# 4.13.0-0.okd-scos-2023-06-22-002852

Created: 2023-06-22 08:39:44 +0000 UTC

Image Digest: `sha256:d6bf461f11470b31d6d5fb5df26dc388ebc8912e232cf26d53c6701333898e77`

Promoted from registry.ci.openshift.org/origin/release-scos:4.13.0-0.okd-scos-2023-06-22-002852


## Changes from 4.13.0-0.okd-scos-2023-05-25-085822

### Components

* Kubernetes upgraded from 1.26.3 to 1.26.5
* CentOS Stream CoreOS upgraded from 414.9.202305250606-0 to 414.9.202306050607-0


### Rebuilt images without code change

* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [b6dee5c3](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/b6dee5c3585cbc92967530cb178a09a52164bfde) `sha256:5495cc459c57b4362941b1c665ceedb826b25e8773d7debdee6b8e44b209f6c0`
* centos-stream-coreos-9 `sha256:790bbc5da730585fa9ed73c1ae76b9fc600593b5b2ea3fd3ba3347a42203cbf0`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [ce1c9a35](https://github.com/openshift/cluster-capi-operator/commit/ce1c9a359ec9ab0c5526cd8594ea59bb52044026) `sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9`
* [etcd](https://github.com/openshift/etcd) git [f70da9d7](https://github.com/openshift/etcd/commit/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d) `sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969`
* [haproxy-router](https://github.com/openshift/router) git [065deab8](https://github.com/openshift/router/commit/065deab84f342615db2d2f5c78a19ae04bb43912) `sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [4536724a](https://github.com/openshift/ironic-static-ip-manager/commit/4536724a8644fda91a74b23901ba1789eaff7179) `sha256:992d07008204ddb28397878eb792b0880544570ae122d81fefa00216f3b36c04`
* machine-os-content `sha256:790bbc5da730585fa9ed73c1ae76b9fc600593b5b2ea3fd3ba3347a42203cbf0`
* [telemeter](https://github.com/openshift/telemeter) git [be81b434](https://github.com/openshift/telemeter/commit/be81b43429dcbf70f6ca19a9360ba455c97a1639) `sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)

* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b...8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f289c9e9d3abe5f7b6dc57a388ef31419d235347)

* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e8de0582db56699d32653df02241c4a104755e1b...f289c9e9d3abe5f7b6dc57a388ef31419d235347)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/923631d779405e7cb684c174fa42e589c318060f)

* [OCPBUGS-13811](https://issues.redhat.com/browse/OCPBUGS-13811): Volume unmount repeats after successful unmount, preventing pod delete [#225](https://github.com/openshift/aws-ebs-csi-driver/pull/225)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/d8fa531075bd9e3da26a58e05fc906bc84e2625e...923631d779405e7cb684c174fa42e589c318060f)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/125a4b45d02ac7596406e43810398688b25ec91d)

* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4969655df4169f19092e173b16c56c79d3a3383e...125a4b45d02ac7596406e43810398688b25ec91d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/fb2d232da809a58929fe86cb9a59a045c7b44aa4)

* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7afcf26e2e9190337134e75e0981d25d05dc16c8...fb2d232da809a58929fe86cb9a59a045c7b44aa4)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8846366f4ae63a63ab75a35761cca1c95dee3c84)

* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/9885d4d37ed74d764eb83a826f3a7b013ed83d12...8846366f4ae63a63ab75a35761cca1c95dee3c84)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/792376c7bc62536929b7bf0d2c4c30c1c7605b25)

* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193)
* [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210)
* [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045)
* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#7016](https://github.com/openshift/installer/pull/7016)
* [OCPBUGS-14027](https://issues.redhat.com/browse/OCPBUGS-14027): GCP XPN: Pass instance service acct in manual mode [#7204](https://github.com/openshift/installer/pull/7204)
* [Full changelog](https://github.com/openshift/installer/compare/2f227cc47f4e7ca6ed8edf0caf7c48283a82fc03...792376c7bc62536929b7bf0d2c4c30c1c7605b25)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3c924532a6965789f743fe37d77ed8b52a065c36)

* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [OCPBUGS-13927](https://issues.redhat.com/browse/OCPBUGS-13927): Deleting unmanaged BMH get stuck fix [#281](https://github.com/openshift/baremetal-operator/pull/281)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d17c8bce1af351ffa1393026b0c75369a5cb0fa4...3c924532a6965789f743fe37d77ed8b52a065c36)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/7a4597c614871c34a805a981b1601464a5879919)

* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f0c1297c424d2ce8d20b376c488f8ada595b39b9...7a4597c614871c34a805a981b1601464a5879919)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c25391bfac9b0f398d41adece6fb948ead0a8348)

* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435)
* [OCPBUGS-14180](https://issues.redhat.com/browse/OCPBUGS-14180): Remove closed centos7 registry from newapp unit tests [#1432](https://github.com/openshift/oc/pull/1432)
* [Full changelog](https://github.com/openshift/oc/compare/92b1a3d0e5d092430b523f6541aa0c504b2222b3...c25391bfac9b0f398d41adece6fb948ead0a8348)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1258d548f7b8e98a08b98606e31c983b032afb3c)

* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/71ccef5299dc865106a86f6f514041dbe33086bb...1258d548f7b8e98a08b98606e31c983b032afb3c)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/507f873307be10d8ddbbbe0fecba68aea7c2b5c1)

* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0142186bad9acc2d7950663129a4ef82c32a5610...507f873307be10d8ddbbbe0fecba68aea7c2b5c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/64455eb66f17bb2c761ab529dbae76123f530d48)

* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe...64455eb66f17bb2c761ab529dbae76123f530d48)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/e48717dff2d2fc42babe66f423aa795f31916e88)

* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/9740b7ebfb127dfaa251506714e6c8cb41f0ae2b...e48717dff2d2fc42babe66f423aa795f31916e88)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/382d006fc92671cb09b724e3c2b27b09364e0d15)

* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7262c34b3a6434b49851ff5f0cceec87a2ee9706...382d006fc92671cb09b724e3c2b27b09364e0d15)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5c00da0816faf0f15e643f05666c963d862a8299)

* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887...5c00da0816faf0f15e643f05666c963d862a8299)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3777e7bb9e8c2f9008685492cff9589e31c20473)

* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [OCPBUGS-13007](https://issues.redhat.com/browse/OCPBUGS-13007): Add build number to rules [#1964](https://github.com/openshift/cluster-monitoring-operator/pull/1964)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1563f682454aa22db0ac381fb4616efa6931dea6...3777e7bb9e8c2f9008685492cff9589e31c20473)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/cf774f4844621d058b951457a4068aeb3e1e609e)

* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3ed6bef191d49ede92ab8f7f684826a1b7967928...cf774f4844621d058b951457a4068aeb3e1e609e)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/4bd0ef245e10269ac4a7e68c5119b94e393b46bb)

* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669)
* render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594)
* Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670)
* Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7333da210d37eedcb3e1829bce5f6136d006d12d...4bd0ef245e10269ac4a7e68c5119b94e393b46bb)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)

* [OCPBUGS-14091](https://issues.redhat.com/browse/OCPBUGS-14091): [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources [#116](https://github.com/openshift/cluster-policy-controller/pull/116)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/4aa5ecd04fa2a35a5ae07a13707bd2e0239432a9...8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/93fbf940ff04c6e01f0d0a6baef985470c966cc3)

* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/318d124ed3bcde76cbe960f6bef203728e34d1c6...93fbf940ff04c6e01f0d0a6baef985470c966cc3)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)

* Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)


### [console](https://github.com/openshift/console/tree/ba926294504fc3c0181cc272c66479989dfd3a1b)

* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860)
* [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658)
* [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856)
* [Full changelog](https://github.com/openshift/console/compare/6f58e088705d4c66e10b1d418a115e295fa5ac7b...ba926294504fc3c0181cc272c66479989dfd3a1b)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [docker-builder](https://github.com/openshift/builder/tree/d02643e89631a31343c4c76e2004cd53c64acdf7)

* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...d02643e89631a31343c4c76e2004cd53c64acdf7)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/efaf4dc692072338d472f086c9f691c71f4a028d)

* [OCPBUGS-12603](https://issues.redhat.com/browse/OCPBUGS-12603): Bump x/net package to v0.10.0 [#32](https://github.com/openshift/cloud-provider-gcp/pull/32)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/9b7ca987656ad184730a6b430dcd846f5bc75db5...efaf4dc692072338d472f086c9f691c71f4a028d)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)

* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/7d221229dc97969b79a272b63ad97b84d93cddb2)

* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580)
* [OCPBUGS-14048](https://issues.redhat.com/browse/OCPBUGS-14048): Bump to k8s 1.26.5 [#1586](https://github.com/openshift/kubernetes/pull/1586)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b40493584076fb1ab29f3bed1d05d16cbc5b17f1...7d221229dc97969b79a272b63ad97b84d93cddb2)


### [hypershift](https://github.com/openshift/hypershift/tree/ca4b360804e4d411e1e77fff14c28569bd9e51bd)

* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610)
* [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621)
* [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613)
* [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552)
* [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Increases default etcd PV size to 8Gi [#2569](https://github.com/openshift/hypershift/pull/2569)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2594](https://github.com/openshift/hypershift/pull/2594)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Backport nodepools metrics [#2601](https://github.com/openshift/hypershift/pull/2601)
* Red Hat Trusted App Pipeline update hypershift [#2603](https://github.com/openshift/hypershift/pull/2603)
* [Full changelog](https://github.com/openshift/hypershift/compare/3f61d88560660a04c860f2cb5fb355b8fb9142b8...ca4b360804e4d411e1e77fff14c28569bd9e51bd)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)

* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/283a614ee34e83afa065338dee25d4ee202c8aeb...96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bb253a0c607f7d1f8139ffd401bd6c9c432090d1)

* [OCPBUGS-12616](https://issues.redhat.com/browse/OCPBUGS-12616): Bump x/net to v0.7.0 [#23](https://github.com/openshift/machine-api-provider-ibmcloud/pull/23)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c75f7e3e7a3b7525aa2d540f86fd7477e7800608...bb253a0c607f7d1f8139ffd401bd6c9c432090d1)


