# 4.21.0-okd-scos.ec.6
Created: 2025-11-03 05:00:35 +0000 UTC
Image Digest: `sha256:ec01c346fdd2a4e8f17ac7dcc882b0f88512d5c8578aa8c0a3a3f08622c1166c`
Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-11-02-154600
## Changes from 4.20.0-okd-scos.6
### Components
* Kubectl upgraded from 1.33.3 to 1.34.1
* Kubernetes upgraded from 1.33.5 to 1.34.1
* Kubernetes Tests upgraded from 1.33.4 to 1.34.1
* CentOS Stream CoreOS 10.0.20251023-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| IngressControllerLBSubnetsAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| InsightsConfigAPI
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NodeSwap
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| SetEIPForNLBIngressController
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| GCPClusterHostedDNSInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ManagedBootImagesAzure
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ManagedBootImagesvSphere
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| PreconfiguredUDNAddresses
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VolumeAttributesClass
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDC
(0 tests)| Enabled| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NewOLMWebhookProviderOpenshiftServiceCA
(0 tests)| Disabled| Enabled
(Changed)| Disabled| Enabled| Disabled| Enabled |
| IngressControllerDynamicConfigurationManager
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| AWSDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| AzureDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| CBORServingAndStorage
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClientsAllowCBOR
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClientsPreferCBOR
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementVSphere
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| EventTTL
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ManagedBootImagesCPMS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MutableCSINodeAllocatableCount
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| OSStreams
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### Removed images
* ovirt-csi-driver
* ovirt-csi-driver-operator
### Rebuilt images without code change
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:87f6e8d89bf4a8d54e8252887fb7dc6d142260c2b972391a1d0504d295c01748`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:5d880cc50c548cf65c63933af4e8f303928b75d6e3a2461f3e4f8a09668d5e4b`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:56649b95f02d1307a6594cb5dc621da438e5456a659c96e8de68f29737ee6ee8`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:521e205e561c8e571f81f9a459f7237f1f1804792544175693069aac9979329c`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:f0e47a2ef77b276ce138e4beadd3526676d8d2326faacf2fb29bc5231a95bd75`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:61a2432b5bb9142345ca1875e00945b3dc286377f1161e152c8c6d022a0762e0`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/53571e1b19b7090f444d7315efa546569af0cc22)
* [MGMT-21848](https://issues.redhat.com/browse/MGMT-21848): Allow matching host's disk using byPath [#8113](https://github.com/openshift/assisted-service/pull/8113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 [#8219](https://github.com/openshift/assisted-service/pull/8219)
* [MGMT-21230](https://issues.redhat.com/browse/MGMT-21230): Use XTS for disk encryption [#8115](https://github.com/openshift/assisted-service/pull/8115)
* [MGMT-21870](https://issues.redhat.com/browse/MGMT-21870): Add new parameters for bundle routes [#8101](https://github.com/openshift/assisted-service/pull/8101)
* [MGMT-22038](https://issues.redhat.com/browse/MGMT-22038): Only check TNF version for day-1 bound hosts [#8213](https://github.com/openshift/assisted-service/pull/8213)
* [MGMT-22025](https://issues.redhat.com/browse/MGMT-22025): Filter out irrelevant RHCOS images in operator deployment scripts [#8194](https://github.com/openshift/assisted-service/pull/8194)
* [MGMT-20681](https://issues.redhat.com/browse/MGMT-20681): Improve discovery ISO password change script [#7683](https://github.com/openshift/assisted-service/pull/7683)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Fix dual-stack primary IPv6 migrations and update [#8145](https://github.com/openshift/assisted-service/pull/8145)
* NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 [#8156](https://github.com/openshift/assisted-service/pull/8156)
