Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.34-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
  • metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.13.33 (changes) - F S F S S S
• 4.13.32 (changes) - Success
• 4.13.31 (changes) - Success
• 4.13.9 - Failed
• 4.13.4 (changes) - Success
• 4.13.3 (changes) - Failed
• 4.13.2 (changes) - Success
• 4.13.1 (changes) - Success
• 4.13.0 (changes) - Success
• 4.12.50 (changes) - Success
• 4.12.49 (changes) - S S S
• 4.12.48 (changes) - Success
• 4.12.43 (changes) - Failed
• 4.12.35 (changes) - Success
• 4.12.30 (changes) - Failed
• 4.12.18 (changes) - Failed
• 4.12.17 (changes) - Success
• 4.12.16 (changes) - Success

Upgrades to:

• 4.14.48 (changes) - Failed
• 4.14.47 (changes) - Failed
• 4.14.43 (changes) - Failed
• 4.14.31 (changes) - Success
• 4.14.17 (changes) - Success
• 4.14.15 (changes) - Success
• 4.14.14 (changes) - S S S
• 4.14.13 (changes) - Failed
• 4.13.56 (changes) - Failed
• 4.13.54 (changes) - Failed
• 4.13.39 (changes) - Failed
• 4.13.37 (changes) - Success
• 4.13.36 (changes) - Failed
• 4.13.35 (changes) - F F F F S S S

---

Loading changelog, this may take a while ...

Changes from 4.13.9

Created: 2024-02-15 15:07:27 +0000 UTC

Image Digest: sha256:04081f0cdc3a98eb9b705aceb86d4a035f7e6ccf6d9d10621776d53134f81c33

Release 4.13.34 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2024-02-15-085635

Components

• Kubernetes upgraded from 1.26.6 to 1.26.13
• Red Hat Enterprise Linux CoreOS upgraded from 413.92.202308091852-0 to 413.92.202402131523-0 (diff)

Rebuilt images without code change

• agent-installer-api-server git 06189bcd sha256:c56941eb6e017a993e8c7d9d6c27d8f894b7684f3d88083cdc6b5db18d339b5b
• alibaba-machine-controllers git 4c0f96a6 sha256:68a1449660936e7c5888664648e6865d3f6b3480d215c4ea1aa9fd15d0466cb2
• cluster-bootstrap git ee908b6b sha256:299a80934d32f7071278bcddf203e1093f97b18674b4008bda41fc717f1ac801
• cluster-update-keys git 5b725937 sha256:4a8ecbb550013f26eb0edcb57f4d9118c016999b5e54c2740d11199ef9e8dde6
• configmap-reloader git 9adad592 sha256:ad73b2f73a14cc3594d60ec7fe860a639a0ddd1bce353d052232688db937e8e5
• csi-driver-nfs git 2b914c21 sha256:22d6e2178484d610fa3f0eb5eca39212c88b6f2f8880abecee2f5faf152a0d43
• driver-toolkit git d719bdcf sha256:abe1d0cd5e0125da726635cc83ef861020ae6218c22c9f66825a6f62e5c9ecab
• ibmcloud-machine-controllers git bb253a0c sha256:a4334965b90b372c5253c97a583b93b9d8435b5ebfbc0b1a05158d81b2cca9b9
• ironic-machine-os-downloader git ce291779 sha256:b9d245c369fa64d10feb182f9173350c96150e9130b8b17bad9d1288ce60240b
• ironic-static-ip-manager git 4536724a sha256:4d2cb626c20b98f977a4880e067f63fd9647a82873acd67a0e68bd3f7e9b8c13
• kube-storage-version-migrator git bad104d1 sha256:d60926f8e512e926128d226f944a87225635f38bd73febc2f5e7630ae0a2656d
• kubevirt-cloud-controller-manager git ee2033ec sha256:653f4e0dc5159b8a02d23f61aa71c4b1be28279dbfed54c3794c57bebd109abc
• kubevirt-csi-driver git efa0b943 sha256:6ec02ae28220f2fddf5a989e6c84247937bcd3efebe3e8a680b76a8547523c11
• kuryr-cni git 36754b7b sha256:dfaba21ae3131e095bee8d474656d1ce177e8974c23307dced8f3689717cba75
• kuryr-controller git 36754b7b sha256:1015096c314e1eaaaa07d7ce3b1413b0ca37dd04cd85eaca5f899fec1ddc23bf
• machine-os-content sha256:984630a308a76a7096b69304462a823c8aaa298984d224b16690350a8eac0e43
• machine-os-images git b14856ff sha256:b0c510772dd4c444524f947fe5ee5b49b51120d6d0baad92e6e5799e8adee0e6
• multus-route-override-cni git ca3bbec5 sha256:5d685fbaa7fb057bc802cfa5f1a215924954453cf4dcf88ac3595885c658189a
• network-interface-bond-cni git 84bda2af sha256:cf9b865094060cc3d313d73c42a351d824e663ff4563cb37d90ca90058b9f617
• network-tools git 073feda1 sha256:2a2beb122de1a39fddd1330280f5b64c77c7b58db2b248c5fb4f14ae928c3c03
• nutanix-cloud-controller-manager git 4d1c58e2 sha256:4823ad55cc5b367a63a08f4ab08da04011a860897cc410c46c33d8a3b58c2fd8
• oauth-apiserver git 41c2dfea sha256:08753fb11cbd0205ac16edccf80c73fd3ccb6944b069513cab81814fb22153f2
• oauth-proxy git 44af5a3a sha256:2c87e6b2a54f3d1ad2ddf45ee729da80ff63b71df027b9e31c1f492350a417bb
• openshift-controller-manager git 385057e5 sha256:0f88e6c02de4071218b2cd7cd63aa254f7d46c31f1927c1d9edeee0e2948a1f4
• ovirt-machine-controllers git 22d89b3f sha256:f219f669e46e408d7e11d61b0a192dd914aa62a91f7529cf759bf6387e9768e7
• prom-label-proxy git b501d5e2 sha256:3c452256b0e5924f1b6735d4635c7e16fb899cfee750810ee0099f1c806599ac
• rhel-coreos sha256:8ef2f7f5d51594a56eb6b2ac13aa0d1513e533fe99ceda9a7f6c397c8ae5ef06
• rhel-coreos-extensions sha256:d8c409dfa01953da96f5a35b15c22e6f61ce472acb220a5450158c3cc013dc5e
• route-controller-manager git 6667a6cb sha256:a7732fb7852d9bd1547d9addaba63ac7641b3f87f62abec73e406c8d240345d4