### [ironic](https://github.com/openshift/ironic-image/tree/0c7c4b6f7971d157525fc9c30880fb1118810f15)

* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [OCPBUGS-14135](https://issues.redhat.com/browse/OCPBUGS-14135): ironic.conf.j2: Bump min_command_interval to 30 on SCOS [#378](https://github.com/openshift/ironic-image/pull/378)
* [Full changelog](https://github.com/openshift/ironic-image/compare/1bf2c2a5362e08dd1f8149d6e6293294e3df618a...0c7c4b6f7971d157525fc9c30880fb1118810f15)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)

* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/95816efa5d37e980b65f65d98311ceeb8c946db7)

* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [OCPBUGS-13974](https://issues.redhat.com/browse/OCPBUGS-13974): MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default [#3714](https://github.com/openshift/machine-config-operator/pull/3714)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1ae3805822dfee3263bfd553d49fd36c648fbd12...95816efa5d37e980b65f65d98311ceeb8c946db7)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/f76d674edb07d7006f04748338c1013499c0e7ab)

* [OCPBUGS-13709](https://issues.redhat.com/browse/OCPBUGS-13709): Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 [#68](https://github.com/openshift/multus-admission-controller/pull/68)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d6d52a7a7df2243056c5db83cc10885ac2ca775b...f76d674edb07d7006f04748338c1013499c0e7ab)


### [multus-cni](https://github.com/openshift/multus-cni/tree/38444d9e21e8a9793a382c82c7d12d01381e5c55)

* [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154)
* [OCPBUGS-13759](https://issues.redhat.com/browse/OCPBUGS-13759): Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) [#161](https://github.com/openshift/multus-cni/pull/161)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5d283fa3cf7f7e599c919ed7a37604f09df33062...38444d9e21e8a9793a382c82c7d12d01381e5c55)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/31f847af4c69f297a328b35bb4a1ac329ccc198e)

* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* Removes Ross and adds Jeremy in the OWNER file (#645) [#645](https://github.com/openshift/oc-mirror/pull/645)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/aee430b90e7e3920d9798669cafaf70294314d44...31f847af4c69f297a328b35bb4a1ac329ccc198e)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6627b2a22d70fa740de8bb35f0beea3816b01ec4)

* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/3e49f77c34922a7e2ce675825cb5ff3bca3a6dbd...6627b2a22d70fa740de8bb35f0beea3816b01ec4)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/855f4a44967fe932f6f067cd338d74d7b8f010c0)

* [OCPBUGS-14979](https://issues.redhat.com/browse/OCPBUGS-14979): Validate port before deleting conntrack flow [#1712](https://github.com/openshift/ovn-kubernetes/pull/1712)
* [OCPBUGS-15140](https://issues.redhat.com/browse/OCPBUGS-15140): Fix stale SNAT entries for completed pods [#1715](https://github.com/openshift/ovn-kubernetes/pull/1715)
* [OCPBUGS-14482](https://issues.redhat.com/browse/OCPBUGS-14482): Dockerfiles: sync RHEL9 dockerfiles to regular unused ones [#1695](https://github.com/openshift/ovn-kubernetes/pull/1695)
* [OCPBUGS-12864](https://issues.redhat.com/browse/OCPBUGS-12864): Drop packets were not properly SNATed [#1662](https://github.com/openshift/ovn-kubernetes/pull/1662)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/db0dbadc1a409f40345e921e991bd3e22c55490a...855f4a44967fe932f6f067cd338d74d7b8f010c0)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/95a117826360e23e092be5bbee2da8dbcf44f17a)

* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df...95a117826360e23e092be5bbee2da8dbcf44f17a)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925)

* [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/d7a8e22db412b6fabb7028ca0da8de8f3d9ac3c3...6667a6cbf9a87331fcc4407375118c0bb884c925)


### [tests](https://github.com/openshift/origin/tree/dfd4e799e835aa53c8ae5e11f1676db1f665d54a)

* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956)
* [OCPBUGS-13840](https://issues.redhat.com/browse/OCPBUGS-13840): Add missing error check in sysctl allowlist test [#27929](https://github.com/openshift/origin/pull/27929)
* [OCPBUGS-14127](https://issues.redhat.com/browse/OCPBUGS-14127): Move from registry.centos.org to quay.io [#27948](https://github.com/openshift/origin/pull/27948)
* [OCPBUGS-12700](https://issues.redhat.com/browse/OCPBUGS-12700): update-etcd-scaling-test [#27892](https://github.com/openshift/origin/pull/27892)
* [Full changelog](https://github.com/openshift/origin/compare/893ae5755c21bfabe8042f6e885dda7d80671b5c...dfd4e799e835aa53c8ae5e11f1676db1f665d54a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/64f62bff177c6f2df6f106eacecc05e49e9a9828)

* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e10dc55232d1bf9f11251f63abcb72fe75bedd75...64f62bff177c6f2df6f106eacecc05e49e9a9828)