# 4.13.0-0.okd-2023-10-28-065448

Created: 2023-10-28 14:50:49 +0000 UTC

Image Digest: `sha256:29e8ad18b5d011c3fd8275ec9aad5964e4dcfd0138d229f2917acfcbefde930c`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-10-28-065448


## Changes from 4.13.0-0.okd-2023-08-04-164726

### Components

* Kubernetes upgraded from 1.26.6 to 1.26.9
* Fedora CoreOS upgraded from 38.20230709.3 to 38.20231002.3


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [06189bcd](https://github.com/openshift/assisted-service/commit/06189bcdb0bea068f8ac51a3550fcdcbde522a76) `sha256:c206d62b89774800aa3797060e54bcc8951a55a8934e27c3c8fd708540b1964e`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [7e415973](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/7e415973dda671d82ae58d0107af274ff053db5c) `sha256:daa94ad5ba34b00c409ef4c180d1d1b0d57a3aaf828f2e8948cc1341a6b7348d`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [4c0f96a6](https://github.com/openshift/cluster-api-provider-alibaba/commit/4c0f96a692dee91100d7085c05a68f3efb7e281d) `sha256:c9e4be5bee409a3a95d937c836cb4449b01244bd626e9bf00578ac66ec7c03be`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [9a8aba8c](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/9a8aba8cad6491a31e743a7e366d758351482d88) `sha256:ae840b5328bb94129128f15063422a271e71139639f29a7d36a0808dfbe618b4`
* [coredns](https://github.com/openshift/coredns) git [598440f5](https://github.com/openshift/coredns/commit/598440f54234b44ab650be9af7b88f70336b3941) `sha256:dd286a23ab14a2f262b67a76f23414a36bfbd7466f8ae94ba59dff659d3e270f`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [b1295cd1](https://github.com/openshift/csi-driver-manila-operator/commit/b1295cd1a5978faa503c199d59d129e3ecfe2aeb) `sha256:21f1cee4d154b08bf65d4ced9dd0e2460f3737f3e2b20eec8fd5ed1e8d180e30`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [1dc475bb](https://github.com/openshift/csi-driver-shared-resource-operator/commit/1dc475bba65ceda2c317543cca13d60c59db93c1) `sha256:9516f81718d17ea3ac6a6305d56f3f65b112ab1edb229580172d19fa4415c90f`
* [docker-builder](https://github.com/openshift/builder) git [1fec8a28](https://github.com/openshift/builder/commit/1fec8a28a78b81aabc2bcbe8ac4843c8b7938230) `sha256:4e0392c1a9795fbe207cdf9eede1725213649520d532318ec405a68cd715faf0`
* [docker-registry](https://github.com/openshift/image-registry) git [47a15ac8](https://github.com/openshift/image-registry/commit/47a15ac8b7233bb1de44c1364bbd787de2edaaf0) `sha256:fc90d9259e8f66cee8bd4e8ca187675331b2ef998e880cd04a0367e09ea8d035`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [8ebc578d](https://github.com/openshift/k8s-prometheus-adapter/commit/8ebc578de004962aedefdb9b2b3a43e79e80a0d2) `sha256:7ead341c92e3dfdb0282473b7c640c1afa39a84d9a8a2a25c827ddc08ff97d7d`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [d4b7a8ab](https://github.com/openshift/cluster-api-provider-libvirt/commit/d4b7a8ab790a970ce2f0374146248b2307df0185) `sha256:9137b7a88653a9b8fc03fa77d79ac119843c57d8cb01d291bf704982b6c3c177`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7`
* [multus-cni](https://github.com/openshift/multus-cni) git [bb616eff](https://github.com/openshift/multus-cni/commit/bb616eff56bf0b71ad85009360231f4686a6e4a9) `sha256:d8a6c758b2d88f3cc7af5de179f7af0c791160e134a583dbe929b5ba733a8329`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [be43191e](https://github.com/openshift/machine-api-provider-nutanix/commit/be43191e5b20c7d6a5755a39a22d31e7734b241a) `sha256:3e20cba200be2817ad14d3ef609a0945a72dab69771fb502b0abf59dbc05f500`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [385057e5](https://github.com/openshift/openshift-controller-manager/commit/385057e57752b7b4f21ef32d7a7993d266a591eb) `sha256:b3433c1da485162602f6430d163d792f77f82b04bbbefbc01a20bd23443f009c`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [b50a649b](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/b50a649be8b691a6081487330da17e55d242a2e5) `sha256:0d947c3e38ae822f3f97aec85292da2433491f7ea6687d89c5f35f00758cfedf`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [0fe0c5c3](https://github.com/openshift/cloud-provider-vsphere/commit/0fe0c5c37d06893359f584e4b6f62d371703e9d1) `sha256:e9f821cc330b4abadda345d0b947b80357e8b9ac04c916d673ed6cfd4d76e918`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/edf25423e34294b754ac16a67dbaf1aed7467ca4)

* [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#717) [#670](https://github.com/openshift/assisted-installer/pull/670)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6160d18379195ac3f65ab3898429936a95522fd0...edf25423e34294b754ac16a67dbaf1aed7467ca4)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/35357f5725d925f451c29668c0b9e307998c6ac5)

* [OCPBUGS-16373](https://issues.redhat.com/browse/OCPBUGS-16373): Ignore arping errors on RHEL 9 (#577) [#577](https://github.com/openshift/assisted-installer-agent/pull/577)
* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) (#596) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/3415688ae42d7f8305e10144ea27cdf503e62ad5...35357f5725d925f451c29668c0b9e307998c6ac5)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/6384f904d041b761670532ac183271b8110707f2)

* [OCPBUGS-21329](https://issues.redhat.com/browse/OCPBUGS-21329): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#37](https://github.com/openshift/alibaba-cloud-csi-driver/pull/37)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/94667c6c213f07ec7613a6d6e831d64ee73181e1...6384f904d041b761670532ac183271b8110707f2)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/325cb029f5dac51e4efabe89a62315af134cad8d)

* [OCPBUGS-20939](https://issues.redhat.com/browse/OCPBUGS-20939): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#240](https://github.com/openshift/aws-ebs-csi-driver/pull/240)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/923631d779405e7cb684c174fa42e589c318060f...325cb029f5dac51e4efabe89a62315af134cad8d)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3cb879a801f54ecc5d03c7404deba7ca25bb5af5)

* [OCPBUGS-21034](https://issues.redhat.com/browse/OCPBUGS-21034): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#281](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/281)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/baf14a425efed2764c79d630d5aecb4744066397...3cb879a801f54ecc5d03c7404deba7ca25bb5af5)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/9251edb7ba225155e9df56938c9e2975523ecf50)

* [OCPBUGS-20688](https://issues.redhat.com/browse/OCPBUGS-20688): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#55](https://github.com/openshift/azure-disk-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/89e21d61f6f23b2e89f1b24096e458d6ade8a40a...9251edb7ba225155e9df56938c9e2975523ecf50)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/33d52ecd52b09ba3ab431ce2e2850262a88c2282)

* [OCPBUGS-20862](https://issues.redhat.com/browse/OCPBUGS-20862): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#38](https://github.com/openshift/azure-file-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/60e0cb86a6055e420bfdb52530d0a0d6418f47fd...33d52ecd52b09ba3ab431ce2e2850262a88c2282)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/70e0530255150e513061730f7624c9c235ee7c38)

