# 4.13.0-0.okd-scos-2023-05-04-192252

Created: 2023-05-05 12:10:07 +0000 UTC

Image Digest: `sha256:b3cbd04e527992111b3a736b8d6f59c8406d0ae59cda1bfdfb542519a4c1610c`

Promoted from registry.ci.openshift.org/origin/release-scos:4.13.0-0.okd-scos-2023-05-04-192252


## Changes from 4.13.0-0.okd-scos-2023-03-29-124824

### Components

* Kubernetes upgraded from 1.26.2 to 1.26.3
* CentOS Stream CoreOS upgraded from 413.9.202303210607-0 to 414.9.202305040609-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [78fb9d58](https://github.com/openshift/assisted-service/commit/78fb9d5890a9e04091b70585a4a3fed735a6802c) `sha256:ef71d18f3a58bd07038410391395ac81413b5dde4281f98ba7656da22b5a1615`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:494d3e03d18e2f4dbeb7f37f53b0cdcecb6c9a941c8598262739389cf0bbdb55`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:116b7b210b1c1fd43fb9974e32c0c4923f29a3b581f444f8e33452cd9ad26ea4`
* centos-stream-coreos-9 `sha256:d538eddec7da544aa5089a6585835acd3011852d7318fa0255dc3aee91083f90`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [c58c53bf](https://github.com/openshift/kubernetes-autoscaler/commit/c58c53bf7a82ee46414c7f7c0f2e0e438da93eeb) `sha256:395ded28f986562af2e462a865cda2f92b4c3fec2cbf7ec2de186a7420b8e067`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [ecb49c59](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe) `sha256:3799e68b8765f124a58b8b04ca4622847d2fcff82576b43b523039fd8258621f`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [d4685ceb](https://github.com/openshift/csi-driver-shared-resource/commit/d4685ceb2b13ac6ce60e1b7997a99dea7173649d) `sha256:516fa15b7320a1257dc078ed682e0d6fc0e2530a5bd2253c18d3d31d5736423c`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [d4685ceb](https://github.com/openshift/csi-driver-shared-resource/commit/d4685ceb2b13ac6ce60e1b7997a99dea7173649d) `sha256:a87c416d5690fa77cc20160b37f72c026eb9213043532ac7fee029bf88852ca0`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [9b7ca987](https://github.com/openshift/cloud-provider-gcp/commit/9b7ca987656ad184730a6b430dcd846f5bc75db5) `sha256:c60a3f77cc3ea9636fc51a8683c6cd0f82404631e47dd86c80325618a20ee2d0`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c5ae6f5d](https://github.com/openshift/gcp-pd-csi-driver/commit/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733) `sha256:74fefafbf88aca64b0066bbd4cbc1c8ca8d705945c47eaade0fbfe5fccb27157`
* [hypershift](https://github.com/openshift/hypershift) git [3d04abc1](https://github.com/openshift/hypershift/commit/3d04abc15dc669129902979f8d9d97a8f269f5c7) `sha256:0ae16317d35b8f246b07eaf886a997be3cb45cbf51888dd5571b38f172224e5e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [11b1439d](https://github.com/openshift/kube-rbac-proxy/commit/11b1439d48a47a408ae7e2dd851989f7b7b4f595) `sha256:5c64df816b467f25a85cd76e614fa0fb2d77a4adcb720ec022a8955b5087de6d`
* machine-os-content `sha256:d538eddec7da544aa5089a6585835acd3011852d7318fa0255dc3aee91083f90`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [ab111cf6](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/ab111cf6a6f39b81ace6990dc56eb9ca14560614) `sha256:9f5378af0e277cc55eeab41cfd658580ad69f9f549a0eb278b7633feb15a11c1`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [e10dc552](https://github.com/openshift/vsphere-problem-detector/commit/e10dc55232d1bf9f11251f63abcb72fe75bedd75) `sha256:5f4b6c2d5117c017441c953a5b985c405ae8e27c2dc212ce84c51119135a524d`


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e8de0582db56699d32653df02241c4a104755e1b)

* MGMT-14319 chronyc segfaulting Running chronyc on host and not in container (#535) [#535](https://github.com/openshift/assisted-installer-agent/pull/535)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/835acad181d540a40a4622c94b8faa3ad06bd113...e8de0582db56699d32653df02241c4a104755e1b)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/)

* [OCPBUGS-28849](https://issues.redhat.com/browse/OCPBUGS-28849): Updating ose-alibaba-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#85](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/85)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#83](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/83)
* [OCPBUGS-25528](https://issues.redhat.com/browse/OCPBUGS-25528): Updating ose-alibaba-disk-csi-driver-operator-container image to be consistent with ART [#80](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/80)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#78](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/78)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#79](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/79)
* [OCPBUGS-24801](https://issues.redhat.com/browse/OCPBUGS-24801): Updating ose-alibaba-disk-csi-driver-operator-container image to be consistent with ART [#74](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/74)
* [OCPBUGS-23825](https://issues.redhat.com/browse/OCPBUGS-23825): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#73](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/73)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#75](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#72](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/72)
* [OCPBUGS-22541](https://issues.redhat.com/browse/OCPBUGS-22541): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#70](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/70)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#69](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/69)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/62)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#57](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/57)
* [OCPBUGS-19111](https://issues.redhat.com/browse/OCPBUGS-19111): Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#61](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/61)
* [STOR-1439](https://issues.redhat.com/browse/STOR-1439): Restart controller Pods if metrics-serving-cert changed [#56](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/56)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#54](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/54)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump alibaba-disk-csi-driver-operator library-go [#53](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/53)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#51](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/51)
* [OCPBUGS-12545](https://issues.redhat.com/browse/OCPBUGS-12545): Bump golang.org/x/net@v0.9.0 [#50](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/50)
* Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#49](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/49)
* Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#48](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/48)
* Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#47](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/47)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#46](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/46)
* Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#45](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/45)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/0f4b92ab502068edc6cad4c0d070f44c06842092...)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/)

* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master [#507](https://github.com/openshift/cluster-api-provider-aws/pull/507)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master [#502](https://github.com/openshift/cluster-api-provider-aws/pull/502)
* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#503](https://github.com/openshift/cluster-api-provider-aws/pull/503)
* [OCPBUGS-25565](https://issues.redhat.com/browse/OCPBUGS-25565), [OCPCLOUD-2441](https://issues.redhat.com/browse/OCPCLOUD-2441): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master [#499](https://github.com/openshift/cluster-api-provider-aws/pull/499)
* [OCPBUGS-27871](https://issues.redhat.com/browse/OCPBUGS-27871): Update snyk exclusion file [#498](https://github.com/openshift/cluster-api-provider-aws/pull/498)
* [OCPBUGS-26181](https://issues.redhat.com/browse/OCPBUGS-26181): Add Snyk file to exclude vendor directory on scan [#495](https://github.com/openshift/cluster-api-provider-aws/pull/495)
* [OCPBUGS-24928](https://issues.redhat.com/browse/OCPBUGS-24928): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#488](https://github.com/openshift/cluster-api-provider-aws/pull/488)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master [#487](https://github.com/openshift/cluster-api-provider-aws/pull/487)
* [OCPBUGS-24113](https://issues.redhat.com/browse/OCPBUGS-24113): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#485](https://github.com/openshift/cluster-api-provider-aws/pull/485)
* [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#486](https://github.com/openshift/cluster-api-provider-aws/pull/486)
* [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#471](https://github.com/openshift/cluster-api-provider-aws/pull/471)
* Update OWNERS [#480](https://github.com/openshift/cluster-api-provider-aws/pull/480)
* [OCPBUGS-21649](https://issues.redhat.com/browse/OCPBUGS-21649): Bump golang.org/x/net to v0.17.0 [#479](https://github.com/openshift/cluster-api-provider-aws/pull/479)
* [OCPBUGS-17279](https://issues.redhat.com/browse/OCPBUGS-17279), [OCPCLOUD-2216](https://issues.redhat.com/browse/OCPCLOUD-2216): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master [#478](https://github.com/openshift/cluster-api-provider-aws/pull/478)
* [OCPBUGS-19185](https://issues.redhat.com/browse/OCPBUGS-19185): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#477](https://github.com/openshift/cluster-api-provider-aws/pull/477)
* Fix version in metadata.yaml [#474](https://github.com/openshift/cluster-api-provider-aws/pull/474)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.0 (2475f2f) into master [#472](https://github.com/openshift/cluster-api-provider-aws/pull/472)
* [OCPBUGS-14969](https://issues.redhat.com/browse/OCPBUGS-14969): Pass right SGs for IsExternallyManaged on creation [#467](https://github.com/openshift/cluster-api-provider-aws/pull/467)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#465](https://github.com/openshift/cluster-api-provider-aws/pull/465)
* Updating ose-aws-cluster-api-controllers images to be consistent with ART [#461](https://github.com/openshift/cluster-api-provider-aws/pull/461)
* [OCPBUGS-10122](https://issues.redhat.com/browse/OCPBUGS-10122): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#459](https://github.com/openshift/cluster-api-provider-aws/pull/459)
* Add enxebre to owners [#460](https://github.com/openshift/cluster-api-provider-aws/pull/460)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:release-2.0 (28bc9b8) into master [#456](https://github.com/openshift/cluster-api-provider-aws/pull/456)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4251ed32deecad37706c6b90ecb187882386609a...)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/d83850b60f6246fc37b2881891060b9d406979ef)

* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set control plane operand properties [#206](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/206)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/0d34035fcacc60abfa5810d3eeb861a3d7722875...d83850b60f6246fc37b2881891060b9d406979ef)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/7afcf26e2e9190337134e75e0981d25d05dc16c8)

* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Allow deprecated beta topology labels to be applied for those not ready to migrate [#66](https://github.com/openshift/cloud-provider-azure/pull/66)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/ce2ddad6686e14327c3b27befbf8c46b1b2dc68c...7afcf26e2e9190337134e75e0981d25d05dc16c8)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3e0b2a2ec26d9ffcca34b361896418499ad9d603)

* [OCPBUGS-11799](https://issues.redhat.com/browse/OCPBUGS-11799): update RHCOS 4.13 bootimage metadata to 413.92.202305021736-0 [#7156](https://github.com/openshift/installer/pull/7156)
* [OCPBUGS-12910](https://issues.redhat.com/browse/OCPBUGS-12910): openstack: Add netcat to the Installer image [#7144](https://github.com/openshift/installer/pull/7144)
* [OCPBUGS-11845](https://issues.redhat.com/browse/OCPBUGS-11845), [OCPBUGS-11846](https://issues.redhat.com/browse/OCPBUGS-11846), [OCPBUGS-11847](https://issues.redhat.com/browse/OCPBUGS-11847): CVE: bump hashicorp/vault  version [#7097](https://github.com/openshift/installer/pull/7097)
* [OCPBUGS-5140](https://issues.redhat.com/browse/OCPBUGS-5140): [Alibaba] update the bandwidth value of EIP [#7010](https://github.com/openshift/installer/pull/7010)
* [OCPBUGS-11261](https://issues.redhat.com/browse/OCPBUGS-11261): Fix and improve locking session and AWS Metadata access [#7129](https://github.com/openshift/installer/pull/7129)
* [OCPBUGS-12179](https://issues.redhat.com/browse/OCPBUGS-12179): agent: copy also symbolic link when storing agent-tui related files into the agent ISO [#7113](https://github.com/openshift/installer/pull/7113)
* [OCPBUGS-11950](https://issues.redhat.com/browse/OCPBUGS-11950): vsphere, nutanix survey: relax vip in machine cidr [#7107](https://github.com/openshift/installer/pull/7107)
* [OCPBUGS-11529](https://issues.redhat.com/browse/OCPBUGS-11529): [release-4.13] gather: azure: fix collecting VM serial logs [#7077](https://github.com/openshift/installer/pull/7077)
* [OCPBUGS-10658](https://issues.redhat.com/browse/OCPBUGS-10658): openstack: No master primarySubnet control-plane if portTarget is set [#7008](https://github.com/openshift/installer/pull/7008)
* [OCPBUGS-11789](https://issues.redhat.com/browse/OCPBUGS-11789): update RHCOS 4.13 bootimage metadata to 413.92.202304131328-0 [#7093](https://github.com/openshift/installer/pull/7093)
* [OCPBUGS-11659](https://issues.redhat.com/browse/OCPBUGS-11659): Upgrade libnmstate version used [#7082](https://github.com/openshift/installer/pull/7082)
* [OCPBUGS-11661](https://issues.redhat.com/browse/OCPBUGS-11661): AWS - Remove ACLs from s3 ign [#7083](https://github.com/openshift/installer/pull/7083)
* [OCPBUGS-11010](https://issues.redhat.com/browse/OCPBUGS-11010): vSphere - finding networks use full path cluster [#7043](https://github.com/openshift/installer/pull/7043)
* [OCPBUGS-10892](https://issues.redhat.com/browse/OCPBUGS-10892): Don't log password values [#7024](https://github.com/openshift/installer/pull/7024)
* [OCPBUGS-11093](https://issues.redhat.com/browse/OCPBUGS-11093): pkg/asset/installconfig: set subscriptionID [#7049](https://github.com/openshift/installer/pull/7049)
* [OCPBUGS-11188](https://issues.redhat.com/browse/OCPBUGS-11188): Use 100 GB as minimum disk size in validations [#7053](https://github.com/openshift/installer/pull/7053)
* [OCPBUGS-10989](https://issues.redhat.com/browse/OCPBUGS-10989): Properly handle invalid agent command [#7034](https://github.com/openshift/installer/pull/7034)
* [OCPBUGS-10903](https://issues.redhat.com/browse/OCPBUGS-10903): IBMCloud: Fix SSH Private bootstrap [#7027](https://github.com/openshift/installer/pull/7027)
* [OCPBUGS-11011](https://issues.redhat.com/browse/OCPBUGS-11011): Do not remove host default configuration unless network configuration is provided for it [#7044](https://github.com/openshift/installer/pull/7044)
* [OCPBUGS-11040](https://issues.redhat.com/browse/OCPBUGS-11040): remove container-runtime flag from kubelet config [#7048](https://github.com/openshift/installer/pull/7048)
* [OCPBUGS-11054](https://issues.redhat.com/browse/OCPBUGS-11054): GCP: add europe-west12 region to the survey as supported region [#7046](https://github.com/openshift/installer/pull/7046)
* [OCPBUGS-11004](https://issues.redhat.com/browse/OCPBUGS-11004): Kubelet Client Cert should include system:serviceaccounts group [#7039](https://github.com/openshift/installer/pull/7039)
* [Full changelog](https://github.com/openshift/installer/compare/aaf8b7c5b0426a45728e58a1282d1300f8d37b77...3e0b2a2ec26d9ffcca34b361896418499ad9d603)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/d20bc578a4368130d10f41ad974bf147af9410f8)

* [OCPBUGS-12692](https://issues.redhat.com/browse/OCPBUGS-12692): Use go 1.19 and uplift x/net to 0.7.0 [#192](https://github.com/openshift/cluster-api-provider-baremetal/pull/192)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/0a751899f22b8d17ed4e0c3c029739b30d02cce3...d20bc578a4368130d10f41ad974bf147af9410f8)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e037aa01c1b7b0438a34092b35aa1866a0d31851)