* [MGMT-21958](https://issues.redhat.com/browse/MGMT-21958): Prepare 4.20 stable versions assisted-service upstream [#8142](https://github.com/openshift/assisted-service/pull/8142)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#8143](https://github.com/openshift/assisted-service/pull/8143)
* NO-ISSUE: adds example Agent resource to docs [#8120](https://github.com/openshift/assisted-service/pull/8120)
* NO-ISSUE: migrate renovate config [#8060](https://github.com/openshift/assisted-service/pull/8060)
* [MGMT-21135](https://issues.redhat.com/browse/MGMT-21135): Unexpected Additional Subnet Appears in Machine Network Selection [#7953](https://github.com/openshift/assisted-service/pull/7953)
* [MGMT-21810](https://issues.redhat.com/browse/MGMT-21810): Support TNF cluster installation using kube-api [#8085](https://github.com/openshift/assisted-service/pull/8085)
* [MGMT-21759](https://issues.redhat.com/browse/MGMT-21759): Update Assisted Service webhook away from deprecated webhook.Validator API [#8135](https://github.com/openshift/assisted-service/pull/8135)
* [MGMT-21859](https://issues.redhat.com/browse/MGMT-21859): Move osc operators to supported [#8056](https://github.com/openshift/assisted-service/pull/8056)
* [MGMT-19836](https://issues.redhat.com/browse/MGMT-19836): Add ClusterID field on HostRoleUpdatedEvent [#8111](https://github.com/openshift/assisted-service/pull/8111)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Add Dual-Stack with primary IPv6 support in Assisted [#8026](https://github.com/openshift/assisted-service/pull/8026)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 [#8134](https://github.com/openshift/assisted-service/pull/8134)
* [AGENT-1303](https://issues.redhat.com/browse/AGENT-1303): Allow InfraEnv registration to use late binding [#8059](https://github.com/openshift/assisted-service/pull/8059)
* NO-ISSUE: Update Konflux references [#8128](https://github.com/openshift/assisted-service/pull/8128)
* NO-ISSUE: bump ocp dockerfile base image to 4.21 [#8110](https://github.com/openshift/assisted-service/pull/8110)
* [MGMT-20588](https://issues.redhat.com/browse/MGMT-20588): Align kube descheduler activation CR with OVE needs [#7960](https://github.com/openshift/assisted-service/pull/7960)
* NO-ISSUE: Update Konflux references [#8050](https://github.com/openshift/assisted-service/pull/8050)
* [ACM-25137](https://issues.redhat.com/browse/ACM-25137): Remove the SERVICE_EL8_IMAGE env vars [#8108](https://github.com/openshift/assisted-service/pull/8108)
* [MGMT-21725](https://issues.redhat.com/browse/MGMT-21725): Update Renovate for legacy EL8 Dockerfiles [#8090](https://github.com/openshift/assisted-service/pull/8090)
* [OCPBUGS-62580](https://issues.redhat.com/browse/OCPBUGS-62580): Fix edge jobs to be consistent with ART for 4.21 [#8104](https://github.com/openshift/assisted-service/pull/8104)
* NO-ISSUE: [master] Bump OCP versions: 4.19 [#8095](https://github.com/openshift/assisted-service/pull/8095)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 [#8089](https://github.com/openshift/assisted-service/pull/8089)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 [#8084](https://github.com/openshift/assisted-service/pull/8084)
* [MGMT-20192](https://issues.redhat.com/browse/MGMT-20192): add possibility to disable image service [#7955](https://github.com/openshift/assisted-service/pull/7955)
* And 28 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c616cdc940cf15bc911d0228e589d931c5a741d3...53571e1b19b7090f444d7315efa546569af0cc22)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/77712c5ba9f3fd144d5010b0945310512c9370a4)
* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partiti… [#1308](https://github.com/openshift/assisted-installer/pull/1308)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#1301](https://github.com/openshift/assisted-installer/pull/1301)
* NO-ISSUE: Update Konflux references [#1299](https://github.com/openshift/assisted-installer/pull/1299)
* [MGMT-21724](https://issues.redhat.com/browse/MGMT-21724): Update Renovate for legacy EL8 Dockerfiles [#1289](https://github.com/openshift/assisted-installer/pull/1289)
* [OCPBUGS-62361](https://issues.redhat.com/browse/OCPBUGS-62361): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 [#1276](https://github.com/openshift/assisted-installer/pull/1276)