* [OCPBUGS-20964](https://issues.redhat.com/browse/OCPBUGS-20964): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#77](https://github.com/openshift/azure-file-csi-driver-operator/pull/77)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#67](https://github.com/openshift/azure-file-csi-driver-operator/pull/67)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/994c32c927a69df33f83aed440cc150e8d270341...70e0530255150e513061730f7624c9c235ee7c38)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/71282c9c511cd7fa549f6e77c831d1e265bce601)

* [OCPBUGS-19307](https://issues.redhat.com/browse/OCPBUGS-19307): Implement workaround to allow SNO installations for OKD/FCOS [#7480](https://github.com/openshift/installer/pull/7480)
* [OCPBUGS-18787](https://issues.redhat.com/browse/OCPBUGS-18787): vSphere set bootstrap/master efi [#7481](https://github.com/openshift/installer/pull/7481)
* [OCPBUGS-19320](https://issues.redhat.com/browse/OCPBUGS-19320): [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7498](https://github.com/openshift/installer/pull/7498)
* [OCPBUGS-20141](https://issues.redhat.com/browse/OCPBUGS-20141): [release-4.13] Use updated ansible-core for Openstack image [#7559](https://github.com/openshift/installer/pull/7559)
* [OCPBUGS-19670](https://issues.redhat.com/browse/OCPBUGS-19670): [release-4.13] Allow different service account for xpn installs in gcp [#7524](https://github.com/openshift/installer/pull/7524)
* [OCPBUGS-19773](https://issues.redhat.com/browse/OCPBUGS-19773): Increase bootstrap timeout for vSphere platform by 30 mins [#7530](https://github.com/openshift/installer/pull/7530)
* [OCPBUGS-16383](https://issues.redhat.com/browse/OCPBUGS-16383): [release-4.13] Default dataStore is returned the name instead the inventoryPath [#7343](https://github.com/openshift/installer/pull/7343)
* [OCPBUGS-13681](https://issues.redhat.com/browse/OCPBUGS-13681): FCOS: bump to latest stable version [#7188](https://github.com/openshift/installer/pull/7188)
* [OCPBUGS-11093](https://issues.redhat.com/browse/OCPBUGS-11093): Azure: don't set default subscriptionID for disk encryption sets [#7432](https://github.com/openshift/installer/pull/7432)
* [OCPBUGS-17809](https://issues.redhat.com/browse/OCPBUGS-17809): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7427](https://github.com/openshift/installer/pull/7427)
* [OCPBUGS-15231](https://issues.redhat.com/browse/OCPBUGS-15231): new Aws secret regions support [#7264](https://github.com/openshift/installer/pull/7264)
* [OCPBUGS-15222](https://issues.redhat.com/browse/OCPBUGS-15222): terraform: aws: secret regions now support ALIAS record [#7262](https://github.com/openshift/installer/pull/7262)
* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [OCPBUGS-16640](https://issues.redhat.com/browse/OCPBUGS-16640): [release-4.13] Update azure cli version to 2.49.0 [#7357](https://github.com/openshift/installer/pull/7357)
* [OCPBUGS-16777](https://issues.redhat.com/browse/OCPBUGS-16777): update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 [#7410](https://github.com/openshift/installer/pull/7410)
* [CORS-2764](https://issues.redhat.com/browse/CORS-2764): AWS Shared VPC Backport [release-4.13] [#7362](https://github.com/openshift/installer/pull/7362)
* [OCPBUGS-17104](https://issues.redhat.com/browse/OCPBUGS-17104): [release-4.13] vsphere terraform bump [#7383](https://github.com/openshift/installer/pull/7383)
* [OCPBUGS-17397](https://issues.redhat.com/browse/OCPBUGS-17397): backport openstack UPI for ansible 2.10 [#7385](https://github.com/openshift/installer/pull/7385)
* [Full changelog](https://github.com/openshift/installer/compare/0a9a1a40a3a0dec5ae99e7bd00d2c54a4e0820d7...71282c9c511cd7fa549f6e77c831d1e265bce601)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/e9877cef729ea81e8f8e7ab233c2f3ec8d70db09)

* [OCPBUGS-21701](https://issues.redhat.com/browse/OCPBUGS-21701): Uplift x/net to v0.17.0 [#199](https://github.com/openshift/cluster-api-provider-baremetal/pull/199)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/7de328a2d332833257fde75368e624908a3eec13...e9877cef729ea81e8f8e7ab233c2f3ec8d70db09)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/40c492621f69ea4420dfa6257ba4d8fa3a62b1fe)

* [OCPBUGS-21167](https://issues.redhat.com/browse/OCPBUGS-21167): Uplift x/net to v0.17.0 [#309](https://github.com/openshift/baremetal-operator/pull/309)
* [OCPBUGS-17365](https://issues.redhat.com/browse/OCPBUGS-17365): Trigger reconcile on Secret change [#295](https://github.com/openshift/baremetal-operator/pull/295)
* [OCPBUGS-16013](https://issues.redhat.com/browse/OCPBUGS-16013): Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 [#292](https://github.com/openshift/baremetal-operator/pull/292)
* [OCPBUGS-17229](https://issues.redhat.com/browse/OCPBUGS-17229): Set minimum TLS version for webhook to 1.2 [#294](https://github.com/openshift/baremetal-operator/pull/294)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3c924532a6965789f743fe37d77ed8b52a065c36...40c492621f69ea4420dfa6257ba4d8fa3a62b1fe)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1bfd3bca2b8fb38a33cf9e250fe0eeb66bcd5341)

* [OCPBUGS-20081](https://issues.redhat.com/browse/OCPBUGS-20081): Increase timeout for bootstrap kubeapi [#278](https://github.com/openshift/baremetal-runtimecfg/pull/278)
* [OCPBUGS-18582](https://issues.redhat.com/browse/OCPBUGS-18582): Move haproxy firewall rule check earlier in loop [#271](https://github.com/openshift/baremetal-runtimecfg/pull/271)
* [OCPBUGS-17423](https://issues.redhat.com/browse/OCPBUGS-17423): Don't render config with incomplete unicast peer list [#267](https://github.com/openshift/baremetal-runtimecfg/pull/267)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4930ec51cf668be611e24bf8f7e7ea976f5a66b8...1bfd3bca2b8fb38a33cf9e250fe0eeb66bcd5341)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/717d4a58931ec44cacd43af6dbc5eded5e8a9ab5)

* [OCPBUGS-20298](https://issues.redhat.com/browse/OCPBUGS-20298): Use quay redis image instead docker mysql [#1566](https://github.com/openshift/oc/pull/1566)
* [OCPBUGS-19942](https://issues.redhat.com/browse/OCPBUGS-19942): Truncate existing files when writing from inspect [#1553](https://github.com/openshift/oc/pull/1553)
* [OCPBUGS-13527](https://issues.redhat.com/browse/OCPBUGS-13527): Bump x org deps 4.13 [#1422](https://github.com/openshift/oc/pull/1422)
* [Full changelog](https://github.com/openshift/oc/compare/e251b5ebd2466adde7b395bf3ab515b8f6cd0c84...717d4a58931ec44cacd43af6dbc5eded5e8a9ab5)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8531634cd2984370912b7530798a85ff4eb86c1e)

* [OCPBUGS-17056](https://issues.redhat.com/browse/OCPBUGS-17056): Address long acquire times during update [#289](https://github.com/openshift/cluster-autoscaler-operator/pull/289)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/29a00c91292ecf6512e35d6f01c2d5b8696c17ca...8531634cd2984370912b7530798a85ff4eb86c1e)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7fdf58c173b5834d1d3b412a31364d6e2272561f)

