCPBUGS-54591](https://issues.redhat.com/browse/OCPBUGS-54591): only update LastTransitionTime if operator status change [#625](https://github.com/openshift/cluster-samples-operator/pull/625)
* [OCPBUGS-54471](https://issues.redhat.com/browse/OCPBUGS-54471): Periodic sync of supported OCP samples [#622](https://github.com/openshift/cluster-samples-operator/pull/622)
* [OCPBUGS-54479](https://issues.redhat.com/browse/OCPBUGS-54479): Periodic sync of OKD samples [#621](https://github.com/openshift/cluster-samples-operator/pull/621)
* [OCPBUGS-54349](https://issues.redhat.com/browse/OCPBUGS-54349): cluster-samples-operator - fix failing unit tests MacBook (ARM chip) [#618](https://github.com/openshift/cluster-samples-operator/pull/618)
* [OCPBUGS-54216](https://issues.redhat.com/browse/OCPBUGS-54216): Update the k8s API version [#614](https://github.com/openshift/cluster-samples-operator/pull/614)
* [OCPBUGS-54347](https://issues.redhat.com/browse/OCPBUGS-54347): add rhdmalone to owners [#616](https://github.com/openshift/cluster-samples-operator/pull/616)
* [OCPBUGS-54149](https://issues.redhat.com/browse/OCPBUGS-54149): Updates to README.md [#613](https://github.com/openshift/cluster-samples-operator/pull/613)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Unrevert the revert "OCPBUGS-45049: Adding mutex to func createSamples on handler.go" [#609](https://github.com/openshift/cluster-samples-operator/pull/609)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Unrevert the revert "OCPBUGS-52346: bump x/oauth2 to version 0.27.0" [#608](https://github.com/openshift/cluster-samples-operator/pull/608)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Revert "OCPBUGS-52346: bump x/oauth2 to version 0.27.0" [#606](https://github.com/openshift/cluster-samples-operator/pull/606)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Revert "OCPBUGS-45049: Adding mutex to func createSamples on handler.go" [#607](https://github.com/openshift/cluster-samples-operator/pull/607)
* [OCPBUGS-52379](https://issues.redhat.com/browse/OCPBUGS-52379): relevant references to master renamed in README.md [#603](https://github.com/openshift/cluster-samples-operator/pull/603)
* [OCPBUGS-52346](https://issues.redhat.com/browse/OCPBUGS-52346): bump x/oauth2 to version 0.27.0 [#602](https://github.com/openshift/cluster-samples-operator/pull/602)
* [OCPBUGS-45049](https://issues.redhat.com/browse/OCPBUGS-45049): Adding mutex to func createSamples on handler.go [#601](https://github.com/openshift/cluster-samples-operator/pull/601)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5c075681e6b61e9de5eb3ff98ba19643ba23fecf...4cb291973ad887b3506af1d0f86ba5c3e326d372)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/94ed00846022ffffba2fcb0444c46beb0b9a2108)
* NO-JIRA: correct cinder operator CredentialsRequest name [#577](https://github.com/openshift/cluster-storage-operator/pull/577)
* [OCPBUGS-54491](https://issues.redhat.com/browse/OCPBUGS-54491): sync Azure File permissions with upstream docs [#576](https://github.com/openshift/cluster-storage-operator/pull/576)
* [STOR-2078](https://issues.redhat.com/browse/STOR-2078): Enable VolumeAttributesClass for GCP-PD [#574](https://github.com/openshift/cluster-storage-operator/pull/574)
* [OSASINFRA-3731](https://issues.redhat.com/browse/OSASINFRA-3731): openstack: Consume CA cert from CCO secret [#557](https://github.com/openshift/cluster-storage-operator/pull/557)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#564](https://github.com/openshift/cluster-storage-operator/pull/564)
* [STOR-1878](https://issues.redhat.com/browse/STOR-1878): Run operators without root user control [#570](https://github.com/openshift/cluster-storage-operator/pull/570)
* [STOR-1881](https://issues.redhat.com/browse/STOR-1881): Role and ClusterRole with too wide permissions [#569](https://github.com/openshift/cluster-storage-operator/pull/569)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#568](https://github.com/openshift/cluster-storage-operator/pull/568)
* [OCPBUGS-24588](https://issues.redhat.com/browse/OCPBUGS-24588): bump library-go [#566](https://github.com/openshift/cluster-storage-operator/pull/566)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#554](https://github.com/openshift/cluster-storage-operator/pull/554)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): Added token minter Sidecar for aws-ebs hypershift-deployments [#528](https://github.com/openshift/cluster-storage-operator/pull/528)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a20a39c2bf1e1d4215f2705061b57203fc0dd173...94ed00846022ffffba2fcb0444c46beb0b9a2108)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c1c56b4cfb93588290de3734031b1a2d556788fc)
* NO-JIRA: Updating openshift-ci-release-key for 2 years [#70](https://github.com/openshift/cluster-update-keys/pull/70)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...c1c56b4cfb93588290de3734031b1a2d556788fc)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/09edded491b9b591445a3502cb719403eb5f52e4)
* [OTA-1403](https://issues.redhat.com/browse/OTA-1403): Add an always passing test case [#1172](https://github.com/openshift/cluster-version-operator/pull/1172)
* NO-JIRA: make verify [#1177](https://github.com/openshift/cluster-version-operator/pull/1177)
* [OCPBUGS-23514](https://issues.redhat.com/browse/OCPBUGS-23514): Failing=Unknown upon long CO updating [#1165](https://github.com/openshift/cluster-version-operator/pull/1165)
* NO-JIRA: manifests: make template manifests valid YAML [#1171](https://github.com/openshift/cluster-version-operator/pull/1171)
* [OTA-1488](https://issues.redhat.com/browse/OTA-1488): Remove USC code [#1176](https://github.com/openshift/cluster-version-operator/pull/1176)
* [OTA-1488](https://issues.redhat.com/browse/OTA-1488): Remove DevPreview USC manifests [#1175](https://github.com/openshift/cluster-version-operator/pull/1175)
* NO-JIRA: Fix some issues identified by yamllint [#1174](https://github.com/openshift/cluster-version-operator/pull/1174)
* [OTA-1403](https://issues.redhat.com/browse/OTA-1403): Create minimal openshift tests extension [#1168](https://github.com/openshift/cluster-version-operator/pull/1168)
* NO-JIRA: Add unit test for renderManifest [#1173](https://github.com/openshift/cluster-version-operator/pull/1173)
* [OTA-1403](https://issues.redhat.com/browse/OTA-1403): Move the CVO CLI Application to a Separate Folder [#1169](https://github.com/openshift/cluster-version-operator/pull/1169)
* [OTA-209](https://issues.redhat.com/browse/OTA-209): Add CVOConfiguration controller [#1163](https://github.com/openshift/cluster-version-operator/pull/1163)
* [OTA-1427](https://issues.redhat.com/browse/OTA-1427): Reconcile all nodes via a special event [#1164](https://github.com/openshift/cluster-version-operator/pull/1164)
* [OCPBUGS-52258](https://issues.redhat.com/browse/OCPBUGS-52258): pkg/cvo/updatepayload: Context around ValidateDirectory calls [#1166](https://github.com/openshift/cluster-version-operator/pull/1166)
* NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities [#1159](https://github.com/openshift/cluster-version-operator/pull/1159)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ff3778c368351aea28f7245743966745b14d40a8...09edded491b9b591445a3502cb719403eb5f52e4)
### [console](https://github.com/openshift/console/tree/2fb70a889d3607afcd73f7ca77f9155a0709b3cb)
* [OCPBUGS-55814](https://issues.redhat.com/browse/OCPBUGS-55814): Add DEVCONSOLE_PROXY flag [#15027](https://github.com/openshift/console/pull/15027)
* [OCPBUGS-55414](https://issues.redhat.com/browse/OCPBUGS-55414): fix runtime error on MachineConfigPools page [#15007](https://github.com/openshift/console/pull/15007)
* [OCPBUGS-55448](https://issues.redhat.com/browse/OCPBUGS-55448): Fix +Add details switch animation regression [#15011](https://github.com/openshift/console/pull/15011)
* [OCPBUGS-55454](https://issues.redhat.com/browse/OCPBUGS-55454): Disable web terminal and Shipwright e2e [#15012](https://github.com/openshift/console/pull/15012)
* [OCPBUGS-53443](https://issues.redhat.com/browse/OCPBUGS-53443): Check for ACM when hiding switcher [#14988](https://github.com/openshift/console/pull/14988)
* [ODC-7727](https://issues.redhat.com/browse/ODC-7727): Change favourites button defaultName [#14996](https://github.com/openshift/console/pull/14996)
* [CONSOLE-4492](https://issues.redhat.com/browse/CONSOLE-4492): fix: do not render if listpageheader has no props [#14995](https://github.com/openshift/console/pull/14995)
* [OCPBUGS-55252](https://issues.redhat.com/browse/OCPBUGS-55252): fix bug where tab underline is missing [#14991](https://github.com/openshift/console/pull/14991)
* NO-JIRA: Deprecate `react-router-dom-v5-compat` [#14994](https://github.com/openshift/console/pull/14994)
* [OCPBUGS-54670](https://issues.redhat.com/browse/OCPBUGS-54670): Use PF component group for PageHeading [#14965](https://github.com/openshift/console/pull/14965)
* [OCPBUGS-54833](https://issues.redhat.com/browse/OCPBUGS-54833): fix spacing of secondary action in notification drawer… [#14980](https://github.com/openshift/console/pull/14980)
* [OCPBUGS-54976](https://issues.redhat.com/browse/OCPBUGS-54976): Mark `withHandlePromise` HOC as Deprecated [#14969](https://github.com/openshift/console/pull/14969)
* [OCPBUGS-54656](https://issues.redhat.com/browse/OCPBUGS-54656): Add space between quick start action list items [#14940](https://github.com/openshift/console/pull/14940)
* [OCPBUGS-54601](https://issues.redhat.com/browse/OCPBUGS-54601): fix bug where operator appears twice [#14983](https://github.com/openshift/console/pull/14983)
* [OCPBUGS-45514](https://issues.redhat.com/browse/OCPBUGS-45514): Add account email to the telemetry [#14978](https://github.com/openshift/console/pull/14978)
* [CONSOLE-4464](https://issues.redhat.com/browse/CONSOLE-4464): Update PatternFly to latest [#14979](https://github.com/openshift/console/pull/14979)
* [OCPBUGS-54657](https://issues.redhat.com/browse/OCPBUGS-54657): Expose OdcBaseNode through the dynamic plugin SDK [#14955](https://github.com/openshift/console/pull/14955)
* [OCPBUGS-55047](https://issues.redhat.com/browse/OCPBUGS-55047): align spacing after breadrcumb with PatternFly [#14972](https://github.com/openshift/console/pull/14972)
* [OCPBUGS-55018](https://issues.redhat.com/browse/OCPBUGS-55018): fix web terminal initialize form style [#14974](https://github.com/openshift/console/pull/14974)
* [CONSOLE-4505](https://issues.redhat.com/browse/CONSOLE-4505): Update i18next package [#14881](https://github.com/openshift/console/pull/14881)
* [OCPBUGS-55084](https://issues.redhat.com/browse/OCPBUGS-55084): fix bug where highlighting items from quickstart does … [#14976](https://github.com/openshift/console/pull/14976)
* [CONSOLE-4542](https://issues.redhat.com/browse/CONSOLE-4542): Remove base `dl` `dd` `dt` CSS [#14966](https://github.com/openshift/console/pull/14966)
* [CONSOLE-4541](https://issues.redhat.com/browse/CONSOLE-4541): deprecate VirtualizedTable and ListPageFilter and useLi… [#14967](https://github.com/openshift/console/pull/14967)
* [CONSOLE-4524](https://issues.redhat.com/browse/CONSOLE-4524): Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console [#14949](https://github.com/openshift/console/pull/14949)
* [OCPBUGS-43792](https://issues.redhat.com/browse/OCPBUGS-43792): Load extensions in same order as plugins listed in SERVER_FLAGS global [#14902](https://github.com/openshift/console/pull/14902)
* [ODC-7781](https://issues.redhat.com/browse/ODC-7781): Running knative e2e tests from admin view [#14952](https://github.com/openshift/console/pull/14952)
* [OCPBUGS-54669](https://issues.redhat.com/browse/OCPBUGS-54669): Enable project selector dropdown on Helm form in admin perspective [#14956](https://github.com/openshift/console/pull/14956)
* [OCPBUGS-54963](https://issues.redhat.com/browse/OCPBUGS-54963): Fix visual regression with knative getting started card [#14968](https://github.com/openshift/console/pull/14968)
* [OCPBUGS-54536](https://issues.redhat.com/browse/OCPBUGS-54536): Use router link for OLM CSV empty state [#14929](https://github.com/openshift/console/pull/14929)
* [CONSOLE-4492](https://issues.redhat.com/browse/CONSOLE-4492): Use `helpText` for help text [#14964](https://github.com/openshift/console/pull/14964)
* [OCPBUGS-54878](https://issues.redhat.com/browse/OCPBUGS-54878): Align left/right margins of add card items [#14963](https://github.com/openshift/console/pull/14963)
* [CONSOLE-4542](https://issues.redhat.com/browse/CONSOLE-4542): Convert `dl`, `dd`, `dt` to PF `DescriptionList` [#14947](https://github.com/openshift/console/pull/14947)
* [CONSOLE-4538](https://issues.redhat.com/browse/CONSOLE-4538): Add error reporting link to `ErrorBoundary` modal [#14958](https://github.com/openshift/console/pull/14958)
* [OCPEDGE-1614](https://issues.redhat.com/browse/OCPEDGE-1614): hack: allow DualReplica in control plane topology validation [#14934](https://github.com/openshift/console/pull/14934)
* [OCPBUGS-36658](https://issues.redhat.com/browse/OCPBUGS-36658): Fetching taskRuns in PLR details page using PLR UID also [#14921](https://github.com/openshift/console/pull/14921)
* [CONSOLE-4507](https://issues.redhat.com/browse/CONSOLE-4507): Clean up catalog view [#14954](https://github.com/openshift/console/pull/14954)
* [CONSOLE-4520](https://issues.redhat.com/browse/CONSOLE-4520): Further PatternFly 6 bug fixes and cleanup [#14945](https://github.com/openshift/console/pull/14945)
* [CONSOLE-4464](https://issues.redhat.com/browse/CONSOLE-4464): Update PatternFly to 6.2.0 [#14953](https://github.com/openshift/console/pull/14953)
* [OCPBUGS-49870](https://issues.redhat.com/browse/OCPBUGS-49870): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14887](https://github.com/openshift/console/pull/14887)
* [OCPBUGS-54733](https://issues.redhat.com/browse/OCPBUGS-54733): fix bug where co-resource-icon--fixed-width can clip [#14950](https://github.com/openshift/console/pull/14950)
* [OCPBUGS-52486](https://issues.redhat.com/browse/OCPBUGS-52486): Notification drawer should have keyboard navigation focus when expanded. [#14889](https://github.com/openshift/console/pull/14889)
* [OCPBUGS-54540](https://issues.redhat.com/browse/OCPBUGS-54540): fix flaking update-modal test [#14937](https://github.com/openshift/console/pull/14937)
* [OCPBUGS-54684](https://issues.redhat.com/browse/OCPBUGS-54684): Remove orphaned notification drawer CSS class [#14948](https://github.com/openshift/console/pull/14948)
* [OCPBUGS-54492](https://issues.redhat.com/browse/OCPBUGS-54492): metadata.name field is missing in PDB example YAML [#14946](https://github.com/openshift/console/pull/14946)
* [CONSOLE-4538](https://issues.redhat.com/browse/CONSOLE-4538): Use PF component groups for Error states [#14912](https://github.com/openshift/console/pull/14912)
* [ODC-7720](https://issues.redhat.com/browse/ODC-7720): Further Developer Catalog -> Software Catalog renaming [#14911](https://github.com/openshift/console/pull/14911)
* [CONSOLE-4540](https://issues.redhat.com/browse/CONSOLE-4540): add set as default sc action [#14920](https://github.com/openshift/console/pull/14920)
* [ODC-7778](https://issues.redhat.com/browse/ODC-7778): Include Quick create in Admin perspective guided tour [#14850](https://github.com/openshift/console/pull/14850)
* [CONSOLE-4393](https://issues.redhat.com/browse/CONSOLE-4393), [ODC-6775](https://issues.redhat.com/browse/ODC-6775): @types/node pre-merge prep [#14932](https://github.com/openshift/console/pull/14932)
* [OCPBUGS-46526](https://issues.redhat.com/browse/OCPBUGS-46526): Add BaseNode in topology folder into Dynamic Plugin SDK [#14907](https://github.com/openshift/console/pull/14907)
* [OCPBUGS-54472](https://issues.redhat.com/browse/OCPBUGS-54472): fix position of OpenShift Lightspeed button [#14923](https://github.com/openshift/console/pull/14923)
* [OCPBUGS-54461](https://issues.redhat.com/browse/OCPBUGS-54461): Add missing `href` props to masthead items [#14922](https://github.com/openshift/console/pull/14922)
* [OCPBUGS-53065](https://issues.redhat.com/browse/OCPBUGS-53065): Fix regression where normal Pod terminals are unresponsive. [#14927](https://github.com/openshift/console/pull/14927)
* [OCPBUGS-54540](https://issues.redhat.com/browse/OCPBUGS-54540): fix flaking update-modal test [#14930](https://github.com/openshift/console/pull/14930)
* [OCPBUGS-53167](https://issues.redhat.com/browse/OCPBUGS-53167): Re-enable guided tour in admin perspective [#14928](https://github.com/openshift/console/pull/14928)
* [CONSOLE-4520](https://issues.redhat.com/browse/CONSOLE-4520): Further base token cleanup and fixes [#14909](https://github.com/openshift/console/pull/14909)
* [OCPBUGS-54265](https://issues.redhat.com/browse/OCPBUGS-54265): Remove extra div in MultiTabListPage [#14906](https://github.com/openshift/console/pull/14906)
* [OCPBUGS-54477](https://issues.redhat.com/browse/OCPBUGS-54477): Remove char limit for favourite names [#14924](https://github.com/openshift/console/pull/14924)