* [OCPBUGS-12708](https://issues.redhat.com/browse/OCPBUGS-12708): Supported forced reboot of preprovisioning images [#272](https://github.com/openshift/baremetal-operator/pull/272)
* [OCPBUGS-12828](https://issues.redhat.com/browse/OCPBUGS-12828): [release 4.13] Store htpasswd files in Secrets instead of ConfigMaps [#273](https://github.com/openshift/baremetal-operator/pull/273)
* [OCPBUGS-11870](https://issues.redhat.com/browse/OCPBUGS-11870): Create nodes with namespace already prepended [#265](https://github.com/openshift/baremetal-operator/pull/265)
* [OCPBUGS-11983](https://issues.redhat.com/browse/OCPBUGS-11983): Revert live-iso validation [#268](https://github.com/openshift/baremetal-operator/pull/268)
* [OCPBUGS-11213](https://issues.redhat.com/browse/OCPBUGS-11213): backport: Delay delete of detached hosts [#261](https://github.com/openshift/baremetal-operator/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/8e073a67123ad0a81e04780801b718440f1c1699...e037aa01c1b7b0438a34092b35aa1866a0d31851)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/b9fbafdfd91950d644a6e219bdad514d97119837)

* [OCPBUGS-12862](https://issues.redhat.com/browse/OCPBUGS-12862): In keepalived config print structs instead of pointers [#242](https://github.com/openshift/baremetal-runtimecfg/pull/242)
* [OCPBUGS-12804](https://issues.redhat.com/browse/OCPBUGS-12804): Make nested dual stack VIP configs respect EnableUnicast [#239](https://github.com/openshift/baremetal-runtimecfg/pull/239)
* [OCPBUGS-11138](https://issues.redhat.com/browse/OCPBUGS-11138): fix isUpgradeStillRunning() [#231](https://github.com/openshift/baremetal-runtimecfg/pull/231)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/5847e8945c4997c5257c9f4f74cde0800e555866...b9fbafdfd91950d644a6e219bdad514d97119837)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/)

* [OCPBUGS-32026](https://issues.redhat.com/browse/OCPBUGS-32026): Docs: Fix migration to azure workload identy to apply the webhook config [#695](https://github.com/openshift/cloud-credential-operator/pull/695)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Dockerfile should keep prior rhel8 behavior for ccoctl default [#694](https://github.com/openshift/cloud-credential-operator/pull/694)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 [#693](https://github.com/openshift/cloud-credential-operator/pull/693)
* [OCPBUGS-31290](https://issues.redhat.com/browse/OCPBUGS-31290): Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 [#692](https://github.com/openshift/cloud-credential-operator/pull/692)
* [OCPBUGS-31678](https://issues.redhat.com/browse/OCPBUGS-31678): aws: remove non-existent permission [#690](https://github.com/openshift/cloud-credential-operator/pull/690)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#681](https://github.com/openshift/cloud-credential-operator/pull/681)
* [OCPBUGS-30713](https://issues.redhat.com/browse/OCPBUGS-30713): update go-jose module to v4.0.1 [#687](https://github.com/openshift/cloud-credential-operator/pull/687)
* [OCPBUGS-30478](https://issues.redhat.com/browse/OCPBUGS-30478): Update to cloud.google.com/go/storage v1.39.1 [#688](https://github.com/openshift/cloud-credential-operator/pull/688)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Scope networkResourceGroup permissions to more operators [#682](https://github.com/openshift/cloud-credential-operator/pull/682)
* [OCPBUGS-28787](https://issues.redhat.com/browse/OCPBUGS-28787): gcp actuator update check to consider custom roles [#685](https://github.com/openshift/cloud-credential-operator/pull/685)
* [CCO-525](https://issues.redhat.com/browse/CCO-525): Azure workload identity doc updates [#680](https://github.com/openshift/cloud-credential-operator/pull/680)
* NO-JIRA:docu change: fix find command [#677](https://github.com/openshift/cloud-credential-operator/pull/677)
* NO-JIRA: Fix update-codegen.sh [#669](https://github.com/openshift/cloud-credential-operator/pull/669)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#672](https://github.com/openshift/cloud-credential-operator/pull/672)
* [OCPBUGS-28388](https://issues.redhat.com/browse/OCPBUGS-28388): Fix the ClusterOperator watch of the status controller [#665](https://github.com/openshift/cloud-credential-operator/pull/665)
* [OCPBUGS-27214](https://issues.redhat.com/browse/OCPBUGS-27214): ccoctl - use proxy when validating CloudFront URL [#654](https://github.com/openshift/cloud-credential-operator/pull/654)
* [OCPBUGS-28535](https://issues.redhat.com/browse/OCPBUGS-28535): stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster [#667](https://github.com/openshift/cloud-credential-operator/pull/667)
* NO-JIRA: Fix user-facing typos [#668](https://github.com/openshift/cloud-credential-operator/pull/668)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#663](https://github.com/openshift/cloud-credential-operator/pull/663)
* NO-JIRA: Keep metrics.md up-to-date [#664](https://github.com/openshift/cloud-credential-operator/pull/664)
* [OCPBUGS-27446](https://issues.redhat.com/browse/OCPBUGS-27446): Report manualpodidentity mode in metrics when using Azure Workload Identity [#657](https://github.com/openshift/cloud-credential-operator/pull/657)
* [OCPBUGS-27445](https://issues.redhat.com/browse/OCPBUGS-27445): Use cached clients to avoid client side throttling [#656](https://github.com/openshift/cloud-credential-operator/pull/656)
* NO-JIRA: azwi doc: apply webhook manifest to cluster [#652](https://github.com/openshift/cloud-credential-operator/pull/652)
* [CCO-454](https://issues.redhat.com/browse/CCO-454): Bump go.mod k8s deps to 0.29.1 [#655](https://github.com/openshift/cloud-credential-operator/pull/655)
* [OCPBUGS-16181](https://issues.redhat.com/browse/OCPBUGS-16181): Write manifests when AWS IAM roles already exist. [#514](https://github.com/openshift/cloud-credential-operator/pull/514)
* [CCO-519](https://issues.redhat.com/browse/CCO-519): Resolve all outstanding snyk vulnerabilities [#648](https://github.com/openshift/cloud-credential-operator/pull/648)
* [OCPBUGS-26488](https://issues.redhat.com/browse/OCPBUGS-26488): Use live client for metrics [#645](https://github.com/openshift/cloud-credential-operator/pull/645)
* [OCPBUGS-25533](https://issues.redhat.com/browse/OCPBUGS-25533): Updating ose-cloud-credential-operator-container image to be consistent with ART [#642](https://github.com/openshift/cloud-credential-operator/pull/642)
* NO-JIRA: Update docs/sts.md [#634](https://github.com/openshift/cloud-credential-operator/pull/634)
* [OCPBUGS-24807](https://issues.redhat.com/browse/OCPBUGS-24807): Updating ose-cloud-credential-operator-container image to be consistent with ART [#639](https://github.com/openshift/cloud-credential-operator/pull/639)
* NO-JIRA: Fixed typos [#633](https://github.com/openshift/cloud-credential-operator/pull/633)
* [OCPVE-647](https://issues.redhat.com/browse/OCPVE-647): annotate manifests with capability name [#594](https://github.com/openshift/cloud-credential-operator/pull/594)
* [CCO-338](https://issues.redhat.com/browse/CCO-338): cmd/operator: use correct kubeconfig for all clients [#638](https://github.com/openshift/cloud-credential-operator/pull/638)
* [CCO-244](https://issues.redhat.com/browse/CCO-244): gcp-ro-credentialrequest to use granular permissions [#626](https://github.com/openshift/cloud-credential-operator/pull/626)
* [OCPBUGS-23178](https://issues.redhat.com/browse/OCPBUGS-23178): Enable GCP sync to undelete custom roles [#637](https://github.com/openshift/cloud-credential-operator/pull/637)
* [OCPBUGS-13597](https://issues.redhat.com/browse/OCPBUGS-13597): Discover AWS dns suffix from partition and region. [#596](https://github.com/openshift/cloud-credential-operator/pull/596)
* [CCO-372](https://issues.redhat.com/browse/CCO-372): Azure Workload Identity info in CredsRequests creates a Secret [#587](https://github.com/openshift/cloud-credential-operator/pull/587)
* [OCPBUGS-20478](https://issues.redhat.com/browse/OCPBUGS-20478): Explicitly set the vsphere secret credential data on sync. [#628](https://github.com/openshift/cloud-credential-operator/pull/628)
* [CCO-440](https://issues.redhat.com/browse/CCO-440): Bump k8s deps to 0.28.3 [#614](https://github.com/openshift/cloud-credential-operator/pull/614)
* [CCO-192](https://issues.redhat.com/browse/CCO-192): Use Leases for leader election [#627](https://github.com/openshift/cloud-credential-operator/pull/627)
* [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611)
* snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613)
* [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610)
* Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609)
* [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607)
* Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606)
* Revert #592 "CCO-421: *: split pod identity webhooks from core controller" [#604](https://github.com/openshift/cloud-credential-operator/pull/604)
* [CCO-421](https://issues.redhat.com/browse/CCO-421): *: split pod identity webhooks from core controller [#592](https://github.com/openshift/cloud-credential-operator/pull/592)
* Docs: azure workload identity no longer requires TechPreviewNoUpgrade [#603](https://github.com/openshift/cloud-credential-operator/pull/603)
* [CCO-437](https://issues.redhat.com/browse/CCO-437): Document steps for in-place migration to Azure AD Workload Identity. [#598](https://github.com/openshift/cloud-credential-operator/pull/598)
* [OCPBUGS-19123](https://issues.redhat.com/browse/OCPBUGS-19123): Updating ose-cloud-credential-operator images to be consistent with ART [#600](https://github.com/openshift/cloud-credential-operator/pull/600)
* [OCPBUGS-18246](https://issues.redhat.com/browse/OCPBUGS-18246): Add networkResourceGroupName parameter for Azure [#597](https://github.com/openshift/cloud-credential-operator/pull/597)
* [OCPBUGS-17719](https://issues.redhat.com/browse/OCPBUGS-17719): Double timeout delays for managed identity creation and role assignment from 2 to 4 minutes. [#591](https://github.com/openshift/cloud-credential-operator/pull/591)
* pkg/aws/actuator: Drop comment which suggested passthrough permission verification [#590](https://github.com/openshift/cloud-credential-operator/pull/590)
* [CCO-363](https://issues.redhat.com/browse/CCO-363): Adding azure identity webhook [#559](https://github.com/openshift/cloud-credential-operator/pull/559)
* [OCPBUGS-16684](https://issues.redhat.com/browse/OCPBUGS-16684): Set cr.status.provisioned=false on syncErr path [#583](https://github.com/openshift/cloud-credential-operator/pull/583)
* [OCPBUGS-17049](https://issues.redhat.com/browse/OCPBUGS-17049): update lastSyncGeneration in STS flow sync success [#585](https://github.com/openshift/cloud-credential-operator/pull/585)
* Revert "CCO-401: Add azure-workload-identity-webhook to image references." [#588](https://github.com/openshift/cloud-credential-operator/pull/588)
* [CCO-401](https://issues.redhat.com/browse/CCO-401): Add azure-workload-identity-webhook to image references. [#586](https://github.com/openshift/cloud-credential-operator/pull/586)
* [CCO-413](https://issues.redhat.com/browse/CCO-413): Add dataPermissions to Azure credentials request. [#584](https://github.com/openshift/cloud-credential-operator/pull/584)
* [CCO-402](https://issues.redhat.com/browse/CCO-402): Create Azure AD pod identity webhook config secret manifest in create-all,create-oidc-issuer [#573](https://github.com/openshift/cloud-credential-operator/pull/573)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Plumb credreq.spec.cloudTokenPath override into Azure secret creation [#580](https://github.com/openshift/cloud-credential-operator/pull/580)
* [OCPBUGS-16807](https://issues.redhat.com/browse/OCPBUGS-16807): ccoctl azure exit with error when OIDC and installation resource group names are the same [#582](https://github.com/openshift/cloud-credential-operator/pull/582)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Add --enable-tech-preview arg to azure create-all subcommand. [#581](https://github.com/openshift/cloud-credential-operator/pull/581)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): *: stop checking for the STS feature gate [#579](https://github.com/openshift/cloud-credential-operator/pull/579)
* Add DOCKER_CMD Makefile var to use podman when found. [#577](https://github.com/openshift/cloud-credential-operator/pull/577)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): go.mod: re-vendor openshift/api [#578](https://github.com/openshift/cloud-credential-operator/pull/578)
* [CCO-233](https://issues.redhat.com/browse/CCO-233): Add Azure AD Workload Identity doc. [#566](https://github.com/openshift/cloud-credential-operator/pull/566)
* *: use a global codec [#576](https://github.com/openshift/cloud-credential-operator/pull/576)
* [OCPBUGS-16313](https://issues.redhat.com/browse/OCPBUGS-16313): pkg/operator: correctly fetch CA for AWS minter [#575](https://github.com/openshift/cloud-credential-operator/pull/575)
* [OCPBUGS-16334](https://issues.redhat.com/browse/OCPBUGS-16334): Clarify updateActuatorConditions & update lastSync [#568](https://github.com/openshift/cloud-credential-operator/pull/568)
* [OCPBUGS-16313](https://issues.redhat.com/browse/OCPBUGS-16313): manifests: allow list/watch globally on our config configmap [#572](https://github.com/openshift/cloud-credential-operator/pull/572)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): manifests: add cloudcredentials.operator.openshift.io to HCP [#571](https://github.com/openshift/cloud-credential-operator/pull/571)
* Revert "manifests: manually amend resources that get laid down by CVO in HCP" [#570](https://github.com/openshift/cloud-credential-operator/pull/570)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): manifests: fix rbac [#567](https://github.com/openshift/cloud-credential-operator/pull/567)
* [OCPBUGS-15906](https://issues.redhat.com/browse/OCPBUGS-15906): ccoctl azure delete to also delete role assignments [#564](https://github.com/openshift/cloud-credential-operator/pull/564)
* [OCPBUGS-16088](https://issues.redhat.com/browse/OCPBUGS-16088): Adds [default] section header to STS Secrets [#565](https://github.com/openshift/cloud-credential-operator/pull/565)
* [OCPBUGS-16036](https://issues.redhat.com/browse/OCPBUGS-16036): Set status on CR properly when STS provisioned [#562](https://github.com/openshift/cloud-credential-operator/pull/562)
* Revert "Merge pull request #398 from csrwng/exclude_config_ibmcloud" [#561](https://github.com/openshift/cloud-credential-operator/pull/561)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): *: use correct clients in the secretannotator [#563](https://github.com/openshift/cloud-credential-operator/pull/563)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): *: use a filtered LIST + WATCH on Secrets for AWS STS [#545](https://github.com/openshift/cloud-credential-operator/pull/545)
* reconcile status when the clusteroperator changes [#560](https://github.com/openshift/cloud-credential-operator/pull/560)
* [CCO-353](https://issues.redhat.com/browse/CCO-353): ccoctl to create azure custom roles [#556](https://github.com/openshift/cloud-credential-operator/pull/556)
* [CCO-394](https://issues.redhat.com/browse/CCO-394): Do not Add PodIdentityWebhook controller when InfraStatus.ControlPlaneToplogy is External. [#547](https://github.com/openshift/cloud-credential-operator/pull/547)
* CCO-366 Add ability to detect AWS STS and behave accordingly [#542](https://github.com/openshift/cloud-credential-operator/pull/542)
* Implement ccoctl command to create infrastructure required for Azure workload identity [#523](https://github.com/openshift/cloud-credential-operator/pull/523)
* [PORTENABLE-526](https://issues.redhat.com/browse/PORTENABLE-526): operator: use a partial metadata watch for Namespaces [#546](https://github.com/openshift/cloud-credential-operator/pull/546)
* manager: filter the cache of configmaps [#544](https://github.com/openshift/cloud-credential-operator/pull/544)
* Bump to go 1.20 in go.mod [#536](https://github.com/openshift/cloud-credential-operator/pull/536)
* [OCPBUGS-13549](https://issues.redhat.com/browse/OCPBUGS-13549): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#537](https://github.com/openshift/cloud-credential-operator/pull/537)
* Add a make target and stub for actuator e2e tests [#535](https://github.com/openshift/cloud-credential-operator/pull/535)
* Updating ose-cloud-credential-operator images to be consistent with ART [#534](https://github.com/openshift/cloud-credential-operator/pull/534)
* Updating ose-cloud-credential-operator images to be consistent with ART [#533](https://github.com/openshift/cloud-credential-operator/pull/533)
* Updating ose-cloud-credential-operator images to be consistent with ART [#532](https://github.com/openshift/cloud-credential-operator/pull/532)
* [OCPBUGS-11671](https://issues.redhat.com/browse/OCPBUGS-11671): ccoctl: Enable public anon read access to default OIDC S3 bucket [#526](https://github.com/openshift/cloud-credential-operator/pull/526)
* Updating ose-cloud-credential-operator images to be consistent with ART [#521](https://github.com/openshift/cloud-credential-operator/pull/521)
* [OCPBUGS-8666](https://issues.redhat.com/browse/OCPBUGS-8666): Correct pod-identity-webhook annotations for PreferredDuringScheduling. [#522](https://github.com/openshift/cloud-credential-operator/pull/522)
* [SPLAT-950](https://issues.redhat.com/browse/SPLAT-950): doc/aws-sts : steps to migrate from public bucket to private issuer URL [#515](https://github.com/openshift/cloud-credential-operator/pull/515)
* [OCPBUGS-8666](https://issues.redhat.com/browse/OCPBUGS-8666): feat: add workload annotation to pod identity webhook deployment [#520](https://github.com/openshift/cloud-credential-operator/pull/520)
* Upgrade build-machinery-go: `make vulncheck` [#519](https://github.com/openshift/cloud-credential-operator/pull/519)
* Bump golang.org/x/net from v0.5.0 to v0.7.0 [#517](https://github.com/openshift/cloud-credential-operator/pull/517)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e74d108153107ff2979febe8c36588132c709796...)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/224329c4bea49e726971f1bf4496bf7325e9acc3)