* [OCPBUGS-20867](https://issues.redhat.com/browse/OCPBUGS-20867): Uplift x/net to v0.17.0 [#370](https://github.com/openshift/cluster-baremetal-operator/pull/370)
* [OCPBUGS-19369](https://issues.redhat.com/browse/OCPBUGS-19369): Guard against nil PlatformStatus [#363](https://github.com/openshift/cluster-baremetal-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/ee42773269a65998812435c0f1ab0c08cd8154f5...7fdf58c173b5834d1d3b412a31364d6e2272561f)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a9e658abf7de525b411ff005b65e061e39f58bd6)

* [CORS-2766](https://issues.redhat.com/browse/CORS-2766): AWS Shared VPC API Bump [release-4.13] [#337](https://github.com/openshift/cluster-config-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/0b27f0d6a463acf2e918f52ea8e6def2603f912f...a9e658abf7de525b411ff005b65e061e39f58bd6)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/383a69c568e3fa2ff1ba33f470ff3e58f62d537f)

* [OCPBUGS-20482](https://issues.redhat.com/browse/OCPBUGS-20482): fix: e2e: add gcp custom type to test framework [#249](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/249)
* [OCPBUGS-17055](https://issues.redhat.com/browse/OCPBUGS-17055): Address long acquire times during update [#240](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/240)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/42f323cd02b4e86ed630ed6649e32f9a876b3444...383a69c568e3fa2ff1ba33f470ff3e58f62d537f)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/544bc12e412d94153ef711cc0bb55eb40ab6d43e)

* [OCPBUGS-21461](https://issues.redhat.com/browse/OCPBUGS-21461): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#168](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/168)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/97b486cb22d56c7ea17b6829606ae0c555bcc426...544bc12e412d94153ef711cc0bb55eb40ab6d43e)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/807ae60ff7447adf83c8a12dc9491ab5f8a62764)

* [OCPBUGS-21534](https://issues.redhat.com/browse/OCPBUGS-21534): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#390](https://github.com/openshift/cluster-dns-operator/pull/390)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/c6768d4537b7c2969b77fea26429b2822c0ec844...807ae60ff7447adf83c8a12dc9491ab5f8a62764)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/8b90ac1721e420b8d1875b40ff458f16f581e94c)

* [OCPBUGS-20488](https://issues.redhat.com/browse/OCPBUGS-20488): prioritize podman pull in etcdctl dl [#1136](https://github.com/openshift/cluster-etcd-operator/pull/1136)
* [OCPBUGS-19378](https://issues.redhat.com/browse/OCPBUGS-19378): [4.13] Backports of backup/restore fixes [#1117](https://github.com/openshift/cluster-etcd-operator/pull/1117)
* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1125](https://github.com/openshift/cluster-etcd-operator/pull/1125)
* [OCPBUGS-16804](https://issues.redhat.com/browse/OCPBUGS-16804): reset snapshot default counts to avoid file already lo… [#1080](https://github.com/openshift/cluster-etcd-operator/pull/1080)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f608ce75498e2c214c71ebf5616d57fb0bddade8...8b90ac1721e420b8d1875b40ff458f16f581e94c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/5379ce1cb9305d89e0349a3e80fac8801c72eb42)

* [OCPBUGS-20781](https://issues.redhat.com/browse/OCPBUGS-20781): Bump golang.org/x/net for CVE-2023-44487 [#987](https://github.com/openshift/cluster-ingress-operator/pull/987)
* [OCPBUGS-22402](https://issues.redhat.com/browse/OCPBUGS-22402): test/e2e: Don't use openshift/origin-node [#991](https://github.com/openshift/cluster-ingress-operator/pull/991)
* [OCPBUGS-17733](https://issues.redhat.com/browse/OCPBUGS-17733): [release-4.13] remove shared VPC cred request [#972](https://github.com/openshift/cluster-ingress-operator/pull/972)
* [NE-1341](https://issues.redhat.com/browse/NE-1341): Add support for AWS shared VPC in another account [#966](https://github.com/openshift/cluster-ingress-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67...5379ce1cb9305d89e0349a3e80fac8801c72eb42)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d525f5d788e2a8bbf7dd01902084c3587d32a58f)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1558](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1558)
* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ad323b3657611da6bf7ea78eba8ffa998ba56fe9...d525f5d788e2a8bbf7dd01902084c3587d32a58f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/cc6a31430749e2e0a1b0d9db18c6e664dd4b626e)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#752](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/752)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/56b970786d152344f0d4762c8271d20e5fc9d28b...cc6a31430749e2e0a1b0d9db18c6e664dd4b626e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b4c50a4d65f6971abeed1da815aac038d8700715)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#497](https://github.com/openshift/cluster-kube-scheduler-operator/pull/497)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/5c00da0816faf0f15e643f05666c963d862a8299...b4c50a4d65f6971abeed1da815aac038d8700715)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0858ebadbb77eb29f1af520890ff4ebdd341d1c6)

* [OCPBUGS-21250](https://issues.redhat.com/browse/OCPBUGS-21250): upgrade golang.org/x/net to v0.17.0 [#2122](https://github.com/openshift/cluster-monitoring-operator/pull/2122)
* [OCPBUGS-22099](https://issues.redhat.com/browse/OCPBUGS-22099): Extend remote write test timeout [#2127](https://github.com/openshift/cluster-monitoring-operator/pull/2127)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/547c850b30e2183f8a6c9842c82ce672ba72cc76...0858ebadbb77eb29f1af520890ff4ebdd341d1c6)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/961ca3d65ce046e29cd105e2c18563bd91dbfdae)

* [OCPBUGS-19894](https://issues.redhat.com/browse/OCPBUGS-19894): remove prestop hooks for northd, sbdbd and nbdb [#2001](https://github.com/openshift/cluster-network-operator/pull/2001)
* [OCPBUGS-18722](https://issues.redhat.com/browse/OCPBUGS-18722): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1994](https://github.com/openshift/cluster-network-operator/pull/1994)
* [OCPBUGS-18342](https://issues.redhat.com/browse/OCPBUGS-18342): Fix bond-cni's default directory in multus manifest [#1977](https://github.com/openshift/cluster-network-operator/pull/1977)
* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f6b79bb994a5f38b8fc25edcd43b42229b3b70a...961ca3d65ce046e29cd105e2c18563bd91dbfdae)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fad5b5ca117a750d89797dc891e592726a75f9e7)