* [OCPBUGS-47723](https://issues.redhat.com/browse/OCPBUGS-47723): always show 'Plugin available' button on CSV list no matter plugin enabled or not [#14655](https://github.com/openshift/console/pull/14655)
* NO-JIRA: adding new reference plugin: kuadrant [#14361](https://github.com/openshift/console/pull/14361)
* [OCPBUGS-54485](https://issues.redhat.com/browse/OCPBUGS-54485): Add dark theme feedback graphic [#14925](https://github.com/openshift/console/pull/14925)
* [CONSOLE-4484](https://issues.redhat.com/browse/CONSOLE-4484): Fix `Skip to content` regression [#14918](https://github.com/openshift/console/pull/14918)
* [OCPBUGS-54436](https://issues.redhat.com/browse/OCPBUGS-54436): Warning: React.useMemo has a missing dependency [#14913](https://github.com/openshift/console/pull/14913)
* [OCPBUGS-54430](https://issues.redhat.com/browse/OCPBUGS-54430): Fix shifting play/pause button when loading [#14916](https://github.com/openshift/console/pull/14916)
* [OCPBUGS-46404](https://issues.redhat.com/browse/OCPBUGS-46404): i18n translations for Export as CSV button [#14651](https://github.com/openshift/console/pull/14651)
* [OCPBUGS-52479](https://issues.redhat.com/browse/OCPBUGS-52479): Fix OLM e2e tests [#14851](https://github.com/openshift/console/pull/14851)
* [OCPBUGS-20230](https://issues.redhat.com/browse/OCPBUGS-20230): Prevent yaml editor crash [#14676](https://github.com/openshift/console/pull/14676)
* [CONSOLE-4464](https://issues.redhat.com/browse/CONSOLE-4464), [ODC-7756](https://issues.redhat.com/browse/ODC-7756): Bump PF6 to latest prereleases [#14783](https://github.com/openshift/console/pull/14783)
* [CONSOLE-4501](https://issues.redhat.com/browse/CONSOLE-4501): Add unit test for Timestamp component [#14799](https://github.com/openshift/console/pull/14799)
* [CONSOLE-4521](https://issues.redhat.com/browse/CONSOLE-4521): Remove old polyfills [#14880](https://github.com/openshift/console/pull/14880)
* [OCPBUGS-52948](https://issues.redhat.com/browse/OCPBUGS-52948): Multiple favorite icon on same page [#14863](https://github.com/openshift/console/pull/14863)
* [OCPBUGS-53065](https://issues.redhat.com/browse/OCPBUGS-53065): Debug pod logs are not accessible when debugging a node via OpenShift Console [#14898](https://github.com/openshift/console/pull/14898)
* [CONSOLE-4462](https://issues.redhat.com/browse/CONSOLE-4462): Remove two more overrides [#14891](https://github.com/openshift/console/pull/14891)
* [OCPBUGS-53227](https://issues.redhat.com/browse/OCPBUGS-53227): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14901](https://github.com/openshift/console/pull/14901)
* [ODC-7770](https://issues.redhat.com/browse/ODC-7770): Remove perspective switcher if only one perspective is present [#14762](https://github.com/openshift/console/pull/14762)
* [OCPBUGS-52938](https://issues.redhat.com/browse/OCPBUGS-52938): 'Helm Chart Repository' name is used in breadcrumb link, details page heading and action names [#14890](https://github.com/openshift/console/pull/14890)
* (chores) Add approvers [#14895](https://github.com/openshift/console/pull/14895)
* [OCPBUGS-52864](https://issues.redhat.com/browse/OCPBUGS-52864): Edit form for key/value secrets should be showing decoded base64 values. [#14852](https://github.com/openshift/console/pull/14852)
* [ODC-7773](https://issues.redhat.com/browse/ODC-7773): Add e2e tests for Favorites feature [#14802](https://github.com/openshift/console/pull/14802)
* [CONSOLE-4437](https://issues.redhat.com/browse/CONSOLE-4437): Add CSP test to the test-prow-e2e.sh [#14858](https://github.com/openshift/console/pull/14858)
* [RHSTOR-6927](https://issues.redhat.com/browse/RHSTOR-6927): Removes LSO static plugin from console [#14740](https://github.com/openshift/console/pull/14740)
* [OCPBUGS-53119](https://issues.redhat.com/browse/OCPBUGS-53119): Add support for extensibility in SnapshotClass and StorageClass pages [#14878](https://github.com/openshift/console/pull/14878)
* [OCPBUGS-52489](https://issues.redhat.com/browse/OCPBUGS-52489): Fixed the typo 'enivornments' on tour page [#14857](https://github.com/openshift/console/pull/14857)
* [CONSOLE-4081](https://issues.redhat.com/browse/CONSOLE-4081): Refactor EditSecret component [#14853](https://github.com/openshift/console/pull/14853)
* [OCPBUGS-53030](https://issues.redhat.com/browse/OCPBUGS-53030): Fix type-only dynamic module import build warnings for plugins [#14861](https://github.com/openshift/console/pull/14861)
* [CONSOLE-3960](https://issues.redhat.com/browse/CONSOLE-3960): Migrate `react-helmet` to `react-helmet-async` [#14876](https://github.com/openshift/console/pull/14876)
* [CONSOLE-3247](https://issues.redhat.com/browse/CONSOLE-3247): Remove `react-measure` [#14844](https://github.com/openshift/console/pull/14844)
* [OCPBUGS-34737](https://issues.redhat.com/browse/OCPBUGS-34737): Disable pipeline ci tests due to failure in task creation [#14893](https://github.com/openshift/console/pull/14893)
* [OCPBUGS-53103](https://issues.redhat.com/browse/OCPBUGS-53103): Apply plugin-api-changed label to plugin SDK shared modules [#14872](https://github.com/openshift/console/pull/14872)
* [ODC-7776](https://issues.redhat.com/browse/ODC-7776): Add getting started alert [#14830](https://github.com/openshift/console/pull/14830)
* [ODC-7766](https://issues.redhat.com/browse/ODC-7766): Test updates pertaining to perspective merge [#14717](https://github.com/openshift/console/pull/14717)
* [CONSOLE-4515](https://issues.redhat.com/browse/CONSOLE-4515), [CONSOLE-4516](https://issues.redhat.com/browse/CONSOLE-4516), [CONSOLE-4517](https://issues.redhat.com/browse/CONSOLE-4517): Update `react-modal`, `react-tagsinput` [#14874](https://github.com/openshift/console/pull/14874)
* [OCPBUGS-53118](https://issues.redhat.com/browse/OCPBUGS-53118): Include init containers in readiness count if ready and started is true [#14877](https://github.com/openshift/console/pull/14877)
* [CONSOLE-4461](https://issues.redhat.com/browse/CONSOLE-4461): Notification drawer move to Page props, fixing the small overlap on the notification drawer [#14723](https://github.com/openshift/console/pull/14723)
* [OCPBUGS-45847](https://issues.redhat.com/browse/OCPBUGS-45847): Remove barrel file references in static plugin `exposedModules` [#14683](https://github.com/openshift/console/pull/14683)
* [OCPBUGS-52589](https://issues.redhat.com/browse/OCPBUGS-52589): Fix hooks in `CaptureTelemetry` [#14870](https://github.com/openshift/console/pull/14870)
* [CONSOLE-3414](https://issues.redhat.com/browse/CONSOLE-3414): Fix flaky `Loading` tests [#14873](https://github.com/openshift/console/pull/14873)
* [OCPBUGS-53047](https://issues.redhat.com/browse/OCPBUGS-53047): Disable guided tour in admin perspective [#14866](https://github.com/openshift/console/pull/14866)
* [OCPBUGS-52166](https://issues.redhat.com/browse/OCPBUGS-52166): Fix sort function on Access review table [#14848](https://github.com/openshift/console/pull/14848)
* [OCPBUGS-52589](https://issues.redhat.com/browse/OCPBUGS-52589): update @types/react to v17, use new JSX transform [#14864](https://github.com/openshift/console/pull/14864)
* [ODC-7775](https://issues.redhat.com/browse/ODC-7775): Update content in Getting started resources on cluster and project overview page [#14829](https://github.com/openshift/console/pull/14829)
* [OCPBUGS-52325](https://issues.redhat.com/browse/OCPBUGS-52325): fix Node Logs toolbar layout at mobile [#14836](https://github.com/openshift/console/pull/14836)
* [CONSOLE-4430](https://issues.redhat.com/browse/CONSOLE-4430): Content Security Policy E2E testing with Puppeteer & Chrome [#14675](https://github.com/openshift/console/pull/14675)
* [CONSOLE-3414](https://issues.redhat.com/browse/CONSOLE-3414): Replace `Loading` with PF `Spinner` [#14842](https://github.com/openshift/console/pull/14842)
* [ODC-7727](https://issues.redhat.com/browse/ODC-7727): Add hover effect to favourites icon [#14839](https://github.com/openshift/console/pull/14839)
* [CONSOLE-4504](https://issues.redhat.com/browse/CONSOLE-4504): set LogViewer theme using console's theme [#14827](https://github.com/openshift/console/pull/14827)
* [OCPBUGS-48491](https://issues.redhat.com/browse/OCPBUGS-48491): Namespace is not persisting when switching to developer view from the topology page of admin page [#14812](https://github.com/openshift/console/pull/14812)
* [OCPBUGS-49348](https://issues.redhat.com/browse/OCPBUGS-49348): Fix Secret form drag and drop issue [#14798](https://github.com/openshift/console/pull/14798)
* [OCPBUGS-37101](https://issues.redhat.com/browse/OCPBUGS-37101): Remove logoutOpenShift method call [#14658](https://github.com/openshift/console/pull/14658)
* [OCPBUGS-52316](https://issues.redhat.com/browse/OCPBUGS-52316): enable clicking outside NodeLogs Selects to close them [#14826](https://github.com/openshift/console/pull/14826)
* [OCPBUGS-52214](https://issues.redhat.com/browse/OCPBUGS-52214): add missing v5 patternfly-addons.scss and patternfly-charts.scss styles [#14813](https://github.com/openshift/console/pull/14813)
* [CONSOLE-4409](https://issues.redhat.com/browse/CONSOLE-4409): Update monaco theming and sidebar logic [#14835](https://github.com/openshift/console/pull/14835)
* [CONSOLE-4503](https://issues.redhat.com/browse/CONSOLE-4503): Replace custom Banner with PatternFly equivalent [#14825](https://github.com/openshift/console/pull/14825)
* [OCPBUGS-52298](https://issues.redhat.com/browse/OCPBUGS-52298): Add breadcrumbs to ODC Project details page [#14824](https://github.com/openshift/console/pull/14824)
* [OCPBUGS-51372](https://issues.redhat.com/browse/OCPBUGS-51372): Filter 'Name' on resource list page doesn't align well when language is set to Chinese/Japanese/Korean [#14822](https://github.com/openshift/console/pull/14822)
* [ODC-7727](https://issues.redhat.com/browse/ODC-7727): Favoriting page in the Console admin perspective [#14765](https://github.com/openshift/console/pull/14765)
* [OCPBUGS-51355](https://issues.redhat.com/browse/OCPBUGS-51355): VolumeSnapshots are not displayed in OpenShift Web Console [#14820](https://github.com/openshift/console/pull/14820)
* [CONSOLE-4498](https://issues.redhat.com/browse/CONSOLE-4498): Replace checkboxes with Switch in ResourceLog [#14815](https://github.com/openshift/console/pull/14815)
* [OCPBUGS-30973](https://issues.redhat.com/browse/OCPBUGS-30973): Remove @ts-ignore comment missed in #14680 [#14814](https://github.com/openshift/console/pull/14814)
* [CONSOLE-4496](https://issues.redhat.com/browse/CONSOLE-4496): Replace custom Checkbox filter with PatternFly Switch [#14807](https://github.com/openshift/console/pull/14807)
* [OCPBUGS-51037](https://issues.redhat.com/browse/OCPBUGS-51037): Update the monitoring topic used by the console team [#14781](https://github.com/openshift/console/pull/14781)
* [OCPBUGS-50650](https://issues.redhat.com/browse/OCPBUGS-50650): Retain original path when detecting perspective [#14810](https://github.com/openshift/console/pull/14810)
* [CONSOLE-4407](https://issues.redhat.com/browse/CONSOLE-4407), [CONSOLE-4409](https://issues.redhat.com/browse/CONSOLE-4409): Update monaco and YAML language server, use PF6 CodeEditor [#14663](https://github.com/openshift/console/pull/14663)
* [OCPBUGS-51076](https://issues.redhat.com/browse/OCPBUGS-51076): Console UI Displays Incorrect Subscription Values [#14790](https://github.com/openshift/console/pull/14790)
* [CONSOLE-4399](https://issues.redhat.com/browse/CONSOLE-4399): Added 'createdTime' in Jobs.tsx [#14786](https://github.com/openshift/console/pull/14786)
* [OCPBUGS-48413](https://issues.redhat.com/browse/OCPBUGS-48413): Sorted Links based on OS in CLI [#14819](https://github.com/openshift/console/pull/14819)
* [Full changelog](https://github.com/openshift/console/compare/e487b63cf0934c4c4f61aab5b5260f935bf070b6...2fb70a889d3607afcd73f7ca77f9155a0709b3cb)
### [console-operator](https://github.com/openshift/console-operator/tree/b6949a5f482005f25095b0c0dc68460e3873dffd)
* [ODC-7780](https://issues.redhat.com/browse/ODC-7780): update quick starts to work in the converged perspective [#977](https://github.com/openshift/console-operator/pull/977)
* [OCPBUGS-55082](https://issues.redhat.com/browse/OCPBUGS-55082): Revert "Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads" [#979](https://github.com/openshift/console-operator/pull/979)
* [CONSOLE-4523](https://issues.redhat.com/browse/CONSOLE-4523): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#976](https://github.com/openshift/console-operator/pull/976)
* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023): Implement a quickstart for netobserv operator [#955](https://github.com/openshift/console-operator/pull/955)
* [CONSOLE-4481](https://issues.redhat.com/browse/CONSOLE-4481): Add additional CSP test [#975](https://github.com/openshift/console-operator/pull/975)
* [OCPBUGS-45514](https://issues.redhat.com/browse/OCPBUGS-45514): Report email_domain to telemetry [#971](https://github.com/openshift/console-operator/pull/971)
* [CONSOLE-4481](https://issues.redhat.com/browse/CONSOLE-4481): Add junit generation for unit and e2e testing [#974](https://github.com/openshift/console-operator/pull/974)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#973](https://github.com/openshift/console-operator/pull/973)
* [NETOBSERV-2029](https://issues.redhat.com/browse/NETOBSERV-2029): add netobserv ConsoleCLIDownload [#958](https://github.com/openshift/console-operator/pull/958)
* [OCPBUGS-53164](https://issues.redhat.com/browse/OCPBUGS-53164): Add annotations to Enable developer perspective quick start to include in the console quick starts [#970](https://github.com/openshift/console-operator/pull/970)
* [ODC-7723](https://issues.redhat.com/browse/ODC-7723): Add quick start to enable developer perspective [#968](https://github.com/openshift/console-operator/pull/968)
* [CONSOLE-4508](https://issues.redhat.com/browse/CONSOLE-4508): Enable CSP e2e test [#969](https://github.com/openshift/console-operator/pull/969)
* [OCPBUGS-51256](https://issues.redhat.com/browse/OCPBUGS-51256): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#965](https://github.com/openshift/console-operator/pull/965)
* [Full changelog](https://github.com/openshift/console-operator/compare/ef22ce9089e2510fb7af58756625cc4b3eba65a9...b6949a5f482005f25095b0c0dc68460e3873dffd)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/b09f487cf0529098b2065ca169ae85ccec955796)
* [OCPBUGS-37212](https://issues.redhat.com/browse/OCPBUGS-37212): Upstream sync 15042025 [#183](https://github.com/openshift/containernetworking-plugins/pull/183)
* [OCPBUGS-53198](https://issues.redhat.com/browse/OCPBUGS-53198): Upstream sync 01-04-2025 [#180](https://github.com/openshift/containernetworking-plugins/pull/180)
* [OCPBUGS-53198](https://issues.redhat.com/browse/OCPBUGS-53198): Sync 25-03-2025 [#177](https://github.com/openshift/containernetworking-plugins/pull/177)
* [OCPBUGS-45272](https://issues.redhat.com/browse/OCPBUGS-45272): Ds merge 3/7/25 [#175](https://github.com/openshift/containernetworking-plugins/pull/175)
* [OCPBUGS-48190](https://issues.redhat.com/browse/OCPBUGS-48190): Ds merge 2/5/2025 [#173](https://github.com/openshift/containernetworking-plugins/pull/173)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...b09f487cf0529098b2065ca169ae85ccec955796)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/68986f5ba00648402ec4ca9da7303ff509689ab1)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#320](https://github.com/openshift/cloud-provider-openstack/pull/320)
* NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master [#311](https://github.com/openshift/cloud-provider-openstack/pull/311)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1be630810cd50e6162d8c4ec7c644b78b280fc07...68986f5ba00648402ec4ca9da7303ff509689ab1)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#153](https://github.com/openshift/csi-driver-nfs/pull/153)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/c0632514db5edfec16e33197729f695f255f4aac...2eb5c109dd19f5a1b84410c0952db5cfaecb2f56)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/a8175e3908635cc8357ac845a271f9e5b278c6aa)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-attacher to v4.8.1 for OCP 4.19 [#83](https://github.com/openshift/csi-external-attacher/pull/83)
* [OCPBUGS-41719](https://issues.redhat.com/browse/OCPBUGS-41719): UPSTREAM: 624: Reorder API calls after successful detach [#82](https://github.com/openshift/csi-external-attacher/pull/82)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/4d70cd88c65643e7c55f9be4f1e50f37e4e80772...a8175e3908635cc8357ac845a271f9e5b278c6aa)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 [#111](https://github.com/openshift/csi-external-provisioner/pull/111)
* [OCPBUGS-51561](https://issues.redhat.com/browse/OCPBUGS-51561): bump golang.org/x/crypto to v0.36.0 [#112](https://github.com/openshift/csi-external-provisioner/pull/112)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#113](https://github.com/openshift/csi-external-provisioner/pull/113)