* [OCPBUGS-62398](https://issues.redhat.com/browse/OCPBUGS-62398): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 [#1277](https://github.com/openshift/assisted-installer/pull/1277)
* NO-ISSUE: Update Konflux references [#1283](https://github.com/openshift/assisted-installer/pull/1283)
* NO-ISSUE: Update Konflux references [#1265](https://github.com/openshift/assisted-installer/pull/1265)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/3accbb7bd0dd865744e0ef0808b65be5914b157e...77712c5ba9f3fd144d5010b0945310512c9370a4)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/78b3c2d977f3955647e42d2236a789813ed32ba5)
* NO-ISSUE: migrate renovate config [#1123](https://github.com/openshift/assisted-installer-agent/pull/1123)
* [MGMT-21724](https://issues.redhat.com/browse/MGMT-21724): Update Renovate for legacy EL8 Dockerfiles [#1148](https://github.com/openshift/assisted-installer-agent/pull/1148)
* [OCPBUGS-62390](https://issues.redhat.com/browse/OCPBUGS-62390): Bump dockerfile images to 4.21 [#1147](https://github.com/openshift/assisted-installer-agent/pull/1147)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#1118](https://github.com/openshift/assisted-installer-agent/pull/1118)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28...78b3c2d977f3955647e42d2236a789813ed32ba5)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/d7c8b24192df63bffc85f78d4124127036d97a3e)
* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302): Check for presence of registry instead of WorkflowType [#157](https://github.com/openshift/agent-installer-utils/pull/157)
* [OCPBUGS-63487](https://issues.redhat.com/browse/OCPBUGS-63487): AGENT-1203: Simplify isobuilder [#173](https://github.com/openshift/agent-installer-utils/pull/173)
* : OCPBUGS-63323: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan [#181](https://github.com/openshift/agent-installer-utils/pull/181)
* [OCPBUGS-63322](https://issues.redhat.com/browse/OCPBUGS-63322): Update Konflux references [#180](https://github.com/openshift/agent-installer-utils/pull/180)
* [OCPBUGS-62912](https://issues.redhat.com/browse/OCPBUGS-62912): Resolve violations detected by registry-standard [#175](https://github.com/openshift/agent-installer-utils/pull/175)
* [OCPBUGS-62986](https://issues.redhat.com/browse/OCPBUGS-62986): Update Konflux references [#177](https://github.com/openshift/agent-installer-utils/pull/177)
* [OCPBUGS-62958](https://issues.redhat.com/browse/OCPBUGS-62958): Update Konflux references [#168](https://github.com/openshift/agent-installer-utils/pull/168)
* [OCPBUGS-62905](https://issues.redhat.com/browse/OCPBUGS-62905): Dockerfile cleanup [#174](https://github.com/openshift/agent-installer-utils/pull/174)
* [OCPBUGS-62347](https://issues.redhat.com/browse/OCPBUGS-62347): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 [#165](https://github.com/openshift/agent-installer-utils/pull/165)
* [OCPBUGS-62704](https://issues.redhat.com/browse/OCPBUGS-62704): remove hardcoded versions from iso_builder [#171](https://github.com/openshift/agent-installer-utils/pull/171)
* [AGENT-1336](https://issues.redhat.com/browse/AGENT-1336): Add release label to build [#170](https://github.com/openshift/agent-installer-utils/pull/170)
* [OCPBUGS-62646](https://issues.redhat.com/browse/OCPBUGS-62646): Update Konflux references [#167](https://github.com/openshift/agent-installer-utils/pull/167)
* [OCPBUGS-62645](https://issues.redhat.com/browse/OCPBUGS-62645): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 [#146](https://github.com/openshift/agent-installer-utils/pull/146)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Build PipelineRun changes for Konflux [#155](https://github.com/openshift/agent-installer-utils/pull/155)
* [OCPBUGS-61946](https://issues.redhat.com/browse/OCPBUGS-61946): Include only final ISO in OVE UI container image [#162](https://github.com/openshift/agent-installer-utils/pull/162)
* [OCPBUGS-61956](https://issues.redhat.com/browse/OCPBUGS-61956): Disable Konflux go.mod PR updates [#163](https://github.com/openshift/agent-installer-utils/pull/163)
* [OCPBUGS-61875](https://issues.redhat.com/browse/OCPBUGS-61875): Add 4.21 config [#160](https://github.com/openshift/agent-installer-utils/pull/160)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso [#154](https://github.com/openshift/agent-installer-utils/pull/154)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils [#153](https://github.com/openshift/agent-installer-utils/pull/153)