* Use RHEL9 as a base (#829) [#829](https://github.com/openshift/cluster-node-tuning-operator/pull/829)
* [OCPBUGS-17943](https://issues.redhat.com/browse/OCPBUGS-17943): Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) [#796](https://github.com/openshift/cluster-node-tuning-operator/pull/796)
* nto: avoid timeout when there are too many CSV (#818) [#818](https://github.com/openshift/cluster-node-tuning-operator/pull/818)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#820) [#820](https://github.com/openshift/cluster-node-tuning-operator/pull/820)
* Add kubeconfig path for IBM Managed OpenShift (#814) [#814](https://github.com/openshift/cluster-node-tuning-operator/pull/814)
* [OCPBUGS-14137](https://issues.redhat.com/browse/OCPBUGS-14137): e2e: perfprof: add SNO device recovery test (#653) (#806) [#653](https://github.com/openshift/cluster-node-tuning-operator/pull/653)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Sync DaemonSet if operand image changes (#786) [#786](https://github.com/openshift/cluster-node-tuning-operator/pull/786)
* Revert "Revert "Release leader election on manager exit (#773)" (#797)" (#802) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* [OCPBUGS-19351](https://issues.redhat.com/browse/OCPBUGS-19351): Keep Profile status.bootcmdline around (#803) [#803](https://github.com/openshift/cluster-node-tuning-operator/pull/803)
* Revert "Release leader election on manager exit (#773)" (#797) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Release leader election on manager exit (#773) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Tighten the rules for modifying Tuned Profiles (#766) [#766](https://github.com/openshift/cluster-node-tuning-operator/pull/766)
* [OCPBUGS-18063](https://issues.redhat.com/browse/OCPBUGS-18063): cgroup: Match the name of the cgroup to what is expected by kubelet (#774) [#774](https://github.com/openshift/cluster-node-tuning-operator/pull/774)
* update tsc karg to tsc=reliable (#757) [#757](https://github.com/openshift/cluster-node-tuning-operator/pull/757)
* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* Improve render error handling (#755) [#755](https://github.com/openshift/cluster-node-tuning-operator/pull/755)
* nto:tuned: remove sched_min_granularity_ns settings (#726) [#726](https://github.com/openshift/cluster-node-tuning-operator/pull/726)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9d72d310605e9b8c646552c2b6f48d10faf0ac92...fad5b5ca117a750d89797dc891e592726a75f9e7)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/312c5f24b5711a764350de899b83443a87296983)

* [OCPBUGS-20998](https://issues.redhat.com/browse/OCPBUGS-20998): [release-4.13] Bump golang.org/x/net to v0.17.0 [#97](https://github.com/openshift/platform-operators/pull/97)
* [Full changelog](https://github.com/openshift/platform-operators/compare/471a80685581ff95fec3bee818f6ee409836eb8e...312c5f24b5711a764350de899b83443a87296983)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bcc08e9609e9c39d212857efd27d67753c64d91e)

* [OCPBUGS-22390](https://issues.redhat.com/browse/OCPBUGS-22390): Sync library to remove invalid dockerhub references for OKD [#521](https://github.com/openshift/cluster-samples-operator/pull/521)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/f785bad1227439dfdb627538b3f7ecd0eb28f33c...bcc08e9609e9c39d212857efd27d67753c64d91e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/5cd56c344f5aae7ce53f1301115e247a1fd6fed5)

* [OCPBUGS-21284](https://issues.redhat.com/browse/OCPBUGS-21284): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#406](https://github.com/openshift/cluster-storage-operator/pull/406)
* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Add patch for allowing configmap updates via clusterrole [#396](https://github.com/openshift/cluster-storage-operator/pull/396)
* [OCPBUGS-19036](https://issues.redhat.com/browse/OCPBUGS-19036): Fix PodStartupStorageOperationsFailing alert [#397](https://github.com/openshift/cluster-storage-operator/pull/397)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6...5cd56c344f5aae7ce53f1301115e247a1fd6fed5)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/50feca20f68b18d1d1b2722792fcbfa8474f6039)

* [OCPBUGS-19472](https://issues.redhat.com/browse/OCPBUGS-19472): Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC [#969](https://github.com/openshift/cluster-version-operator/pull/969)
* [OCPBUGS-20321](https://issues.redhat.com/browse/OCPBUGS-20321): pkg/cvo/sync_worker: Always enable the DeploymentConfig capability [#981](https://github.com/openshift/cluster-version-operator/pull/981)
* [OCPBUGS-19828](https://issues.redhat.com/browse/OCPBUGS-19828): pkg/clusterconditions/promql: Warm cache with 1s delay [#974](https://github.com/openshift/cluster-version-operator/pull/974)
* [OCPBUGS-20263](https://issues.redhat.com/browse/OCPBUGS-20263): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#980](https://github.com/openshift/cluster-version-operator/pull/980)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2ba8f8d7bc59f596db65d47e80ef8765ae340c34...50feca20f68b18d1d1b2722792fcbfa8474f6039)


### [console](https://github.com/openshift/console/tree/b19a69104789b0d68106e757a2edb53ad15db6b2)

* [OCPBUGS-19532](https://issues.redhat.com/browse/OCPBUGS-19532): use active namespace in Create cta href of create action for operator backed [#13179](https://github.com/openshift/console/pull/13179)
* [OCPBUGS-18271](https://issues.redhat.com/browse/OCPBUGS-18271): update the KnativeServing API version to v1beta1 for global-config extension [#13112](https://github.com/openshift/console/pull/13112)
* [OCPBUGS-20232](https://issues.redhat.com/browse/OCPBUGS-20232): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13224](https://github.com/openshift/console/pull/13224)
* [OCPBUGS-20231](https://issues.redhat.com/browse/OCPBUGS-20231): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13223](https://github.com/openshift/console/pull/13223)
* [OCPBUGS-20330](https://issues.redhat.com/browse/OCPBUGS-20330): Check if filtered object contains name property [#13227](https://github.com/openshift/console/pull/13227)
* [OCPBUGS-13285](https://issues.redhat.com/browse/OCPBUGS-13285): add multipath device type to LocalVolumeSet [#12804](https://github.com/openshift/console/pull/12804)
* [OCPBUGS-17481](https://issues.redhat.com/browse/OCPBUGS-17481): Fix that "Delete application" doesn't work in topology when Pipelines operator is not installed [#13083](https://github.com/openshift/console/pull/13083)
* [OCPBUGS-18764](https://issues.redhat.com/browse/OCPBUGS-18764): Fixed Edit Application form for Knative Services [#13147](https://github.com/openshift/console/pull/13147)
* [OCPBUGS-18538](https://issues.redhat.com/browse/OCPBUGS-18538): OCP console mandate secret for repository creation [#13135](https://github.com/openshift/console/pull/13135)
* [OCPBUGS-18679](https://issues.redhat.com/browse/OCPBUGS-18679): [knative] Don't rely on openshift/hello-openshift as a sample image [#13140](https://github.com/openshift/console/pull/13140)
* [OCPBUGS-18289](https://issues.redhat.com/browse/OCPBUGS-18289): Not able to import the repository with .tekton directory and func.yaml file present [#13116](https://github.com/openshift/console/pull/13116)
* [OCPBUGS-18443](https://issues.redhat.com/browse/OCPBUGS-18443): Fix crash when filtering the quick start catalog [#13127](https://github.com/openshift/console/pull/13127)
* [OCPBUGS-18312](https://issues.redhat.com/browse/OCPBUGS-18312): Web console slowness on Project>Project access page [#13119](https://github.com/openshift/console/pull/13119)
* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [OCPBUGS-16668](https://issues.redhat.com/browse/OCPBUGS-16668): Dynamic plugin translation support for plurals broken [#13041](https://github.com/openshift/console/pull/13041)
* [OCPBUGS-17181](https://issues.redhat.com/browse/OCPBUGS-17181): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13060](https://github.com/openshift/console/pull/13060)
* [Full changelog](https://github.com/openshift/console/compare/67543a20dd0cd33917044eaec2199528e3be43af...b19a69104789b0d68106e757a2edb53ad15db6b2)