* [OCPBUGS-49805](https://issues.redhat.com/browse/OCPBUGS-49805): Fix the managed-by-label getting populated with invalid value [#110](https://github.com/openshift/csi-external-provisioner/pull/110)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/7e8d9a02781931f9cb99d5000181eafb2ca684bc...9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/cca04e3957d4732fd1775e0dc2f757b78ae113a8)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-resizer to upstream v1.13.2 for OCP 4.19 [#169](https://github.com/openshift/csi-external-resizer/pull/169)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/82e58855d4e3d8b6cab92da2f89ce00279313809...cca04e3957d4732fd1775e0dc2f757b78ae113a8)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/ac82cafc95b301f67f46ee0db93720d55177a19b)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-snapshotter to v8.2.1 for OCP 4.19 [#177](https://github.com/openshift/csi-external-snapshotter/pull/177)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook [#175](https://github.com/openshift/csi-external-snapshotter/pull/175)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/1fc6ee158070b34f84a94489b33accb333714727...ac82cafc95b301f67f46ee0db93720d55177a19b)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase livenessprobe to v2.15.0 for OCP 4.19 [#71](https://github.com/openshift/csi-livenessprobe/pull/71)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e15664632460c507ef35208d21d6fa537a7cd10f...ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/d18edb3aa61e673b33ec3a114e9f7dd4136f799e)
* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase node-driver-registrat to v2.13.0 for OCP 4.19 [#78](https://github.com/openshift/csi-node-driver-registrar/pull/78)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/378f5c1b596d2b221317f603b6f7ad72c97a6930...d18edb3aa61e673b33ec3a114e9f7dd4136f799e)
### [docker-builder](https://github.com/openshift/builder/tree/f2e5d60196778fd5452b345d93fc821218e3d2f3)
* [OCPBUGS-45492](https://issues.redhat.com/browse/OCPBUGS-45492): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 [#467](https://github.com/openshift/builder/pull/467)
* [OCPBUGS-43812](https://issues.redhat.com/browse/OCPBUGS-43812): Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 [#458](https://github.com/openshift/builder/pull/458)
* [Full changelog](https://github.com/openshift/builder/compare/f980274a6976bed3dc70547062d60aa5fff019cb...f2e5d60196778fd5452b345d93fc821218e3d2f3)
### [docker-registry](https://github.com/openshift/image-registry/tree/59376a751cdc4c936b22aa228bf2ceb889b471f3)
* [IR-522](https://issues.redhat.com/browse/IR-522): disable aws region check [#425](https://github.com/openshift/image-registry/pull/425)
* [Full changelog](https://github.com/openshift/image-registry/compare/1b1c80a924afac2ed34b22712464a78a407f8bcf...59376a751cdc4c936b22aa228bf2ceb889b471f3)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/686fdac595884ade83fef7b2b9c41169bf3fcb21)
* test/e2e: adapt for layered node image (#167) [#167](https://github.com/openshift/driver-toolkit/pull/167)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/81c6fa20373889d59fe6af38fa9b05f4817800bf...686fdac595884ade83fef7b2b9c41169bf3fcb21)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/85353bb936a289b8b817f7b437afacdf7458c667)
* [OCPBUGS-53096](https://issues.redhat.com/browse/OCPBUGS-53096): Build openshift container based on 4.19 image [#89](https://github.com/openshift/egress-router-cni/pull/89)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/3193a756d60e14f7139992e2e42b7036955652e7...85353bb936a289b8b817f7b437afacdf7458c667)
### [etcd](https://github.com/openshift/etcd/tree/a5421dfe551a2e9c911a75062a4cdeb7473f5c26)
* [ETCD-726](https://issues.redhat.com/browse/ETCD-726): Rebase etcd 3.5.21 openshift 4.19 [#324](https://github.com/openshift/etcd/pull/324)
* [OCPBUGS-52181](https://issues.redhat.com/browse/OCPBUGS-52181): Ensure cluster id changes during force-new-cluster [#313](https://github.com/openshift/etcd/pull/313)
* [OCPBUGS-50510](https://issues.redhat.com/browse/OCPBUGS-50510): Add configurable option for hardware-related timeout delay [#311](https://github.com/openshift/etcd/pull/311)
* [OCPBUGS-45488](https://issues.redhat.com/browse/OCPBUGS-45488): Updating ose-etcd-container image to be consistent with ART for 4.19 [#306](https://github.com/openshift/etcd/pull/306)
* [ETCD-717](https://issues.redhat.com/browse/ETCD-717): Rebase etcd 3.5.19 openshift 4.19 [#315](https://github.com/openshift/etcd/pull/315)
* [Full changelog](https://github.com/openshift/etcd/compare/e9234c8be833630785710e02700ffbffb63b7952...a5421dfe551a2e9c911a75062a4cdeb7473f5c26)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8fba88aad6122e8468897b35da4288c90d607609)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#240](https://github.com/openshift/cluster-api-provider-gcp/pull/240)
* [OCPCLOUD-2856](https://issues.redhat.com/browse/OCPCLOUD-2856): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master [#239](https://github.com/openshift/cluster-api-provider-gcp/pull/239)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/b5ba9893fd99c1eefd3eb8338af950e24b20c6fd...8fba88aad6122e8468897b35da4288c90d607609)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/bbe620874dee86ea85b93562e9f39e69594f7bf1)
* [CORS-3906](https://issues.redhat.com/browse/CORS-3906): Update MAPI GCP Provider to use custom GCP endpoints [#111](https://github.com/openshift/machine-api-provider-gcp/pull/111)
* [OCPCLOUD-2882](https://issues.redhat.com/browse/OCPCLOUD-2882), [OCPCLOUD-2889](https://issues.redhat.com/browse/OCPCLOUD-2889): Provision AMD SEV-SNP and Intel TDX confidential instances [#110](https://github.com/openshift/machine-api-provider-gcp/pull/110)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/ce37abfd4d6c89a9e9616093baba298d1ce6ea35...bbe620874dee86ea85b93562e9f39e69594f7bf1)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3aeac35b36ea59188761c2980451217b2099e5da)
* [OCPBUGS-39258](https://issues.redhat.com/browse/OCPBUGS-39258): UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs [#77](https://github.com/openshift/gcp-pd-csi-driver/pull/77)
* [STOR-2257](https://issues.redhat.com/browse/STOR-2257): Rebase to upstream v1.17.4 for OCP 4.19 [#75](https://github.com/openshift/gcp-pd-csi-driver/pull/75)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8e67ea7adee6dd296eb92c80b086a68c9b1e3dfb...3aeac35b36ea59188761c2980451217b2099e5da)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1)
* [OCPBUGS-53451](https://issues.redhat.com/browse/OCPBUGS-53451): enable VolumeAttributesClass [#145](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/145)
* [OCPBUGS-54336](https://issues.redhat.com/browse/OCPBUGS-54336): Bump library-go [#144](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/144)
* [CORS-3911](https://issues.redhat.com/browse/CORS-3911): Add custom endpoint args from infrastructure [#141](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/141)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#140](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/140)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#139](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/139)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/c08894abd5c8080d90fc581df72adcc1a4c99f2d...44c74f24fba97b4afdbac55c9e77eb50eb21a4d1)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/f6cfe0c54a1fa9314c65e30c613df641c7226ed0)
* [OCPBUGS-55265](https://issues.redhat.com/browse/OCPBUGS-55265): Bump 1.32.4 [#2275](https://github.com/openshift/kubernetes/pull/2275)
* [OCPBUGS-37706](https://issues.redhat.com/browse/OCPBUGS-37706): allow TLS1.3 or modern profile to be specified [#2135](https://github.com/openshift/kubernetes/pull/2135)
* [OCPBUGS-53249](https://issues.redhat.com/browse/OCPBUGS-53249): skip UDP LoadBalancer on external [#2247](https://github.com/openshift/kubernetes/pull/2247)
* [OCPBUGS-54426](https://issues.redhat.com/browse/OCPBUGS-54426): Fix implementation of ContainsCIDR to allow non-equal addresses [#2263](https://github.com/openshift/kubernetes/pull/2263)
* [OCPBUGS-52410](https://issues.redhat.com/browse/OCPBUGS-52410): Propagate error when creating CustomResourceStorage instead of panicking [#2216](https://github.com/openshift/kubernetes/pull/2216)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): fix OVNKubernetes network skips [#2256](https://github.com/openshift/kubernetes/pull/2256)
* [STOR-2285](https://issues.redhat.com/browse/STOR-2285): Update group snapshot test rules [#2254](https://github.com/openshift/kubernetes/pull/2254)
* [OCPBUGS-54339](https://issues.redhat.com/browse/OCPBUGS-54339): UPSTREAM: 129808: e2e: bump port-forward timeout [#2257](https://github.com/openshift/kubernetes/pull/2257)
* [TRT-1836](https://issues.redhat.com/browse/TRT-1836): UPSTREAM: <carry>: remove old k8s-tests external binary [#2178](https://github.com/openshift/kubernetes/pull/2178)
* [OCPBUGS-45273](https://issues.redhat.com/browse/OCPBUGS-45273): Properly annotate networking skip according to Jira ticket [#2235](https://github.com/openshift/kubernetes/pull/2235)
* [OCPBUGS-53014](https://issues.redhat.com/browse/OCPBUGS-53014): Bump 1.32.3 [#2241](https://github.com/openshift/kubernetes/pull/2241)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): translate test annotations to use: `include`/`exclude` CEL, labels, filtering [#2215](https://github.com/openshift/kubernetes/pull/2215)
* [STOR-2285](https://issues.redhat.com/browse/STOR-2285): UPSTREAM: <carry>: Add volume group snapshot test driver [#2232](https://github.com/openshift/kubernetes/pull/2232)
* [OCPBUGS-44693](https://issues.redhat.com/browse/OCPBUGS-44693): Revert "disable ResilientWatchCacheInitialization feature" [#2192](https://github.com/openshift/kubernetes/pull/2192)
* [OCPBUGS-52477](https://issues.redhat.com/browse/OCPBUGS-52477): Revert #2229: Initialize testContext before enumerating tests [#2236](https://github.com/openshift/kubernetes/pull/2236)
* NO-JIRA: Initialize testContext before enumerating tests [#2229](https://github.com/openshift/kubernetes/pull/2229)
* UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test [#2231](https://github.com/openshift/kubernetes/pull/2231)
* [OCPBUGS-45274](https://issues.redhat.com/browse/OCPBUGS-45274): UPSTREAM: 130097: Modify how to check the status [#2228](https://github.com/openshift/kubernetes/pull/2228)
* [Full changelog](https://github.com/openshift/kubernetes/compare/c3a6a36c352ab7a0616fd1e6ffedaf872b4aba21...f6cfe0c54a1fa9314c65e30c613df641c7226ed0)
### [hypershift](https://github.com/openshift/hypershift/tree/bf350e52e7b5e1e65ed29feb0640c6f82f876561)
* [OCPBUGS-55927](https://issues.redhat.com/browse/OCPBUGS-55927): Fix Konflux enterprise contract violations [#6126](https://github.com/openshift/hypershift/pull/6126)
* [OCPBUGS-55749](https://issues.redhat.com/browse/OCPBUGS-55749): Fix mce-2.9 konflux pipelines [#6117](https://github.com/openshift/hypershift/pull/6117)
* Red Hat Konflux update hypershift-cli-mce-29 [#6104](https://github.com/openshift/hypershift/pull/6104)
* [HYPBLD-642](https://issues.redhat.com/browse/HYPBLD-642): konflux build hcp cli [#6072](https://github.com/openshift/hypershift/pull/6072)
* [OCPBUGS-53206](https://issues.redhat.com/browse/OCPBUGS-53206): Use a CPO image label to determine whether to run expired cert remediation [#5943](https://github.com/openshift/hypershift/pull/5943)
* [OCPBUGS-55433](https://issues.redhat.com/browse/OCPBUGS-55433): Add control plane pull secret reference to control-plane-operator SA [#6092](https://github.com/openshift/hypershift/pull/6092)
* [OCPBUGS-44439](https://issues.redhat.com/browse/OCPBUGS-44439): Add proxy trustedCA to ignition config [#6053](https://github.com/openshift/hypershift/pull/6053)
* [OCPBUGS-53082](https://issues.redhat.com/browse/OCPBUGS-53082): Skip AWS cleanup check for 4.14 and earlier [#6069](https://github.com/openshift/hypershift/pull/6069)
* [HOSTEDCP-2254](https://issues.redhat.com/browse/HOSTEDCP-2254): Fix Karpenter deployment restarting [#6009](https://github.com/openshift/hypershift/pull/6009)
* NO-JIRA: Add e2e flags to test Azure KMS [#6076](https://github.com/openshift/hypershift/pull/6076)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Support KMSv2 encryption encryption for ARO HCP, with MIv3 [#6048](https://github.com/openshift/hypershift/pull/6048)
* NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault [#5754](https://github.com/openshift/hypershift/pull/5754)
* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Pass featuregates for ocm and oapi in cpov2 [#6071](https://github.com/openshift/hypershift/pull/6071)
* [HOSTEDCP-2059](https://issues.redhat.com/browse/HOSTEDCP-2059): Support capacity reservation in NodePool API [#5972](https://github.com/openshift/hypershift/pull/5972)
* NO-JIRA: Fix hostedcluster_controller unit test for featuregate job [#6067](https://github.com/openshift/hypershift/pull/6067)
* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Pass featuregates to ocm and oapi [#6068](https://github.com/openshift/hypershift/pull/6068)
* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Use feature flags from release payload for control plane workloads [#6060](https://github.com/openshift/hypershift/pull/6060)
* [CNTRLPLANE-711](https://issues.redhat.com/browse/CNTRLPLANE-711): transition admissionregistration from v1beta1 to v1 [#6005](https://github.com/openshift/hypershift/pull/6005)
* [AUTOSCALE-127](https://issues.redhat.com/browse/AUTOSCALE-127): fix e2e autonode drift test [#6062](https://github.com/openshift/hypershift/pull/6062)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Enable MIv3 for Ingress [#6058](https://github.com/openshift/hypershift/pull/6058)
* NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions [#5946](https://github.com/openshift/hypershift/pull/5946)
* [OCPBUGS-54863](https://issues.redhat.com/browse/OCPBUGS-54863): Add annotation to configure KAS goaway-chance [#6019](https://github.com/openshift/hypershift/pull/6019)
* [AUTOSCALE-193](https://issues.redhat.com/browse/AUTOSCALE-193): Use payload karpenter image if present, otherwise don't [#6029](https://github.com/openshift/hypershift/pull/6029)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 [#6056](https://github.com/openshift/hypershift/pull/6056)
* NO-JIRA: Add cpo container sync to verify job [#6051](https://github.com/openshift/hypershift/pull/6051)
* [OCPBUGS-54867](https://issues.redhat.com/browse/OCPBUGS-54867): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6021](https://github.com/openshift/hypershift/pull/6021)
* [OCPBUGS-54810](https://issues.redhat.com/browse/OCPBUGS-54810): Don't check if olm images exist if guest cluster [#5982](https://github.com/openshift/hypershift/pull/5982)
* [OCPBUGS-54819](https://issues.redhat.com/browse/OCPBUGS-54819): Update OpenShift apiserver liveness and readiness probe endpoints to … [#6016](https://github.com/openshift/hypershift/pull/6016)
* NO-JIRA: Add README.md to docs folder [#6050](https://github.com/openshift/hypershift/pull/6050)
* NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary [#6043](https://github.com/openshift/hypershift/pull/6043)
* [OCPBUGS-54225](https://issues.redhat.com/browse/OCPBUGS-54225): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#5897](https://github.com/openshift/hypershift/pull/5897)
* NO-JIRA: Improve API docs for configuration.Image [#6034](https://github.com/openshift/hypershift/pull/6034)
* Revert "Revert "CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure"" [#6012](https://github.com/openshift/hypershift/pull/6012)
* [OCPBUGS-54533](https://issues.redhat.com/browse/OCPBUGS-54533): Update DNS names for ovn-kubernetes cp metrics [#6007](https://github.com/openshift/hypershift/pull/6007)
* [OCPBUGS-54763](https://issues.redhat.com/browse/OCPBUGS-54763): openstack/cli: only set port security when specified [#6036](https://github.com/openshift/hypershift/pull/6036)
* NO-JIRA: Bump o/api version to 4.19 tag [#6035](https://github.com/openshift/hypershift/pull/6035)
* [OCPBUGS-54916](https://issues.redhat.com/browse/OCPBUGS-54916): Set Azure KMS Configuration to v2 [#6027](https://github.com/openshift/hypershift/pull/6027)
* [OCPBUGS-54309](https://issues.redhat.com/browse/OCPBUGS-54309): Drop isIP CEL check [#6032](https://github.com/openshift/hypershift/pull/6032)
* [AUTOSCALE-127](https://issues.redhat.com/browse/AUTOSCALE-127): allow karpenter-provider-aws image to be overriden by hcp annotation [#5999](https://github.com/openshift/hypershift/pull/5999)
* [CNTRLPLANE-217](https://issues.redhat.com/browse/CNTRLPLANE-217): Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate [#5968](https://github.com/openshift/hypershift/pull/5968)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove snapshot webhook [#6004](https://github.com/openshift/hypershift/pull/6004)