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
• Full changelog

agent-installer-node-agent

• MGMT-13111: Freeze on 404 Not Found (#628) #628
• OCPBUGS-16373: Ignore arping errors on RHEL 9 (#577) #577
• MGMT-15661: Update to latest ghw version (#594) (#596) #594
• Full changelog

alibaba-cloud-controller-manager

• OCPBUGS-21238: Bump golang.org/x/net to v0.19.0 #43
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
• Full changelog

apiserver-network-proxy

• HOSTEDCP-1323: Merge latest code into 4.14 branch #45
• OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-27964: bump go.opentelemetry.io #72
• OCPBUGS-20738: Update golang.org/x/net to v0.17.0 #54
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
• Full changelog

aws-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #96
• OCPBUGS-21568: Update golang.org/x/net to v0.17.0 #89
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-21331: Upgrade golang/x/net for CVE-2023-39325 #184
• NO-ISSUE: Sync OWNERS with team members #177
• snyk: exclude vendor/ #172
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-21503: bump golang.org/x/net to v0.17.0 #288
• Full changelog

azure-disk-csi-driver

• OCPBUGS-23216: Update to v1.26.7 #63
• OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-20766: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #102
• Full changelog

azure-file-csi-driver

• OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
• Full changelog

azure-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #89
• OCPBUGS-20758: Bump x/net package to v0.18.0 #83
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-27453: baremetal: correct external_http_url for v6-only BMCs #7934
• OCPBUGS-23499: update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 #7920
• OCPBUGS-25420: destroy: gcp: fix destroying regional disks #7840
• OCPBUGS-23464: Add KMS encryption keys if provided #7746
• OCPBUGS-23141: Specify google cloud CLI to version 447.0.0 #7706
• OCPBUGS-22939: azure: validation: validate defaultMachinePlatform #7679
• OCPBUGS-14551: [vSphere] Upi installation failed due to VMs for master and worker node creation failed #7229
• OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
• OCPBUGS-18787: vSphere set bootstrap/master efi #7481
• OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
• OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
• OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
• OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
• OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
• OCPBUGS-13681: FCOS: bump to latest stable version #7188
• OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
• OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
• OCPBUGS-15231: new Aws secret regions support #7264
• OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
• OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
• OCPBUGS-14432: Replica validations #7423
• OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
• OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
• OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21701: Uplift x/net to v0.17.0 #199
• Full changelog

baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
• OCPBUGS-21167: Uplift x/net to v0.17.0 #309
• OCPBUGS-17365: Trigger reconcile on Secret change #295
• OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
• Full changelog

baremetal-runtimecfg

• OCPBUGS-26929: Add .snyk file to ignore vendor and test files #295
• OCPBUGS-22207: deps: upgrade x/sys #282
• OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
• OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
• OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-25418: Add client version in must-gather summary #1635
• OCPBUGS-24461: Overwrite template’s namespace with the explicit one #1617
• AUTH-443: Add OAuth2 Authorization Code Grant Flow for login #1599
• OCPBUGS-22815: regeneratemco: explicitly check for PlatformStatus field #1593
• OCPBUGS-20298: Use quay redis image instead docker mysql #1566
• OCPBUGS-19942: Truncate existing files when writing from inspect #1553
• OCPBUGS-13527: Bump x org deps 4.13 #1422
• Full changelog

cloud-credential-operator

• OCPBUGS-27912: Resolve all outstanding snyk vulnerabilities #651
• NO-JIRA: Removing andrew from OWNERS #644
• OCPBUGS-25369: Discover AWS dns suffix from partition and region. #640
• OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
• snyk: exclude vendor/ #616
• Full changelog

cloud-network-config-controller

• OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
• Full changelog

cluster-authentication-operator

• OCPBUGS-28760: Fix http2 [4.13] #654
• AUTH-443: Add openshift-cli-client OAuth Client #641
• OCPBUGS-22210: increase timeout for probes #638
• Full changelog