### [console-operator](https://github.com/openshift/console-operator/tree/dd6939f9a9bf2e3a800ba10a78b4e309f2a0a3c3)

* [OCPBUGS-18972](https://issues.redhat.com/browse/OCPBUGS-18972): Manual backport of #761 [#793](https://github.com/openshift/console-operator/pull/793)
* [OCPBUGS-18192](https://issues.redhat.com/browse/OCPBUGS-18192): Add haproxy timeout annotation to console routes [#787](https://github.com/openshift/console-operator/pull/787)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [Full changelog](https://github.com/openshift/console-operator/compare/c5f3b24448f6a7bf5dd5d145008df85e04ec5968...dd6939f9a9bf2e3a800ba10a78b4e309f2a0a3c3)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)

* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/26001de8244adb4bd1ae4c4046932b5a9831edce...dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/171da3f92694db5d29f5e42787873e40bcb480e2)

* [OCPBUGS-20571](https://issues.redhat.com/browse/OCPBUGS-20571): [release-4.13] CARRY: Add DOWNSTREAM_OWNERS [#228](https://github.com/openshift/cloud-provider-openstack/pull/228)
* [OCPBUGS-20133](https://issues.redhat.com/browse/OCPBUGS-20133): FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 [#221](https://github.com/openshift/cloud-provider-openstack/pull/221)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c59255a34811a412bb9c7af4d176d8cdebf04367...171da3f92694db5d29f5e42787873e40bcb480e2)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/9724dcf486c1699ca7117318b9c74f408fdc495d)

* [OCPBUGS-20719](https://issues.redhat.com/browse/OCPBUGS-20719): bump golang.org/x/net to v0.17.0 [#147](https://github.com/openshift/csi-driver-shared-resource/pull/147)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/f797d453f112aab86f3b7705c00ea871c2351d4a...9724dcf486c1699ca7117318b9c74f408fdc495d)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/d92908438817984fc47558fdaa03805d8c3b256c)

* [OCPBUGS-21161](https://issues.redhat.com/browse/OCPBUGS-21161): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/csi-external-attacher/pull/61)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/e9d59a2d66491d60d43488e05af7b4b673c722fd...d92908438817984fc47558fdaa03805d8c3b256c)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/0bf126b77a721ddaa4706fcb41f8b7be8d292492)

* [OCPBUGS-20759](https://issues.redhat.com/browse/OCPBUGS-20759): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/csi-external-provisioner/pull/73)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f...0bf126b77a721ddaa4706fcb41f8b7be8d292492)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/e8036caff2482648a18c1ac776cf9d2474569d10)

* [OCPBUGS-20908](https://issues.redhat.com/browse/OCPBUGS-20908): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#148](https://github.com/openshift/csi-external-resizer/pull/148)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a...e8036caff2482648a18c1ac776cf9d2474569d10)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/5ce4b5cac86efa3a45d5056c0a95004373cabb7b)

* [OCPBUGS-21011](https://issues.redhat.com/browse/OCPBUGS-21011): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#110](https://github.com/openshift/csi-external-snapshotter/pull/110)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/3f52ee74753f7823f102c239d0750784b64b6398...5ce4b5cac86efa3a45d5056c0a95004373cabb7b)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/3587db51b8a672a2d3be2ac48ea107e474f33402)

* [OCPBUGS-20636](https://issues.redhat.com/browse/OCPBUGS-20636): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-livenessprobe/pull/51)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/a888237c9ab43eab0ca992f0b18eff114ea4ade1...3587db51b8a672a2d3be2ac48ea107e474f33402)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/9ea90f34485500a525fcaad3d79ee82a41402d47)

* [OCPBUGS-20686](https://issues.redhat.com/browse/OCPBUGS-20686): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/csi-node-driver-registrar/pull/53)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/5f13d5e6f5b06a99995e0697d83bbdb36efceb46...9ea90f34485500a525fcaad3d79ee82a41402d47)


### [etcd](https://github.com/openshift/etcd/tree/7efbc019a20e4c025d482749d49d0d72892dbfe1)

* [OCPBUGS-18497](https://issues.redhat.com/browse/OCPBUGS-18497): Updating ose-etcd images to be consistent with ART [#214](https://github.com/openshift/etcd/pull/214)
* [OCPBUGS-18398](https://issues.redhat.com/browse/OCPBUGS-18398): UPSTREAM <carry>: update build images to rhel9 [#212](https://github.com/openshift/etcd/pull/212)
* [Full changelog](https://github.com/openshift/etcd/compare/1b61faa606b5393076f5835418c6ec3cdc628615...7efbc019a20e4c025d482749d49d0d72892dbfe1)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/e6f49ecdc9b11519aecf61b48caab12006749a12)

* Bump fedora-coreos to latest stable [#677](https://github.com/openshift/okd-machine-os/pull/677)
* Bump fedora-coreos to latest stable [#672](https://github.com/openshift/okd-machine-os/pull/672)
* Bump fedora-coreos to latest stable [#669](https://github.com/openshift/okd-machine-os/pull/669)
* Bump Fedora CoreOS version string [#665](https://github.com/openshift/okd-machine-os/pull/665)
* Bump fedora-coreos to latest stable [#661](https://github.com/openshift/okd-machine-os/pull/661)
* Bump fedora-coreos to latest stable [#653](https://github.com/openshift/okd-machine-os/pull/653)
* Bump Fedora CoreOS version string [#650](https://github.com/openshift/okd-machine-os/pull/650)
* Bump fedora-coreos to latest stable [#647](https://github.com/openshift/okd-machine-os/pull/647)
* Bump OKD OS version [#643](https://github.com/openshift/okd-machine-os/pull/643)
* Bump fedora-coreos to latest stable [#641](https://github.com/openshift/okd-machine-os/pull/641)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/8b310a39c1cad43ff3443b264524526b76ab1ac2...e6f49ecdc9b11519aecf61b48caab12006749a12)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/81e6074605854246cdab8425a7289ad83169571a)

* [OCPBUGS-20735](https://issues.redhat.com/browse/OCPBUGS-20735): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#46](https://github.com/openshift/gcp-pd-csi-driver/pull/46)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c30195c5c3148bf6e00795b49a79954e6d920130...81e6074605854246cdab8425a7289ad83169571a)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/08c561b8292b4a5de3d5bc553a3e463b1f93ec0c)

* [OCPBUGS-20827](https://issues.redhat.com/browse/OCPBUGS-20827): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#88](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/88)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#80](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d151ef0f5268ccdedf5bb43b649d4cab13b21d68...08c561b8292b4a5de3d5bc553a3e463b1f93ec0c)


### [haproxy-router](https://github.com/openshift/router/tree/431a6e667025931c68b4f747a224af29edf356f6)

* [OCPBUGS-21117](https://issues.redhat.com/browse/OCPBUGS-21117): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#531](https://github.com/openshift/router/pull/531)
* [OCPBUGS-17762](https://issues.redhat.com/browse/OCPBUGS-17762): haproxy/template: mitigate CVE-2023-40225 [#506](https://github.com/openshift/router/pull/506)
* [OCPBUGS-17107](https://issues.redhat.com/browse/OCPBUGS-17107): properly handle weight=0 [#501](https://github.com/openshift/router/pull/501)
* [Full changelog](https://github.com/openshift/router/compare/065deab84f342615db2d2f5c78a19ae04bb43912...431a6e667025931c68b4f747a224af29edf356f6)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/636f2be6157d45217eb99744b72cc51e5e9c7e10)