* [OCPBUGS-10990](https://issues.redhat.com/browse/OCPBUGS-10990): pull project name from subnet uri [#101](https://github.com/openshift/cloud-network-config-controller/pull/101)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f4aeb704324972cf816f74a8a96534fd17c0c549...224329c4bea49e726971f1bf4496bf7325e9acc3)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242)

* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#604](https://github.com/openshift/cluster-authentication-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/1387625605df6e545945b7ed975cbf40980c590e...a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/db283115e0b424e404307602701f1b6295c2f856)

* [OCPBUGS-12685](https://issues.redhat.com/browse/OCPBUGS-12685): Uplift x/net to 0.7.0 [#340](https://github.com/openshift/cluster-baremetal-operator/pull/340)
* [OCPBUGS-11985](https://issues.redhat.com/browse/OCPBUGS-11985): use proxying for inspector in addition to ironic [#338](https://github.com/openshift/cluster-baremetal-operator/pull/338)
* [OCPBUGS-10689](https://issues.redhat.com/browse/OCPBUGS-10689): Add ironic IP to no_proxy [#332](https://github.com/openshift/cluster-baremetal-operator/pull/332)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/53d370a7c26b1b7fefbd445a9522ba4250651702...db283115e0b424e404307602701f1b6295c2f856)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/ee908b6bb91dee3e61aface46d53a00b4e9288a2)

* [OCPBUGS-10923](https://issues.redhat.com/browse/OCPBUGS-10923): Waiting for 2 masters in HA mode case [#83](https://github.com/openshift/cluster-bootstrap/pull/83)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/49fe1bdba1ab15b1a89797d7bb1d4d66de57fbeb...ee908b6bb91dee3e61aface46d53a00b4e9288a2)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ce1c9a359ec9ab0c5526cd8594ea59bb52044026)

* [OCPBUGS-10967](https://issues.redhat.com/browse/OCPBUGS-10967): feat: add workload annotations [#108](https://github.com/openshift/cluster-capi-operator/pull/108)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/eb2c1be0761ee00620c7170ee6ec82edd3bd5f62...ce1c9a359ec9ab0c5526cd8594ea59bb52044026)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/98c3cdb13ff595b7f7bcf5d9d16901182b3b654f)

* [OCPBUGS-11968](https://issues.redhat.com/browse/OCPBUGS-11968): Prioritise machine mapping over alphabetical mapping [#198](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/198)
* [OCPBUGS-11506](https://issues.redhat.com/browse/OCPBUGS-11506): E2E periodics test timeout failures improvement [#187](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/187)
* [OCPBUGS-11460](https://issues.redhat.com/browse/OCPBUGS-11460): Use PlatformStatus instead of PlatformSpec to determine platform [#186](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/186)
* [OCPBUGS-11354](https://issues.redhat.com/browse/OCPBUGS-11354): controlplanemachineset: start watching control plane nodes [#184](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/184)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/8a4133dc30f2e6063311949f0220659027e8884f...98c3cdb13ff595b7f7bcf5d9d16901182b3b654f)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/97b486cb22d56c7ea17b6829606ae0c555bcc426)

* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set Deployment properties [#147](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/147)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/22d0f40fd1d1d13ce10c6a09039be9a20e275878...97b486cb22d56c7ea17b6829606ae0c555bcc426)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4a9be58b44eee435cfa28b97f5f4c0d816424717)

* [OCPBUGS-11683](https://issues.redhat.com/browse/OCPBUGS-11683): Revert Add Controller health to CEO liveness probe [#1050](https://github.com/openshift/cluster-etcd-operator/pull/1050)
* [OCPBUGS-12450](https://issues.redhat.com/browse/OCPBUGS-12450): Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time [#1032](https://github.com/openshift/cluster-etcd-operator/pull/1032)
* [OCPBUGS-11683](https://issues.redhat.com/browse/OCPBUGS-11683): Add Controller health to CEO liveness probe [#1039](https://github.com/openshift/cluster-etcd-operator/pull/1039)
* [OCPBUGS-10960](https://issues.redhat.com/browse/OCPBUGS-10960): skip machine deletion during boostrap [#1036](https://github.com/openshift/cluster-etcd-operator/pull/1036)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/81a9226db5ff8a0b9d4f1108a0ae744d7a458374...4a9be58b44eee435cfa28b97f5f4c0d816424717)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba)

* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1470](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1470)
* [OCPBUGS-10712](https://issues.redhat.com/browse/OCPBUGS-10712): PSA Violation alert: add ocp_namespace label [#1473](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1473)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f2d9ccd2f585c57409257fae99da7f52ed6042cf...02ea4a4120dd0f8eb49d070b1fe420ed6d1debba)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/9f53628279a765cccb234b1ef992075ad7cddf96)

* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): KCMO and MCO must set env var for CSI migration [#718](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/718)
* [OCPBUGS-11222](https://issues.redhat.com/browse/OCPBUGS-11222): do not degrade KCM when when monitoring stack rollout is in progress [#717](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/717)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/099d4ffbcc06f70d30a42beb24f4e8b9593265e5...9f53628279a765cccb234b1ef992075ad7cddf96)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/)

* [OCPBUGS-29568](https://issues.redhat.com/browse/OCPBUGS-29568): Apply hypershift cluster-profile for ibm-cloud-managed [#229](https://github.com/openshift/cluster-machine-approver/pull/229)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#227](https://github.com/openshift/cluster-machine-approver/pull/227)
* [OCPBUGS-26116](https://issues.redhat.com/browse/OCPBUGS-26116): Add Snyk file to exclude vendor directory on scan [#225](https://github.com/openshift/cluster-machine-approver/pull/225)
* [OCPCLOUD-2417](https://issues.redhat.com/browse/OCPCLOUD-2417): Update to kube 1.29 and controller-runtime 0.17.0 [#224](https://github.com/openshift/cluster-machine-approver/pull/224)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Increase concurrent reconciles to 10 [#222](https://github.com/openshift/cluster-machine-approver/pull/222)
* [OCPBUGS-25582](https://issues.redhat.com/browse/OCPBUGS-25582): Updating ose-cluster-machine-approver-container image to be consistent with ART [#223](https://github.com/openshift/cluster-machine-approver/pull/223)
* [OCPBUGS-24985](https://issues.redhat.com/browse/OCPBUGS-24985): Updating ose-cluster-machine-approver-container image to be consistent with ART [#218](https://github.com/openshift/cluster-machine-approver/pull/218)
* [OCPBUGS-24154](https://issues.redhat.com/browse/OCPBUGS-24154): Updating ose-cluster-machine-approver-container image to be consistent with ART [#217](https://github.com/openshift/cluster-machine-approver/pull/217)
* [OCPCLOUD-2277](https://issues.redhat.com/browse/OCPCLOUD-2277): Ensure Cluster Machine Approver metrics are only available via HTTPS [#211](https://github.com/openshift/cluster-machine-approver/pull/211)
* [OCPBUGS-21594](https://issues.redhat.com/browse/OCPBUGS-21594): Filter non node CSRs in metrics [#208](https://github.com/openshift/cluster-machine-approver/pull/208)
* [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204)
* Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205)
* [OCPBUGS-19250](https://issues.redhat.com/browse/OCPBUGS-19250): Updating ose-cluster-machine-approver images to be consistent with ART [#201](https://github.com/openshift/cluster-machine-approver/pull/201)
* [OCPCLOUD-2181](https://issues.redhat.com/browse/OCPCLOUD-2181): Update K8s dependencies to 1.28 [#203](https://github.com/openshift/cluster-machine-approver/pull/203)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#199](https://github.com/openshift/cluster-machine-approver/pull/199)
* [OCPBUGS-16156](https://issues.redhat.com/browse/OCPBUGS-16156): check if machine api present [#198](https://github.com/openshift/cluster-machine-approver/pull/198)
* handle situation when machine CRD is not present [#191](https://github.com/openshift/cluster-machine-approver/pull/191)
* [OCPCLOUD-2044](https://issues.redhat.com/browse/OCPCLOUD-2044): Update to Kubernetes 1.27 deps [#195](https://github.com/openshift/cluster-machine-approver/pull/195)
* [OCPBUGS-10171](https://issues.redhat.com/browse/OCPBUGS-10171): Go 1.20 bump with fixed unit tests [#194](https://github.com/openshift/cluster-machine-approver/pull/194)
* [OCPBUGS-11225](https://issues.redhat.com/browse/OCPBUGS-11225): Update node client allowed usages [#189](https://github.com/openshift/cluster-machine-approver/pull/189)
* [OCPBUGS-11225](https://issues.redhat.com/browse/OCPBUGS-11225): Update isNodeClientCert to allow for new key usages [#186](https://github.com/openshift/cluster-machine-approver/pull/186)
* [OCPBUGS-11225](https://issues.redhat.com/browse/OCPBUGS-11225): approver: fix ECDSA approvals in 1.27 [#184](https://github.com/openshift/cluster-machine-approver/pull/184)
* Update TLS Bootstrapping doc links in README [#182](https://github.com/openshift/cluster-machine-approver/pull/182)
* Updating ose-cluster-machine-approver images to be consistent with ART [#180](https://github.com/openshift/cluster-machine-approver/pull/180)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d0d9df7e0463c05e4aa59452d0a69a97f06b6190...)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e537312288bb78e5da828ee763ca88ac620e0fc5)

* 4.13: OCPBUGS-11294: Add vSphere CSI migration to telemetry [#1929](https://github.com/openshift/cluster-monitoring-operator/pull/1929)
* [OCPBUGS-11536](https://issues.redhat.com/browse/OCPBUGS-11536): node-exporter: disable btrfs collector [#1941](https://github.com/openshift/cluster-monitoring-operator/pull/1941)
* [OCPBUGS-10895](https://issues.redhat.com/browse/OCPBUGS-10895): add startup probe for prometheus-adapter [#1923](https://github.com/openshift/cluster-monitoring-operator/pull/1923)
* [OCPBUGS-11333](https://issues.redhat.com/browse/OCPBUGS-11333): jsonnet: Add prometheus container in UWM [#1934](https://github.com/openshift/cluster-monitoring-operator/pull/1934)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4a26d185b4bc9f69057e2b1411bf5ead249c4f98...e537312288bb78e5da828ee763ca88ac620e0fc5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fed9560d379fa9e178441642a69746a126ac39b5)

* [OCPBUGS-12854](https://issues.redhat.com/browse/OCPBUGS-12854): AUTH: update cluster-reader to include k8s.ovn.org [#1797](https://github.com/openshift/cluster-network-operator/pull/1797)
* [OCPBUGS-11558](https://issues.redhat.com/browse/OCPBUGS-11558): multus-admission-controller should not run as root under Hypershift [#1776](https://github.com/openshift/cluster-network-operator/pull/1776)
* [OCPBUGS-11750](https://issues.redhat.com/browse/OCPBUGS-11750): Fix allowlist ds template [#1779](https://github.com/openshift/cluster-network-operator/pull/1779)
* [OCPBUGS-11424](https://issues.redhat.com/browse/OCPBUGS-11424): Backport changes to whereabouts reconciler [#1769](https://github.com/openshift/cluster-network-operator/pull/1769)
* [OCPBUGS-11503](https://issues.redhat.com/browse/OCPBUGS-11503): update 4.13 Dockerfile to use rhel-8 and go 1.19 [#1772](https://github.com/openshift/cluster-network-operator/pull/1772)
* [OCPBUGS-11257](https://issues.redhat.com/browse/OCPBUGS-11257): Split out konnectivity certs [#1761](https://github.com/openshift/cluster-network-operator/pull/1761)
* [OCPBUGS-11156](https://issues.redhat.com/browse/OCPBUGS-11156): Cno 4.13 kubernetes 1.26 [#1758](https://github.com/openshift/cluster-network-operator/pull/1758)
* [OCPBUGS-10873](https://issues.redhat.com/browse/OCPBUGS-10873): use annotation on the daemonset to update hybrid overlay [#1751](https://github.com/openshift/cluster-network-operator/pull/1751)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d24c89e6da0271fa44495d6e4b30adde89d6f25c...fed9560d379fa9e178441642a69746a126ac39b5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fa37e0cb718a38a5b660f91a5cbe85aaf8632b37)

* Revert PR558 and PR585 partially (#640) [#640](https://github.com/openshift/cluster-node-tuning-operator/pull/640)
* workload-hints: disable stalld when rt disabled (#604) [#604](https://github.com/openshift/cluster-node-tuning-operator/pull/604)
* e2e: add missing test id (#629) [#629](https://github.com/openshift/cluster-node-tuning-operator/pull/629)
* Remove subPaths, they are broken (#624) [#624](https://github.com/openshift/cluster-node-tuning-operator/pull/624)
* [OCPNODE-1539](https://issues.redhat.com/browse/OCPNODE-1539): perf profile: add script for preparing cgroups for CPU load balance disabling (#617) [#617](https://github.com/openshift/cluster-node-tuning-operator/pull/617)
* Update NTO-generated MC on MachineCount <= 1 (#620) [#620](https://github.com/openshift/cluster-node-tuning-operator/pull/620)
* [OCPBUGS-11336](https://issues.redhat.com/browse/OCPBUGS-11336): e2e: profile updates tests revised (#618) [#618](https://github.com/openshift/cluster-node-tuning-operator/pull/618)
* [OCPBUGS-11813](https://issues.redhat.com/browse/OCPBUGS-11813): performance-profile: enable crun for high-performance runtime (#616) [#616](https://github.com/openshift/cluster-node-tuning-operator/pull/616)
* A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#614) [#614](https://github.com/openshift/cluster-node-tuning-operator/pull/614)
* Revert #567 and cleanup PPC-generated TuneD config (#615) [#615](https://github.com/openshift/cluster-node-tuning-operator/pull/615)
* Skip tests depending on Jira or Bz issue status (#599) [#599](https://github.com/openshift/cluster-node-tuning-operator/pull/599)
* Recent 4.13 RHCOS incorporated RHEL9 kernel based on 5.14 which (#606) [#606](https://github.com/openshift/cluster-node-tuning-operator/pull/606)
* Remove the preStop hook for openshift-tuned (#596) [#596](https://github.com/openshift/cluster-node-tuning-operator/pull/596)
* Fix updating nodeSelector test (#598) [#598](https://github.com/openshift/cluster-node-tuning-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61ed06ca1249b3ff7c16da11988498a659c91fd3...fa37e0cb718a38a5b660f91a5cbe85aaf8632b37)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/20a47733b59ba746aa3c6410dca2d1a1ab6339de)