* [AGENT-1286](https://issues.redhat.com/browse/AGENT-1286): Red Hat Konflux kflux-prd-rh02 update agent-installer-utils [#143](https://github.com/openshift/agent-installer-utils/pull/143)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/11ced42a5369c0e78de202cf261c8c4db3eb7911...d7c8b24192df63bffc85f78d4124127036d97a3e)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/35ba137ab96d01f0b8df729ff5ad93ac2fdad800)
* [OCPBUGS-62355](https://issues.redhat.com/browse/OCPBUGS-62355): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/apiserver-network-proxy/pull/86)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/11b24a2c7452ef683a1d989f1016e6e815f5c112...35ba137ab96d01f0b8df729ff5ad93ac2fdad800)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/27f0449461cd77dea5e3706af6e7caf9e9f4dca4)
* [OCPCLOUD-3092](https://issues.redhat.com/browse/OCPCLOUD-3092): Merge https://github.com/kubernetes/cloud-provider-aws:master (bea9adf) into main [#112](https://github.com/openshift/cloud-provider-aws/pull/112)
* [OCPBUGS-62354](https://issues.redhat.com/browse/OCPBUGS-62354): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 [#118](https://github.com/openshift/cloud-provider-aws/pull/118)
* NO-JIRA: Update OWNERS [#116](https://github.com/openshift/cloud-provider-aws/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/bb88da16b29d63573861351afc5ca8c4547775d6...27f0449461cd77dea5e3706af6e7caf9e9f4dca4)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/53939048ef278b09552b0640beb169c20aa1bd71)
* [OCPBUGS-63046](https://issues.redhat.com/browse/OCPBUGS-63046): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main [#576](https://github.com/openshift/cluster-api-provider-aws/pull/576)
* [OCPBUGS-62540](https://issues.redhat.com/browse/OCPBUGS-62540): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 [#575](https://github.com/openshift/cluster-api-provider-aws/pull/575)
* NO-JIRA: Update OWNERS [#567](https://github.com/openshift/cluster-api-provider-aws/pull/567)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main [#569](https://github.com/openshift/cluster-api-provider-aws/pull/569)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/300439ea0736444a160c061578b3bd8956d4f7e6...53939048ef278b09552b0640beb169c20aa1bd71)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/4b04d8a25010af932f35e719cc5c3db80603fbe0)
* [OCPBUGS-62380](https://issues.redhat.com/browse/OCPBUGS-62380): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 [#292](https://github.com/openshift/aws-ebs-csi-driver/pull/292)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9...4b04d8a25010af932f35e719cc5c3db80603fbe0)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/9816f9223f6ad5fdb000b2127a6154e03fd3c7a6)
* [OCPBUGS-62802](https://issues.redhat.com/browse/OCPBUGS-62802): Add RBAC ClusterRole and Binding for driver node [#443](https://github.com/openshift/csi-operator/pull/443)
* NO-JIRA: add ai-helpers claude marketplace [#451](https://github.com/openshift/csi-operator/pull/451)
* NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar [#380](https://github.com/openshift/csi-operator/pull/380)
* [OCPBUGS-61436](https://issues.redhat.com/browse/OCPBUGS-61436), [OCPBUGS-61450](https://issues.redhat.com/browse/OCPBUGS-61450), [STOR-2600](https://issues.redhat.com/browse/STOR-2600): Bump OLM metadata to 4.21 [#430](https://github.com/openshift/csi-operator/pull/430)
* [OCPBUGS-62404](https://issues.redhat.com/browse/OCPBUGS-62404): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 [#438](https://github.com/openshift/csi-operator/pull/438)
* [STOR-1945](https://issues.redhat.com/browse/STOR-1945): STOR-2056: add Azure File NFS test manifest [#445](https://github.com/openshift/csi-operator/pull/445)
* [OCPBUGS-62374](https://issues.redhat.com/browse/OCPBUGS-62374): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 [#437](https://github.com/openshift/csi-operator/pull/437)
* [MULTIARCH-5554](https://issues.redhat.com/browse/MULTIARCH-5554): update smb-csi-driver-operator support to add ppc64le [#428](https://github.com/openshift/csi-operator/pull/428)
* [OCPBUGS-62427](https://issues.redhat.com/browse/OCPBUGS-62427): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 [#439](https://github.com/openshift/csi-operator/pull/439)
* [OCPBUGS-62348](https://issues.redhat.com/browse/OCPBUGS-62348): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 [#436](https://github.com/openshift/csi-operator/pull/436)