* openshift-hack: Fix sporadic 141 errors in build-rpms [#1773](https://github.com/openshift/kubernetes/pull/1773)
* [OCPBUGS-20114](https://issues.redhat.com/browse/OCPBUGS-20114): UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels [#1746](https://github.com/openshift/kubernetes/pull/1746)
* [OCPBUGS-21063](https://issues.redhat.com/browse/OCPBUGS-21063): [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1759](https://github.com/openshift/kubernetes/pull/1759)
* [OCPBUGS-19885](https://issues.redhat.com/browse/OCPBUGS-19885): UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes [#1725](https://github.com/openshift/kubernetes/pull/1725)
* [OCPBUGS-18287](https://issues.redhat.com/browse/OCPBUGS-18287), [OCPBUGS-19480](https://issues.redhat.com/browse/OCPBUGS-19480): Update to Kubernetes 1.26.9 [#1715](https://github.com/openshift/kubernetes/pull/1715)
* [OCPBUGS-18677](https://issues.redhat.com/browse/OCPBUGS-18677): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1689](https://github.com/openshift/kubernetes/pull/1689)
* [OCPBUGS-17187](https://issues.redhat.com/browse/OCPBUGS-17187): Update to Kubernetes 1.26.7 [#1649](https://github.com/openshift/kubernetes/pull/1649)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#1657](https://github.com/openshift/kubernetes/pull/1657)
* [Full changelog](https://github.com/openshift/kubernetes/compare/73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf...636f2be6157d45217eb99744b72cc51e5e9c7e10)


### [hypershift](https://github.com/openshift/hypershift/tree/2c52769df12895ea389c8e87c6175dc59aedd4d6)

* chore(deps): update rhtap references (release-4.13) [#3043](https://github.com/openshift/hypershift/pull/3043)
* Update RHTAP references (release-4.13) [#2996](https://github.com/openshift/hypershift/pull/2996)
* [OCPBUGS-17182](https://issues.redhat.com/browse/OCPBUGS-17182): add need-management-kas-access label to olm-collect-profiles pods [#2871](https://github.com/openshift/hypershift/pull/2871)
* [OCPBUGS-16225](https://issues.redhat.com/browse/OCPBUGS-16225): Add missing probes to two services [#2821](https://github.com/openshift/hypershift/pull/2821)
* fix(olm): Use 4.13 catalog source images [#2978](https://github.com/openshift/hypershift/pull/2978)
* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* chore(deps): update rhtap references (release-4.13) [#2904](https://github.com/openshift/hypershift/pull/2904)
* Update RHTAP references (release-4.13) [#2866](https://github.com/openshift/hypershift/pull/2866)
* [Full changelog](https://github.com/openshift/hypershift/compare/227d6e1e0a50691ec8e858513c7ab8b2d21e55e2...2c52769df12895ea389c8e87c6175dc59aedd4d6)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f78d4760df79530679b5f8244065a681f41397c3)

* [OCPBUGS-21230](https://issues.redhat.com/browse/OCPBUGS-21230): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/51)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/42b5c256657da2de184c3e5ec9c619131ed1cd57...f78d4760df79530679b5f8244065a681f41397c3)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/38c439da0b0ff924ad6b3d0af6461605a8b498ac)

* [OCPBUGS-21319](https://issues.redhat.com/browse/OCPBUGS-21319): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/82)
* [OCPBUGS-18143](https://issues.redhat.com/browse/OCPBUGS-18143): [IBM VPC] failed provisioning volume in proxy cluster [#76](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/76)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097...38c439da0b0ff924ad6b3d0af6461605a8b498ac)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/7721a9e75b92bdd12ff9a05acc9274c0d0580aba)

* [OCPBUGS-21432](https://issues.redhat.com/browse/OCPBUGS-21432): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/ibm-vpc-node-label-updater/pull/28)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac...7721a9e75b92bdd12ff9a05acc9274c0d0580aba)


### [insights-operator](https://github.com/openshift/insights-operator/tree/3f785f9212ed905b5e8b87cf24097aa577f20a69)

* Add cherry-pick from 4.14 (#848) [#848](https://github.com/openshift/insights-operator/pull/848)
* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#828) [#828](https://github.com/openshift/insights-operator/pull/828)
* [OCPBUGS-17661](https://issues.redhat.com/browse/OCPBUGS-17661): workload info gatherer, add external image repo (#816) [#816](https://github.com/openshift/insights-operator/pull/816)
* [Full changelog](https://github.com/openshift/insights-operator/compare/f87e4120ed55da397a323ddbc7fe1a5edb0f088c...3f785f9212ed905b5e8b87cf24097aa577f20a69)


### [ironic](https://github.com/openshift/ironic-image/tree/fc1cca95711797767336878bfb9e2e4b9801ecfa)

* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [OCPBUGS-17158](https://issues.redhat.com/browse/OCPBUGS-17158): [4.13] Update packages with latest bugfix [#388](https://github.com/openshift/ironic-image/pull/388)
* [OCPBUGS-17551](https://issues.redhat.com/browse/OCPBUGS-17551): Expand regex for fcos/okd packages list [#390](https://github.com/openshift/ironic-image/pull/390)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5212a6350a01e730c623e462d040431233b9a1d5...fc1cca95711797767336878bfb9e2e4b9801ecfa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/508e61245eb34d1f83771b1522021ffcde59fecc)

* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): backport hostname fixes [#89](https://github.com/openshift/ironic-agent-image/pull/89)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/c4141b13ec85e9642f60bcb55b50055c691f0b6b...508e61245eb34d1f83771b1522021ffcde59fecc)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/415800a4ce4760df355076d89d29b051f078f00e)

* [OCPBUGS-14504](https://issues.redhat.com/browse/OCPBUGS-14504): Use the ovsver build arg to infer the openvswitch short version number [#572](https://github.com/openshift/sdn/pull/572)
* [Full changelog](https://github.com/openshift/sdn/compare/12a5bcfe56550165a550230d016f3a954b18ddbe...415800a4ce4760df355076d89d29b051f078f00e)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/ae32bfa0f11ae2854339ab9af83c44ee1c04fe31)

* [OCPBUGS-20702](https://issues.redhat.com/browse/OCPBUGS-20702): v0.15.0 downstream release 4.13 [#84](https://github.com/openshift/kube-rbac-proxy/pull/84)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/f1205e66bf34421046288bc74aed0d69b8434206...ae32bfa0f11ae2854339ab9af83c44ee1c04fe31)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/935b199a2b6168de8f3304de55379ef3b62e5b96)