* [OCPBUGS-11473](https://issues.redhat.com/browse/OCPBUGS-11473): psalabelsyncer: handle empty namespace of a rolebinding subject [#108](https://github.com/openshift/cluster-policy-controller/pull/108)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/d02c85ab3203fe22eddcc4694e17504ef34935de...20a47733b59ba746aa3c6410dca2d1a1ab6339de)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/318d124ed3bcde76cbe960f6bef203728e34d1c6)

* [OCPBUGS-13029](https://issues.redhat.com/browse/OCPBUGS-13029): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#501](https://github.com/openshift/cluster-samples-operator/pull/501)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/afe457fb0f12766deb4eeb9b95e8cea54a520a29...318d124ed3bcde76cbe960f6bef203728e34d1c6)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/31bcbc4dd67fc855fa7e3fd4a6e64c04fbf13382)

* [OCPBUGS-12478](https://issues.redhat.com/browse/OCPBUGS-12478): Add management workloads annotations [#366](https://github.com/openshift/cluster-storage-operator/pull/366)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): cluster-storage-operator must re-create in-tree StorageClass [#351](https://github.com/openshift/cluster-storage-operator/pull/351)
* [OCPBUGS-11341](https://issues.redhat.com/browse/OCPBUGS-11341): [release-4.13]: Add missing workload label to openshift-manila-csi-driver NS [#356](https://github.com/openshift/cluster-storage-operator/pull/356)
* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set control plane operand properties [#354](https://github.com/openshift/cluster-storage-operator/pull/354)
* [OCPBUGS-8498](https://issues.redhat.com/browse/OCPBUGS-8498): assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount [#348](https://github.com/openshift/cluster-storage-operator/pull/348)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/e8b9f8ee17a5687878c7ac2e65f44f4ee4c5f8e5...31bcbc4dd67fc855fa7e3fd4a6e64c04fbf13382)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e08a27913bc6c6d0ca0663dc131d1183773cca10)

* [OCPBUGS-11435](https://issues.redhat.com/browse/OCPBUGS-11435): Update dnsPolicy to allow consistent resolution of the internal LB [#923](https://github.com/openshift/cluster-version-operator/pull/923)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7e34cd1a936ddba872fd8ed4dd8ed43d1065b631...e08a27913bc6c6d0ca0663dc131d1183773cca10)


### [console](https://github.com/openshift/console/tree/a551d28102f9e0d014d41215fdd1d8df4fc404dd)

* [OCPBUGS-11866](https://issues.redhat.com/browse/OCPBUGS-11866): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12730](https://github.com/openshift/console/pull/12730)
* [OCPBUGS-12186](https://issues.redhat.com/browse/OCPBUGS-12186): Pipeline doesn't render correctly when displayed but looks fine in edit mode [#12748](https://github.com/openshift/console/pull/12748)
* [OCPBUGS-11218](https://issues.redhat.com/browse/OCPBUGS-11218): use PipelineRun template from 'pipelines-as-code-pipelinerun-go' configMap for Go runtime [#12696](https://github.com/openshift/console/pull/12696)
* [OCPBUGS-12273](https://issues.redhat.com/browse/OCPBUGS-12273): When Creating Sample Devfile from the Samples Page, Topology Icon is not set [#12757](https://github.com/openshift/console/pull/12757)
* [OCPBUGS-12272](https://issues.redhat.com/browse/OCPBUGS-12272): Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected [#12756](https://github.com/openshift/console/pull/12756)
* [OCPBUGS-12173](https://issues.redhat.com/browse/OCPBUGS-12173): taskrun ui fails when using object type results [#12745](https://github.com/openshift/console/pull/12745)
* [OCPBUGS-10832](https://issues.redhat.com/browse/OCPBUGS-10832): Edit Deployment (and DC) form doesn't enable Save button when changing strategy type [#12674](https://github.com/openshift/console/pull/12674)
* [OCPBUGS-11919](https://issues.redhat.com/browse/OCPBUGS-11919): Reduce metrics cardinality by grouping well-known and other perspectives and plugins [#12742](https://github.com/openshift/console/pull/12742)
* [OCPBUGS-10266](https://issues.redhat.com/browse/OCPBUGS-10266): Fixes argocd link for non-KAM added application envs [#12649](https://github.com/openshift/console/pull/12649)
* [OCPBUGS-10265](https://issues.redhat.com/browse/OCPBUGS-10265): Fixes resource status alignment issue [#12648](https://github.com/openshift/console/pull/12648)
* [OCPBUGS-10299](https://issues.redhat.com/browse/OCPBUGS-10299): Fixes card sizes not even issue when commit info is not available on Environments page [#12651](https://github.com/openshift/console/pull/12651)
* [OCPBUGS-12172](https://issues.redhat.com/browse/OCPBUGS-12172): Users don't know what type of resource is being created by Import from Git or Deploy Image flows [#12744](https://github.com/openshift/console/pull/12744)
* [OCPBUGS-10678](https://issues.redhat.com/browse/OCPBUGS-10678): Do not show builder ImageStreams without `sampleRepo` as samples [#12668](https://github.com/openshift/console/pull/12668)
* [OCPBUGS-11232](https://issues.redhat.com/browse/OCPBUGS-11232): fix All projects selection on Pipelines page in dev perspective [#12698](https://github.com/openshift/console/pull/12698)
* [OCPBUGS-11390](https://issues.redhat.com/browse/OCPBUGS-11390): Move operator install status to it's own route/page [#12706](https://github.com/openshift/console/pull/12706)
* [OCPBUGS-11107](https://issues.redhat.com/browse/OCPBUGS-11107): Fix alerts source display values [#12688](https://github.com/openshift/console/pull/12688)
* [OCPBUGS-11248](https://issues.redhat.com/browse/OCPBUGS-11248): fix translation string for Image pull secret created alert [#12699](https://github.com/openshift/console/pull/12699)
* [OCPBUGS-10833](https://issues.redhat.com/browse/OCPBUGS-10833): update the default pipelineRun template name [#12675](https://github.com/openshift/console/pull/12675)
* [Full changelog](https://github.com/openshift/console/compare/73de6a8b1a90e0545636399b36aa7136bf61ce7e...a551d28102f9e0d014d41215fdd1d8df4fc404dd)


### [console-operator](https://github.com/openshift/console-operator/tree/0ce3d0bf42f4820633159be84c5255f9e2584f08)

* [OCPBUGS-11462](https://issues.redhat.com/browse/OCPBUGS-11462): Disable multicluster tech preview [#754](https://github.com/openshift/console-operator/pull/754)
* [Full changelog](https://github.com/openshift/console-operator/compare/91684e461ad99334fb12fc4041746128b14c4dae...0ce3d0bf42f4820633159be84c5255f9e2584f08)


### [coredns](https://github.com/openshift/coredns/tree/)

* [CFE-963](https://issues.redhat.com/browse/CFE-963): UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin [#115](https://github.com/openshift/coredns/pull/115)
* [OCPBUGS-27928](https://issues.redhat.com/browse/OCPBUGS-27928): Updating coredns-container image to be consistent with ART for 4.16 [#111](https://github.com/openshift/coredns/pull/111)
* [OCPBUGS-27397](https://issues.redhat.com/browse/OCPBUGS-27397): UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 [#109](https://github.com/openshift/coredns/pull/109)
* [OCPBUGS-24957](https://issues.redhat.com/browse/OCPBUGS-24957): Updating coredns-container image to be consistent with ART [#107](https://github.com/openshift/coredns/pull/107)
* [OCPBUGS-15755](https://issues.redhat.com/browse/OCPBUGS-15755): UPSTREAM: <carry>: openshift: Fix OCPBUGS-15755 [#105](https://github.com/openshift/coredns/pull/105)
* [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101)
* [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94)
* [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95)
* [OCPBUGS-12494](https://issues.redhat.com/browse/OCPBUGS-12494): Address CVE-2022-41723 [#92](https://github.com/openshift/coredns/pull/92)
* Updating coredns images to be consistent with ART [#91](https://github.com/openshift/coredns/pull/91)
* [OCPBUGS-10146](https://issues.redhat.com/browse/OCPBUGS-10146): Updating coredns images to be consistent with ART [#89](https://github.com/openshift/coredns/pull/89)
* [Full changelog](https://github.com/openshift/coredns/compare/5560e4ad8c343c211f0b2f9d85ce7331b20b87cb...)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/)

* [OCPBUGS-30439](https://issues.redhat.com/browse/OCPBUGS-30439): Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#139](https://github.com/openshift/csi-driver-nfs/pull/139)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#138](https://github.com/openshift/csi-driver-nfs/pull/138)
* NO-JIRA: Add snyk configuration file [#137](https://github.com/openshift/csi-driver-nfs/pull/137)
* [OCPBUGS-24952](https://issues.redhat.com/browse/OCPBUGS-24952): Updating csi-driver-nfs-container image to be consistent with ART [#136](https://github.com/openshift/csi-driver-nfs/pull/136)
* [OCPBUGS-24131](https://issues.redhat.com/browse/OCPBUGS-24131): Updating csi-driver-nfs-container image to be consistent with ART [#135](https://github.com/openshift/csi-driver-nfs/pull/135)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): Merge upstream [#133](https://github.com/openshift/csi-driver-nfs/pull/133)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/csi-driver-nfs/pull/131)
* [OCPBUGS-19212](https://issues.redhat.com/browse/OCPBUGS-19212): Updating csi-driver-nfs images to be consistent with ART [#129](https://github.com/openshift/csi-driver-nfs/pull/129)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#128](https://github.com/openshift/csi-driver-nfs/pull/128)
* Remove unused Dockerfile.openshift.ci file [#127](https://github.com/openshift/csi-driver-nfs/pull/127)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#126](https://github.com/openshift/csi-driver-nfs/pull/126)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#125](https://github.com/openshift/csi-driver-nfs/pull/125)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#124](https://github.com/openshift/csi-driver-nfs/pull/124)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#123](https://github.com/openshift/csi-driver-nfs/pull/123)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#122](https://github.com/openshift/csi-driver-nfs/pull/122)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#118](https://github.com/openshift/csi-driver-nfs/pull/118)
* Updating csi-driver-nfs images to be consistent with ART [#121](https://github.com/openshift/csi-driver-nfs/pull/121)
* Updating csi-driver-nfs images to be consistent with ART [#120](https://github.com/openshift/csi-driver-nfs/pull/120)
* Updating csi-driver-nfs images to be consistent with ART [#119](https://github.com/openshift/csi-driver-nfs/pull/119)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#117](https://github.com/openshift/csi-driver-nfs/pull/117)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#116](https://github.com/openshift/csi-driver-nfs/pull/116)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#113](https://github.com/openshift/csi-driver-nfs/pull/113)
* Updating csi-driver-nfs images to be consistent with ART [#112](https://github.com/openshift/csi-driver-nfs/pull/112)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#111](https://github.com/openshift/csi-driver-nfs/pull/111)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#110](https://github.com/openshift/csi-driver-nfs/pull/110)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/2b914c2161722ebf11f9275fa29e00a0b1306da1...)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#107](https://github.com/openshift/csi-driver-shared-resource-operator/pull/107)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#100](https://github.com/openshift/csi-driver-shared-resource-operator/pull/100)
* [OCPBUGS-28941](https://issues.redhat.com/browse/OCPBUGS-28941): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 [#101](https://github.com/openshift/csi-driver-shared-resource-operator/pull/101)
* [OCPBUGS-28664](https://issues.redhat.com/browse/OCPBUGS-28664): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#99](https://github.com/openshift/csi-driver-shared-resource-operator/pull/99)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#98](https://github.com/openshift/csi-driver-shared-resource-operator/pull/98)
* [OCPBUGS-26087](https://issues.redhat.com/browse/OCPBUGS-26087): add snyk config file for SAST scan [#95](https://github.com/openshift/csi-driver-shared-resource-operator/pull/95)
* [OCPBUGS-24855](https://issues.redhat.com/browse/OCPBUGS-24855): Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART [#94](https://github.com/openshift/csi-driver-shared-resource-operator/pull/94)
* [OCPBUGS-23855](https://issues.redhat.com/browse/OCPBUGS-23855): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#93](https://github.com/openshift/csi-driver-shared-resource-operator/pull/93)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/csi-driver-shared-resource-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90)
* [OCPBUGS-21724](https://issues.redhat.com/browse/OCPBUGS-21724): bump golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/csi-driver-shared-resource-operator/pull/85)
* [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84)
* [STOR-1442](https://issues.redhat.com/browse/STOR-1442): Restart webhook Pods if webhook-serving-cert changed [#83](https://github.com/openshift/csi-driver-shared-resource-operator/pull/83)
* [STOR-1441](https://issues.redhat.com/browse/STOR-1441): Restart node Pods if metrics-serving-cert changed [#82](https://github.com/openshift/csi-driver-shared-resource-operator/pull/82)
* [OCPBUGS-16073](https://issues.redhat.com/browse/OCPBUGS-16073): Updating Kubernetes and other associated dependencies [#81](https://github.com/openshift/csi-driver-shared-resource-operator/pull/81)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump csi-driver-shared-resource-operator library-go [#80](https://github.com/openshift/csi-driver-shared-resource-operator/pull/80)
* [OCPBUGS-14488](https://issues.redhat.com/browse/OCPBUGS-14488): bumping kubernetes to 0.27.1 [#79](https://github.com/openshift/csi-driver-shared-resource-operator/pull/79)
* Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#77](https://github.com/openshift/csi-driver-shared-resource-operator/pull/77)
* Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#76](https://github.com/openshift/csi-driver-shared-resource-operator/pull/76)
* Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#75](https://github.com/openshift/csi-driver-shared-resource-operator/pull/75)
* Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#73](https://github.com/openshift/csi-driver-shared-resource-operator/pull/73)
* [OCPBUGS-7906](https://issues.redhat.com/browse/OCPBUGS-7906): add openshift workload annotation to driver daemonset [#72](https://github.com/openshift/csi-driver-shared-resource-operator/pull/72)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/fedb7b7ff15a02986d54276b87173c5cd5e41f46...)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-attacher` to v4.5.1 for OCP 4.16 [#72](https://github.com/openshift/csi-external-attacher/pull/72)
* [OCPBUGS-30437](https://issues.redhat.com/browse/OCPBUGS-30437): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#71](https://github.com/openshift/csi-external-attacher/pull/71)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#70](https://github.com/openshift/csi-external-attacher/pull/70)
* [OCPBUGS-25576](https://issues.redhat.com/browse/OCPBUGS-25576): Updating csi-attacher-container image to be consistent with ART [#69](https://github.com/openshift/csi-external-attacher/pull/69)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#68](https://github.com/openshift/csi-external-attacher/pull/68)
* [OCPBUGS-25053](https://issues.redhat.com/browse/OCPBUGS-25053): Updating csi-attacher-container image to be consistent with ART [#67](https://github.com/openshift/csi-external-attacher/pull/67)
* [OCPBUGS-24966](https://issues.redhat.com/browse/OCPBUGS-24966): Updating csi-attacher-container image to be consistent with ART [#66](https://github.com/openshift/csi-external-attacher/pull/66)
* [OCPBUGS-24139](https://issues.redhat.com/browse/OCPBUGS-24139): Updating csi-attacher-container image to be consistent with ART [#65](https://github.com/openshift/csi-external-attacher/pull/65)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-external-attacher/pull/59)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-attacher` to v4.4.0 for OCP 4.15 [#58](https://github.com/openshift/csi-external-attacher/pull/58)
* [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-attacher` to v4.3.0 for OCP 4.14 [#54](https://github.com/openshift/csi-external-attacher/pull/54)
* [OCPBUGS-14815](https://issues.redhat.com/browse/OCPBUGS-14815): Chore: Update OWNERS and OWNERS_ALIASES [#55](https://github.com/openshift/csi-external-attacher/pull/55)
* Updating csi-attacher images to be consistent with ART [#53](https://github.com/openshift/csi-external-attacher/pull/53)
* Updating csi-attacher images to be consistent with ART [#52](https://github.com/openshift/csi-external-attacher/pull/52)
* Updating csi-attacher images to be consistent with ART [#51](https://github.com/openshift/csi-external-attacher/pull/51)
* Updating csi-attacher images to be consistent with ART [#50](https://github.com/openshift/csi-external-attacher/pull/50)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/335d78a21fd46fc7faea74b7716f66f112da8eaf...)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `external-resizer` to v1.10.0 for OCP 4.16 [#160](https://github.com/openshift/csi-external-resizer/pull/160)
* [OCPBUGS-30502](https://issues.redhat.com/browse/OCPBUGS-30502): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#159](https://github.com/openshift/csi-external-resizer/pull/159)
* [OCPBUGS-29984](https://issues.redhat.com/browse/OCPBUGS-29984): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 [#158](https://github.com/openshift/csi-external-resizer/pull/158)
* [OCPBUGS-25540](https://issues.redhat.com/browse/OCPBUGS-25540): Updating ose-csi-external-resizer-container image to be consistent with ART [#154](https://github.com/openshift/csi-external-resizer/pull/154)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#153](https://github.com/openshift/csi-external-resizer/pull/153)
* [OCPBUGS-24846](https://issues.redhat.com/browse/OCPBUGS-24846): Updating ose-csi-external-resizer-container image to be consistent with ART [#152](https://github.com/openshift/csi-external-resizer/pull/152)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#146](https://github.com/openshift/csi-external-resizer/pull/146)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-resizer` to v1.9.0 for OCP 4.15 [#145](https://github.com/openshift/csi-external-resizer/pull/145)
* [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-resizer` to v1.8.0 for OCP 4.14 [#141](https://github.com/openshift/csi-external-resizer/pull/141)
* [OCPBUGS-14812](https://issues.redhat.com/browse/OCPBUGS-14812): Chore: Update OWNERS and OWNERS_ALIASES [#142](https://github.com/openshift/csi-external-resizer/pull/142)
* Updating ose-csi-external-resizer images to be consistent with ART [#140](https://github.com/openshift/csi-external-resizer/pull/140)
* Updating ose-csi-external-resizer images to be consistent with ART [#139](https://github.com/openshift/csi-external-resizer/pull/139)
* Updating ose-csi-external-resizer images to be consistent with ART [#138](https://github.com/openshift/csi-external-resizer/pull/138)
* Updating ose-csi-external-resizer images to be consistent with ART [#137](https://github.com/openshift/csi-external-resizer/pull/137)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/3b2067091212995ce901d65504e794177632c55c...)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/)