cluster-autoscaler

• OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-20770: Bump x/net package to v0.18.0 #299
• OCPBUGS-17056: Address long acquire times during update #289
• Full changelog

cluster-baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
• OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
• OCPBUGS-20867: Uplift x/net to v0.17.0 #370
• OCPBUGS-19369: Guard against nil PlatformStatus #363
• Full changelog

cluster-capi-controllers

• OCPBUGS-21531: bump golang.org/x/net to v0.17.0 #185
• Full changelog

cluster-capi-operator

• OCPBUGS-21082: bump golang.org/x/net to v0.17.0 #137
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-21169: Bump golang.org/x/net to v0.18.0 #296
• Full changelog

cluster-config-operator

• : OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 #372
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-21364: Bump golang.org/x/net to v0.17.0 #259
• OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
• OCPBUGS-17055: Address long acquire times during update #240
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Set DNS DaemonSet’s maxSurge value to 10% #366
• OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
• Full changelog

cluster-etcd-operator

• OCPBUGS-23572: Add annotation in the etcd-guard static pod for worklo… #1163
• OCPBUGS-23106: [4.13] Remove z-upgrades from UpgradeBackupController #1154
• Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
• OCPBUGS-22783: relax readiness to local serializable requests #1144
• OCPBUGS-23044: remove revision stability check from bootstrap complet… #1151
• OCPBUGS-21155: fixing CVE-2023-39325 by updating dependencies #1143
• OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
• OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
• OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
• Full changelog

cluster-image-registry-operator

• OCPBUGS-22126: increase storage account key cache expiration #940
• OCPBUGS-20698: mitigate effects of rapid reset #946
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-24023: Add workload partitioning annotation #1591
• : OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 #1573
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
• OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-20981: bump golang.org/x/net to v0.17.0 #28
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-27066: bump(library-go)=release-4.13 #788
• OCPBUGS-21103: Drop flags removed in k8s 1.26 [4.13] #766
• OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-27065: bump(library-go)=release-4.13 #528
• OCPBUGS-21811: Bump deps to address CVE-2023-44487 #502
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 #97
• Full changelog

cluster-machine-approver

• OCPBUGS-21447: Bump x/net package to v0.18.0 #213
• OCPBUGS-23368: Filter non node CSRs in metrics #210
• Full changelog

cluster-monitoring-operator

• OCPBUGS-25388: Add RHACM telemetry metric for 4.13 #2203
• OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
• OCPBUGS-22920: jsonnet: pin commits #2144
• OCPBUGS-22842: [release-4.13] add RHACS telemetry metrics #2139
• OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• OCPBUGS-22099: Extend remote write test timeout #2127
• Full changelog

cluster-network-operator

• OCPBUGS-29301: Update ingressconfig_controller to use field Manager #2267
• OCPBUGS-28208: ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) #2222
• OCPBUGS-28777: fix whereabouts conformance test failures #2241
• OCPBUGS-27958: Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2220
• NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 #2229
• OCPBUGS-22293: remove all managed fields used by old manager #2094
• OCPBUGS-24570: Disable weak SSH cipher suitesRm weak ciphers 4.13 #2163
• OCPBUGS-21716: Bump golang.org/x/net and github.com/openshift/library-go #2123
• OCPBUGS-22896: run update-codegen after adding maxLogFiles cfg #2162
• OCPBUGS-22971: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2098
• OCPBUGS-22896: Remove oldest ovn acl log files when file limit exceeded #2097
• SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
• OCPBUGS-20278: Edited multus-admission-controller deployment config to not add autoount a service account token #1885
• OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
• OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
• OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
• OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
• OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
• OCPBUGS-17721: Enhance check controller to remove old check objects #1950
• OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
• Full changelog

cluster-node-tuning-operator

• Disable HTTP/2 for webhook and metrics servers (#846) #846
• Remove obsolete protocols and weak ciphers (#843) #843
• OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
• Use RHEL9 as a base (#829) #829
• OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
• nto: avoid timeout when there are too many CSV (#818) #818
• OCPBUGS-19459: check for object being nil (#820) #820
• Add kubeconfig path for IBM Managed OpenShift (#814) #814
• OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
• OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
• Sync DaemonSet if operand image changes (#786) #786
• Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
• OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
• Revert “Release leader election on manager exit (#773)” (#797) #773
• Release leader election on manager exit (#773) #773
• Tighten the rules for modifying Tuned Profiles (#766) #766
• OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
• update tsc karg to tsc=reliable (#757) #757
• OCPBUGS-17845: deflake ht aware test (#763) #763
• OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
• Improve render error handling (#755) #755
• nto:tuned: remove sched_min_granularity_ns settings (#726) #726
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 #555
• OCPBUGS-22210: increase timeout for probes #553
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-20796: bump(k8s,openshift) to address CVE-2023-44487 #310
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
• Full changelog

cluster-policy-controller

• OCPBUGS-21103: Bump deps to address CVE-2023-44487 [4.13] #135
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• Full changelog

cluster-storage-operator

• OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
• OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
• OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
• Full changelog

cluster-version-operator

• OCPBUGS-27049: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1019
• OCPBUGS-20744: [4.13] Bump http-related deps #989
• OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
• OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
• OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
• OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
• Full changelog