* [OCPBUGS-54763](https://issues.redhat.com/browse/OCPBUGS-54763): openstack: set port security only if explicitly specified [#6015](https://github.com/openshift/hypershift/pull/6015)
* [OCPBUGS-52661](https://issues.redhat.com/browse/OCPBUGS-52661): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#5798](https://github.com/openshift/hypershift/pull/5798)
* NO-JIRA: Bump CAPZ to v1.19.2 [#6018](https://github.com/openshift/hypershift/pull/6018)
* NO-JIRA: update konflux references [#5987](https://github.com/openshift/hypershift/pull/5987)
* [OCPBUGS-48540](https://issues.redhat.com/browse/OCPBUGS-48540): Mcd proxy [#6011](https://github.com/openshift/hypershift/pull/6011)
* [AUTOSCALE-44](https://issues.redhat.com/browse/AUTOSCALE-44): add autonode karpenter drift hcp upgrade e2e test [#5870](https://github.com/openshift/hypershift/pull/5870)
* [OCPBUGS-54602](https://issues.redhat.com/browse/OCPBUGS-54602): Set KAS GOMEMLIMIT node label to what OSDFM expects [#5975](https://github.com/openshift/hypershift/pull/5975)
* NO-JIRA: Add polling for kas-bootstrap kas network requests [#5990](https://github.com/openshift/hypershift/pull/5990)
* [OCPBUGS-53261](https://issues.redhat.com/browse/OCPBUGS-53261): Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs [#5875](https://github.com/openshift/hypershift/pull/5875)
* [OCPBUGS-41853](https://issues.redhat.com/browse/OCPBUGS-41853): Add documentation for API Server custom certificate in HCP [#6001](https://github.com/openshift/hypershift/pull/6001)
* [OCPBUGS-54178](https://issues.redhat.com/browse/OCPBUGS-54178): Add missing servicemonitors and prometheusrules permissions for non-OVN [#5893](https://github.com/openshift/hypershift/pull/5893)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695): test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 [#5984](https://github.com/openshift/hypershift/pull/5984)
* NO-JIRA: Add OWNERS to kas-bootstrap [#5991](https://github.com/openshift/hypershift/pull/5991)
* [CNTRLPLANE-233](https://issues.redhat.com/browse/CNTRLPLANE-233): Add --kas-dns-name CLI flag to consume KubeAPIServerDNSName API [#5969](https://github.com/openshift/hypershift/pull/5969)
* [CNTRLPLANE-334](https://issues.redhat.com/browse/CNTRLPLANE-334): openshift/api dependency bumps [#5971](https://github.com/openshift/hypershift/pull/5971)
* NO-JIRA: Enable ppc64le builds [#5985](https://github.com/openshift/hypershift/pull/5985)
* [OSASINFRA-3732](https://issues.redhat.com/browse/OSASINFRA-3732): openstack: Sync CA cert to new key [#5702](https://github.com/openshift/hypershift/pull/5702)
* chore(deps): update golang docker tag to v1.24 [#5616](https://github.com/openshift/hypershift/pull/5616)
* [OCPBUGS-54431](https://issues.redhat.com/browse/OCPBUGS-54431): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5942](https://github.com/openshift/hypershift/pull/5942)
* NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile [#5966](https://github.com/openshift/hypershift/pull/5966)
* [OCPBUGS-52983](https://issues.redhat.com/browse/OCPBUGS-52983): Add check for expected conditions before running NodePool tests [#5970](https://github.com/openshift/hypershift/pull/5970)
* NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure [#5967](https://github.com/openshift/hypershift/pull/5967)
* [OCPBUGS-13292](https://issues.redhat.com/browse/OCPBUGS-13292): Add functionality to limit CAPI CRD installation on HO installation [#5949](https://github.com/openshift/hypershift/pull/5949)
* [OCPBUGS-54439](https://issues.redhat.com/browse/OCPBUGS-54439): Change KASGoMemLimit to a string pointer type [#5965](https://github.com/openshift/hypershift/pull/5965)
* NO-JIRA: Red Hat Konflux update hypershift-operator-main [#5974](https://github.com/openshift/hypershift/pull/5974)
* NO-JIRA: Add doc on SecretProviderClass for managed Azure [#5892](https://github.com/openshift/hypershift/pull/5892)
* [OCPBUGS-50562](https://issues.redhat.com/browse/OCPBUGS-50562): Sync RBAC for attaching volumes on VM level [#5831](https://github.com/openshift/hypershift/pull/5831)
* [CNTRLPLANE-303](https://issues.redhat.com/browse/CNTRLPLANE-303): [CPOv2 Refactor] Refactor ignition into cpov2 [#5868](https://github.com/openshift/hypershift/pull/5868)
* NO-JIRA: Create token Secret for dev cluster explicitly [#5523](https://github.com/openshift/hypershift/pull/5523)
* [OCPBUGS-52984](https://issues.redhat.com/browse/OCPBUGS-52984): annotate AWSEndpointServices with HostedClusterAnnotation [#5960](https://github.com/openshift/hypershift/pull/5960)
* [OCPBUGS-53403](https://issues.redhat.com/browse/OCPBUGS-53403): Remove synced annotations from HCP when they are removed from HC [#5879](https://github.com/openshift/hypershift/pull/5879)
* NO-JIRA: set default expriationDate tag in AWS if not set [#5951](https://github.com/openshift/hypershift/pull/5951)
* NO-JIRA: chore: Remove Azure autorest dependency [#5917](https://github.com/openshift/hypershift/pull/5917)
* [CNTRLPLANE-378](https://issues.redhat.com/browse/CNTRLPLANE-378): Run kas-bootstrap binary for cpov2 [#5947](https://github.com/openshift/hypershift/pull/5947)
* NO-JIRA: Add version check for CAPI flag [#5911](https://github.com/openshift/hypershift/pull/5911)
* [ARO-15578](https://issues.redhat.com/browse/ARO-15578): add disable cluster capabilities flag to cluster create cmd [#5775](https://github.com/openshift/hypershift/pull/5775)
* NO-JIRA: chore: Bump CAPZ to v1.19.1 [#5916](https://github.com/openshift/hypershift/pull/5916)
* [CNTRLPLANE-378](https://issues.redhat.com/browse/CNTRLPLANE-378): Move bootstrap apply bash into kas-bootstrap binary [#5937](https://github.com/openshift/hypershift/pull/5937)
* NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test [#5939](https://github.com/openshift/hypershift/pull/5939)
* NO-JIRA: Remove ppc64le from HO tekton files [#5924](https://github.com/openshift/hypershift/pull/5924)
* [CNTRLPLANE-366](https://issues.redhat.com/browse/CNTRLPLANE-366): Create Azure role assignments in the Azure HC CLI [#5896](https://github.com/openshift/hypershift/pull/5896)
* [OCPBUGS-53904](https://issues.redhat.com/browse/OCPBUGS-53904): bump golang-jwt v4 and v5 [#5904](https://github.com/openshift/hypershift/pull/5904)
* [CNTRLPLANE-350](https://issues.redhat.com/browse/CNTRLPLANE-350): add NodePool minor version compatibility check [#5873](https://github.com/openshift/hypershift/pull/5873)
* NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … [#5782](https://github.com/openshift/hypershift/pull/5782)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5918](https://github.com/openshift/hypershift/pull/5918)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Enable MIv3 for azure file csi driver [#5915](https://github.com/openshift/hypershift/pull/5915)
* NO-JIRA: Revert "OCPBUGS-50915: Disable capi machineset preflights" [#5910](https://github.com/openshift/hypershift/pull/5910)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Fix CNCC RG Permissions & RBAC [#5903](https://github.com/openshift/hypershift/pull/5903)
* NO-JIRA: Remove TODO comment for AzureProviderConfig [#5838](https://github.com/openshift/hypershift/pull/5838)
* [OCPBUGS-46379](https://issues.redhat.com/browse/OCPBUGS-46379): Kas bootstrap bin [#5871](https://github.com/openshift/hypershift/pull/5871)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Enable MIv3 for CAPZ [#5825](https://github.com/openshift/hypershift/pull/5825)
* [ARO-15229](https://issues.redhat.com/browse/ARO-15229): add e2e tests for image registry capability [#5810](https://github.com/openshift/hypershift/pull/5810)
* [CNTRLPLANE-336](https://issues.redhat.com/browse/CNTRLPLANE-336): [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 [#5856](https://github.com/openshift/hypershift/pull/5856)
* [OCPBUGS-50915](https://issues.redhat.com/browse/OCPBUGS-50915): Disable capi machineset preflights [#5653](https://github.com/openshift/hypershift/pull/5653)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Authenticate to Azure only once in CPO [#5862](https://github.com/openshift/hypershift/pull/5862)
* [OCPBUGS-52190](https://issues.redhat.com/browse/OCPBUGS-52190): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#5876](https://github.com/openshift/hypershift/pull/5876)
* NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed [#5859](https://github.com/openshift/hypershift/pull/5859)
* [OCPBUGS-53263](https://issues.redhat.com/browse/OCPBUGS-53263): Fixed cpov2 reconciliation making no-op calls to api-server [#5861](https://github.com/openshift/hypershift/pull/5861)
* [OCPBUGS-53462](https://issues.redhat.com/browse/OCPBUGS-53462): Check for availability of individual catalog images [#5881](https://github.com/openshift/hypershift/pull/5881)
* NO-JIRA: Improve error output msg for Azure CLI role cmds [#5877](https://github.com/openshift/hypershift/pull/5877)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook [#5776](https://github.com/openshift/hypershift/pull/5776)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix KMS Azure credentials mount path [#5857](https://github.com/openshift/hypershift/pull/5857)
* [CNTRLPLANE-348](https://issues.redhat.com/browse/CNTRLPLANE-348): Konflux tagged releases [#5869](https://github.com/openshift/hypershift/pull/5869)
* [OCPBUGS-53407](https://issues.redhat.com/browse/OCPBUGS-53407): chore(deps): update konflux references [#5846](https://github.com/openshift/hypershift/pull/5846)
* NO-JIRA: feat(builds): Add area labels and OWNERS [#5872](https://github.com/openshift/hypershift/pull/5872)
* [OCPBUGS-52424](https://issues.redhat.com/browse/OCPBUGS-52424): Set shutdown watch termination grace period on kube-apiserver [#5760](https://github.com/openshift/hypershift/pull/5760)
* NO-JIRA: Add Azure scheduler doc to mkdocs [#5865](https://github.com/openshift/hypershift/pull/5865)
* [CNTRLPLANE-342](https://issues.redhat.com/browse/CNTRLPLANE-342): Add missing area for support [#5864](https://github.com/openshift/hypershift/pull/5864)
* [OCPBUGS-53050](https://issues.redhat.com/browse/OCPBUGS-53050): Handle multiple mirror entries for source [#5827](https://github.com/openshift/hypershift/pull/5827)
* [OCPBUGS-52331](https://issues.redhat.com/browse/OCPBUGS-52331): CPO v2: rollout workloads on any changes to mounted configmaps/secrets [#5767](https://github.com/openshift/hypershift/pull/5767)
* NO-JIRA: openstack: revert `OpenStackImageRetentionPolicy` + use a unique image name per Hosted Cluster [#5853](https://github.com/openshift/hypershift/pull/5853)
* Revert "CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure" [#5860](https://github.com/openshift/hypershift/pull/5860)
* [OCPBUGS-53083](https://issues.redhat.com/browse/OCPBUGS-53083): e2e: detect leader election failure in restarted pods [#5830](https://github.com/openshift/hypershift/pull/5830)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Enable MIv3 for CNO/CNCC on managed Azure [#5837](https://github.com/openshift/hypershift/pull/5837)
* [METAL-1240](https://issues.redhat.com/browse/METAL-1240): Fix kube-controller-manager and openshift-route-controller-manager services' ipFamilies wrt PreferDualStack policy [#5829](https://github.com/openshift/hypershift/pull/5829)
* [OSASINFRA-3492](https://issues.redhat.com/browse/OSASINFRA-3492): feat(openstack): leverage ORC to manage the release image [#5139](https://github.com/openshift/hypershift/pull/5139)
* [CNTRLPLANE-325](https://issues.redhat.com/browse/CNTRLPLANE-325): rootless containerized builds [#5835](https://github.com/openshift/hypershift/pull/5835)
* [CNTRLPLANE-265](https://issues.redhat.com/browse/CNTRLPLANE-265): Enable gosimple, govet, and errcheck in golangci-lint [#5759](https://github.com/openshift/hypershift/pull/5759)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix Azure KMS SecretProviderClass volume name [#5820](https://github.com/openshift/hypershift/pull/5820)
* NO-JIRA: Bump msi-dataplane dependency [#5796](https://github.com/openshift/hypershift/pull/5796)
* [OCPBUGS-52985](https://issues.redhat.com/browse/OCPBUGS-52985): filter watch events for HO AWSEndpointService reconciler [#5818](https://github.com/openshift/hypershift/pull/5818)
* NO-JIRA: Update Konflux references [#5799](https://github.com/openshift/hypershift/pull/5799)
* [ARO-14354](https://issues.redhat.com/browse/ARO-14354), [ARO-14355](https://issues.redhat.com/browse/ARO-14355), [ARO-14356](https://issues.redhat.com/browse/ARO-14356): introduce image registry capability behind feature gate [#5456](https://github.com/openshift/hypershift/pull/5456)
* [OCPBUGS-52819](https://issues.redhat.com/browse/OCPBUGS-52819): CPO Overrides for OCPBUGS-48519 [#5808](https://github.com/openshift/hypershift/pull/5808)
* [PODAUTO-324](https://issues.redhat.com/browse/PODAUTO-324): PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests [#5680](https://github.com/openshift/hypershift/pull/5680)
* [OCPBUGS-51364](https://issues.redhat.com/browse/OCPBUGS-51364): fix oc patch command on doc [#5807](https://github.com/openshift/hypershift/pull/5807)
* NO-JIRA: Fix-dependabot-bumps [#5797](https://github.com/openshift/hypershift/pull/5797)
* [OCPBUGS-52655](https://issues.redhat.com/browse/OCPBUGS-52655): Add flag to set etcd storage size [#5795](https://github.com/openshift/hypershift/pull/5795)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix KMS MIv3 Issues [#5793](https://github.com/openshift/hypershift/pull/5793)
* NO-JIRA: Disable GitHub Actions [#5812](https://github.com/openshift/hypershift/pull/5812)
* [OCPBUGS-52821](https://issues.redhat.com/browse/OCPBUGS-52821): stop using dev mode for loggers [#5801](https://github.com/openshift/hypershift/pull/5801)
* [HOSTEDCP-2237](https://issues.redhat.com/browse/HOSTEDCP-2237): Auto approve Karpenter serving CSRs [#5708](https://github.com/openshift/hypershift/pull/5708)
* [OLS-1370](https://issues.redhat.com/browse/OLS-1370): Add full aws permission list and point to it from "getting started" [#5746](https://github.com/openshift/hypershift/pull/5746)
* NO-JIRA: CPOv2 token-minter abstraction [#5769](https://github.com/openshift/hypershift/pull/5769)
* NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases [#5778](https://github.com/openshift/hypershift/pull/5778)
* [OCPBUGS-52323](https://issues.redhat.com/browse/OCPBUGS-52323): Make managed-trust-bundle optional [#5763](https://github.com/openshift/hypershift/pull/5763)
* [CNV-57648](https://issues.redhat.com/browse/CNV-57648): document how to configure descheduler [#5779](https://github.com/openshift/hypershift/pull/5779)
* NO-JIRA: Remove WI step for cluster-image-registry-operator [#5777](https://github.com/openshift/hypershift/pull/5777)
* [OTA-1405](https://issues.redhat.com/browse/OTA-1405): Add the ClusterVersionOperator API [#5569](https://github.com/openshift/hypershift/pull/5569)
* [OCPBUGS-52419](https://issues.redhat.com/browse/OCPBUGS-52419): e2e: don't call `WaitForImageRollout` in `executeNodePoolTest` [#5771](https://github.com/openshift/hypershift/pull/5771)
* [OCPBUGS-50518](https://issues.redhat.com/browse/OCPBUGS-50518): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5475](https://github.com/openshift/hypershift/pull/5475)
* [CNTRLPLANE-263](https://issues.redhat.com/browse/CNTRLPLANE-263): Remove unused CAPZ CRDs from HyperShift install [#5756](https://github.com/openshift/hypershift/pull/5756)
* NO-JIRA: speed up image builds [#5766](https://github.com/openshift/hypershift/pull/5766)
* NO-JIRA: go.mod updates from Konflux [#5761](https://github.com/openshift/hypershift/pull/5761)
* [OSASINFRA-3733](https://issues.redhat.com/browse/OSASINFRA-3733): (follow-up) deploy ORC on release payload >= 4.19 [#5749](https://github.com/openshift/hypershift/pull/5749)
* [OCPBUGS-52223](https://issues.redhat.com/browse/OCPBUGS-52223): refactor aws identity health check into new controller [#5751](https://github.com/openshift/hypershift/pull/5751)
* [OCPBUGS-50523](https://issues.redhat.com/browse/OCPBUGS-50523): Fix audit-logs container to properly handle SIGTERM [#5491](https://github.com/openshift/hypershift/pull/5491)
* NO-JIRA: Remove issues-exit flag for golangci-lint [#5762](https://github.com/openshift/hypershift/pull/5762)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Enable MIv3 for CP/CCM in managed Azure HCP [#5755](https://github.com/openshift/hypershift/pull/5755)
* NO-JIRA: Add CPO container sync check to GitHub Actions [#5753](https://github.com/openshift/hypershift/pull/5753)
* [OCPBUGS-52226](https://issues.redhat.com/browse/OCPBUGS-52226), [OCPBUGS-52227](https://issues.redhat.com/browse/OCPBUGS-52227): CVE Fix for potential denial of service in upstream libs [#5750](https://github.com/openshift/hypershift/pull/5750)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 [#5719](https://github.com/openshift/hypershift/pull/5719)
* [HOSTEDCP-2242](https://issues.redhat.com/browse/HOSTEDCP-2242): [CPOv2 Refactor] Refactor image-registry-operator [#5676](https://github.com/openshift/hypershift/pull/5676)