* [OCPBUGS-31746](https://issues.redhat.com/browse/OCPBUGS-31746): Backport volumegroupsnapshot fixes to OCP 4.16 [#148](https://github.com/openshift/csi-external-snapshotter/pull/148)
* [OCPBUGS-31439](https://issues.redhat.com/browse/OCPBUGS-31439): Backport volumegroupsnapshot fixes to OCP 4.16 [#146](https://github.com/openshift/csi-external-snapshotter/pull/146)
* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase external-snapshotter to v7.0.1 for OCP 4.16 [#145](https://github.com/openshift/csi-external-snapshotter/pull/145)
* [OCPBUGS-30503](https://issues.redhat.com/browse/OCPBUGS-30503): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#144](https://github.com/openshift/csi-external-snapshotter/pull/144)
* [STOR-1700](https://issues.redhat.com/browse/STOR-1700): Rebase `external-snapshotter` to v7.0.0 to get VolumeGroupSnapshot [#139](https://github.com/openshift/csi-external-snapshotter/pull/139)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#137](https://github.com/openshift/csi-external-snapshotter/pull/137)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#133](https://github.com/openshift/csi-external-snapshotter/pull/133)
* [OCPBUGS-25548](https://issues.redhat.com/browse/OCPBUGS-25548): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#135](https://github.com/openshift/csi-external-snapshotter/pull/135)
* [OCPBUGS-25575](https://issues.redhat.com/browse/OCPBUGS-25575): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#136](https://github.com/openshift/csi-external-snapshotter/pull/136)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#132](https://github.com/openshift/csi-external-snapshotter/pull/132)
* [OCPBUGS-25052](https://issues.redhat.com/browse/OCPBUGS-25052): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#131](https://github.com/openshift/csi-external-snapshotter/pull/131)
* [OCPBUGS-25124](https://issues.redhat.com/browse/OCPBUGS-25124): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#130](https://github.com/openshift/csi-external-snapshotter/pull/130)
* [OCPBUGS-24996](https://issues.redhat.com/browse/OCPBUGS-24996): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#129](https://github.com/openshift/csi-external-snapshotter/pull/129)
* [OCPBUGS-24964](https://issues.redhat.com/browse/OCPBUGS-24964): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#128](https://github.com/openshift/csi-external-snapshotter/pull/128)
* [OCPBUGS-24866](https://issues.redhat.com/browse/OCPBUGS-24866): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#127](https://github.com/openshift/csi-external-snapshotter/pull/127)
* [OCPBUGS-24330](https://issues.redhat.com/browse/OCPBUGS-24330): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#124](https://github.com/openshift/csi-external-snapshotter/pull/124)
* [OCPBUGS-24338](https://issues.redhat.com/browse/OCPBUGS-24338): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#123](https://github.com/openshift/csi-external-snapshotter/pull/123)
* [OCPBUGS-24329](https://issues.redhat.com/browse/OCPBUGS-24329): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#121](https://github.com/openshift/csi-external-snapshotter/pull/121)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#118](https://github.com/openshift/csi-external-snapshotter/pull/118)
* [OCPBUGS-24160](https://issues.redhat.com/browse/OCPBUGS-24160): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#116](https://github.com/openshift/csi-external-snapshotter/pull/116)
* [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#117](https://github.com/openshift/csi-external-snapshotter/pull/117)
* [OCPBUGS-24071](https://issues.redhat.com/browse/OCPBUGS-24071): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#115](https://github.com/openshift/csi-external-snapshotter/pull/115)
* [OCPBUGS-23010](https://issues.redhat.com/browse/OCPBUGS-23010): UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false [#114](https://github.com/openshift/csi-external-snapshotter/pull/114)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#108](https://github.com/openshift/csi-external-snapshotter/pull/108)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-snapshotter` to v6.3.0 for OCP 4.15 [#107](https://github.com/openshift/csi-external-snapshotter/pull/107)
* [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106)
* [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105)
* [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-snapshotter` to v6.2.2 for OCP 4.14 [#101](https://github.com/openshift/csi-external-snapshotter/pull/101)
* [OCPBUGS-14813](https://issues.redhat.com/browse/OCPBUGS-14813): Chore: Update OWNERS and OWNERS_ALIASES [#102](https://github.com/openshift/csi-external-snapshotter/pull/102)
* Updating csi-snapshot-validation-webhook images to be consistent with ART [#100](https://github.com/openshift/csi-external-snapshotter/pull/100)
* Updating ose-csi-external-snapshotter images to be consistent with ART [#99](https://github.com/openshift/csi-external-snapshotter/pull/99)
* Updating ose-csi-snapshot-controller images to be consistent with ART [#98](https://github.com/openshift/csi-external-snapshotter/pull/98)
* Updating csi-snapshot-validation-webhook images to be consistent with ART [#97](https://github.com/openshift/csi-external-snapshotter/pull/97)
* Updating ose-csi-external-snapshotter images to be consistent with ART [#96](https://github.com/openshift/csi-external-snapshotter/pull/96)
* Updating ose-csi-snapshot-controller images to be consistent with ART [#95](https://github.com/openshift/csi-external-snapshotter/pull/95)
* Updating csi-snapshot-validation-webhook images to be consistent with ART [#94](https://github.com/openshift/csi-external-snapshotter/pull/94)
* Updating ose-csi-external-snapshotter images to be consistent with ART [#93](https://github.com/openshift/csi-external-snapshotter/pull/93)
* Updating ose-csi-snapshot-controller images to be consistent with ART [#92](https://github.com/openshift/csi-external-snapshotter/pull/92)
* Updating csi-snapshot-validation-webhook images to be consistent with ART [#91](https://github.com/openshift/csi-external-snapshotter/pull/91)
* Updating ose-csi-snapshot-controller images to be consistent with ART [#89](https://github.com/openshift/csi-external-snapshotter/pull/89)
* Updating ose-csi-external-snapshotter images to be consistent with ART [#90](https://github.com/openshift/csi-external-snapshotter/pull/90)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/e7114303c69b82fec51ab65ba15ec7b58be3b12f...)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase `node-driver-registrar` to v2.10.0 for OCP 4.16 [#70](https://github.com/openshift/csi-node-driver-registrar/pull/70)
* [OCPBUGS-30441](https://issues.redhat.com/browse/OCPBUGS-30441): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#69](https://github.com/openshift/csi-node-driver-registrar/pull/69)
* [OCPBUGS-29987](https://issues.redhat.com/browse/OCPBUGS-29987): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 [#68](https://github.com/openshift/csi-node-driver-registrar/pull/68)
* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#64](https://github.com/openshift/csi-node-driver-registrar/pull/64)
* [OCPBUGS-25544](https://issues.redhat.com/browse/OCPBUGS-25544): Updating csi-node-driver-registrar-container image to be consistent with ART [#62](https://github.com/openshift/csi-node-driver-registrar/pull/62)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#61](https://github.com/openshift/csi-node-driver-registrar/pull/61)
* [OCPBUGS-25117](https://issues.redhat.com/browse/OCPBUGS-25117): Updating csi-node-driver-registrar-container image to be consistent with ART [#59](https://github.com/openshift/csi-node-driver-registrar/pull/59)
* [OCPBUGS-23811](https://issues.redhat.com/browse/OCPBUGS-23811): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#58](https://github.com/openshift/csi-node-driver-registrar/pull/58)
* [OCPBUGS-24856](https://issues.redhat.com/browse/OCPBUGS-24856): Updating csi-node-driver-registrar-container image to be consistent with ART [#57](https://github.com/openshift/csi-node-driver-registrar/pull/57)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-node-driver-registrar/pull/51)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `node-driver-registrar` to v2.9.0 for OCP 4.15 [#50](https://github.com/openshift/csi-node-driver-registrar/pull/50)
* [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `node-driver-registrar` to v2.8.0 for OCP 4.14 [#46](https://github.com/openshift/csi-node-driver-registrar/pull/46)
* [OCPBUGS-14814](https://issues.redhat.com/browse/OCPBUGS-14814): Chore: Update OWNERS and OWNERS_ALIASES [#47](https://github.com/openshift/csi-node-driver-registrar/pull/47)
* Updating csi-node-driver-registrar images to be consistent with ART [#45](https://github.com/openshift/csi-node-driver-registrar/pull/45)
* Updating csi-node-driver-registrar images to be consistent with ART [#44](https://github.com/openshift/csi-node-driver-registrar/pull/44)
* Updating csi-node-driver-registrar images to be consistent with ART [#43](https://github.com/openshift/csi-node-driver-registrar/pull/43)
* Updating csi-node-driver-registrar images to be consistent with ART [#42](https://github.com/openshift/csi-node-driver-registrar/pull/42)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/ee27c345e10faa88b1cf6436ac7922a7e5318a18...)


### [docker-builder](https://github.com/openshift/builder/tree/72c106db1fbdec85f02477b86b02ca3dd8a873c6)

* [OCPBUGS-11387](https://issues.redhat.com/browse/OCPBUGS-11387): bump(github.com/containers/common) to v0.51.2 [#336](https://github.com/openshift/builder/pull/336)
* [Full changelog](https://github.com/openshift/builder/compare/a63ac04216a3616bd86988c4117e0db4df873aac...72c106db1fbdec85f02477b86b02ca3dd8a873c6)


### [docker-registry](https://github.com/openshift/image-registry/tree/)

* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): vendor: bump aws-sdk-go to support ca-west-1 [#395](https://github.com/openshift/image-registry/pull/395)
* [OCPBUGS-29003](https://issues.redhat.com/browse/OCPBUGS-29003): update distribution with bugfix [#392](https://github.com/openshift/image-registry/pull/392)
* [OCPBUGS-26173](https://issues.redhat.com/browse/OCPBUGS-26173): Updating openshift-enterprise-registry-container image to be consistent with ART [#390](https://github.com/openshift/image-registry/pull/390)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#389](https://github.com/openshift/image-registry/pull/389)
* [OCPBUGS-24902](https://issues.redhat.com/browse/OCPBUGS-24902): Updating openshift-enterprise-registry-container image to be consistent with ART [#388](https://github.com/openshift/image-registry/pull/388)
* [OCPBUGS-24095](https://issues.redhat.com/browse/OCPBUGS-24095): Updating openshift-enterprise-registry-container image to be consistent with ART [#387](https://github.com/openshift/image-registry/pull/387)
* [CORS-2985](https://issues.redhat.com/browse/CORS-2985): Add support for il-central-1 region in AWS [#386](https://github.com/openshift/image-registry/pull/386)
* [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378)
* [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377)
* [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379)
* [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380)
* [OCPBUGS-17975](https://issues.redhat.com/browse/OCPBUGS-17975): Support both icsp and idms [#375](https://github.com/openshift/image-registry/pull/375)
* Revert "[OCPNODE-1258] Support both icsp and idms" [#374](https://github.com/openshift/image-registry/pull/374)
* Support both icsp and idms [#346](https://github.com/openshift/image-registry/pull/346)
* [IR-371](https://issues.redhat.com/browse/IR-371): Bump docker distribution (again) [#372](https://github.com/openshift/image-registry/pull/372)
* [TRT-1092](https://issues.redhat.com/browse/TRT-1092): Revert "Merge pull request #370 from flavianmissi/bump-docker-distrib… [#371](https://github.com/openshift/image-registry/pull/371)
* [IR-371](https://issues.redhat.com/browse/IR-371): upgrade docker distribution [#370](https://github.com/openshift/image-registry/pull/370)
* Updating openshift-enterprise-registry images to be consistent with ART [#369](https://github.com/openshift/image-registry/pull/369)
* Updating openshift-enterprise-registry images to be consistent with ART [#363](https://github.com/openshift/image-registry/pull/363)
* [Full changelog](https://github.com/openshift/image-registry/compare/f414ba7310818c39af1eaf8239e056cb6f146128...)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/)