console

• OCPBUGS-29243: Add a new allowInsecure option to the internet proxy #13593
• OCPBUGS-27406: Add Pipeline metrics tab using plugin #13525
• OCPBUGS-23483: add access to create, edit and delete silences for developer user from developer perspective #13349
• OCPBUGS-25427: Fix plugin proxy handler #13449
• OCPBUGS-25465: fix runtime error on Node details Overview when Machin… #13452
• OCPBUGS-25146: add access review for impersonate #13437
• OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #13424
• OCPBUGS-22241: Save also the location.search and .hash values in localStorage to restore them after login #13271
• OCPBUGS-24240: Subsequent PipelineRuns take initial PipelineRun name into account #13385
• OCPBUGS-23497: Cannot Edit Shipwright Build #13352
• OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
• OCPBUGS-22986: Correct logout process #13310
• OCPBUGS-23065: remove expandable toggle for conditional update risk d… #13316
• OCPBUGS-22784: add support for new features annotations while preservi… #13299
• OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
• OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
• OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
• OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
• OCPBUGS-20330: Check if filtered object contains name property #13227
• OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
• OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
• OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
• OCPBUGS-18538: OCP console mandate secret for repository creation #13135
• OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
• OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
• OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
• OCPBUGS-18312: Web console slowness on Project>Project access page #13119
• OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
• OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
• OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
• OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
• Full changelog

console-operator

• OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #821
• OCPBUGS-22333: Make enabled plugins unique #805
• OCPBUGS-18972: Manual backport of #761 #793
• OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
• OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
• OCPBUGS-14039: Backport #774 and #763 #779
• Full changelog

container-networking-plugins

• OCPBUGS-20594: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] #130
• OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
• Full changelog

coredns

• OCPBUGS-28205: UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 #113
• OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
• OCPBUGS-19985: UPSTREAM: <carry>: openshift: Fix OCPBUGS-19985 #97
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• Switch to a new CI #2444
• Full changelog

csi-driver-manila-operator

• OCPBUGS-16250: Add management workloads annotations #195
• OCPBUGS-17160: Don’t cache OpenStack client #196
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #168
• OCPBUGS-23116: Should reference configmaps instead of secrets #153
• OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-28958: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #104
• OCPBUGS-20806: bump golang.org/x/net to v0.17.0 #87
• Full changelog

csi-external-attacher

• OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
• Full changelog

csi-external-provisioner

• OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
• Full changelog

csi-external-resizer

• OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
• Full changelog

csi-livenessprobe

• OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

docker-builder

• OCPBUGS-22468: [release-4.13] Bump github.com/sigstore/rekor #374
• OCPBUGS-23021: Add -p flag to cp command to preserve timestamps #371
• OCPBUGS-20709: [release-4.13] Bump golang.org/x/net #363
• Full changelog

docker-registry

• OCPBUGS-19655: increase rest.Config QPS and Burst #383
• OCPBUGS-18321: bump docker-distribution #376
• Full changelog

egress-router-cni

• OCPBUGS-11648: update go-yaml to v2.4.0 #68
• Full changelog

etcd

• OCPBUGS-26925: Rebase etcd 3.5.11 openshift 4.13 #239
• OCPBUGS-22697: [4.13] Carrying fixes for CVE-2023-44487 #225
• OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
• OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-21303: Bump golang.org/x/net to v0.18.0 #43
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-21398: Bump golang.org/x/net to v0.17.0 #204
• Full changelog

gcp-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality. #74
• OCPBUGS-20851: Bump x/net package to v0.18.0 #68
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
• OCPBUGS-17107: properly handle weight=0 #501
• Full changelog

hyperkube, pod

• OCPBUGS-12210: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1876
• OCPBUGS-27370: Update to kubernetes 1.26.13 #1859
• OCPBUGS-25814: Fix device uncertain errors on reboot - 4.13 #1831
• OCPBUGS-25988: Update to kubernetes 1.26.12 #1839
• OCPBUGS-25767: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1834
• OCPBUGS-23521: UPSTREAM: <carry>: support for both icsp and idms objects #1798
• OCPBUGS-23567: Update to kubernetes 1.26.11 #1809
• OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
• OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
• openshift-hack: Fix sporadic 141 errors in build-rpms #1773
• OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
• OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
• OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
• OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
• OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
• OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
• Full changelog

hypershift

• HOSTEDCP-1146: cpo: use CPO spec container image if it is a sha256 reference #3296
• OCPBUGS-22971: Add konnectivity-proxy container to CNO #3167
• OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
• NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
• chore(deps): update rhtap references (release-4.13) #3043
• Update RHTAP references (release-4.13) #2996
• OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
• OCPBUGS-16225: Add missing probes to two services #2821
• fix(olm): Use 4.13 catalog source images #2978
• Updated secret permissions for openshift-route-controller-manager #2923
• HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
• chore(deps): update rhtap references (release-4.13) #2921
• Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
• chore(deps): update rhtap references (release-4.13) #2904
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-24999: Add Snyk file to exclude vendor directory on scan #66
• OCPBUGS-21137: Bump golang.org/x/net to v0.18.0 #56
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #47
• OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-21418: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #66
• Full changelog