* [Full changelog](https://github.com/openshift/hypershift/compare/04a2b4cf9f094abd20d4bdc8ab2ad9e1e5c6e6aa...bf350e52e7b5e1e65ed29feb0640c6f82f876561)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/176b6ef1136c45b8e3cb24a48458a251deca99bc)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#80](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/80)
* [OCPBUGS-53912](https://issues.redhat.com/browse/OCPBUGS-53912): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#81](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b4596e5f90d79cd43e74a875c534c1f49575238f...176b6ef1136c45b8e3cb24a48458a251deca99bc)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3dfcfa12e31bccd7c43018e1324a391b0bc03244)
* [OCPBUGS-55038](https://issues.redhat.com/browse/OCPBUGS-55038): [IBM VPC] set offlineExpansion to false in e2e test manifest [#143](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/143)
* [OCPBUGS-54482](https://issues.redhat.com/browse/OCPBUGS-54482): Bump library-go [#142](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/142)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps for 4.19 [#141](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/141)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#140](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/140)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#137](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/137)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/4b8f2ce0a4e7f38759e8a92489950bbec5e7f181...3dfcfa12e31bccd7c43018e1324a391b0bc03244)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/989bd87446d6fcbb2d7db20c90224621fac6ddb4)
* [OCPBUGS-51864](https://issues.redhat.com/browse/OCPBUGS-51864): IBMCloud: MAPI replacing unhealthy CP nodes [#61](https://github.com/openshift/machine-api-provider-ibmcloud/pull/61)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/ebd0127ce2afc68a5eebb050154104a2e3e2bcec...989bd87446d6fcbb2d7db20c90224621fac6ddb4)
### [insights-operator](https://github.com/openshift/insights-operator/tree/b1e0f8fce485de56a28f27793fa2bcec87a72771)
* [CCXDEV-15083](https://issues.redhat.com/browse/CCXDEV-15083): Move the Insights runtime extractor feature to GA (#1081) [#1081](https://github.com/openshift/insights-operator/pull/1081)
* feat: remove the upgradeable condition (#1079) [#1079](https://github.com/openshift/insights-operator/pull/1079)
* [CCXDEV-9905](https://issues.redhat.com/browse/CCXDEV-9905): Introduce a new config option for storing archives to persistent volume (#1070) [#1070](https://github.com/openshift/insights-operator/pull/1070)
* chore: add BaiyangZhou to OWNERS file (#1080) [#1080](https://github.com/openshift/insights-operator/pull/1080)
* NO-JIRA: refactor gather commands (#1076) [#1076](https://github.com/openshift/insights-operator/pull/1076)
* NO-JIRA: feat: add gatherer name validation to gendocs (#1075) [#1075](https://github.com/openshift/insights-operator/pull/1075)
* fix: allow running enabled functions from disabled gatherer (#1077) [#1077](https://github.com/openshift/insights-operator/pull/1077)
* [Full changelog](https://github.com/openshift/insights-operator/compare/fff5851035e9b5263f0b368705830ee8bd5d76c4...b1e0f8fce485de56a28f27793fa2bcec87a72771)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/0bee2d9be935de315081be77c910a8e40204e0b8)
* Enable FIPS [#41](https://github.com/openshift/insights-runtime-extractor/pull/41)
* New runtimes tests [#40](https://github.com/openshift/insights-runtime-extractor/pull/40)
* SB 3.4.3 test app and 3.1.4 app simplified [#39](https://github.com/openshift/insights-runtime-extractor/pull/39)
* plain-java runtime sample [#38](https://github.com/openshift/insights-runtime-extractor/pull/38)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/9a254cce44b998c4c7b46fe481a85a52309894ed...0bee2d9be935de315081be77c910a8e40204e0b8)
### [ironic](https://github.com/openshift/ironic-image/tree/8a2091a6cfd25a6bc91b0714de25af904cc733ee)
* [OCPBUGS-55743](https://issues.redhat.com/browse/OCPBUGS-55743): Extract files one-by-one in logwatch [#656](https://github.com/openshift/ironic-image/pull/656)
* [METAL-1327](https://issues.redhat.com/browse/METAL-1327): Update pkgs ocp419 take2 [#651](https://github.com/openshift/ironic-image/pull/651)
* NO-ISSUE: Update dependencies for OCP 4.19, part 1 [#649](https://github.com/openshift/ironic-image/pull/649)
* NO-JIRA: Sync with upstream metal3/main 2025-03-24 [#650](https://github.com/openshift/ironic-image/pull/650)
* [METAL-1297](https://issues.redhat.com/browse/METAL-1297): Update ironic-image to the latest commit hash [#644](https://github.com/openshift/ironic-image/pull/644)
* [METAL-1299](https://issues.redhat.com/browse/METAL-1299): Do not use openstack packages [#645](https://github.com/openshift/ironic-image/pull/645)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8c8af5f8a9b048c9be30178d3ba7d1969e27d944...8a2091a6cfd25a6bc91b0714de25af904cc733ee)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/670323f3bb7d01a681a4c583d9540006ec8b871e)
* [OCPBUGS-55315](https://issues.redhat.com/browse/OCPBUGS-55315): Delay determining the hostname to put into ignition [#182](https://github.com/openshift/ironic-agent-image/pull/182)
* NO-ISSUE: Update dependencies for OCP 4.19 [#181](https://github.com/openshift/ironic-agent-image/pull/181)
* [METAL-1299](https://issues.redhat.com/browse/METAL-1299): Do not use openstack packages [#177](https://github.com/openshift/ironic-agent-image/pull/177)
* [METAL-1297](https://issues.redhat.com/browse/METAL-1297): Update commit hash of ironic-python-agent [#176](https://github.com/openshift/ironic-agent-image/pull/176)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/dafa93729195800231284a9067c0e9921236c25c...670323f3bb7d01a681a4c583d9540006ec8b871e)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/b42e7cf218c4eef071cc29e0894fe8cfaed80b7f)
* [OCPBUGS-45700](https://issues.redhat.com/browse/OCPBUGS-45700): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 [#205](https://github.com/openshift/images/pull/205)
* [OCPBUGS-45831](https://issues.redhat.com/browse/OCPBUGS-45831): Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 [#204](https://github.com/openshift/images/pull/204)
* [OCPBUGS-45405](https://issues.redhat.com/browse/OCPBUGS-45405): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 [#201](https://github.com/openshift/images/pull/201)
* [Full changelog](https://github.com/openshift/images/compare/cec03e079a8eb43ecebc1b0572260866d9453213...b42e7cf218c4eef071cc29e0894fe8cfaed80b7f)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/e3027025743b10d8a1df75afcf9c28d4ac8dbf3f)
* NO-JIRA: Add awels as approver [#59](https://github.com/openshift/kubevirt-csi-driver/pull/59)
* [OCPBUGS-50562](https://issues.redhat.com/browse/OCPBUGS-50562): Ensure unpublish works for volumes carried over upgrades [#58](https://github.com/openshift/kubevirt-csi-driver/pull/58)
* [OCPBUGS-50562](https://issues.redhat.com/browse/OCPBUGS-50562): Ensure volume stays attached through reboots [#53](https://github.com/openshift/kubevirt-csi-driver/pull/53)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...e3027025743b10d8a1df75afcf9c28d4ac8dbf3f)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/79a98238fc57ef28a122a8a3b838759de81b9a09)
* [OCPBUGS-55786](https://issues.redhat.com/browse/OCPBUGS-55786): [release-4.19] Fixes machineset paused condition nil pointer [#1368](https://github.com/openshift/machine-api-operator/pull/1368)
* [OCPBUGS-55706](https://issues.redhat.com/browse/OCPBUGS-55706): fix: use patch for machine/machineset status [#1367](https://github.com/openshift/machine-api-operator/pull/1367)
* [OCPBUGS-55424](https://issues.redhat.com/browse/OCPBUGS-55424): Added skip for when config not multi nic [#1358](https://github.com/openshift/machine-api-operator/pull/1358)
* [OCPBUGS-55461](https://issues.redhat.com/browse/OCPBUGS-55461): Fix updateMachineSetStatus nil pointer [#1360](https://github.com/openshift/machine-api-operator/pull/1360)
* Revert "SPLAT-2180: Added conformance label" [#1359](https://github.com/openshift/machine-api-operator/pull/1359)
* [OCPBUGS-55417](https://issues.redhat.com/browse/OCPBUGS-55417): Resync CRDs [#1357](https://github.com/openshift/machine-api-operator/pull/1357)
* [OCPBUGS-55083](https://issues.redhat.com/browse/OCPBUGS-55083): Updates GCP CredentialsRequest [#1353](https://github.com/openshift/machine-api-operator/pull/1353)
* [SPLAT-2180](https://issues.redhat.com/browse/SPLAT-2180): Added conformance label [#1354](https://github.com/openshift/machine-api-operator/pull/1354)
* [OCPBUGS-55025](https://issues.redhat.com/browse/OCPBUGS-55025): fix: nodelink use patch to apply machine's nodeRef [#1352](https://github.com/openshift/machine-api-operator/pull/1352)
* [SPLAT-2051](https://issues.redhat.com/browse/SPLAT-2051): implement e2e tests for vSphere multi network [#1347](https://github.com/openshift/machine-api-operator/pull/1347)
* [SPLAT-2118](https://issues.redhat.com/browse/SPLAT-2118): Update tests-extensions to pick up new vendor filtering [#1351](https://github.com/openshift/machine-api-operator/pull/1351)
* [OCPBUGS-52464](https://issues.redhat.com/browse/OCPBUGS-52464): webhook to validate marketType field [#1339](https://github.com/openshift/machine-api-operator/pull/1339)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#1346](https://github.com/openshift/machine-api-operator/pull/1346)
* [SPLAT-2060](https://issues.redhat.com/browse/SPLAT-2060): Create e2e tests for vSphere Data Disk feature [#1338](https://github.com/openshift/machine-api-operator/pull/1338)
* [OCPCLOUD-2882](https://issues.redhat.com/browse/OCPCLOUD-2882), [OCPCLOUD-2889](https://issues.redhat.com/browse/OCPCLOUD-2889): support AMD SEV_SNP and TDX confidential computing machines on GCP [#1326](https://github.com/openshift/machine-api-operator/pull/1326)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/57f828a67de95fac942304722b2cf696539f7151...79a98238fc57ef28a122a8a3b838759de81b9a09)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a9859b62f67382ee2042209f5e98b91cb5c45dff)
* [OCPBUGS-55809](https://issues.redhat.com/browse/OCPBUGS-55809): Use auto=start only for IPsec out connections [#5035](https://github.com/openshift/machine-config-operator/pull/5035)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Revert "OCPBUGS-44757: decrease leases for kubelet on azure" [#5031](https://github.com/openshift/machine-config-operator/pull/5031)
* Revert "NO-ISSUE: debug podman on PIS" [#5013](https://github.com/openshift/machine-config-operator/pull/5013)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): decrease leases for kubelet on azure [#5010](https://github.com/openshift/machine-config-operator/pull/5010)
* NO-ISSUE: debug podman on PIS [#5003](https://github.com/openshift/machine-config-operator/pull/5003)
* [MCO-1635](https://issues.redhat.com/browse/MCO-1635): Add new runbook for HighOverallControlPlaneMemory to alert [#5005](https://github.com/openshift/machine-config-operator/pull/5005)
* [OCPBUGS-55388](https://issues.redhat.com/browse/OCPBUGS-55388): MSBIC should not update windows machinesets [#5009](https://github.com/openshift/machine-config-operator/pull/5009)
* [MCO-1645](https://issues.redhat.com/browse/MCO-1645): API & client-go bumps for MCN V1 API updates [#5011](https://github.com/openshift/machine-config-operator/pull/5011)
* [MCO-1519](https://issues.redhat.com/browse/MCO-1519): Adapt MCO code to use V1 MCN API [#4992](https://github.com/openshift/machine-config-operator/pull/4992)
* [OCPBUGS-50905](https://issues.redhat.com/browse/OCPBUGS-50905): Leverage shared node.env for both AWS providerID and hostname units [#4999](https://github.com/openshift/machine-config-operator/pull/4999)
* [OCPBUGS-51273](https://issues.redhat.com/browse/OCPBUGS-51273): Don't crashloop for HAProxy init container [#4963](https://github.com/openshift/machine-config-operator/pull/4963)
* NO-JIRA: Update Envtest assets to 1.32.1 [#5002](https://github.com/openshift/machine-config-operator/pull/5002)
* [OCPBUGS-44732](https://issues.redhat.com/browse/OCPBUGS-44732): Support for br-ex with DHCP and static DNS [#4724](https://github.com/openshift/machine-config-operator/pull/4724)
* [OCPBUGS-55043](https://issues.redhat.com/browse/OCPBUGS-55043): Fix PollUntilContextTimeout in syncRenderConfig [#4987](https://github.com/openshift/machine-config-operator/pull/4987)
* [OCPBUGS-55231](https://issues.redhat.com/browse/OCPBUGS-55231): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#4995](https://github.com/openshift/machine-config-operator/pull/4995)
* [OCPBUGS-49675](https://issues.redhat.com/browse/OCPBUGS-49675), [OCPBUGS-55039](https://issues.redhat.com/browse/OCPBUGS-55039): In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL [#4986](https://github.com/openshift/machine-config-operator/pull/4986)
* [OCPBUGS-54592](https://issues.redhat.com/browse/OCPBUGS-54592): Only populate `LastFailedGeneration` & `LastFailedGenerationError` on PIS failure [#4983](https://github.com/openshift/machine-config-operator/pull/4983)
* [OCPBUGS-55234](https://issues.redhat.com/browse/OCPBUGS-55234): kubelet: readonly mounts for criometricsproxy [#4997](https://github.com/openshift/machine-config-operator/pull/4997)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Fix CoreDNS static pod bring-up on cloud platforms [#4830](https://github.com/openshift/machine-config-operator/pull/4830)
* [MCO-1584](https://issues.redhat.com/browse/MCO-1584): Opt-in boot image updates for AWS & GCP by default [#4902](https://github.com/openshift/machine-config-operator/pull/4902)
* [MCO-1615](https://issues.redhat.com/browse/MCO-1615): MCN status update degraded [#4977](https://github.com/openshift/machine-config-operator/pull/4977)
* [MCO-1509](https://issues.redhat.com/browse/MCO-1509): Enable OCL for disconnected workflow [#4971](https://github.com/openshift/machine-config-operator/pull/4971)
* [MCO-1558](https://issues.redhat.com/browse/MCO-1558), [OCPBUGS-34745](https://issues.redhat.com/browse/OCPBUGS-34745): Add support to rebuild and prune OCL images [#4975](https://github.com/openshift/machine-config-operator/pull/4975)
* [OCPEDGE-1690](https://issues.redhat.com/browse/OCPEDGE-1690): add dual-replica templates [#4938](https://github.com/openshift/machine-config-operator/pull/4938)
* [OCPBUGS-53408](https://issues.redhat.com/browse/OCPBUGS-53408): wait for build and ensure OS image is actually new [#4924](https://github.com/openshift/machine-config-operator/pull/4924)
* [OCPBUGS-54872](https://issues.redhat.com/browse/OCPBUGS-54872): Make sure generation fields in MCN do not have a value of 0 [#4982](https://github.com/openshift/machine-config-operator/pull/4982)
* [MCO-1544](https://issues.redhat.com/browse/MCO-1544): Update MCO code to use MCN’s updated v1alpha1 API [#4962](https://github.com/openshift/machine-config-operator/pull/4962)
* [OCPBUGS-53425](https://issues.redhat.com/browse/OCPBUGS-53425): Make mtu-migration run after wait-for-primary-ip [#4932](https://github.com/openshift/machine-config-operator/pull/4932)
* [OCPBUGS-54611](https://issues.redhat.com/browse/OCPBUGS-54611): pkg/operator/status: Drop kubelet skew guard [#4970](https://github.com/openshift/machine-config-operator/pull/4970)
* [OCPBUGS-54384](https://issues.redhat.com/browse/OCPBUGS-54384): kubelet-service: narrow down restorecon path [#4857](https://github.com/openshift/machine-config-operator/pull/4857)
* [OCPBUGS-54175](https://issues.redhat.com/browse/OCPBUGS-54175): Add /etc/docker/certs.d to template [#4933](https://github.com/openshift/machine-config-operator/pull/4933)
* [MCO-1587](https://issues.redhat.com/browse/MCO-1587): Add runbook for ExtremelyHighIndividualControlPlaneMemory [#4976](https://github.com/openshift/machine-config-operator/pull/4976)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): GCP: Include the gcp-routes.service for all GCP installs [#4969](https://github.com/openshift/machine-config-operator/pull/4969)
* [OCPBUGS-52656](https://issues.redhat.com/browse/OCPBUGS-52656): Update the MCN PIS status of only the primary pool [#4948](https://github.com/openshift/machine-config-operator/pull/4948)
* [OCPBUGS-54570](https://issues.redhat.com/browse/OCPBUGS-54570): Drop broken feature which statically configures DHCP addresses [#4965](https://github.com/openshift/machine-config-operator/pull/4965)
* [CORENET-5524](https://issues.redhat.com/browse/CORENET-5524): Modify regex for ipsec showstates command [#4959](https://github.com/openshift/machine-config-operator/pull/4959)
* [OCPBUGS-49894](https://issues.redhat.com/browse/OCPBUGS-49894): Ensure proxy config exists when reverting from OCL to non-OCL [#4833](https://github.com/openshift/machine-config-operator/pull/4833)
* [OCPNODE-3020](https://issues.redhat.com/browse/OCPNODE-3020): Remove `cgroupv1` references [#4964](https://github.com/openshift/machine-config-operator/pull/4964)