* [OCPBUGS-22412](https://issues.redhat.com/browse/OCPBUGS-22412): bootstrap_test: always set APIVersion and Kind for DNS [#4002](https://github.com/openshift/machine-config-operator/pull/4002)
* [OCPBUGS-21721](https://issues.redhat.com/browse/OCPBUGS-21721): install/0000_90_machine-config-operator_90_deletion: Drop this file [#3983](https://github.com/openshift/machine-config-operator/pull/3983)
* [OCPBUGS-20333](https://issues.redhat.com/browse/OCPBUGS-20333): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … [#3962](https://github.com/openshift/machine-config-operator/pull/3962)
* [OCPBUGS-18803](https://issues.redhat.com/browse/OCPBUGS-18803): Soften grep pattern for ingress default router [#3908](https://github.com/openshift/machine-config-operator/pull/3908)
* [OCPBUGS-19958](https://issues.redhat.com/browse/OCPBUGS-19958): [release-4.13] Backport logspam PRs [#3950](https://github.com/openshift/machine-config-operator/pull/3950)
* [OCPBUGS-19675](https://issues.redhat.com/browse/OCPBUGS-19675): daemon: always use `podman cp` to copy extensions container content [#3938](https://github.com/openshift/machine-config-operator/pull/3938)
* [OCPBUGS-19400](https://issues.redhat.com/browse/OCPBUGS-19400): install: Recreate and delayed default ServiceAccount deletion [#3923](https://github.com/openshift/machine-config-operator/pull/3923)
* [OCPBUGS-19509](https://issues.redhat.com/browse/OCPBUGS-19509): Ignore invoking nbctl calls if its SDN [#3929](https://github.com/openshift/machine-config-operator/pull/3929)
* [OCPBUGS-19414](https://issues.redhat.com/browse/OCPBUGS-19414): The kubeconfig copied on to each node has 644 permissions [#3924](https://github.com/openshift/machine-config-operator/pull/3924)
* [OCPBUGS-18159](https://issues.redhat.com/browse/OCPBUGS-18159): Ensure azure-routes hack for internalLB hairpin traffic works for SGW [#3904](https://github.com/openshift/machine-config-operator/pull/3904)
* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [OCPBUGS-17769](https://issues.redhat.com/browse/OCPBUGS-17769): Agent-based install process the container machine-config-controller will be oom [#3868](https://github.com/openshift/machine-config-operator/pull/3868)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3845](https://github.com/openshift/machine-config-operator/pull/3845)
* [OCPBUGS-17430](https://issues.redhat.com/browse/OCPBUGS-17430): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3841](https://github.com/openshift/machine-config-operator/pull/3841)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/88fcb47c150db0de0bb1507919b55d0e81233139...935b199a2b6168de8f3304de55379ef3b62e5b96)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/48318552407d37ec7dfefff0a7253f63b8957db9)

* [OCPBUGS-21549](https://issues.redhat.com/browse/OCPBUGS-21549): Uplift x/net to v0.17.0 [#105](https://github.com/openshift/image-customization-controller/pull/105)
* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): Pass BareMetalHost name to IPA (take 2) [#98](https://github.com/openshift/image-customization-controller/pull/98)
* [OCPBUGS-14250](https://issues.redhat.com/browse/OCPBUGS-14250): Watch networkData Secrets for changes [#95](https://github.com/openshift/image-customization-controller/pull/95)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/87651668b314426960ea4974429f3b0ed16c3f31...48318552407d37ec7dfefff0a7253f63b8957db9)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7ea40205ffef4c3e047153f4655444245c2792d3)

* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Denormalize IP name before checking if pod is alive [Backport 4.13] [#168](https://github.com/openshift/whereabouts-cni/pull/168)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/08aaed367e959629693b6734018eb7bda5f6f09e...7ea40205ffef4c3e047153f4655444245c2792d3)


### [must-gather](https://github.com/openshift/must-gather/tree/288ef2fcfe63cbfab0af69a41b508c044ee890aa)

* [OCPBUGS-19928](https://issues.redhat.com/browse/OCPBUGS-19928): [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes [#383](https://github.com/openshift/must-gather/pull/383)
* [Full changelog](https://github.com/openshift/must-gather/compare/5eca0cb65ea6dd13f907d1f7493ed237f07e3906...288ef2fcfe63cbfab0af69a41b508c044ee890aa)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3742681e417aee146fe258cf779b6cdfae8054a3)

* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) [#700](https://github.com/openshift/oc-mirror/pull/700)
* Fix OCPBUGS-14402 (#675) [#675](https://github.com/openshift/oc-mirror/pull/675)
* [OCPBUGS-18556](https://issues.redhat.com/browse/OCPBUGS-18556): operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) [#691](https://github.com/openshift/oc-mirror/pull/691)
* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f11a9001caad8fe146c73baf2acc38ddcf3642b5...3742681e417aee146fe258cf779b6cdfae8054a3)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/4bcf0496b39a9ec5287d62552b2e7de2228174d9)

* [OCPBUGS-21363](https://issues.redhat.com/browse/OCPBUGS-21363): [release-4.13] Bump golang.org/x/net to v0.17.0 [#40](https://github.com/openshift/operator-framework-rukpak/pull/40)
* UPSTREAM: <carry>: add downstream owners [#42](https://github.com/openshift/operator-framework-rukpak/pull/42)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/66b3e551fc2730beb4c46d478166b38766c5f346...4bcf0496b39a9ec5287d62552b2e7de2228174d9)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/7bce9d67fba63a0ed6a39b78488da8e85bf07dbd)

* Bug OCPBUGS-19460: Set controller's SyncPeriod to 1 hour [#85](https://github.com/openshift/machine-api-provider-openstack/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/36f48b76303aea04f997cda658ca5e25841a079c...7bce9d67fba63a0ed6a39b78488da8e85bf07dbd)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e12f07a59ea7109475221063404cd56d00df7f3d)

* [OCPBUGS-22133](https://issues.redhat.com/browse/OCPBUGS-22133): [release-4.13] Bump golang.org/x/net to v0.17.0 [#589](https://github.com/openshift/operator-framework-olm/pull/589)
* [OCPBUGS-18305](https://issues.redhat.com/browse/OCPBUGS-18305), [RHIBMCS-151](https://issues.redhat.com/browse/RHIBMCS-151): Copied csv listing backport [#548](https://github.com/openshift/operator-framework-olm/pull/548)
* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* Introduce DOWNSTREAM_OWNERS file [#538](https://github.com/openshift/operator-framework-olm/pull/538)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9...e12f07a59ea7109475221063404cd56d00df7f3d)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/867e7ed80fdbc6f5bb88f1589da740d9bd1d5721)

* [OCPBUGS-20977](https://issues.redhat.com/browse/OCPBUGS-20977): [release-4.13] bump golang.org/x/net to 0.17.0 [#549](https://github.com/operator-framework/operator-marketplace/pull/549)
* [OCPBUGS-19085](https://issues.redhat.com/browse/OCPBUGS-19085): Updating marketplace-operator images to be consistent with ART [#538](https://github.com/operator-framework/operator-marketplace/pull/538)
* [OCPBUGS-18502](https://issues.redhat.com/browse/OCPBUGS-18502): remove a race condition [#532](https://github.com/operator-framework/operator-marketplace/pull/532)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/d569c22c518fc931ff48f66fb38064ddd976729f...867e7ed80fdbc6f5bb88f1589da740d9bd1d5721)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/aca579dfc9aa1921849f9573f5179fcb2bf89f28)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#120](https://github.com/openshift/ovirt-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/6627b2a22d70fa740de8bb35f0beea3816b01ec4...aca579dfc9aa1921849f9573f5179fcb2bf89f28)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/cfe89e5a298b402df4323de38df1597be3c546a4)