insights-operator

• OCPBUGS-23962: adds helm information gather (#868) (#883) #868
• OCPBUGS-22958: adds cluster storageclasses gather (#858) (#875) #858
• OCPBUGS-22953: create Prometheus rules programmatically according the… (#860) #860
• OCPBUGS-22914: remove username & password config options (#859) #859
• OCPBUGS-20750: update dependencies (#840) #840
• Add cherry-pick from 4.14 (#848) #848
• OCPBUGS-19476: update Insights report config logging (#828) #828
• OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
• Full changelog

ironic

• OCPBUGS-29190: Fix Inspector iPXE config for IPv6 addresses #453
• OCPBUGS-23978: Ironic side of external_http_url (METAL-163) is not wired in correctly #430
• OCPBUGS-23506: Uplift eventlet version #427
• OCPBUGS-23356: Upgrade werkzeug dependency #422
• OCPBUGS-19078: Handle Eject DVD 4.13 #416
• OCPBUGS-23072: Use bash process substitution instead of pipe #413
• OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
• OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
• OCPBUGS-17551: Expand regex for fcos/okd packages list #390
• Full changelog

ironic-agent

• OCPBUGS-19006: backport hostname fixes #89
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
• OCPBUGS-20405: limit number of simultaneous client requests #78
• Full changelog

keepalived-ipfailover

• OCPBUGS-6236: Updating openshift-enterprise-egress-router images to be consistent with ART #121
• Full changelog

kube-proxy, sdn

• OCPBUGS-20771: update x/net to v0.17.0 #590
• OCPBUGS-22932: Change the permission of 80-openshift-network.conf to 600 #582
• OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
• Full changelog

kube-rbac-proxy

• OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
• Full changelog

kube-state-metrics

• OCPBUGS-20778: bump x/net to v0.17.0 #102
• Full changelog

libvirt-machine-controllers

• “OCPBUGS-19927: libvirt: Don’t force use of virtio console” #268
• Full changelog

machine-api-operator

• OCPBUGS-25165: Add Snyk file to exclude vendor directory on scan #1194
• OCPBUGS-24277: Update reference URL #1188
• OCPBUGS-24277: Use docs URL instead of KCS article #1181
• OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
• Full changelog

machine-config-operator

• OCPBUGS-28740: crio: drop automatic image cleanup on upgrades #4154
• OCPBUGS-29151: fix nodeStatusUpdateFrequency #4170
• OCPBUGS-24661: daemon: Add support for new nmstate logic #4036
• OCPBUGS-27816: use *resource.Quantity to not automatically set 0 #4141
• OCPBUGS-22272, OCPBUGS-27172: kubelet: fix kubelet labels #4120
• OCPBUGS-27096: Azure Run ovs-configuration.service before dnsmasq.service #4115
• OCPBUGS-19658: After dual-stack conversion reconcile IPFamilies #3935
• OCPBUGS-23468: support icsp and idms objects #4027
• OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
• OCPBUGS-21052: Update library-go and kube deps to latest version #4011
• OCPBUGS-22205: Consider ingress VIPs when selecting node IP #3991
• OCPBUGS-18031: on-prem: run resolv-prepender on NM reapply event #3880
• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
• OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
• OCPBUGS-18803: Soften grep pattern for ingress default router #3908
• OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
• OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
• OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
• OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
• OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
• OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
• OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
• OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
• OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
• OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
• OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
• Full changelog

machine-image-customization-controller

• OCPBUGS-27089: configurable ironic agent vlan creation #117
• OCPBUGS-21549: Uplift x/net to v0.17.0 #105
• OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
• OCPBUGS-14250: Watch networkData Secrets for changes #95
• Full changelog

multus-admission-controller

• OCPBUGS-21353: Update go.mod for CVE-2023-39325 [Release-4.13] #72
• Full changelog

multus-cni

• OCPBUGS-21076: Update go.mod for CVE-2023-39325 [Release-4.13] #195
• Full changelog

multus-networkpolicy

• OCPBUGS-21438: Update go.mod for CVE-2023-39325 (#35) #35
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-27958: Enable reconciler configuration #241
• OCPBUGS-27367: [release-4.13] Backport fix assignment #236
• OCPBUGS-21512: update golang.org/x/net to v0.17.0 #208
• Full changelog

must-gather

• OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#90) #90
• Update the k8s dependencies to 1.26.10 (#83) #83
• Full changelog

nutanix-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #59
• OCPBUGS-25459: Fix CI by running tests natively by default #60
• Full changelog

oauth-server

• AUTH-443: update osin to latest version #139
• Full changelog

oc-mirror

• OCPBUGS-385: Capability to override default channel (#749) (#791) #749
• OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#775) #775
• OCPBUGS-21460: Fix CVE-2023-44487 and CVE-2023-39325 (#714) #714
• Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
• Fix OCPBUGS-14402 (#675) #675
• OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
• OCPBUGS-18106: manual cherrypick (#684) #684
• OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
• OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
• Full changelog

olm-rukpak

• : OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 #75
• OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
• OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
• UPSTREAM: <carry>: add downstream owners #42
• Full changelog