* Add importMode and set it to `PreserveOriginal` to import (#144) [#144](https://github.com/openshift/driver-toolkit/pull/144)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): Start using rhel-coreos image rather than machine-os-content. (#142) [#142](https://github.com/openshift/driver-toolkit/pull/142)
* apply hypershift cluster-profile (#143) [#143](https://github.com/openshift/driver-toolkit/pull/143)
* Add support for 64k pages with ARM64 (#140) [#140](https://github.com/openshift/driver-toolkit/pull/140)
* Updating driver-toolkit-container image to be consistent with ART (#139) [#139](https://github.com/openshift/driver-toolkit/pull/139)
* [MGMT-16313](https://issues.redhat.com/browse/MGMT-16313): Add support for C++ build (#137) [#137](https://github.com/openshift/driver-toolkit/pull/137)
* Revert "Start using `rhel-coreos` image rather than `machine-os-content` (#135)" (#136) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Start using `rhel-coreos` image rather than `machine-os-content` (#135) [#135](https://github.com/openshift/driver-toolkit/pull/135)
* Updating driver-toolkit images to be consistent with ART (#134) [#134](https://github.com/openshift/driver-toolkit/pull/134)
* Removing `kernel[-rt]-core` packages from the image. (#132) [#132](https://github.com/openshift/driver-toolkit/pull/132)
* Upgrade glibc, use dnf (#131) [#131](https://github.com/openshift/driver-toolkit/pull/131)
* Fixing the regexp used to get the correct GCC version. (#127) [#127](https://github.com/openshift/driver-toolkit/pull/127)
* Updating the docs to use `ubi9` instead of `ubi8`. (#126) [#126](https://github.com/openshift/driver-toolkit/pull/126)
* Updating driver-toolkit images to be consistent with ART (#120) [#120](https://github.com/openshift/driver-toolkit/pull/120)
* Remove abi since it was not in 9.2 rpms (#121) [#121](https://github.com/openshift/driver-toolkit/pull/121)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/ef4cf9b78f5b3ee28ab26f1eda02c5516f125283...)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/38ddff06b72b364d1c994582d7ae3f119ef5d1a8)

* [OCPBUGS-13046](https://issues.redhat.com/browse/OCPBUGS-13046): Bump x/net to v0.7.0 [#50](https://github.com/openshift/machine-api-provider-gcp/pull/50)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/ca53af896fba13f3c11f56e450f65e6744d3b049...38ddff06b72b364d1c994582d7ae3f119ef5d1a8)


### [haproxy-router](https://github.com/openshift/router/tree/)

* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Make ingressConditionsEqual more efficient [#588](https://github.com/openshift/router/pull/588)
* [OCPBUGS-29690](https://issues.redhat.com/browse/OCPBUGS-29690): Count active services before setting weight to 1 [#576](https://github.com/openshift/router/pull/576)
* "OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests" [#575](https://github.com/openshift/router/pull/575)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Reject routes with SHA1 certs [#552](https://github.com/openshift/router/pull/552)
* [OCPBUGS-26498](https://issues.redhat.com/browse/OCPBUGS-26498): Upgrade Validation plugin for SHA1 certs [#555](https://github.com/openshift/router/pull/555)
* [OCPBUGS-32044](https://issues.redhat.com/browse/OCPBUGS-32044): Introduce 'idle-close-on-response' option for frontends [#573](https://github.com/openshift/router/pull/573)
* [OCPBUGS-22739](https://issues.redhat.com/browse/OCPBUGS-22739): Properly handle rewrite-target annotation [#534](https://github.com/openshift/router/pull/534)
* NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image [#567](https://github.com/openshift/router/pull/567)
* [OCPBUGS-30314](https://issues.redhat.com/browse/OCPBUGS-30314): Refactor logging in DoHTTPProbe to avoid serialisation errors [#566](https://github.com/openshift/router/pull/566)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Bump HaProxy to the latest version 2.8 [#563](https://github.com/openshift/router/pull/563)
* [TRT-1507](https://issues.redhat.com/browse/TRT-1507): Revert #551 "NE-1444: Upgrade OpenShift Router to HAProxy 2.8" [#561](https://github.com/openshift/router/pull/561)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): Upgrade OpenShift Router to HAProxy 2.8 [#551](https://github.com/openshift/router/pull/551)
* [OCPBUGS-26539](https://issues.redhat.com/browse/OCPBUGS-26539): Reject routes with MD5 certs [#553](https://github.com/openshift/router/pull/553)
* [OCPBUGS-25546](https://issues.redhat.com/browse/OCPBUGS-25546): Updating ose-haproxy-router-base-container image to be consistent with ART [#550](https://github.com/openshift/router/pull/550)
* NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug [#544](https://github.com/openshift/router/pull/544)
* [OCPBUGS-25029](https://issues.redhat.com/browse/OCPBUGS-25029): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART [#547](https://github.com/openshift/router/pull/547)
* [NE-1446](https://issues.redhat.com/browse/NE-1446): Update to RHEL9 base image [#548](https://github.com/openshift/router/pull/548)
* [OCPBUGS-24859](https://issues.redhat.com/browse/OCPBUGS-24859): Updating ose-haproxy-router-base-container image to be consistent with ART [#546](https://github.com/openshift/router/pull/546)
* [OCPBUGS-23743](https://issues.redhat.com/browse/OCPBUGS-23743): Bump k8s.io/* packages to v0.28.3 [#542](https://github.com/openshift/router/pull/542)
* [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527)
* [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513)
* [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512)
* [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508)
* [OCPBUGS-17653](https://issues.redhat.com/browse/OCPBUGS-17653): haproxy/template: mitigate CVE-2023-40225 [#505](https://github.com/openshift/router/pull/505)
* [NE-1141](https://issues.redhat.com/browse/NE-1141): Adds logic for setting and deleting headers via Ingress Operator CR and Route Object. [#438](https://github.com/openshift/router/pull/438)
* [OCPBUGS-16623](https://issues.redhat.com/browse/OCPBUGS-16623): properly handle weight=0 [#499](https://github.com/openshift/router/pull/499)
* [RFE-3007](https://issues.redhat.com/browse/RFE-3007): Add the ability to enabled option contstats [#449](https://github.com/openshift/router/pull/449)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): Add support for tuning tune.http.cookielen [#436](https://github.com/openshift/router/pull/436)
* [NE-1304](https://issues.redhat.com/browse/NE-1304): container builds: switch to haproxy26 package [#487](https://github.com/openshift/router/pull/487)
* [OCPBUGS-13969](https://issues.redhat.com/browse/OCPBUGS-13969): Bump vendors k8s libraries to 0.27.2 [#486](https://github.com/openshift/router/pull/486)
* [OCPBUGS-6661](https://issues.redhat.com/browse/OCPBUGS-6661), [OCPBUGS-9464](https://issues.redhat.com/browse/OCPBUGS-9464): Handle mTLS CRLs, and fix accidental CRL duplication [#472](https://github.com/openshift/router/pull/472)
* [OCPBUGS-12610](https://issues.redhat.com/browse/OCPBUGS-12610): Address CVE-2022-41723 [#475](https://github.com/openshift/router/pull/475)
* [OCPBUGS-12346](https://issues.redhat.com/browse/OCPBUGS-12346): Update 4.14 ose-haproxy-router-base image to be consistent with ART [#473](https://github.com/openshift/router/pull/473)
* [OCPBUGS-10200](https://issues.redhat.com/browse/OCPBUGS-10200): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#455](https://github.com/openshift/router/pull/455)
* [OCPBUGS-8646](https://issues.redhat.com/browse/OCPBUGS-8646): bump openshift/library-go to drop mongo-driver references [#462](https://github.com/openshift/router/pull/462)
* [OCPBUGS-11595](https://issues.redhat.com/browse/OCPBUGS-11595): Revert "[NE-1267] container builds: switch to haproxy26 package" [#467](https://github.com/openshift/router/pull/467)
* [OCPBUGS-10170](https://issues.redhat.com/browse/OCPBUGS-10170): Updating ose-haproxy-router-base images to be consistent with ART [#453](https://github.com/openshift/router/pull/453)
* container builds: switch to haproxy26 package [#466](https://github.com/openshift/router/pull/466)
* [OCPBUGS-10003](https://issues.redhat.com/browse/OCPBUGS-10003): Revert "NE-1115: Update haproxy container builds to use haproxy 2.6" [#458](https://github.com/openshift/router/pull/458)
* [Full changelog](https://github.com/openshift/router/compare/e28644631982fb4596e065d3ae85099f0886829d...)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b40493584076fb1ab29f3bed1d05d16cbc5b17f1)

* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): Enable CSI migration configuration via env vars [#1514](https://github.com/openshift/kubernetes/pull/1514)
* [OCPBUGS-11823](https://issues.redhat.com/browse/OCPBUGS-11823): UPSTREAM: 117311: kube-aggregator: correctly use client-go TLS cache with custom dialer [#1549](https://github.com/openshift/kubernetes/pull/1549)
* [OCPBUGS-7268](https://issues.redhat.com/browse/OCPBUGS-7268): Extractor more fixes 4.13 [#1544](https://github.com/openshift/kubernetes/pull/1544)
* UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1543](https://github.com/openshift/kubernetes/pull/1543)
* [OCPBUGS-11669](https://issues.redhat.com/browse/OCPBUGS-11669): Bump to k8s 1.26.3 [#1540](https://github.com/openshift/kubernetes/pull/1540)
* [OCPBUGS-10432](https://issues.redhat.com/browse/OCPBUGS-10432): CSI Inline Volume admission plugin does not log object name correctly [#1515](https://github.com/openshift/kubernetes/pull/1515)
* [OCPBUGS-6201](https://issues.redhat.com/browse/OCPBUGS-6201): Updating openshift-enterprise-pod images to be consistent with ART [#1435](https://github.com/openshift/kubernetes/pull/1435)
* [OCPBUGS-7359](https://issues.redhat.com/browse/OCPBUGS-7359): Azure: move to kube-proxy LB probes, don't detach masters when unready [#1506](https://github.com/openshift/kubernetes/pull/1506)
* [Full changelog](https://github.com/openshift/kubernetes/compare/dc93b13d1f6518d62ea9e3dea64d843c2ce35cbf...b40493584076fb1ab29f3bed1d05d16cbc5b17f1)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/d221afa4bee0d722a97f49c0212dfb7954f49b93)

* [OCPBUGS-12615](https://issues.redhat.com/browse/OCPBUGS-12615): Update IBM Packages [#55](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/55)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/70e411ce00c9d12c5b0e983771df8bcf4750b17f...d221afa4bee0d722a97f49c0212dfb7954f49b93)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a44b2f181162678211a1e5785a1bd9a355a8d67e)

* [OCPBUGS-8243](https://issues.redhat.com/browse/OCPBUGS-8243): Collect info about monitoring pods pv (#753) [#753](https://github.com/openshift/insights-operator/pull/753)
* [OCPBUGS-11008](https://issues.redhat.com/browse/OCPBUGS-11008): update the cluster transfer interval to 12h (#762) [#762](https://github.com/openshift/insights-operator/pull/762)
* [Full changelog](https://github.com/openshift/insights-operator/compare/902baf4c3db200120f784d850de616e6571fad79...a44b2f181162678211a1e5785a1bd9a355a8d67e)


### [ironic](https://github.com/openshift/ironic-image/tree/798f79f2d37fe93502ac0e78f24830a9c4ffdcd9)

* [OCPBUGS-12703](https://issues.redhat.com/browse/OCPBUGS-12703): Bump python-sushy [#362](https://github.com/openshift/ironic-image/pull/362)
* [OCPBUGS-11985](https://issues.redhat.com/browse/OCPBUGS-11985): allow inspector to also be proxied [#361](https://github.com/openshift/ironic-image/pull/361)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7aa7039683a9bec98c59cb47996e61960ae81a64...798f79f2d37fe93502ac0e78f24830a9c4ffdcd9)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/)

* NO-ISSUE:  Add Scott and Mrunal as image approvers [#170](https://github.com/openshift/images/pull/170)
* NO-ISSUE: remove bparees from owners [#169](https://github.com/openshift/images/pull/169)
* [OCPBUGS-29484](https://issues.redhat.com/browse/OCPBUGS-29484): update unit tests in egress/dns-proxy [#165](https://github.com/openshift/images/pull/165)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): egress/dns-proxy: switch to haproxy28 RPM package [#160](https://github.com/openshift/images/pull/160)
* [OCPBUGS-24861](https://issues.redhat.com/browse/OCPBUGS-24861): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART [#158](https://github.com/openshift/images/pull/158)
* [OCPBUGS-24751](https://issues.redhat.com/browse/OCPBUGS-24751): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART [#155](https://github.com/openshift/images/pull/155)
* [OCPBUGS-24723](https://issues.redhat.com/browse/OCPBUGS-24723): Updating openshift-enterprise-base-container image to be consistent with ART [#154](https://github.com/openshift/images/pull/154)
* [OCPBUGS-19261](https://issues.redhat.com/browse/OCPBUGS-19261): Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#153](https://github.com/openshift/images/pull/153)
* [OCPBUGS-19107](https://issues.redhat.com/browse/OCPBUGS-19107): Updating ose-egress-http-proxy images to be consistent with ART [#150](https://github.com/openshift/images/pull/150)
* [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151)
* [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149)
* [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148)
* [OCPBUGS-10176](https://issues.redhat.com/browse/OCPBUGS-10176): 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#132](https://github.com/openshift/images/pull/132)
* [OCPBUGS-10163](https://issues.redhat.com/browse/OCPBUGS-10163): Updating openshift-enterprise-egress-router images to be consistent with ART [#131](https://github.com/openshift/images/pull/131)
* [OCPBUGS-10181](https://issues.redhat.com/browse/OCPBUGS-10181): 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#133](https://github.com/openshift/images/pull/133)
* [NE-1304](https://issues.redhat.com/browse/NE-1304): container builds: switch to haproxy26 package [#141](https://github.com/openshift/images/pull/141)
* [OCPBUGS-11385](https://issues.redhat.com/browse/OCPBUGS-11385): Removed chroot setting [#137](https://github.com/openshift/images/pull/137)
* egress: update owners [#139](https://github.com/openshift/images/pull/139)
* [OCPBUGS-11595](https://issues.redhat.com/browse/OCPBUGS-11595): Revert "[NE-1267] container builds: switch to haproxy26 package" [#138](https://github.com/openshift/images/pull/138)
* egress/dns-proxy/Dockerfile: switch to haproxy26 package [#136](https://github.com/openshift/images/pull/136)
* [OCPBUGS-10003](https://issues.redhat.com/browse/OCPBUGS-10003): Revert "bump RHEL8 egress-dns-proxy image to haproxy26" [#134](https://github.com/openshift/images/pull/134)
* Updating ose-egress-http-proxy images to be consistent with ART [#130](https://github.com/openshift/images/pull/130)
* Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#129](https://github.com/openshift/images/pull/129)
* Updating openshift-enterprise-base images to be consistent with ART [#128](https://github.com/openshift/images/pull/128)
* [Full changelog](https://github.com/openshift/images/compare/04659348dbad0cd9b56596d5977d2934fa01d509...)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/04c0f904a4f34f1809335b18bf21f4d02c84a390)