* [OCPBUGS-61955](https://issues.redhat.com/browse/OCPBUGS-61955): Add withCABundleDaemonSetHook() to AWS EFS operator [#433](https://github.com/openshift/csi-operator/pull/433)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): add runAsUser hook for operator deployment controller [#431](https://github.com/openshift/csi-operator/pull/431)
* NO-JIRA: Centralize injection of hosted-kubeconfig volume [#311](https://github.com/openshift/csi-operator/pull/311)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#429](https://github.com/openshift/csi-operator/pull/429)
* [OCPBUGS-54385](https://issues.redhat.com/browse/OCPBUGS-54385): Avoid informer resync [#432](https://github.com/openshift/csi-operator/pull/432)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#427](https://github.com/openshift/csi-operator/pull/427)
* NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 [#425](https://github.com/openshift/csi-operator/pull/425)
* NO-JIRA: azure-disk, azure-file sync code de-duplication [#303](https://github.com/openshift/csi-operator/pull/303)
* [Full changelog](https://github.com/openshift/csi-operator/compare/aaed46b82068ec95f4de716c9e7c09174cfee582...9816f9223f6ad5fdb000b2127a6154e03fd3c7a6)
### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/597b797d2d1b6aca5ba0ecfc3fcc23e888dcbe84)
* [OCPBUGS-62388](https://issues.redhat.com/browse/OCPBUGS-62388): Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 [#15](https://github.com/openshift/aws-karpenter-provider-aws/pull/15)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4...597b797d2d1b6aca5ba0ecfc3fcc23e888dcbe84)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/19e7b623429799c9c549690a1b5ab499844411f9)
* [OCPBUGS-62458](https://issues.redhat.com/browse/OCPBUGS-62458): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 [#31](https://github.com/openshift/aws-encryption-provider/pull/31)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...19e7b623429799c9c549690a1b5ab499844411f9)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/83e2b4afdd362051c1fb587f98f5ce3bc4f9c9ca)
* [OCPCLOUD-3072](https://issues.redhat.com/browse/OCPCLOUD-3072): Add support for AMD SEV-SNP [#141](https://github.com/openshift/machine-api-provider-aws/pull/141)
* [OCPBUGS-62395](https://issues.redhat.com/browse/OCPBUGS-62395): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 [#139](https://github.com/openshift/machine-api-provider-aws/pull/139)
* [OCPBUGS-38759](https://issues.redhat.com/browse/OCPBUGS-38759): client: re-use a single file for building the session instead of randomly named files [#140](https://github.com/openshift/machine-api-provider-aws/pull/140)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f5c125807016b8e0187654e53762532d8c2fe923...83e2b4afdd362051c1fb587f98f5ce3bc4f9c9ca)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/0da6737b69c6676d9f9bc8b3fcc7f46fbe521096)
* [CCO-664](https://issues.redhat.com/browse/CCO-664): merge upstream changes [#205](https://github.com/openshift/aws-pod-identity-webhook/pull/205)
* [OCPBUGS-62587](https://issues.redhat.com/browse/OCPBUGS-62587): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 [#206](https://github.com/openshift/aws-pod-identity-webhook/pull/206)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a2ecb1502280feb8e82c9cf6f3f77d62797e4445...0da6737b69c6676d9f9bc8b3fcc7f46fbe521096)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/aa6480c632b84371b8030b3f3f722d3d49601b02)
* [OCPCLOUD-3093](https://issues.redhat.com/browse/OCPCLOUD-3093): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (aa50e43) into main [#148](https://github.com/openshift/cloud-provider-azure/pull/148)
* [OCPBUGS-62487](https://issues.redhat.com/browse/OCPBUGS-62487): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/cloud-provider-azure/pull/151)
* [OCPBUGS-62392](https://issues.redhat.com/browse/OCPBUGS-62392): Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/cloud-provider-azure/pull/150)
* NO-JIRA: Update OWNERS [#149](https://github.com/openshift/cloud-provider-azure/pull/149)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d469d04ed645358d942af442fe21e2c2b44b9b2c...aa6480c632b84371b8030b3f3f722d3d49601b02)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/b7682c874dc67d46a8b430f841cf9cd2faaf184f)
* [OCPBUGS-62387](https://issues.redhat.com/browse/OCPBUGS-62387): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 [#352](https://github.com/openshift/cluster-api-provider-azure/pull/352)