openshift-apiserver

• : OCPBUGS-21449: Enable HTTP/2 CVE mitigation #398
• Full changelog

openshift-state-metrics

• OCPBUGS-20723: bump x/net to v0.17.0 #108
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
• OCPBUGS-16250: Add management workloads annotations #125
• OCPBUGS-17071: Fix SCC admission failure race during initial deployment #124
• Full changelog

openstack-machine-api-provider

• Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-27564, OCPBUGS-27569, OCPBUGS-27649, OCPBUGS-27654: bump go-git/v5 to 5.11.0 #682
• OCPBUGS-28228: Registry Pod Controller Flag #672
• OCPBUGS-27891: [CARRY] SSC RBAC #669
• OCPBUGS-8653: bump golang-migrate to v4.16.1 (#1107) #649
• OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
• OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
• OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
• OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
• Introduce DOWNSTREAM_OWNERS file #538
• Full changelog

operator-marketplace

• OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
• OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
• OCPBUGS-18502: remove a race condition #532
• Full changelog

ovirt-csi-driver

• OCPBUGS-23155: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-23241: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #127
• OCPBUGS-16250: Add management workloads annotations #120
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-25611: Avoid panic due to stale ACLs with 1013 priority #1987
• OCPBUGS-27257: Ensure session affinity cleanup on backend removal #2022
• OCPBUGS-27736: CARRY: Updates owners and adds Surya #2024
• OCPBUGS-24419: OVNK/GW: Ignore headless services in syncServices #1971
• OCPBUGS-23258: Update leaderelection config to allow retries #1992
• OCPBUGS-26242: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2011
• OCPBUGS-25923: Forward ICMP packets to OVN loadbalancer #2004
• OCPBUGS-25224: [release-4.13] fixes MTU configuration on gateway router #1988
• OCPBUGS-14799: Updating endpoints when using allocateLBNP=0, lgw mode fails #1940
• OCPBUGS-25095: Fragment oversized reply packets in LGW mode #1983
• OCPBUGS-24391: Limit OVN-Kubernetes RBAC permissions #1950
• OCPBUGS-23014: Netpol retryFramework cleanup #1957
• OCPBUGS-24263: Bump OVN to 23.06.1-39.el9fdp #1966
• OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
• OCPBUGS-20047: Adjust python ssl library dependency check #1924
• OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
• OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
• OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
• OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
• OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
• OCPBUGS-17123: Remove stale egressip status entry #1793
• OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
• OCPBUGS-17910: Emit node events only when retry failure #1825
• OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
• Full changelog

powervs-block-csi-driver

• OCPBUGS-24728: synk: ignore vendor dir #61
• OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
• Update OWNERS add yussufsh #54
• Updated golang.org/x/net/html dependency. #44
• Openshiftrelease 4.13 #41
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-25716: snyk: ignore vendor dir #61
• OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
• Update OWNERS add yussufsh #45
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-24731: UPSTREAM: <carry>: snyk code scan exclude vendor directory #53
• OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
• Full changelog

powervs-machine-controllers

• OCPBUGS-24741: snyk code scan exclude vendor directory #64
• OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
• Full changelog

prometheus

• OCPBUGS-26423: Add Exemplars support for all time series #191
• OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
• Full changelog

prometheus-alertmanager

• OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20861: Bump golang.org/x/net to v0.17.0 #248
• Full changelog

prometheus-node-exporter

• OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
• OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
• Full changelog

service-ca-operator

• OCPBUGS-28759: Fix HTTP/2 (4.13) #232
• Full changelog

telemeter

• OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
• Full changelog

tests

• AUTH-443: Add oauth-server redirect URI validation e2e tests #28396
• OCPBUGS-19378: [4.13] backport etcd restore tests #28267
• Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
• OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
• OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
• Full changelog

thanos

• OCPBUGS-27206: Bump otel/http to 0.44.0 [openshift-4.13.z] #138
• OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-21506: Bump golang.org/x/net to v0.18.0 #55
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-21556: bump golang.org/x/net to v0.17.0 #23
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
• OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
• OCPBUGS-18332: disable controller hostNetwork #166
• Full changelog