* [MCO-1627](https://issues.redhat.com/browse/MCO-1627): Get rid of setting mcn.Spec.PinnedImageSets field [#4960](https://github.com/openshift/machine-config-operator/pull/4960)
* [OCPBUGS-38869](https://issues.redhat.com/browse/OCPBUGS-38869): Update desired config in MCN on OCL update [#4922](https://github.com/openshift/machine-config-operator/pull/4922)
* [OCPBUGS-46421](https://issues.redhat.com/browse/OCPBUGS-46421), [OCPBUGS-48675](https://issues.redhat.com/browse/OCPBUGS-48675), [OCPBUGS-48808](https://issues.redhat.com/browse/OCPBUGS-48808): Ensure build job is deleted when rebuild is triggered [#4807](https://github.com/openshift/machine-config-operator/pull/4807)
* [MCO-1522](https://issues.redhat.com/browse/MCO-1522): Adapt MCO to use PIS V1 API [#4934](https://github.com/openshift/machine-config-operator/pull/4934)
* [OCPBUGS-54161](https://issues.redhat.com/browse/OCPBUGS-54161): use the same success criteria for OCL e2e tests [#4941](https://github.com/openshift/machine-config-operator/pull/4941)
* [MCO-1579](https://issues.redhat.com/browse/MCO-1579): Bump ignition to 3.5 [#4903](https://github.com/openshift/machine-config-operator/pull/4903)
* NO-ISSUE: MCN changes for API validation [#4949](https://github.com/openshift/machine-config-operator/pull/4949)
* [OCPNODE-2340](https://issues.redhat.com/browse/OCPNODE-2340): update (Cluster)Imagepolicy PKI config to policy.json [#4886](https://github.com/openshift/machine-config-operator/pull/4886)
* [OCPBUGS-52827](https://issues.redhat.com/browse/OCPBUGS-52827): Fixing typos for MachineConfigNode [#4914](https://github.com/openshift/machine-config-operator/pull/4914)
* [OCPBUGS-51130](https://issues.redhat.com/browse/OCPBUGS-51130): In OCL. Cannot install extensions [#4870](https://github.com/openshift/machine-config-operator/pull/4870)
* [OCPBUGS-52280](https://issues.redhat.com/browse/OCPBUGS-52280), [SDN-5330](https://issues.redhat.com/browse/SDN-5330): Add ipsec connect wait service [#4854](https://github.com/openshift/machine-config-operator/pull/4854)
* [OCPNODE-2842](https://issues.redhat.com/browse/OCPNODE-2842): Set Upgradeable=False when cluster is on cgroup v1 [#4822](https://github.com/openshift/machine-config-operator/pull/4822)
* "NO-ISSUE: ensure that client configs are not mutable" [#4915](https://github.com/openshift/machine-config-operator/pull/4915)
* [MCO-1501](https://issues.redhat.com/browse/MCO-1501): Add support for custom MCPs in MCN [#4876](https://github.com/openshift/machine-config-operator/pull/4876)
* [OCPBUGS-53085](https://issues.redhat.com/browse/OCPBUGS-53085): Add scc label to arbitor crio-metrics-proxy [#4912](https://github.com/openshift/machine-config-operator/pull/4912)
* [OCPBUGS-51150](https://issues.redhat.com/browse/OCPBUGS-51150): daemon: ensure ostree-finalize-staged is started before rebooting [#4907](https://github.com/openshift/machine-config-operator/pull/4907)
* [OCPBUGS-44185](https://issues.redhat.com/browse/OCPBUGS-44185): Race in configure-ovs.sh affects bonding interface configuration. [#4609](https://github.com/openshift/machine-config-operator/pull/4609)
* [OCPBUGS-52213](https://issues.redhat.com/browse/OCPBUGS-52213): Update ObservedGeneration in KubeletConfig [#4900](https://github.com/openshift/machine-config-operator/pull/4900)
* [RHEL-79554](https://issues.redhat.com/browse/RHEL-79554): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4866](https://github.com/openshift/machine-config-operator/pull/4866)
* [MCO-1485](https://issues.redhat.com/browse/MCO-1485): MCO:1486: MCO-1324: Attempt stub Ignition upgrade [#4885](https://github.com/openshift/machine-config-operator/pull/4885)
* [MCO-1537](https://issues.redhat.com/browse/MCO-1537): Add MCDRebootError runbook to prometheus rules [#4895](https://github.com/openshift/machine-config-operator/pull/4895)
* NO-JIRA: Update the MCS iptables debug command in docs [#4896](https://github.com/openshift/machine-config-operator/pull/4896)
* [OCPBUGS-43896](https://issues.redhat.com/browse/OCPBUGS-43896): add revert logic to OCL path in MCD [#4825](https://github.com/openshift/machine-config-operator/pull/4825)
* [MCO-1515](https://issues.redhat.com/browse/MCO-1515): Kube bump to 1.32 [#4797](https://github.com/openshift/machine-config-operator/pull/4797)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/07ba85e326d5777452d555e179b99309c6aa4a6b...a9859b62f67382ee2042209f5e98b91cb5c45dff)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/7d0667469c6a7980f0f6cbaeb2b17686378696f1)
* [OCPBUGS-44031](https://issues.redhat.com/browse/OCPBUGS-44031): Verify tls while pulling down IPA [#131](https://github.com/openshift/image-customization-controller/pull/131)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d7f860055301859a087664681243a0b9b84e3085...7d0667469c6a7980f0f6cbaeb2b17686378696f1)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/32b5f16c7f59698b40cc2a23116804d9067824d2)
* [OCPBUGS-55934](https://issues.redhat.com/browse/OCPBUGS-55934): Dummy change to force a rebuild for 4.19 [#63](https://github.com/openshift/machine-os-images/pull/63)
* NO-JIRA: Change to new host [#54](https://github.com/openshift/machine-os-images/pull/54)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/dbd41b1d837058debeb976f36ffbb12d91795f8e...32b5f16c7f59698b40cc2a23116804d9067824d2)
### [metallb-frr](https://github.com/openshift/frr/tree/5076dbc4f8483a844f1fce06b57216d743600237)
* [OCPBUGS-55284](https://issues.redhat.com/browse/OCPBUGS-55284): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#87](https://github.com/openshift/frr/pull/87)
* Syncmetallb 04042025 [#81](https://github.com/openshift/frr/pull/81)
* Align to upstream [#79](https://github.com/openshift/frr/pull/79)
* Syncoperator03032025 [#78](https://github.com/openshift/frr/pull/78)
* [Full changelog](https://github.com/openshift/frr/compare/648bf5dd718368490468b8a2e4338002024c1d3b...5076dbc4f8483a844f1fce06b57216d743600237)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/362765260b5b4cbfe29e85aa6e82532ba509f300)
* NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes [#411](https://github.com/openshift/monitoring-plugin/pull/411)
* : NO-JIRA: bound table scroll and column alignment #409 [#409](https://github.com/openshift/monitoring-plugin/pull/409)
* NO-JIRA: feature: upgrade react router to v5 compat [#406](https://github.com/openshift/monitoring-plugin/pull/406)
* NO-JIRA: fix(incidents): performance improvements for incidents page [#398](https://github.com/openshift/monitoring-plugin/pull/398)
* [OCPBUGS-48533](https://issues.redhat.com/browse/OCPBUGS-48533): Reset variables when making orthongonal selections [#394](https://github.com/openshift/monitoring-plugin/pull/394)
* [OU-765](https://issues.redhat.com/browse/OU-765): Don't break if cluster doesn't exist [#399](https://github.com/openshift/monitoring-plugin/pull/399)
* [OU-767](https://issues.redhat.com/browse/OU-767): Allow filtering by cluster name [#396](https://github.com/openshift/monitoring-plugin/pull/396)
* [OU-750](https://issues.redhat.com/browse/OU-750): update the metrics typeahead to look pf-6 native [#395](https://github.com/openshift/monitoring-plugin/pull/395)
* [OCPBUGS-54292](https://issues.redhat.com/browse/OCPBUGS-54292): Show column headings on metrics page [#397](https://github.com/openshift/monitoring-plugin/pull/397)
* [OU-760](https://issues.redhat.com/browse/OU-760): Requests UX changes post PF-6 [#390](https://github.com/openshift/monitoring-plugin/pull/390)
* [OU-723](https://issues.redhat.com/browse/OU-723), [OU-729](https://issues.redhat.com/browse/OU-729): Add label typeahead [#392](https://github.com/openshift/monitoring-plugin/pull/392)
* [OU-757](https://issues.redhat.com/browse/OU-757): Show cluster column heading on acm silences page [#393](https://github.com/openshift/monitoring-plugin/pull/393)
* [OU-703](https://issues.redhat.com/browse/OU-703): fix states filter in aggregated row [#389](https://github.com/openshift/monitoring-plugin/pull/389)
* [OU-752](https://issues.redhat.com/browse/OU-752): Clear out old queries when loading queries from URL [#391](https://github.com/openshift/monitoring-plugin/pull/391)
* [RHINENG-16773](https://issues.redhat.com/browse/RHINENG-16773): fixed silence alerts data form not filled with alert details [#384](https://github.com/openshift/monitoring-plugin/pull/384)
* [OU-702](https://issues.redhat.com/browse/OU-702): re-add csv button for aggregated alert list [#383](https://github.com/openshift/monitoring-plugin/pull/383)
* [OU-659](https://issues.redhat.com/browse/OU-659): PF-6 Migration [#380](https://github.com/openshift/monitoring-plugin/pull/380)
* [OU-678](https://issues.redhat.com/browse/OU-678): fix: allow to set refresh interval to off [#379](https://github.com/openshift/monitoring-plugin/pull/379)
* [OU-724](https://issues.redhat.com/browse/OU-724): remove dependency on deleted image [#375](https://github.com/openshift/monitoring-plugin/pull/375)
* [OU-660](https://issues.redhat.com/browse/OU-660): Remove console CSS and Align with Patternfly components [#362](https://github.com/openshift/monitoring-plugin/pull/362)
* [OCPBUGS-52592](https://issues.redhat.com/browse/OCPBUGS-52592): Fix "Export as CSV" [#369](https://github.com/openshift/monitoring-plugin/pull/369)
* [OU-700](https://issues.redhat.com/browse/OU-700): don't show metrics links in acm perspective [#367](https://github.com/openshift/monitoring-plugin/pull/367)
* [COO-768](https://issues.redhat.com/browse/COO-768): add plugin proxy to perses proxy path [#365](https://github.com/openshift/monitoring-plugin/pull/365)
* [COO-759](https://issues.redhat.com/browse/COO-759): update datasource whenerver the csrf token changes [#363](https://github.com/openshift/monitoring-plugin/pull/363)
* [RHINENG-12634](https://issues.redhat.com/browse/RHINENG-12634): incident utils typescript conversion [#359](https://github.com/openshift/monitoring-plugin/pull/359)
* [CNV-55987](https://issues.redhat.com/browse/CNV-55987): Aggregated alerts [#348](https://github.com/openshift/monitoring-plugin/pull/348)
* [COO-684](https://issues.redhat.com/browse/COO-684): add mui/material as is required as peer dependency [#360](https://github.com/openshift/monitoring-plugin/pull/360)
* [OU-681](https://issues.redhat.com/browse/OU-681): fix typo in the predefined metrics list [#358](https://github.com/openshift/monitoring-plugin/pull/358)
* [OU-499](https://issues.redhat.com/browse/OU-499): remove deprecated components [#356](https://github.com/openshift/monitoring-plugin/pull/356)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c1cd4ce52a14a4d5a160edd0c66d010aedce2b62...362765260b5b4cbfe29e85aa6e82532ba509f300)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe)
* : OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining [#268](https://github.com/openshift/multus-cni/pull/268)
* [TRT-2057](https://issues.redhat.com/browse/TRT-2057): Properly structure empty CNI result [#267](https://github.com/openshift/multus-cni/pull/267)
* [OCPBUGS-54153](https://issues.redhat.com/browse/OCPBUGS-54153): Ds merge 3/24 [#264](https://github.com/openshift/multus-cni/pull/264)
* [OCPBUGS-53087](https://issues.redhat.com/browse/OCPBUGS-53087): Tolerate issues writing network status annotation on CNI ADD [#263](https://github.com/openshift/multus-cni/pull/263)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c5f6b694cdfd1c4ce7f0b06012dd24c4bf36731b...cf0f68ec2b5fe9bc72d0da325e02cf63968747fe)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/6fffe5d78f52e01e51110d178b433788ef98c8ae)
* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) [#67](https://github.com/openshift/multus-networkpolicy/pull/67)
* [OCPBUGS-44354](https://issues.redhat.com/browse/OCPBUGS-44354): Sync 20250204 (#66) [#66](https://github.com/openshift/multus-networkpolicy/pull/66)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/e0c65b80229a262080e0b79a60eb5344e575ea14...6fffe5d78f52e01e51110d178b433788ef98c8ae)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/45624b6383012d7b69409635daa8e4d455da6e16)
* [OCPBUGS-54422](https://issues.redhat.com/browse/OCPBUGS-54422): Ds merge 4/3 [#356](https://github.com/openshift/whereabouts-cni/pull/356)
* [OCPBUGS-53397](https://issues.redhat.com/browse/OCPBUGS-53397): Upstream sync 20-03-2025 [#353](https://github.com/openshift/whereabouts-cni/pull/353)
* [OCPBUGS-52415](https://issues.redhat.com/browse/OCPBUGS-52415): replace entrypoint [#349](https://github.com/openshift/whereabouts-cni/pull/349)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/8fc3aa216046994bc8f61d5692af3810f16d03b3...45624b6383012d7b69409635daa8e4d455da6e16)
### [must-gather](https://github.com/openshift/must-gather/tree/463c03ca559bb00f324b11273763aa64543f9006)
* [MCO-1648](https://issues.redhat.com/browse/MCO-1648): MCO-1649: Add `machineconfignodes` and `pinnedimagesets` to must-gather [#487](https://github.com/openshift/must-gather/pull/487)
* [Full changelog](https://github.com/openshift/must-gather/compare/33763a3219a52694ab68b4cfe4564c74da15420b...463c03ca559bb00f324b11273763aa64543f9006)
### [network-tools](https://github.com/openshift/network-tools/tree/ebd18d146a6f06df7e403e771d16bd960b3d891f)
* NO-JIRA: Fix JIRA queries [#141](https://github.com/openshift/network-tools/pull/141)
* NO-JIRA: Add Peng [#138](https://github.com/openshift/network-tools/pull/138)
* [Full changelog](https://github.com/openshift/network-tools/compare/982767d958f3d5551a81afe40d0647b78f1a9b09...ebd18d146a6f06df7e403e771d16bd960b3d891f)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/581812ac48f8f2e414050bff933f6b07fe98bb28)
* [CNV-57493](https://issues.redhat.com/browse/CNV-57493): Validate if the namespace is configured for a primary UDN [#237](https://github.com/openshift/networking-console-plugin/pull/237)
* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#233](https://github.com/openshift/networking-console-plugin/pull/233)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): adding translations [#236](https://github.com/openshift/networking-console-plugin/pull/236)
* Upload i18n translations scripts [#229](https://github.com/openshift/networking-console-plugin/pull/229)
* [CNV-59853](https://issues.redhat.com/browse/CNV-59853): remove co-m-table-grid and dropdown-kebab-pf classes [#231](https://github.com/openshift/networking-console-plugin/pull/231)
* [CNV-58647](https://issues.redhat.com/browse/CNV-58647): update PatternFly Modal to new version [#228](https://github.com/openshift/networking-console-plugin/pull/228)
* [CNV-58320](https://issues.redhat.com/browse/CNV-58320): remove console classes which changed styling [#227](https://github.com/openshift/networking-console-plugin/pull/227)
* add adam to the approves [#223](https://github.com/openshift/networking-console-plugin/pull/223)
* [CNV-56305](https://issues.redhat.com/browse/CNV-56305): upgrade Network UI to PatternFly 6 [#221](https://github.com/openshift/networking-console-plugin/pull/221)
* [CNV-58015](https://issues.redhat.com/browse/CNV-58015): fix delete label row [#224](https://github.com/openshift/networking-console-plugin/pull/224)
* Upgrade dockerfile for node 18 and 4.19 [#222](https://github.com/openshift/networking-console-plugin/pull/222)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/e8a088c118898075f0c6ae01476630833c33da97...581812ac48f8f2e414050bff933f6b07fe98bb28)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/db1f264a7b04784e5f671e61cda0609695e555bb)
* [OCPCLOUD-2847](https://issues.redhat.com/browse/OCPCLOUD-2847): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main [#42](https://github.com/openshift/cloud-provider-nutanix/pull/42)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/1913cf0c0cda495b4433199ecf273c14ad031d7d...db1f264a7b04784e5f671e61cda0609695e555bb)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/a26db5a04ecffd98c6a9ee8204af621bf2416ec9)
* [OCPCLOUD-2842](https://issues.redhat.com/browse/OCPCLOUD-2842): Update dependencies to k8s 1.32 [#90](https://github.com/openshift/machine-api-provider-nutanix/pull/90)
* [OCPBUGS-54317](https://issues.redhat.com/browse/OCPBUGS-54317): fixing CVE-2025-22868 [#97](https://github.com/openshift/machine-api-provider-nutanix/pull/97)
* [OCPBUGS-53245](https://issues.redhat.com/browse/OCPBUGS-53245): Fix link-local addresses being added to machine [#100](https://github.com/openshift/machine-api-provider-nutanix/pull/100)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/db327bdb5d304cd5893300ce6d80d092e07e93d0...a26db5a04ecffd98c6a9ee8204af621bf2416ec9)
### [oauth-server](https://github.com/openshift/oauth-server/tree/d034c480e538052c996cce5fb55c435972c02326)
* [CONSOLE-4434](https://issues.redhat.com/browse/CONSOLE-4434), [OCPBUGS-43610](https://issues.redhat.com/browse/OCPBUGS-43610): update login templates to use PF6 and add validation [#169](https://github.com/openshift/oauth-server/pull/169)
* [Full changelog](https://github.com/openshift/oauth-server/compare/7c92a0596c5283a0f17f855529ee5ddeea989918...d034c480e538052c996cce5fb55c435972c02326)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c58d7a3565b1446aa5b99509309af4aae5eefa0a)