* [OCPBUGS-11887](https://issues.redhat.com/browse/OCPBUGS-11887): save and delete the old egress network policy [#527](https://github.com/openshift/sdn/pull/527)
* [Full changelog](https://github.com/openshift/sdn/compare/8abc4b9450f553afd08fef27e82f306761a286db...04c0f904a4f34f1809335b18bf21f4d02c84a390)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/4fe6bbcc727900aa43c3bd0b9fc17f54d8b95979)

* Bug OCPBUGS-11982: Fix ValueError when Pod has no IP address [#720](https://github.com/openshift/kuryr-kubernetes/pull/720)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/672973fc0a6788667c382fb4ed1a5c5996cc8181...4fe6bbcc727900aa43c3bd0b9fc17f54d8b95979)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/70aa0a560c0b0a01093f695cb358a8749d30b3d2)

* [OCPBUGS-11598](https://issues.redhat.com/browse/OCPBUGS-11598): Do not trigger openshift-azure-routes/openshift-alibaba-routes service based on file existence [#3681](https://github.com/openshift/machine-config-operator/pull/3681)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): update cloud provider flags on vSphere for storage options [#3655](https://github.com/openshift/machine-config-operator/pull/3655)
* [OCPBUGS-11778](https://issues.redhat.com/browse/OCPBUGS-11778): Fixing forcedns dispatcher script permission issue for assisted sno rhel9 upgrade [#3678](https://github.com/openshift/machine-config-operator/pull/3678)
* [OCPBUGS-11051](https://issues.redhat.com/browse/OCPBUGS-11051): Splitting NetworkManager-onprem.conf.yaml to 2 files: [#3642](https://github.com/openshift/machine-config-operator/pull/3642)
* [OCPBUGS-10946](https://issues.redhat.com/browse/OCPBUGS-10946): Fix kubelet.service node-ip for v6-primary dual-stack [#3638](https://github.com/openshift/machine-config-operator/pull/3638)
* [OCPBUGS-11507](https://issues.redhat.com/browse/OCPBUGS-11507): Accomodate ART limitation in parsing [[]] bash [#3671](https://github.com/openshift/machine-config-operator/pull/3671)
* [OCPBUGS-11507](https://issues.redhat.com/browse/OCPBUGS-11507): Persist static IP addressed NIC names from rhel8 [#3664](https://github.com/openshift/machine-config-operator/pull/3664)
* [OCPBUGS-11289](https://issues.redhat.com/browse/OCPBUGS-11289): daemon: write certificate in OnceFrom and HyperShift [#3658](https://github.com/openshift/machine-config-operator/pull/3658)
* [OCPBUGS-11040](https://issues.redhat.com/browse/OCPBUGS-11040): remove container runtime flag [#3641](https://github.com/openshift/machine-config-operator/pull/3641)
* [OCPBUGS-11068](https://issues.redhat.com/browse/OCPBUGS-11068): Enable base nodeip-configuration for vsphere upi [#3644](https://github.com/openshift/machine-config-operator/pull/3644)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3bc14576d90de64101186a3087bb28f6cb388ea3...70aa0a560c0b0a01093f695cb358a8749d30b3d2)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/87651668b314426960ea4974429f3b0ed16c3f31)

* [OCPBUGS-12694](https://issues.redhat.com/browse/OCPBUGS-12694): Uplift x/net to 0.7.0 [#86](https://github.com/openshift/image-customization-controller/pull/86)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/94e8789385209b3a4044abc9f38d456b5d744f7b...87651668b314426960ea4974429f3b0ed16c3f31)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9f36752562fc784c9b5bf3fb4d592aae19ea31ad)

* [OCPBUGS-11427](https://issues.redhat.com/browse/OCPBUGS-11427): Fix network status annotation to k8s.v1.cni.cncf.io/network-status [#127](https://github.com/openshift/whereabouts-cni/pull/127)
* [OCPBUGS-11424](https://issues.redhat.com/browse/OCPBUGS-11424): Use downward API to pass current spec.nodeName to pod [#126](https://github.com/openshift/whereabouts-cni/pull/126)
* [OCPBUGS-11322](https://issues.redhat.com/browse/OCPBUGS-11322): respect requested allocation range when exluding ranges [Backport 4.13] [#122](https://github.com/openshift/whereabouts-cni/pull/122)
* [OCPBUGS-7301](https://issues.redhat.com/browse/OCPBUGS-7301): Invalid ipv6 backport 4.13 [#125](https://github.com/openshift/whereabouts-cni/pull/125)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7517829eb1574d5852e3e53108fdff24f552da25...9f36752562fc784c9b5bf3fb4d592aae19ea31ad)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/be43191e5b20c7d6a5755a39a22d31e7734b241a)

* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#44](https://github.com/openshift/machine-api-provider-nutanix/pull/44)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/e0f567fc40892d28487ad12a24705f88ff67ba84...be43191e5b20c7d6a5755a39a22d31e7734b241a)


### [oauth-server](https://github.com/openshift/oauth-server/tree/b841149f2ec0c1ffcb0393e6f70b1e4547f3b18e)

* [OCPBUGS-10888](https://issues.redhat.com/browse/OCPBUGS-10888): bump lib-go for group cache fix, kube 1.24->1.26 [#126](https://github.com/openshift/oauth-server/pull/126)
* [Full changelog](https://github.com/openshift/oauth-server/compare/7e584f112a4ee8423ed027a15cc3f345ee09b267...b841149f2ec0c1ffcb0393e6f70b1e4547f3b18e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f92565473310b2096e4ed27f8ce22b56554c9e71)

* Deprecate --use-oci-feature in favor of --include-local-oci-catalogs (#621) [#621](https://github.com/openshift/oc-mirror/pull/621)
* Update OWNERS for CFE team (#625) [#625](https://github.com/openshift/oc-mirror/pull/625)
* Revert adding '--cache-dir /tmp/cache' to catalog images (#616) [#616](https://github.com/openshift/oc-mirror/pull/616)
* [OCPBUGS-12259](https://issues.redhat.com/browse/OCPBUGS-12259): fix: skips bundles with 'skips' field on head bundle (#617) [#617](https://github.com/openshift/oc-mirror/pull/617)
* fix: work around OCPBUGS-6741 by explicitly setting --cache-dir (#606) [#606](https://github.com/openshift/oc-mirror/pull/606)
* [OCPBUGS-11908](https://issues.redhat.com/browse/OCPBUGS-11908): Fix (#607) [#607](https://github.com/openshift/oc-mirror/pull/607)
* OCPBUGS-10348 fix: changes to include the registry path (#602) [#602](https://github.com/openshift/oc-mirror/pull/602)
* Fix OCPBUGS-8156: Upgrade to containerd v1.6.18 (#596) [#596](https://github.com/openshift/oc-mirror/pull/596)
* fix extract dir for cincinnati-graph-data container (#584) [#584](https://github.com/openshift/oc-mirror/pull/584)
* Bugfix check imagesetconfig for valid oci protocol when oci feature is used (#595) [#595](https://github.com/openshift/oc-mirror/pull/595)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/8cf1296dcda90756ad97a3799d983f9c7021e36b...f92565473310b2096e4ed27f8ce22b56554c9e71)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/0b82768216c0c0ffb171457fce71b3806c586e7c)

* [OCPBUGS-6448](https://issues.redhat.com/browse/OCPBUGS-6448): Bump k8s 1.26.2 proof [#361](https://github.com/openshift/openshift-apiserver/pull/361)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/dcbeee1e73552153c7c70a7d274d0862deaa9710...0b82768216c0c0ffb171457fce71b3806c586e7c)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#166](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/166)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healtcheck for node-registrar [#161](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/161)
* [OCPBUGS-30951](https://issues.redhat.com/browse/OCPBUGS-30951): Relax requirement to enable topology [#164](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/164)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#159](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/159)
* [OCPBUGS-28937](https://issues.redhat.com/browse/OCPBUGS-28937): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 [#160](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/160)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#158](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/158)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#155](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/155)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#152](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/152)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#151](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/151)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#150](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/150)
* [OCPBUGS-25340](https://issues.redhat.com/browse/OCPBUGS-25340): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#149](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/149)
* [OCPBUGS-24844](https://issues.redhat.com/browse/OCPBUGS-24844): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART [#145](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/145)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#146](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/146)
* [STOR-1281](https://issues.redhat.com/browse/STOR-1281): Make Cinder CSI Driver Topology feature configurable [#127](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/127)
* [OCPBUGS-23878](https://issues.redhat.com/browse/OCPBUGS-23878): OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#141](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/141)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#143](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/143)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129)
* [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133)
* [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110)
* [STOR-1436](https://issues.redhat.com/browse/STOR-1436): Restart `openstack-cinder-csi-driver-controller` Pods if metrics-serving-cert changed [#128](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/128)
* Remove Dockerfile.rhel7 [#126](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/126)
* Configure User Agent [#123](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/123)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#119](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/119)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#121](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/121)
* [OCPBUGS-16526](https://issues.redhat.com/browse/OCPBUGS-16526): Bump library-go to remove dependency on goproxy [#122](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/122)
* [OCPBUGS-16678](https://issues.redhat.com/browse/OCPBUGS-16678): Fix SCC admission failure race during initial deployment [#120](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/120)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#118](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/118)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#117](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/117)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump cinder-csi-driver-operator library-go [#116](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/116)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#115](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/115)
* Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#113](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/113)
* [OCPBUGS-12651](https://issues.redhat.com/browse/OCPBUGS-12651): Bump golang.org/x/net@v0.9.0 [#114](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/114)
* Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#112](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/112)
* Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#111](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/111)
* OSASINFRA-3000 Prefer a Cinder CSI-specific config map [#82](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/82)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#109](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/109)
* Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#108](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/108)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/14fcca54f20d18045e382cc0699f97e4a1e760ac...)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/)

* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-olm/pull/741)
* NO-ISSUE: Synchronize From Upstream Repositories [#739](https://github.com/openshift/operator-framework-olm/pull/739)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#703](https://github.com/openshift/operator-framework-olm/pull/703)
* [OCPBUGS-31073](https://issues.redhat.com/browse/OCPBUGS-31073): Synchronize From Upstream Repositories [#737](https://github.com/openshift/operator-framework-olm/pull/737)
* NO-ISSUE: Synchronize From Upstream Repositories [#735](https://github.com/openshift/operator-framework-olm/pull/735)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#733](https://github.com/openshift/operator-framework-olm/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#734](https://github.com/openshift/operator-framework-olm/pull/734)
* NO-ISSUE: Synchronize From Upstream Repositories [#732](https://github.com/openshift/operator-framework-olm/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#729](https://github.com/openshift/operator-framework-olm/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#727](https://github.com/openshift/operator-framework-olm/pull/727)
* NO-ISSUE: Synchronize From Upstream Repositories [#723](https://github.com/openshift/operator-framework-olm/pull/723)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-olm/pull/722)
* [OCPBUGS-31080](https://issues.redhat.com/browse/OCPBUGS-31080), [OCPBUGS-31438](https://issues.redhat.com/browse/OCPBUGS-31438): Manual downstream sync [#719](https://github.com/openshift/operator-framework-olm/pull/719)
* NO-ISSUE: UPSTREAM: <carry>: update owners [#720](https://github.com/openshift/operator-framework-olm/pull/720)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): rename from 'clis' to 'tools' [#718](https://github.com/openshift/operator-framework-olm/pull/718)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#700](https://github.com/openshift/operator-framework-olm/pull/700)
* NO-ISSUE: Synchronize From Upstream Repositories [#717](https://github.com/openshift/operator-framework-olm/pull/717)
* NO-ISSUE: Synchronize From Upstream Repositories [#716](https://github.com/openshift/operator-framework-olm/pull/716)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): image just as a cli source for mirror publishing [#713](https://github.com/openshift/operator-framework-olm/pull/713)
* NO-ISSUE: Semver lastedge error (#1169)  [sync] [#714](https://github.com/openshift/operator-framework-olm/pull/714)
* [OCPBUGS-25019](https://issues.redhat.com/browse/OCPBUGS-25019): building rhel8/rhel9/static clis in payload image [#704](https://github.com/openshift/operator-framework-olm/pull/704)
* [OCPBUGS-30132](https://issues.redhat.com/browse/OCPBUGS-30132): Synchronize From Upstream Repositories [#709](https://github.com/openshift/operator-framework-olm/pull/709)
* [OCPBUGS-23744](https://issues.redhat.com/browse/OCPBUGS-23744): Wait for required RBAC before creating packageserver CSV [#708](https://github.com/openshift/operator-framework-olm/pull/708)
* NO-ISSUE: Synchronize From Upstream Repositories [#706](https://github.com/openshift/operator-framework-olm/pull/706)
* NO-ISSUE: Synchronize From Upstream Repositories [#702](https://github.com/openshift/operator-framework-olm/pull/702)
* NO-ISSUE: Synchronize From Upstream Repositories [#701](https://github.com/openshift/operator-framework-olm/pull/701)
* NO-ISSUE: Synchronize From Upstream Repositories [#695](https://github.com/openshift/operator-framework-olm/pull/695)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#697](https://github.com/openshift/operator-framework-olm/pull/697)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-olm/pull/693)
* NO-ISSUE: Synchronize From Upstream Repositories [#687](https://github.com/openshift/operator-framework-olm/pull/687)
* NO-ISSUE: Remove ncdc from OWNERS #68 [#681](https://github.com/openshift/operator-framework-olm/pull/681)
* [OCPBUGS-24587](https://issues.redhat.com/browse/OCPBUGS-24587), [OCPBUGS-28744](https://issues.redhat.com/browse/OCPBUGS-28744): Synchronize From Upstream Repositories [#679](https://github.com/openshift/operator-framework-olm/pull/679)
* NO-ISSUE: Synchronize From Upstream Repositories [#678](https://github.com/openshift/operator-framework-olm/pull/678)
* NO-ISSUE: Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-olm/pull/676)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-olm/pull/667)
* [OCPBUGS-27140](https://issues.redhat.com/browse/OCPBUGS-27140): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 [#658](https://github.com/openshift/operator-framework-olm/pull/658)
* [OCPBUGS-25989](https://issues.redhat.com/browse/OCPBUGS-25989): Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-olm/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-olm/pull/659)
* [OCPBUGS-25262](https://issues.redhat.com/browse/OCPBUGS-25262): Updating operator-registry-container image to be consistent with ART for 4.16 [#657](https://github.com/openshift/operator-framework-olm/pull/657)
* [OCPBUGS-24526](https://issues.redhat.com/browse/OCPBUGS-24526), [OPRUN-3182](https://issues.redhat.com/browse/OPRUN-3182): Sync with upstream [#654](https://github.com/openshift/operator-framework-olm/pull/654)
* [OCPBUGS-24994](https://issues.redhat.com/browse/OCPBUGS-24994): Updating operator-lifecycle-manager-container image to be consistent with ART [#631](https://github.com/openshift/operator-framework-olm/pull/631)
* NO-ISSUE: Synchronize From Upstream Repositories [#650](https://github.com/openshift/operator-framework-olm/pull/650)
* NO-ISSUE: Synchronize From Upstream Repositories [#646](https://github.com/openshift/operator-framework-olm/pull/646)
* [OCPBUGS-25673](https://issues.redhat.com/browse/OCPBUGS-25673): NO-ISSUE: Synchronize From Upstream Repositories [#641](https://github.com/openshift/operator-framework-olm/pull/641)
* NO-ISSUE: Synchronize From Upstream Repositories [#627](https://github.com/openshift/operator-framework-olm/pull/627)
* NO-ISSUE: Update verified directories for microshift-manifests [#638](https://github.com/openshift/operator-framework-olm/pull/638)
* [OCPBUGS-25339](https://issues.redhat.com/browse/OCPBUGS-25339): [CARRY] Fix panic issue when annotations map is nil [#634](https://github.com/openshift/operator-framework-olm/pull/634)
* [OCPBUGS-24942](https://issues.redhat.com/browse/OCPBUGS-24942): Updating operator-registry-container image to be consistent with ART [#630](https://github.com/openshift/operator-framework-olm/pull/630)
* [API-1674](https://issues.redhat.com/browse/API-1674): Add ownership annotations to new and existing olm-managed secrets [#626](https://github.com/openshift/operator-framework-olm/pull/626)
* NO-ISSUE: Synchronize From Upstream Repositories [#625](https://github.com/openshift/operator-framework-olm/pull/625)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests fixes [#622](https://github.com/openshift/operator-framework-olm/pull/622)
* NO-ISSUE: scripts: remove legacy bumping implementations [#613](https://github.com/openshift/operator-framework-olm/pull/613)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests remove collection-profiles cronjob from kustomization [#615](https://github.com/openshift/operator-framework-olm/pull/615)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests: Ignore "*.removed.yaml" files in kustomization.yaml [#610](https://github.com/openshift/operator-framework-olm/pull/610)
* [OPECO-3066](https://issues.redhat.com/browse/OPECO-3066): Synchronize From Upstream Repositories [#612](https://github.com/openshift/operator-framework-olm/pull/612)
* NO-ISSUE: Synchronize From Upstream Repositories [#609](https://github.com/openshift/operator-framework-olm/pull/609)
* Synchronize From Upstream Repositories [#606](https://github.com/openshift/operator-framework-olm/pull/606)
* [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Generate OLM microshift manifests [#604](https://github.com/openshift/operator-framework-olm/pull/604)
* [OCPBUGS-17041](https://issues.redhat.com/browse/OCPBUGS-17041): Release Leader Election on Manager Exit [#556](https://github.com/openshift/operator-framework-olm/pull/556)
* [OPRUN-3106](https://issues.redhat.com/browse/OPRUN-3106): skuznets/bump vendor ii [#600](https://github.com/openshift/operator-framework-olm/pull/600)
* NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602)
* Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581)
* scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599)
* Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597)
* [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596)
* [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595)
* [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592)
* [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565)
* Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588)
* [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585)
* scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593)
* scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580)
* Sync script: handle multi commit merges [#578](https://github.com/openshift/operator-framework-olm/pull/578)
* Sync 2023 10 05 no steve [#579](https://github.com/openshift/operator-framework-olm/pull/579)
* scripts/bumper: exit when there's nothing to do [#569](https://github.com/openshift/operator-framework-olm/pull/569)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551)
* [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563)
* Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567)
* [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564)
* [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561)
* [OCPBUGS-17950](https://issues.redhat.com/browse/OCPBUGS-17950): Make packageserver wakeup interval configurable [#555](https://github.com/openshift/operator-framework-olm/pull/555)
* scripts/bumper: automate pushing changes and creating PRs [#550](https://github.com/openshift/operator-framework-olm/pull/550)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): scripts: add a Go-based bumper, sync upstream [#534](https://github.com/openshift/operator-framework-olm/pull/534)
* Add ncdc to DOWNSTREAM_OWNERS [#539](https://github.com/openshift/operator-framework-olm/pull/539)
* [OPRUN-3022](https://issues.redhat.com/browse/OPRUN-3022): Add support for make verify to sync script [#537](https://github.com/openshift/operator-framework-olm/pull/537)
* Add tmshort to owners [#535](https://github.com/openshift/operator-framework-olm/pull/535)
* fix the manifests generation [#533](https://github.com/openshift/operator-framework-olm/pull/533)
* Sync 2023 08 04 [#532](https://github.com/openshift/operator-framework-olm/pull/532)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): sync [#531](https://github.com/openshift/operator-framework-olm/pull/531)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): operator-registry: cherry-pick to be up-to-date [#526](https://github.com/openshift/operator-framework-olm/pull/526)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): cmd/package-server-manager: add pprof endpoints [#527](https://github.com/openshift/operator-framework-olm/pull/527)
* [OPRUN-3021](https://issues.redhat.com/browse/OPRUN-3021): Improve README [#529](https://github.com/openshift/operator-framework-olm/pull/529)
* [OPRUN-2913](https://issues.redhat.com/browse/OPRUN-2913): Sync api, operator-registry, operator-lifecycle-manager downstream [#510](https://github.com/openshift/operator-framework-olm/pull/510)
* [OPRUN-2913](https://issues.redhat.com/browse/OPRUN-2913): Add DOWNSTREAM_OWNERS [#520](https://github.com/openshift/operator-framework-olm/pull/520)
* [OCPBUGS-10178](https://issues.redhat.com/browse/OCPBUGS-10178): Updating operator-lifecycle-manager images to be consistent with ART [#470](https://github.com/openshift/operator-framework-olm/pull/470)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#511](https://github.com/openshift/operator-framework-olm/pull/511)
* update verification script to work across non-standard bash location [#505](https://github.com/openshift/operator-framework-olm/pull/505)
* [OCPBUGS-13128](https://issues.redhat.com/browse/OCPBUGS-13128): Retry initialization error conditions (#2979) [#502](https://github.com/openshift/operator-framework-olm/pull/502)
* Updating operator-registry images to be consistent with ART [#495](https://github.com/openshift/operator-framework-olm/pull/495)
* [OCPBUGS-13526](https://issues.redhat.com/browse/OCPBUGS-13526): fix dynamic conversion webhook [#490](https://github.com/openshift/operator-framework-olm/pull/490)
* [OPRUN-2995](https://issues.redhat.com/browse/OPRUN-2995): Remove dependency on cluster policy controller in favor of hardcoding [#498](https://github.com/openshift/operator-framework-olm/pull/498)
* [OPRUN-2941](https://issues.redhat.com/browse/OPRUN-2941): update cluster-policy-controller dependency [#494](https://github.com/openshift/operator-framework-olm/pull/494)
* [OCPBUGS-13789](https://issues.redhat.com/browse/OCPBUGS-13789): downstream y-streams-for-all semver template changes. [#489](https://github.com/openshift/operator-framework-olm/pull/489)
* [OCPBUGS-1684](https://issues.redhat.com/browse/OCPBUGS-1684): Optimize certificate generation [#486](https://github.com/openshift/operator-framework-olm/pull/486)
* [METAL-575](https://issues.redhat.com/browse/METAL-575): Revert "Mutate service monitor manifests to include tlsConfig cert an… [#478](https://github.com/openshift/operator-framework-olm/pull/478)
* [OPRUN-2892](https://issues.redhat.com/browse/OPRUN-2892): Update service-monitor tls config [#368](https://github.com/openshift/operator-framework-olm/pull/368)
* [OCPBUGS-6016](https://issues.redhat.com/browse/OCPBUGS-6016): UpdateStrategy RegistryPoll with nil Interval [#468](https://github.com/openshift/operator-framework-olm/pull/468)
* [OCPBUGS-7910](https://issues.redhat.com/browse/OCPBUGS-7910): Sort channels in lexicographical order in Packagemanifestst (#2925) [#476](https://github.com/openshift/operator-framework-olm/pull/476)
* [OCPBUGS-7431](https://issues.redhat.com/browse/OCPBUGS-7431): Registry Pod Controller Flag [#460](https://github.com/openshift/operator-framework-olm/pull/460)
* Update sync script [#472](https://github.com/openshift/operator-framework-olm/pull/472)
* [OPECO-2737](https://issues.redhat.com/browse/OPECO-2737): Veneer template rename [#461](https://github.com/openshift/operator-framework-olm/pull/461)
* fix pop_candidate script [#467](https://github.com/openshift/operator-framework-olm/pull/467)
* Updating operator-registry images to be consistent with ART [#469](https://github.com/openshift/operator-framework-olm/pull/469)
* [OPECO-2646](https://issues.redhat.com/browse/OPECO-2646): exclude bundles with `olm.deprecated` property when rendering [#463](https://github.com/openshift/operator-framework-olm/pull/463)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d4219045431cb6a35ad0d1b5d5fdb0b09adf1430...)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/d569c22c518fc931ff48f66fb38064ddd976729f)

* [OCPBUGS-12979](https://issues.redhat.com/browse/OCPBUGS-12979): update community index to 4.13 tag [#518](https://github.com/operator-framework/operator-marketplace/pull/518)
* [OCPBUGS-12789](https://issues.redhat.com/browse/OCPBUGS-12789): update image tag to 4.13 for all but community operators [#516](https://github.com/operator-framework/operator-marketplace/pull/516)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/cfce6b5024f56305304599cd49dfbbe2b5d8ed3d...d569c22c518fc931ff48f66fb38064ddd976729f)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/)

* [OCPBUGS-24868](https://issues.redhat.com/browse/OCPBUGS-24868): Updating ose-ovirt-csi-driver-container image to be consistent with ART [#132](https://github.com/openshift/ovirt-csi-driver/pull/132)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/49f6f059507ed04116d91d8f9e8dadd6fd1978d9)

* [OCPBUGS-10914](https://issues.redhat.com/browse/OCPBUGS-10914): [release-4.13] Node healthz server: return unhealthy when ovnk node pod is to be deleted [#1580](https://github.com/openshift/ovn-kubernetes/pull/1580)
* [OCPBUGS-12212](https://issues.redhat.com/browse/OCPBUGS-12212): [release-4.13]4.13 stack migration [#1651](https://github.com/openshift/ovn-kubernetes/pull/1651)
* [OCPBUGS-11447](https://issues.redhat.com/browse/OCPBUGS-11447): [release-4.13] Delete equivalent ACLs when searching by predicate. [#1631](https://github.com/openshift/ovn-kubernetes/pull/1631)
* [OCPBUGS-10982](https://issues.redhat.com/browse/OCPBUGS-10982): [release-4.13] Fixes Egress Firewall node selector for ipv6 [#1612](https://github.com/openshift/ovn-kubernetes/pull/1612)
* [OCPBUGS-11458](https://issues.redhat.com/browse/OCPBUGS-11458): CARRY: use "prefer local" for annotated services [#1630](https://github.com/openshift/ovn-kubernetes/pull/1630)
* [OCPBUGS-11511](https://issues.redhat.com/browse/OCPBUGS-11511): [release-4.13] static pod creation [#1627](https://github.com/openshift/ovn-kubernetes/pull/1627)
* [OCPBUGS-11023](https://issues.redhat.com/browse/OCPBUGS-11023): [release-4.13] Update hairpinning ACLs for network policy [#1624](https://github.com/openshift/ovn-kubernetes/pull/1624)
* [OCPBUGS-11022](https://issues.redhat.com/browse/OCPBUGS-11022): [release-4.13] Fix node update handling for egressfirewall [#1625](https://github.com/openshift/ovn-kubernetes/pull/1625)
* [OCPBUGS-10929](https://issues.redhat.com/browse/OCPBUGS-10929): [release-4.13]4.13 1.26 bump [#1614](https://github.com/openshift/ovn-kubernetes/pull/1614)
* [OCPBUGS-10801](https://issues.redhat.com/browse/OCPBUGS-10801): [release-4.13] Batch potentially big transaction on egress firewall ACLs migration [#1604](https://github.com/openshift/ovn-kubernetes/pull/1604)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8ae3593f8a9b35a668c00167355f3085ab4a56a7...49f6f059507ed04116d91d8f9e8dadd6fd1978d9)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/e0e89f1b778799e45b3d5095a9275e2802de376a)

* [OCPBUGS-12950](https://issues.redhat.com/browse/OCPBUGS-12950): Updated net dependencies [#31](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/6c96aeab7d866ef2798240989ff6a4b4ae5ebf2d...e0e89f1b778799e45b3d5095a9275e2802de376a)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/130365622eb0c59e102049529695c8326d616213)

* [OCPBUGS-12657](https://issues.redhat.com/browse/OCPBUGS-12657): Updated net dependencies [#34](https://github.com/openshift/cloud-provider-powervs/pull/34)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/e52cfc59b051b6574f8bbbb4be4579ab3d72611a...130365622eb0c59e102049529695c8326d616213)


### [prometheus](https://github.com/openshift/prometheus/tree/8279148fd0d8b2aa2a1613a2e9810aea80f487df)

* [OCPBUGS-12508](https://issues.redhat.com/browse/OCPBUGS-12508): go.mod: update golang.org/x/net to v0.7.0 [#161](https://github.com/openshift/prometheus/pull/161)
* [Full changelog](https://github.com/openshift/prometheus/compare/d8ea2c4f037abbf3f0fad5b6179ccf24ba9d9e4d...8279148fd0d8b2aa2a1613a2e9810aea80f487df)


### [tests](https://github.com/openshift/origin/tree/893ae5755c21bfabe8042f6e885dda7d80671b5c)

* [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27895](https://github.com/openshift/origin/pull/27895)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): [release-4.13] Allow cluster daemonsets to use maxSurge [#27859](https://github.com/openshift/origin/pull/27859)
* [OCPBUGS-12878](https://issues.redhat.com/browse/OCPBUGS-12878): [release-4.13] Add (optional) dual-stack tests to the CNI certification test suite [#27877](https://github.com/openshift/origin/pull/27877)
* [OCPBUGS-12271](https://issues.redhat.com/browse/OCPBUGS-12271): test/extended: cpu-partitioning: skip cluster infrastructure for Hypershift [#27885](https://github.com/openshift/origin/pull/27885)
* Revert "TRT-889: Temp flake all azure disruption" [#27870](https://github.com/openshift/origin/pull/27870)
* [OCPBUGS-11307](https://issues.redhat.com/browse/OCPBUGS-11307): Add test for Egress Firewall node selector [#27845](https://github.com/openshift/origin/pull/27845)
* add specific test for failing cgroups path [#27855](https://github.com/openshift/origin/pull/27855)
* [OCPBUGS-11335](https://issues.redhat.com/browse/OCPBUGS-11335): fix: add namespace annotation helper for egress cni test [#27848](https://github.com/openshift/origin/pull/27848)
* [OCPBUGS-11315](https://issues.redhat.com/browse/OCPBUGS-11315): Increasing limits for Nodes OSUpdateStaged time test [#27847](https://github.com/openshift/origin/pull/27847)
* [OCPBUGS-11295](https://issues.redhat.com/browse/OCPBUGS-11295): e2e: Config v1 client shim for static configuration manifests with read-only operations [#27840](https://github.com/openshift/origin/pull/27840)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): DisableSC test should ignore in-tree storage classes [#27831](https://github.com/openshift/origin/pull/27831)
* [OCPBUGS-10968](https://issues.redhat.com/browse/OCPBUGS-10968): fix: add poll to get deployment status and avoid false positive [#27825](https://github.com/openshift/origin/pull/27825)
* [Full changelog](https://github.com/openshift/origin/compare/2dfafe55b158fcd1a0a7a556e697fb775b260ffa...893ae5755c21bfabe8042f6e885dda7d80671b5c)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/6f4295bb2bca2228260ad6c1ff5b47f98196e81a)

* [OCPBUGS-11672](https://issues.redhat.com/browse/OCPBUGS-11672): UPSTREAM: 2326: Update opencontainers/runc for CVE-2023-27561 [#69](https://github.com/openshift/vmware-vsphere-csi-driver/pull/69)
* [OCPBUGS-11786](https://issues.redhat.com/browse/OCPBUGS-11786), [OCPBUGS-11787](https://issues.redhat.com/browse/OCPBUGS-11787): Add .gitattributes [#70](https://github.com/openshift/vmware-vsphere-csi-driver/pull/70)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e4408a3c04c3f485c6f344bdc786d15a5c84b05a...6f4295bb2bca2228260ad6c1ff5b47f98196e81a)