vsphere-problem-detector

• OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.20.0-0.nightly-2025-04-25-0215234.20.0-0.nightly-2025-04-24-1510314.20.0-0.nightly-2025-04-24-0301294.20.0-0.nightly-2025-04-23-1656124.20.0-0.nightly-2025-04-23-0609584.20.0-0.nightly-2025-04-22-1836184.20.0-0.nightly-2025-04-17-1812034.20.0-0.nightly-2025-04-09-1620084.20.0-0.nightly-2025-04-09-1220084.20.0-0.nightly-2025-04-09-0820084.20.0-0.nightly-2025-04-09-001421───4.20.0-0.konflux-nightly-2025-04-17-181101───4.20.0-0.ci-2025-04-25-0347534.20.0-0.ci-2025-04-24-2147524.20.0-0.ci-2025-04-24-1547514.20.0-0.ci-2025-04-24-0947514.20.0-0.ci-2025-04-24-0347514.20.0-0.ci-2025-04-23-2147514.20.0-0.ci-2025-04-23-1547514.20.0-0.ci-2025-04-23-0947514.20.0-0.ci-2025-04-23-0347514.20.0-0.ci-2025-04-22-2147514.20.0-0.ci-2025-04-22-1547514.20.0-0.ci-2025-04-22-094751───4.19.0-0.nightly-2025-04-25-0138024.19.0-0.nightly-2025-04-24-1205454.19.0-0.nightly-2025-04-24-0058374.19.0-0.nightly-2025-04-23-1038234.19.0-0.nightly-2025-04-23-0109564.19.0-0.nightly-2025-04-22-1025554.19.0-0.nightly-2025-04-17-1545524.19.0-0.nightly-2025-04-14-2141454.19.0-0.nightly-2025-04-10-0316214.19.0-0.nightly-2025-04-08-1633204.19.0-0.nightly-2025-04-08-0355034.19.0-0.nightly-2025-04-04-170728───4.19.0-0.konflux-nightly-2025-04-17-1812464.19.0-0.konflux-nightly-2025-04-16-0850294.19.0-0.konflux-nightly-2025-04-04-1153514.19.0-0.konflux-nightly-2025-04-04-0442334.19.0-0.konflux-nightly-2025-04-04-0042334.19.0-0.konflux-nightly-2025-04-03-170915───4.19.0-0.ci-2025-04-25-0405114.19.0-0.ci-2025-04-24-2205114.19.0-0.ci-2025-04-24-1605094.19.0-0.ci-2025-04-24-1005084.19.0-0.ci-2025-04-24-0405084.19.0-0.ci-2025-04-23-2205084.19.0-0.ci-2025-04-23-1605084.19.0-0.ci-2025-04-23-1005084.19.0-0.ci-2025-04-23-0405084.19.0-0.ci-2025-04-22-2205084.19.0-0.ci-2025-04-22-1605084.19.0-0.ci-2025-04-22-100508───4.18.0-0.nightly-2025-04-24-0718414.18.0-0.nightly-2025-04-23-1806284.18.0-0.nightly-2025-04-23-0911314.18.0-0.nightly-2025-04-23-0026384.18.0-0.nightly-2025-04-22-1341154.18.0-0.nightly-2025-04-17-1811054.18.0-0.nightly-2025-04-15-1617284.18.0-0.nightly-2025-04-13-1429464.18.0-0.nightly-2025-04-11-2247044.18.0-0.nightly-2025-04-11-134821───4.18.0-0.konflux-nightly-2025-04-25-0556214.18.0-0.konflux-nightly-2025-04-24-2256244.18.0-0.konflux-nightly-2025-04-24-1856244.18.0-0.konflux-nightly-2025-04-24-1456244.18.0-0.konflux-nightly-2025-04-24-1056244.18.0-0.konflux-nightly-2025-04-24-065624───4.18.0-0.ci-2025-04-25-0028134.18.0-0.ci-2025-04-24-1828134.18.0-0.ci-2025-04-24-1103104.18.0-0.ci-2025-04-24-0340424.18.0-0.ci-2025-04-23-2053394.18.0-0.ci-2025-04-23-1453394.18.0-0.ci-2025-04-23-0853394.18.0-0.ci-2025-04-23-0022594.18.0-0.ci-2025-04-22-124212───4.17.0-0.nightly-2025-04-24-1940304.17.0-0.nightly-2025-04-24-1126554.17.0-0.nightly-2025-04-24-0253214.17.0-0.nightly-2025-04-23-1526094.17.0-0.nightly-2025-04-23-0759154.17.0-0.nightly-2025-04-22-2114014.17.0-0.nightly-2025-04-22-0349074.17.0-0.nightly-2025-04-20-1530094.17.0-0.nightly-2025-04-17-2311274.17.0-0.nightly-2025-04-17-1911054.17.0-0.nightly-2025-04-17-0929444.17.0-0.nightly-2025-04-16-0351394.17.0-0.nightly-2025-04-15-0249394.17.0-0.nightly-2025-04-14-0531114.17.0-0.nightly-2025-04-11-2216314.17.0-0.nightly-2025-04-11-1430404.17.0-0.nightly-2025-04-11-095135───4.17.0-0.konflux-nightly-2025-04-25-0523014.17.0-0.konflux-nightly-2025-04-25-0123014.17.0-0.konflux-nightly-2025-04-24-2123014.17.0-0.konflux-nightly-2025-04-15-1242444.17.0-0.konflux-nightly-2025-04-15-0842444.17.0-0.konflux-nightly-2025-04-15-044244───4.17.0-0.ci-2025-04-25-0728174.17.0-0.ci-2025-04-25-0052534.17.0-0.ci-2025-04-24-1852534.17.0-0.ci-2025-04-24-1252534.17.0-0.ci