* [OCPBUGS-55704](https://issues.redhat.com/browse/OCPBUGS-55704): implements registries.d file as specified in containers/image docs (#1137) [#1137](https://github.com/openshift/oc-mirror/pull/1137)
* [OCPBUGS-54891](https://issues.redhat.com/browse/OCPBUGS-54891): Fix mirroring images with tag&digest in charts (#1133) [#1133](https://github.com/openshift/oc-mirror/pull/1133)
* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1127) [#1127](https://github.com/openshift/oc-mirror/pull/1127)
* [OCPBUGS-50617](https://issues.redhat.com/browse/OCPBUGS-50617): oc-mirror does not create signature files (#1073) [#1073](https://github.com/openshift/oc-mirror/pull/1073)
* [CLID-246](https://issues.redhat.com/browse/CLID-246), [CLID-307](https://issues.redhat.com/browse/CLID-307), [CLID-308](https://issues.redhat.com/browse/CLID-308), [CLID-309](https://issues.redhat.com/browse/CLID-309), [CLID-310](https://issues.redhat.com/browse/CLID-310), [CLID-347](https://issues.redhat.com/browse/CLID-347): feat/adds signatures to the archive (#1119) [#1119](https://github.com/openshift/oc-mirror/pull/1119)
* [CLID-321](https://issues.redhat.com/browse/CLID-321): Add annotations to resources generated by oc-mirror v2 (#1086) [#1086](https://github.com/openshift/oc-mirror/pull/1086)
* [CLID-352](https://issues.redhat.com/browse/CLID-352): images: add integration tests image (#1124) [#1124](https://github.com/openshift/oc-mirror/pull/1124)
* [OCPBUGS-49880](https://issues.redhat.com/browse/OCPBUGS-49880): cli: return distinct error codes depending on failure (#1062) [#1062](https://github.com/openshift/oc-mirror/pull/1062)
* [OCPBUGS-52471](https://issues.redhat.com/browse/OCPBUGS-52471): Fix OOM at filtering catalogs (#1120) [#1120](https://github.com/openshift/oc-mirror/pull/1120)
* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1109) [#1109](https://github.com/openshift/oc-mirror/pull/1109)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1115) [#1115](https://github.com/openshift/oc-mirror/pull/1115)
* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1110) [#1110](https://github.com/openshift/oc-mirror/pull/1110)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1105) [#1105](https://github.com/openshift/oc-mirror/pull/1105)
* [OCPBUGS-50680](https://issues.redhat.com/browse/OCPBUGS-50680): v2/operator: refactor operator FilteredCollector (#1093) [#1093](https://github.com/openshift/oc-mirror/pull/1093)
* no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) [#1098](https://github.com/openshift/oc-mirror/pull/1098)
* v2: filter wrapcheck warnings for oc-mirror (#1104) [#1104](https://github.com/openshift/oc-mirror/pull/1104)
* [OCPBUGS-51328](https://issues.redhat.com/browse/OCPBUGS-51328): Fix CVE-2025-27144 (#1097) [#1097](https://github.com/openshift/oc-mirror/pull/1097)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1100) [#1100](https://github.com/openshift/oc-mirror/pull/1100)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/52622ef0842bfbc8039b7338f378074a18ebc8ff...c58d7a3565b1446aa5b99509309af4aae5eefa0a)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/005bb2f16d882062f1d40226549d2e2fddb1e609)
* NO-ISSUE: Synchronize From Upstream Repositories [#322](https://github.com/openshift/operator-framework-operator-controller/pull/322)
* NO-ISSUE: Synchronize From Upstream Repositories [#315](https://github.com/openshift/operator-framework-operator-controller/pull/315)
* NO-ISSUE: Synchronize From Upstream Repositories [#312](https://github.com/openshift/operator-framework-operator-controller/pull/312)
* NO-ISSUE: Synchronize From Upstream Repositories [#309](https://github.com/openshift/operator-framework-operator-controller/pull/309)
* NO-ISSUE: Synchronize From Upstream Repositories [#308](https://github.com/openshift/operator-framework-operator-controller/pull/308)
* NO-ISSUE: Synchronize From Upstream Repositories [#306](https://github.com/openshift/operator-framework-operator-controller/pull/306)
* NO-ISSUE: Synchronize From Upstream Repositories [#305](https://github.com/openshift/operator-framework-operator-controller/pull/305)
* NO-ISSUE: Synchronize From Upstream Repositories [#303](https://github.com/openshift/operator-framework-operator-controller/pull/303)
* NO-ISSUE: Synchronize From Upstream Repositories [#300](https://github.com/openshift/operator-framework-operator-controller/pull/300)
* NO-ISSUE: Synchronize From Upstream Repositories [#299](https://github.com/openshift/operator-framework-operator-controller/pull/299)
* NO-ISSUE: Synchronize From Upstream Repositories [#298](https://github.com/openshift/operator-framework-operator-controller/pull/298)
* NO-ISSUE: Synchronize From Upstream Repositories through PR1871 [#294](https://github.com/openshift/operator-framework-operator-controller/pull/294)
* [OCPBUGS-23055](https://issues.redhat.com/browse/OCPBUGS-23055): Synchronize From Upstream Repositories through PR1811 [#290](https://github.com/openshift/operator-framework-operator-controller/pull/290)
* NO-ISSUE: Synchronize From Upstream Repositories [#285](https://github.com/openshift/operator-framework-operator-controller/pull/285)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/4966e0b230c20b525e0f1f0b9ecdbae63551f0df...005bb2f16d882062f1d40226549d2e2fddb1e609)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8be524d728d03e61ee029ad2f7229ca97c93f87f)
* [OCPBUGS-55642](https://issues.redhat.com/browse/OCPBUGS-55642): Empty proxy variables are causing issues during the build [#376](https://github.com/openshift/openshift-controller-manager/pull/376)
* [OCPBUGS-50507](https://issues.redhat.com/browse/OCPBUGS-50507): Intermittent authentication issues when accessing OpenShift registry [#365](https://github.com/openshift/openshift-controller-manager/pull/365)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/ed3eae5db73699e2b6ad0b513589e06b4bf6f5aa...8be524d728d03e61ee029ad2f7229ca97c93f87f)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/cc76099b58e9780ba00623973565b564ea4be034)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main [#361](https://github.com/openshift/cluster-api-provider-openstack/pull/361)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main [#360](https://github.com/openshift/cluster-api-provider-openstack/pull/360)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/ad13014433be013c902bc42cc97ec6ba65f8632b...cc76099b58e9780ba00623973565b564ea4be034)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/848bf658a280e6ab6f660c290a24e16fa29252e3)
* [OSASINFRA-3746](https://issues.redhat.com/browse/OSASINFRA-3746): Consume CA cert from CCO secret [#131](https://github.com/openshift/machine-api-provider-openstack/pull/131)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/d2fce230a2df0cf3b47769f0118d6475f796cb35...848bf658a280e6ab6f660c290a24e16fa29252e3)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/ec31de865be0c822d967ec8fe563c6eb8c4757e5)
* NO-ISSUE: Synchronize From Upstream Repositories [#994](https://github.com/openshift/operator-framework-olm/pull/994)
* [OCPBUGS-52923](https://issues.redhat.com/browse/OCPBUGS-52923): pin go-jose/v4@v4.0.5 [#993](https://github.com/openshift/operator-framework-olm/pull/993)
* [OCPBUGS-52923](https://issues.redhat.com/browse/OCPBUGS-52923): Synchronize From Upstream Repositories (with a revert) PR 988 with revert [#991](https://github.com/openshift/operator-framework-olm/pull/991)
* NO-ISSUE: Synchronize From Upstream Repositories [#986](https://github.com/openshift/operator-framework-olm/pull/986)
* NO-ISSUE: Synchronize From Upstream Repositories [#984](https://github.com/openshift/operator-framework-olm/pull/984)
* NO-ISSUE: Synchronize From Upstream Repositories [#966](https://github.com/openshift/operator-framework-olm/pull/966)
* NO-ISSUE: Update DOWNSTREAM owners files [#973](https://github.com/openshift/operator-framework-olm/pull/973)
* [OCPBUGS-42526](https://issues.redhat.com/browse/OCPBUGS-42526): Ensure that PSA label is latest instead of pinning versions [#972](https://github.com/openshift/operator-framework-olm/pull/972)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6dd1017cdc814695820aeeb95be6cc28d6c411b5...ec31de865be0c822d967ec8fe563c6eb8c4757e5)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/02d245516289b2f3a27b81ce59b9cef66750501c)
* [OPRUN-3835](https://issues.redhat.com/browse/OPRUN-3835): Update to 4.19 community-operators catalog [#621](https://github.com/operator-framework/operator-marketplace/pull/621)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 [#618](https://github.com/operator-framework/operator-marketplace/pull/618)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 [#617](https://github.com/operator-framework/operator-marketplace/pull/617)
* [OPRUN-3621](https://issues.redhat.com/browse/OPRUN-3621): Replace 4.18 image references with 4.19 [#579](https://github.com/operator-framework/operator-marketplace/pull/579)
* NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 [#616](https://github.com/operator-framework/operator-marketplace/pull/616)
* [OPRUN-3818](https://issues.redhat.com/browse/OPRUN-3818): Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 [#611](https://github.com/operator-framework/operator-marketplace/pull/611)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 [#605](https://github.com/operator-framework/operator-marketplace/pull/605)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 [#608](https://github.com/operator-framework/operator-marketplace/pull/608)
* NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 [#598](https://github.com/operator-framework/operator-marketplace/pull/598)
* NO-ISSUE: Add dependabot to help keep the project maintained [#599](https://github.com/operator-framework/operator-marketplace/pull/599)
* [OCPBUGS-52340](https://issues.redhat.com/browse/OCPBUGS-52340): Ensure that PSA label is latest instead of pinning versions [#600](https://github.com/operator-framework/operator-marketplace/pull/600)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/dfb5669ca51c649e613a1e7692c5cc3fbb2efe38...02d245516289b2f3a27b81ce59b9cef66750501c)
### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/76db379d075fdae94ca604f3fa83b0612b36ef8d)
* NO-JIRA: Readme update [#139](https://github.com/openshift/ovirt-csi-driver-operator/pull/139)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/c5b83033d3979ac73032771467f9bcc3df286cef...76db379d075fdae94ca604f3fa83b0612b36ef8d)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f7dd74f4c2b944f85176546839546e505ee96189)
* [OCPBUGS-51165](https://issues.redhat.com/browse/OCPBUGS-51165), [OCPBUGS-52278](https://issues.redhat.com/browse/OCPBUGS-52278): Downstream Merge 28th april 2025 [#2522](https://github.com/openshift/ovn-kubernetes/pull/2522)
* [CORENET-5786](https://issues.redhat.com/browse/CORENET-5786): Downstream merge 2025-04-25 [#2521](https://github.com/openshift/ovn-kubernetes/pull/2521)
* [CORENET-5389](https://issues.redhat.com/browse/CORENET-5389), [OCPBUGS-51040](https://issues.redhat.com/browse/OCPBUGS-51040), [OCPBUGS-54577](https://issues.redhat.com/browse/OCPBUGS-54577): [DownstreamMerge] 2025-04-16 [#2516](https://github.com/openshift/ovn-kubernetes/pull/2516)
* [CORENET-5721](https://issues.redhat.com/browse/CORENET-5721), [CORENET-5856](https://issues.redhat.com/browse/CORENET-5856), [OCPBUGS-51317](https://issues.redhat.com/browse/OCPBUGS-51317): [DownstreamMerge] 2025-04-14 [#2513](https://github.com/openshift/ovn-kubernetes/pull/2513)
* [CORENET-5371](https://issues.redhat.com/browse/CORENET-5371): Dockerfile: Bump OVS version to 3.5.0-0.9 [#2472](https://github.com/openshift/ovn-kubernetes/pull/2472)
* [CORENET-5382](https://issues.redhat.com/browse/CORENET-5382): unpin libreswan version [#2498](https://github.com/openshift/ovn-kubernetes/pull/2498)
* [OCPBUGS-49994](https://issues.redhat.com/browse/OCPBUGS-49994): [DownstreamMerge] 7th april [#2509](https://github.com/openshift/ovn-kubernetes/pull/2509)
* [CORENET-5666](https://issues.redhat.com/browse/CORENET-5666), [OCPBUGS-43004](https://issues.redhat.com/browse/OCPBUGS-43004), [OCPBUGS-54199](https://issues.redhat.com/browse/OCPBUGS-54199): Downstream Merge 2025-04-02 [#2505](https://github.com/openshift/ovn-kubernetes/pull/2505)
* [OCPBUGS-45410](https://issues.redhat.com/browse/OCPBUGS-45410): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 [#2379](https://github.com/openshift/ovn-kubernetes/pull/2379)
* [OCPBUGS-45741](https://issues.redhat.com/browse/OCPBUGS-45741): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 [#2380](https://github.com/openshift/ovn-kubernetes/pull/2380)
* [OCPBUGS-54245](https://issues.redhat.com/browse/OCPBUGS-54245), [SDN-5772](https://issues.redhat.com/browse/SDN-5772): Downstream merge 2025-03-21 [#2501](https://github.com/openshift/ovn-kubernetes/pull/2501)
* [OCPBUGS-48678](https://issues.redhat.com/browse/OCPBUGS-48678): Update OVN to FDP25.A.1 24.09.2-41 [#2493](https://github.com/openshift/ovn-kubernetes/pull/2493)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/66faee9937abbd9abc8e72e160c6fb2f4e606e9b...f7dd74f4c2b944f85176546839546e505ee96189)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/f681413d902e6634afd9d4ae80fd3b6e915f6585)
* [MULTIARCH-5364](https://issues.redhat.com/browse/MULTIARCH-5364): Rebase ibm-powervs-block-csi-driver with upstream [#97](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/97)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e2f15cbadf96d8da15c4900ee8558fa23e308c8b...f681413d902e6634afd9d4ae80fd3b6e915f6585)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/059d95c2941b5f8127d92b83e099a7e14021f2c2)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#83](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/83)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#81](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/81)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/1dab186dd9490caa4865ddbdcee126b9e345844e...059d95c2941b5f8127d92b83e099a7e14021f2c2)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17)
* No-Jira: Update packages in go.mod [#85](https://github.com/openshift/cloud-provider-powervs/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/7c51cd2b469a9c2486b8d54c83bc76b75be14a19...ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a)
* [OCPBUGS-54620](https://issues.redhat.com/browse/OCPBUGS-54620): CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing [#112](https://github.com/openshift/machine-api-provider-powervs/pull/112)
* [OCPBUGS-53309](https://issues.redhat.com/browse/OCPBUGS-53309): Update dependencies to k8s 1.32 [#110](https://github.com/openshift/machine-api-provider-powervs/pull/110)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/bbe65eb58f5073abd24971d52440e5ce8aa1bcae...87f8e306940e6b0231e6b8fb655ca1e6f21ba95a)
### [prometheus](https://github.com/openshift/prometheus/tree/7935baede79e0e2fbf117781fa3843bea10dfbf8)
* [MON-4199](https://issues.redhat.com/browse/MON-4199): chore: update to v3.2.1 [#246](https://github.com/openshift/prometheus/pull/246)
* [OCPBUGS-53025](https://issues.redhat.com/browse/OCPBUGS-53025): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#245](https://github.com/openshift/prometheus/pull/245)
* [Full changelog](https://github.com/openshift/prometheus/compare/7bdc617ceabaa65eeb31c769033d81d1d615cecd...7935baede79e0e2fbf117781fa3843bea10dfbf8)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a2346ca5bd71f535399435cd70a8e9519e521c4b)
* NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 [#99](https://github.com/openshift/prometheus-alertmanager/pull/99)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/4313100525f72692f870af2044fb2822e831c5d2...a2346ca5bd71f535399435cd70a8e9519e521c4b)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/b8debb4c0493078dd64bf8a74cee9f0649705f51)
* [MON-4207](https://issues.redhat.com/browse/MON-4207): Bump openshift/prometheus-operator to v0.81.0 [#329](https://github.com/openshift/prometheus-operator/pull/329)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3779c1d5d59ac355082618e6423710759675aaed...b8debb4c0493078dd64bf8a74cee9f0649705f51)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c90542d8cef6d25545ae00481ffff5622cdce928)
* [MON-4204](https://issues.redhat.com/browse/MON-4204): Use slog for accelerators (and version bump) [#164](https://github.com/openshift/node_exporter/pull/164)
* [Full changelog](https://github.com/openshift/node_exporter/compare/57a4e99895d08df172b4fb315f5b7e893d516bde...c90542d8cef6d25545ae00481ffff5622cdce928)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/4dfa6916f984d0fd7188380edc88b250738f07f7)
* [OCPBUGS-55057](https://issues.redhat.com/browse/OCPBUGS-55057): Don't check featuregates on operand [#263](https://github.com/openshift/service-ca-operator/pull/263)
* [CNTRLPLANE-339](https://issues.redhat.com/browse/CNTRLPLANE-339): Issue short lived certificates if ShortCertRotation featuregate is enabled [#245](https://github.com/openshift/service-ca-operator/pull/245)