* [OCPBUGS-14314](https://issues.redhat.com/browse/OCPBUGS-14314): Fix compilation error in e2e.go tests due to missing int32 parameter [#1682](https://github.com/openshift/ovn-kubernetes/pull/1682)
* [OCPBUGS-20047](https://issues.redhat.com/browse/OCPBUGS-20047): Adjust python ssl library dependency check [#1924](https://github.com/openshift/ovn-kubernetes/pull/1924)
* [OCPBUGS-18976](https://issues.redhat.com/browse/OCPBUGS-18976): Update bridge flow cache when the host address changes [#1873](https://github.com/openshift/ovn-kubernetes/pull/1873)
* [OCPBUGS-18791](https://issues.redhat.com/browse/OCPBUGS-18791), [OCPBUGS-18792](https://issues.redhat.com/browse/OCPBUGS-18792), [OCPBUGS-19088](https://issues.redhat.com/browse/OCPBUGS-19088), [OCPBUGS-7406](https://issues.redhat.com/browse/OCPBUGS-7406): Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp [#1880](https://github.com/openshift/ovn-kubernetes/pull/1880)
* [OCPBUGS-18672](https://issues.redhat.com/browse/OCPBUGS-18672): Check libovsdbclient.ErrNotFound on wrapped errors [#1861](https://github.com/openshift/ovn-kubernetes/pull/1861)
* [OCPBUGS-19449](https://issues.redhat.com/browse/OCPBUGS-19449): Do not return error if pod IP cannot be retrieved for `podSelectorPodNeedsDelete` and perf improvements [#1893](https://github.com/openshift/ovn-kubernetes/pull/1893)
* [OCPBUGS-18585](https://issues.redhat.com/browse/OCPBUGS-18585): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1855](https://github.com/openshift/ovn-kubernetes/pull/1855)
* [OCPBUGS-17123](https://issues.redhat.com/browse/OCPBUGS-17123): Remove stale egressip status entry [#1793](https://github.com/openshift/ovn-kubernetes/pull/1793)
* [OCPBUGS-18057](https://issues.redhat.com/browse/OCPBUGS-18057): [release-4.13] Create egress firewall with one db transaction [#1834](https://github.com/openshift/ovn-kubernetes/pull/1834)
* [OCPBUGS-17910](https://issues.redhat.com/browse/OCPBUGS-17910): Emit node events only when retry failure [#1825](https://github.com/openshift/ovn-kubernetes/pull/1825)
* [OCPBUGS-17503](https://issues.redhat.com/browse/OCPBUGS-17503): [release-4.13] libovsdb: give monitor setup time to process than normal transactions [#1807](https://github.com/openshift/ovn-kubernetes/pull/1807)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/13cba4453587d3080eaf126ecf9ae6de429da180...cfe89e5a298b402df4323de38df1597be3c546a4)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/62f7b1e12357e5f7c99d8b05c1a01ad1e75f770e)

* [OCPBUGS-21089](https://issues.redhat.com/browse/OCPBUGS-21089): CVE-2023-39325 - Update net dependencies - 4.13 [#52](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/52)
* Update OWNERS add yussufsh [#54](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/54)
* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* Openshiftrelease 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e0e89f1b778799e45b3d5095a9275e2802de376a...62f7b1e12357e5f7c99d8b05c1a01ad1e75f770e)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/c0adbc0d8f7b6c91a81eec51f427947022ac9c8b)

* [OCPBUGS-21186](https://issues.redhat.com/browse/OCPBUGS-21186): CVE-2023-39325 - Update net dependencies - 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/41)
* Update OWNERS add yussufsh [#45](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/45)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#34](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/34)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b40850568a7c9de0f5493147d7126a12af889b45...c0adbc0d8f7b6c91a81eec51f427947022ac9c8b)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/6f7d5cecc8403b9d6a5d133b3b242616aaf235a4)

* [OCPBUGS-21280](https://issues.redhat.com/browse/OCPBUGS-21280): CVE-2023-39325 - Update net dependencies - 4.13 [#46](https://github.com/openshift/cloud-provider-powervs/pull/46)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/130365622eb0c59e102049529695c8326d616213...6f7d5cecc8403b9d6a5d133b3b242616aaf235a4)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/6d9678bf4f29da8e569f24bfdc7db106c3c887ea)

* [OCPBUGS-21880](https://issues.redhat.com/browse/OCPBUGS-21880): CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 [#55](https://github.com/openshift/machine-api-provider-powervs/pull/55)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/bf49c5c1b07137baa766b4d78b9e9c2650ef59ad...6d9678bf4f29da8e569f24bfdc7db106c3c887ea)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/5409afd036445411969ed074e681c73f2df36909)

* [OCPBUGS-14274](https://issues.redhat.com/browse/OCPBUGS-14274): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#127](https://github.com/openshift/node_exporter/pull/127)
* [Full changelog](https://github.com/openshift/node_exporter/compare/10dc380d4ce996d2557b10991b3f7623a4551e21...5409afd036445411969ed074e681c73f2df36909)


### [telemeter](https://github.com/openshift/telemeter/tree/8c9a8a75108afb1ba7fe6398b004cbc8229cc645)

* [OCPBUGS-21327](https://issues.redhat.com/browse/OCPBUGS-21327): [release-4.13]: Bump golang.org/x/net to v0.17.0 [#485](https://github.com/openshift/telemeter/pull/485)
* [Full changelog](https://github.com/openshift/telemeter/compare/be81b43429dcbf70f6ca19a9360ba455c97a1639...8c9a8a75108afb1ba7fe6398b004cbc8229cc645)


### [tests](https://github.com/openshift/origin/tree/4b36925d62ba1174f2105cb826f0b3d2a9bff71c)

* [OCPBUGS-19378](https://issues.redhat.com/browse/OCPBUGS-19378): [4.13] backport etcd restore tests [#28267](https://github.com/openshift/origin/pull/28267)
* Bug OCPBUGS-17469: Correct condition for rejecting connection [#28151](https://github.com/openshift/origin/pull/28151)
* [OCPBUGS-20361](https://issues.redhat.com/browse/OCPBUGS-20361): Update image stream test to create a manifest list image by default [#28318](https://github.com/openshift/origin/pull/28318)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [Full changelog](https://github.com/openshift/origin/compare/b1f4ee96d1d1f95af75b2701b8c5e42886a9912a...4b36925d62ba1174f2105cb826f0b3d2a9bff71c)


### [thanos](https://github.com/openshift/thanos/tree/9d44429f5179099aa42dcc2920020d9e401cd8f7)

* [OCPBUGS-21157](https://issues.redhat.com/browse/OCPBUGS-21157): Bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/thanos/pull/125)
* [Full changelog](https://github.com/openshift/thanos/compare/43238be385374e76ca6148a6780ddff9ebca3d11...9d44429f5179099aa42dcc2920020d9e401cd8f7)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4d3036a6c7fe0c850bbadd942267426afe2ec16a)

* [OCPBUGS-21561](https://issues.redhat.com/browse/OCPBUGS-21561): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#91](https://github.com/openshift/vmware-vsphere-csi-driver/pull/91)
* [OCPBUGS-16398](https://issues.redhat.com/browse/OCPBUGS-16398): Rebase v3.0.2 [#83](https://github.com/openshift/vmware-vsphere-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e0efc3911345f62ef6fa6ae7334d01fbf4de4bd...4d3036a6c7fe0c850bbadd942267426afe2ec16a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/a9e5036e12facff0193d563b752847191fc9dc91)

* [OCPBUGS-21434](https://issues.redhat.com/browse/OCPBUGS-21434): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#174](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/174)
* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Block 4.14 upgrades with admin ack [#169](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/169)
* [OCPBUGS-18332](https://issues.redhat.com/browse/OCPBUGS-18332): disable controller hostNetwork [#166](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/166)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/ab111cf6a6f39b81ace6990dc56eb9ca14560614...a9e5036e12facff0193d563b752847191fc9dc91)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59)

* [OCPBUGS-21577](https://issues.redhat.com/browse/OCPBUGS-21577): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#130](https://github.com/openshift/vsphere-problem-detector/pull/130)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/64f62bff177c6f2df6f106eacecc05e49e9a9828...3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59)