-2025-04-24-0652534.17.0-0.ci-2025-04-24-0026014.17.0-0.ci-2025-04-23-1443544.17.0-0.ci-2025-04-23-0843544.17.0-0.ci-2025-04-23-0243544.17.0-0.ci-2025-04-22-1925124.17.0-0.ci-2025-04-22-132512───4.16.0-0.nightly-2025-04-24-2009094.16.0-0.nightly-2025-04-24-0431424.16.0-0.nightly-2025-04-23-2209364.16.0-0.nightly-2025-04-23-0800514.16.0-0.nightly-2025-04-22-2349344.16.0-0.nightly-2025-04-17-1818554.16.0-0.nightly-2025-04-16-0048374.16.0-0.nightly-2025-04-12-2227184.16.0-0.nightly-2025-04-12-1339494.16.0-0.nightly-2025-04-11-090415───4.16.0-0.ci-2025-04-24-2352144.16.0-0.ci-2025-04-24-1624454.16.0-0.ci-2025-04-24-0438534.16.0-0.ci-2025-04-23-2235114.16.0-0.ci-2025-04-23-1635114.16.0-0.ci-2025-04-23-0924474.16.0-0.ci-2025-04-23-0129064.16.0-0.ci-2025-04-22-1929064.16.0-0.ci-2025-04-22-132906───4.15.0-0.nightly-2025-04-24-0834004.15.0-0.nightly-2025-04-23-0337174.15.0-0.nightly-2025-04-22-2100014.15.0-0.nightly-2025-04-22-0910094.15.0-0.nightly-2025-04-21-2226314.15.0-0.nightly-2025-04-17-1819254.15.0-0.nightly-2025-04-17-0108144.15.0-0.nightly-2025-04-16-032433───4.15.0-0.konflux-nightly-2025-04-11-1932164.15.0-0.konflux-nightly-2025-04-09-132251───4.15.0-0.ci-2025-04-24-2225214.15.0-0.ci-2025-04-24-1548314.15.0-0.ci-2025-04-24-0832234.15.0-0.ci-2025-04-24-0232234.15.0-0.ci-2025-04-23-0804034.15.0-0.ci-2025-04-22-1908184.15.0-0.ci-2025-04-22-130818───4.14.0-0.nightly-2025-04-24-0840034.14.0-0.nightly-2025-04-24-0125484.14.0-0.nightly-2025-04-23-1956074.14.0-0.nightly-2025-04-23-1442294.14.0-0.nightly-2025-04-23-0743134.14.0-0.nightly-2025-04-22-1750244.14.0-0.nightly-2025-04-22-1134154.14.0-0.nightly-2025-04-17-1815504.14.0-0.nightly-2025-04-13-0827124.14.0-0.nightly-2025-04-11-060520───4.14.0-0.ci-2025-04-25-0517324.14.0-0.ci-2025-04-24-2056154.14.0-0.ci-2025-04-24-1456154.14.0-0.ci-2025-04-24-0541034.14.0-0.ci-2025-04-23-2340514.14.0-0.ci-2025-04-23-1632104.14.0-0.ci-2025-04-23-0757514.14.0-0.ci-2025-04-22-2206214.14.0-0.ci-2025-04-22-110102───4.13.0-0.nightly-2025-04-24-2353324.13.0-0.nightly-2025-04-23-1507204.13.0-0.nightly-2025-04-22-2323594.13.0-0.nightly-2025-04-22-1221024.13.0-0.nightly-2025-04-22-0444244.13.0-0.nightly-2025-04-21-0245304.13.0-0.nightly-2025-04-17-1815504.13.0-0.nightly-2025-04-12-1239534.13.0-0.nightly-2025-04-11-1437434.13.0-0.nightly-2025-04-11-081421───4.13.0-0.ci-2025-04-25-0437554.13.0-0.ci-2025-04-24-1633274.13.0-0.ci-2025-04-23-1416424.13.0-0.ci-2025-04-22-2243414.13.0-0.ci-2025-04-22-1333414.13.0-0.ci-2025-04-22-0426234.13.0-0.ci-2025-04-21-2027194.13.0-0.ci-2025-04-21-1355094.13.0-0.ci-2025-04-19-0121434.13.0-0.ci-2025-04-18-0736324.13.0-0.ci-2025-04-17-202315───4.12.0-0.nightly-2025-04-24-1443334.12.0-0.nightly-2025-04-24-0614104.12.0-0.nightly-2025-04-17-0824094.12.0-0.nightly-2025-04-17-0108264.12.0-0.nightly-2025-04-15-0957494.12.0-0.nightly-2025-04-15-0328174.12.0-0.nightly-2025-04-12-1742164.12.0-0.nightly-2025-04-11-1137294.12.0-0.nightly-2025-03-31-0828434.12.0-0.nightly-2025-03-31-022843───4.12.0-0.ci-2025-04-25-0636124.12.0-0.ci-2025-04-24-1955404.12.0-0.ci-2025-04-24-1134224.12.0-0.ci-2025-04-24-0521304.12.0-0.ci-2025-04-21-2311554.12.0-0.ci-2025-04-21-1353044.12.0-0.ci-2025-04-18-0736384.12.0-0.ci-2025-04-17-1704254.12.0-0.ci-2025-04-17-0310294.12.0-0.ci-2025-04-16-055030───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-04-21-2018464.11.0-0.ci-2025-04-21-1418464.11.0-0.ci-2025-04-18-0954224.11.0-0.ci-2025-04-17-2304254.11.0-0.ci-2025-04-17-1704254.11.0-0.ci-2025-04-09-1811074.11.0-0.ci-2025-04-09-1052214.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-194400───4.19.0-ec.54.19.0-ec.44.19.0-ec.34.19.0-ec.24.19.0-ec.14.19.0-ec.0

Source code for this page located on github