* [OCPBUGS-48171](https://issues.redhat.com/browse/OCPBUGS-48171): Update go 1.23 and ocp 4.19 [#254](https://github.com/openshift/service-ca-operator/pull/254)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1e65678429c82df5ae97da4dde8dbe03d75062e6...4dfa6916f984d0fd7188380edc88b250738f07f7)
### [telemeter](https://github.com/openshift/telemeter/tree/cffdabd448b53b5903b871450bac8e6cbb8dd88d)
* [OCPBUGS-50837](https://issues.redhat.com/browse/OCPBUGS-50837): Drop nil metrics during elide transform and capture metric for same [#556](https://github.com/openshift/telemeter/pull/556)
* [OCPBUGS-50837](https://issues.redhat.com/browse/OCPBUGS-50837): Check nil metric in elide label [#555](https://github.com/openshift/telemeter/pull/555)
* [SWATCH-3413](https://issues.redhat.com/browse/SWATCH-3413): Add acm_capacity_effective_cpu_cores:sum recording rule [#554](https://github.com/openshift/telemeter/pull/554)
* [Full changelog](https://github.com/openshift/telemeter/compare/f63fef91d659c4127838da6e3dc696e07c0e5536...cffdabd448b53b5903b871450bac8e6cbb8dd88d)
### [tests](https://github.com/openshift/origin/tree/0a23b777d1ffd646ee1afe8b511281ab03cec831)
* [OCPBUGS-55897](https://issues.redhat.com/browse/OCPBUGS-55897): bump limits [#29767](https://github.com/openshift/origin/pull/29767)
* [OCPBUGS-55265](https://issues.redhat.com/browse/OCPBUGS-55265): Bump 1.32.4 [#29707](https://github.com/openshift/origin/pull/29707)
* [OKD-243](https://issues.redhat.com/browse/OKD-243): Skip GatewayAPIController tests for OKD [#29749](https://github.com/openshift/origin/pull/29749)
* [OCPBUGS-55510](https://issues.redhat.com/browse/OCPBUGS-55510): Update node selection in MCN scope test for two-node Openshift [#29744](https://github.com/openshift/origin/pull/29744)
* [OCPBUGS-55392](https://issues.redhat.com/browse/OCPBUGS-55392): Exclude imagestream import mode toggle tests for SNO [#29715](https://github.com/openshift/origin/pull/29715)
* [OCPBUGS-55441](https://issues.redhat.com/browse/OCPBUGS-55441): Fix MCN tests for two-node clusters & add more logs to scope tests [#29732](https://github.com/openshift/origin/pull/29732)
* [OCPBUGS-54700](https://issues.redhat.com/browse/OCPBUGS-54700): aws/edge: prevent test using unschedulable nodes [#29655](https://github.com/openshift/origin/pull/29655)
* [TRT-2092](https://issues.redhat.com/browse/TRT-2092): Fix default cert issuer name in RouteExternalCertificate test case [#29735](https://github.com/openshift/origin/pull/29735)
* [OCPBUGS-42044](https://issues.redhat.com/browse/OCPBUGS-42044): [build] Ensure Git Clone Does Not Run Privileged [#29686](https://github.com/openshift/origin/pull/29686)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29722](https://github.com/openshift/origin/pull/29722)
* [OPRUN-3783](https://issues.redhat.com/browse/OPRUN-3783): OLMv1: Add support for preflight permissions checks (fixed) [#29730](https://github.com/openshift/origin/pull/29730)
* [TRT-2092](https://issues.redhat.com/browse/TRT-2092): Fix default cert issuer name for Managed Service cluster (ROSA classic) in `RouteExternalCertificate` test case [#29731](https://github.com/openshift/origin/pull/29731)
* [TRT-2091](https://issues.redhat.com/browse/TRT-2091): Revert #29714 "OPRUN-3782: OLMv1: Add support for preflight permissions checks" [#29726](https://github.com/openshift/origin/pull/29726)
* [OPRUN-3782](https://issues.redhat.com/browse/OPRUN-3782): OLMv1: Add support for preflight permissions checks [#29714](https://github.com/openshift/origin/pull/29714)
* [MCO-1646](https://issues.redhat.com/browse/MCO-1646): API & client-go bumps for MCN V1 API updates [#29717](https://github.com/openshift/origin/pull/29717)
* NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal [#29721](https://github.com/openshift/origin/pull/29721)
* Revert "TRT-2049: check for any watch requests" [#29719](https://github.com/openshift/origin/pull/29719)
* [MCO-1519](https://issues.redhat.com/browse/MCO-1519): Adapt MCN tests to use V1 API [#29701](https://github.com/openshift/origin/pull/29701)
* [OPRUN-3692](https://issues.redhat.com/browse/OPRUN-3692): Olmv1-catalogd tests for API endpoints [#29580](https://github.com/openshift/origin/pull/29580)
* [TRT-2049](https://issues.redhat.com/browse/TRT-2049): check for any watch requests [#29674](https://github.com/openshift/origin/pull/29674)
* NO-ISSUE: Automated - Update synthetic test data [#29677](https://github.com/openshift/origin/pull/29677)
* [OCPBUGS-55342](https://issues.redhat.com/browse/OCPBUGS-55342): Skip Hypershift for MachineConfigNodes and PinnedImages tests [#29712](https://github.com/openshift/origin/pull/29712)
* NO-JIRA: Revert "Add monitortest for elevated etcd disk fsync intervals" [#29648](https://github.com/openshift/origin/pull/29648)
* [TRT-2043](https://issues.redhat.com/browse/TRT-2043): look for high latency audit requests [#29571](https://github.com/openshift/origin/pull/29571)
* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Add myql-80 to fix known image check test for OKD [#29659](https://github.com/openshift/origin/pull/29659)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29700](https://github.com/openshift/origin/pull/29700)
* [OCPBUGS-55214](https://issues.redhat.com/browse/OCPBUGS-55214): Fix default cert issuer name for HyperShift in `RouteExternalCertificate` test case [#29698](https://github.com/openshift/origin/pull/29698)
* [OCPEDGE-1680](https://issues.redhat.com/browse/OCPEDGE-1680): Fix failed arbiter tests on ci run [#29691](https://github.com/openshift/origin/pull/29691)
* [OCPBUGS-54906](https://issues.redhat.com/browse/OCPBUGS-54906): Remove [Skipped:Disconnected] from the test name to allow metal ipv6 [#29685](https://github.com/openshift/origin/pull/29685)
* [OCPBUGS-54651](https://issues.redhat.com/browse/OCPBUGS-54651): resources: Add limit exceptions for Istio [#29690](https://github.com/openshift/origin/pull/29690)
* [OCPBUGS-55175](https://issues.redhat.com/browse/OCPBUGS-55175): Add cleanup to MCN test [#29695](https://github.com/openshift/origin/pull/29695)
* [OCPBUGS-55132](https://issues.redhat.com/browse/OCPBUGS-55132): gatewayapicontroller: Increase timeouts [#29693](https://github.com/openshift/origin/pull/29693)
* [OCPBUGS-54951](https://issues.redhat.com/browse/OCPBUGS-54951): MCO-1520: Reintroduction of MachineConfigNode e2e tests [#29683](https://github.com/openshift/origin/pull/29683)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29688](https://github.com/openshift/origin/pull/29688)
* [NE-1970](https://issues.redhat.com/browse/NE-1970): 5 e2e origin tests for gatewayApiController featureGate [#29670](https://github.com/openshift/origin/pull/29670)
* [TRT-2082](https://issues.redhat.com/browse/TRT-2082): Revert "MCO-1520: Add MachineConfigNode e2e tests" [#29682](https://github.com/openshift/origin/pull/29682)
* [OCPBUGS-54906](https://issues.redhat.com/browse/OCPBUGS-54906): Change the test image to registry.k8s.io/e2e-test-images/agnhost [#29672](https://github.com/openshift/origin/pull/29672)
* [OCPEDGE-1675](https://issues.redhat.com/browse/OCPEDGE-1675): feat: update some tests to account for the arbiter node [#29639](https://github.com/openshift/origin/pull/29639)
* [MCO-1636](https://issues.redhat.com/browse/MCO-1636): skip PIS custom pool checks on SNO cluster [#29673](https://github.com/openshift/origin/pull/29673)
* [MCO-1520](https://issues.redhat.com/browse/MCO-1520): Add MachineConfigNode e2e tests [#29596](https://github.com/openshift/origin/pull/29596)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29679](https://github.com/openshift/origin/pull/29679)
* [OCPBUGS-54661](https://issues.redhat.com/browse/OCPBUGS-54661): Route ExternalCertificate: Fix e2e tests for metal platform [#29656](https://github.com/openshift/origin/pull/29656)
* [SPLAT-2060](https://issues.redhat.com/browse/SPLAT-2060): Registered Machine API tests extension [#29579](https://github.com/openshift/origin/pull/29579)
* [MCO-1523](https://issues.redhat.com/browse/MCO-1523): PinnedImageSet v1alpha1 Testing [#29599](https://github.com/openshift/origin/pull/29599)
* [SDN-5217](https://issues.redhat.com/browse/SDN-5217): Add tests for OVN-K default pod network route advertisement [#29419](https://github.com/openshift/origin/pull/29419)
* NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler [#29070](https://github.com/openshift/origin/pull/29070)
* [TRT-2049](https://issues.redhat.com/browse/TRT-2049): Track Watch Counts via Audit Events [#29628](https://github.com/openshift/origin/pull/29628)
* [OAPE-91](https://issues.redhat.com/browse/OAPE-91): Route ExternalCertificate: Skip e2e jobs for bare metal platform [#29651](https://github.com/openshift/origin/pull/29651)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): Reapply "kube-apiserver disruption incluster monitors" [#29282](https://github.com/openshift/origin/pull/29282)
* NO-ISSUE: Automated - Update synthetic test data [#29600](https://github.com/openshift/origin/pull/29600)
* [OCPBUGS-53279](https://issues.redhat.com/browse/OCPBUGS-53279): add failure case to skip in testPodSandboxCreation() [#29631](https://github.com/openshift/origin/pull/29631)
* [CNTRLPLANE-371](https://issues.redhat.com/browse/CNTRLPLANE-371): Use endpointslices in idling tests instead of deprecated endpoints [#29647](https://github.com/openshift/origin/pull/29647)
* [OAPE-91](https://issues.redhat.com/browse/OAPE-91): Add E2E tests for Route ExternalCertificate feature [#29499](https://github.com/openshift/origin/pull/29499)
* [OCPBUGS-53249](https://issues.redhat.com/browse/OCPBUGS-53249): feat: support platform type external [#29623](https://github.com/openshift/origin/pull/29623)
* [MCO-1631](https://issues.redhat.com/browse/MCO-1631): Remove "[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema" [#29643](https://github.com/openshift/origin/pull/29643)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): add synthetic test to check for presence of "Skipped" annotations in OTE tests [#29606](https://github.com/openshift/origin/pull/29606)
* [OCPBUGS-53014](https://issues.redhat.com/browse/OCPBUGS-53014): Bump to kubernetes 1.32.3 [#29612](https://github.com/openshift/origin/pull/29612)
* [NE-1968](https://issues.redhat.com/browse/NE-1968): add e2e tests for FeatureGate GatewayAPI [#29597](https://github.com/openshift/origin/pull/29597)
* NO-ISSUE: Clean up MachineConfiguration fixture apply [#29626](https://github.com/openshift/origin/pull/29626)
* NO-ISSUE: Wait for MachineConfiguration status to be upto date [#29625](https://github.com/openshift/origin/pull/29625)
* [TRT-2052](https://issues.redhat.com/browse/TRT-2052): Fix broken intervals charts [#29616](https://github.com/openshift/origin/pull/29616)
* NO-JIRA: Alert intervals should have the display flag for charting [#29624](https://github.com/openshift/origin/pull/29624)
* [OCPBUGS-52358](https://issues.redhat.com/browse/OCPBUGS-52358): Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com [#29618](https://github.com/openshift/origin/pull/29618)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Fix decoding of CBOR data in etcd test [#29614](https://github.com/openshift/origin/pull/29614)
* [SDN-5768](https://issues.redhat.com/browse/SDN-5768): virt, udn: use l2bridge binding [#29439](https://github.com/openshift/origin/pull/29439)
* [OCPBUGS-52358](https://issues.redhat.com/browse/OCPBUGS-52358): Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration [#29604](https://github.com/openshift/origin/pull/29604)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Decode CBOR data in etcd test [#29601](https://github.com/openshift/origin/pull/29601)
* [MCO-1594](https://issues.redhat.com/browse/MCO-1594): updates for ManagedBootImageStatus [#29598](https://github.com/openshift/origin/pull/29598)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Fix IPsec tests for monitor failures [#29437](https://github.com/openshift/origin/pull/29437)
* [TRT-2026](https://issues.redhat.com/browse/TRT-2026): validate that the binary extraction was successful via existence check [#29595](https://github.com/openshift/origin/pull/29595)
* [OSD-26270](https://issues.redhat.com/browse/OSD-26270): re-enabled managed-upgrade-operator test by removing exclusion [#29585](https://github.com/openshift/origin/pull/29585)
* NO-ISSUE: Automated - Update synthetic test data [#29570](https://github.com/openshift/origin/pull/29570)
* NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests [#29577](https://github.com/openshift/origin/pull/29577)
* [TRT-1575](https://issues.redhat.com/browse/TRT-1575): Fail the test when an expected operator goes to degraded [#29566](https://github.com/openshift/origin/pull/29566)
* [OCPBUGS-52578](https://issues.redhat.com/browse/OCPBUGS-52578): Use payload pullspec for image info test [#29586](https://github.com/openshift/origin/pull/29586)
* [OCPBUGS-51373](https://issues.redhat.com/browse/OCPBUGS-51373): use non-fake boot image for patch [#29574](https://github.com/openshift/origin/pull/29574)
* [Full changelog](https://github.com/openshift/origin/compare/b19e263eee5cb749943ed48c4bcc2fa5172e0096...0a23b777d1ffd646ee1afe8b511281ab03cec831)
### [thanos](https://github.com/openshift/thanos/tree/95f7bb216c27bea9c8001a7b49fbd66d23286f80)
* [MON-4139](https://issues.redhat.com/browse/MON-4139): feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 [#158](https://github.com/openshift/thanos/pull/158)
* [Full changelog](https://github.com/openshift/thanos/compare/73a8770d3a8a174b076b9420a5c04b074f888489...95f7bb216c27bea9c8001a7b49fbd66d23286f80)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/15134035e9bd1e6dde10547cdba8d390d90f1072)
* [OCPBUGS-55700](https://issues.redhat.com/browse/OCPBUGS-55700): UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown [#143](https://github.com/openshift/vmware-vsphere-csi-driver/pull/143)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#141](https://github.com/openshift/vmware-vsphere-csi-driver/pull/141)
* [OCPBUGS-51973](https://issues.redhat.com/browse/OCPBUGS-51973), [OCPBUGS-52808](https://issues.redhat.com/browse/OCPBUGS-52808): CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 [#140](https://github.com/openshift/vmware-vsphere-csi-driver/pull/140)
* [OCPBUGS-46317](https://issues.redhat.com/browse/OCPBUGS-46317), [OCPBUGS-46331](https://issues.redhat.com/browse/OCPBUGS-46331), [OCPBUGS-47367](https://issues.redhat.com/browse/OCPBUGS-47367), [OCPBUGS-47437](https://issues.redhat.com/browse/OCPBUGS-47437): bump golang.org/x/net to v0.33.0 [#138](https://github.com/openshift/vmware-vsphere-csi-driver/pull/138)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/090976c42d86f3a9a5d73ba5578ed47ff4b3442a...15134035e9bd1e6dde10547cdba8d390d90f1072)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c2b41c36105daa94272ff4c5a32ec9d5637626a4)
* [OCPBUGS-53059](https://issues.redhat.com/browse/OCPBUGS-53059): Fix panic issues when LegacyConfig is nil [#304](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/304)
* [SPLAT-2072](https://issues.redhat.com/browse/SPLAT-2072): Removed VSphereMultiVCenters feature gate [#300](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/300)
* [STOR-2141](https://issues.redhat.com/browse/STOR-2141): add support for maxAllowedBlockVolumesPerNode [#287](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/287)
* [STOR-2245](https://issues.redhat.com/browse/STOR-2245): add manifest-topology.yaml for topology related feature and test [#302](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/302)
* [OCPBUGS-44374](https://issues.redhat.com/browse/OCPBUGS-44374): Bump library-go [#301](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/301)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#298](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/298)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#296](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/296)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/13c887c4b00c3267781731d1102e16bb25f65287...c2b41c36105daa94272ff4c5a32ec9d5637626a4)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a32d32242d23ac22c1c8a5419d7de8583db3fcb9)
* [OCPBUGS-52964](https://issues.redhat.com/browse/OCPBUGS-52964): improve datastore check messages [#181](https://github.com/openshift/vsphere-problem-detector/pull/181)
* [SPLAT-1801](https://issues.redhat.com/browse/SPLAT-1801): Add support for host groups [#175](https://github.com/openshift/vsphere-problem-detector/pull/175)
* No-JIRA: Update owners [#178](https://github.com/openshift/vsphere-problem-detector/pull/178)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#177](https://github.com/openshift/vsphere-problem-detector/pull/177)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#179](https://github.com/openshift/vsphere-problem-detector/pull/179)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/cbd85393c50f8248bc0d4e9c4f7308046dd87943...a32d32242d23ac22c1c8a5419d7de8583db3fcb9)