* NO-JIRA: Update OWNERS [#351](https://github.com/openshift/cluster-api-provider-azure/pull/351)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...b7682c874dc67d46a8b430f841cf9cd2faaf184f)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/cbf9908da723b12e85dde1fbe6cc2dee59b97494)
* NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 [#110](https://github.com/openshift/azure-disk-csi-driver/pull/110)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/0b8e4d2202b0d17942fd745a5e1948f46bdd0350...cbf9908da723b12e85dde1fbe6cc2dee59b97494)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/66fcebfe023db88eac2a4b8d3cf2bed4b26665e3)
* [OCPBUGS-62547](https://issues.redhat.com/browse/OCPBUGS-62547): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 [#106](https://github.com/openshift/azure-file-csi-driver/pull/106)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45d505bc11fedadece5ae27147c9595877e39f2a...66fcebfe023db88eac2a4b8d3cf2bed4b26665e3)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/5a6516188d4ec33734e1a069da2acc7a469657dc)
* [OCPBUGS-56664](https://issues.redhat.com/browse/OCPBUGS-56664): Support DataDisks on Azure Stack Hub [#164](https://github.com/openshift/machine-api-provider-azure/pull/164)
* [OCPBUGS-62335](https://issues.redhat.com/browse/OCPBUGS-62335): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 [#163](https://github.com/openshift/machine-api-provider-azure/pull/163)
* NO-JIRA: Update OWNERS [#162](https://github.com/openshift/machine-api-provider-azure/pull/162)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4927cc2be4f629e367d2a79a310900c7cced3f6c...5a6516188d4ec33734e1a069da2acc7a469657dc)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8)
* [OCPBUGS-62368](https://issues.redhat.com/browse/OCPBUGS-62368): Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 [#13](https://github.com/openshift/azure-service-operator/pull/13)
* NO-JIRA: Update OWNERS [#12](https://github.com/openshift/azure-service-operator/pull/12)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/6e2f362623720f7b6d634fbc424fbc61e4b481ae...17e574628ee7ef8aa694cfc0ab5e5232b651fbf8)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/3f2a6e0d1ea68af321f9674b0b097939be7d2014)
* [OCPBUGS-62364](https://issues.redhat.com/browse/OCPBUGS-62364): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 [#39](https://github.com/openshift/azure-workload-identity/pull/39)
* [CCO-665](https://issues.redhat.com/browse/CCO-665): Merge upstream changes [#40](https://github.com/openshift/azure-workload-identity/pull/40)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/88b18175e46fe305486d172ec0b4e8471c55e30b...3f2a6e0d1ea68af321f9674b0b097939be7d2014)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/659138fef3abd4c71b0b01fa1279146745699a5a)
* [OCPBUGS-62565](https://issues.redhat.com/browse/OCPBUGS-62565): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 [#53](https://github.com/openshift/cluster-api-provider-metal3/pull/53)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/f782ba747ed353721c84ceb754ca8403f94adb6a...659138fef3abd4c71b0b01fa1279146745699a5a)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5684032e6958672f98d727fd69d6231eb545f0f2)
* no-jira: Prune unused terraform packages [#10051](https://github.com/openshift/installer/pull/10051)
* [OCPBUGS-63711](https://issues.redhat.com/browse/OCPBUGS-63711): Remove pending items on gcp no-op [#10049](https://github.com/openshift/installer/pull/10049)
* [CORS-4275](https://issues.redhat.com/browse/CORS-4275): Add Windows support [#10041](https://github.com/openshift/installer/pull/10041)
* [OCPBUGS-63632](https://issues.redhat.com/browse/OCPBUGS-63632): Update RHCOS 4.21 bootimage metadata to 9.6.20251023-0 [#10036](https://github.com/openshift/installer/pull/10036)
* [OCPBUGS-57126](https://issues.redhat.com/browse/OCPBUGS-57126): Add node-image-pull to the list of services to check their logs in /etc/motd [#9962](https://github.com/openshift/installer/pull/9962)
* [OCPBUGS-62136](https://issues.redhat.com/browse/OCPBUGS-62136): Eliminate duplicate logs on bootstrap/rendezvous host [#9957](https://github.com/openshift/installer/pull/9957)
* [OCPBUGS-60873](https://issues.redhat.com/browse/OCPBUGS-60873): Prevent duplicate noProxy when adding nodes [#10024](https://github.com/openshift/installer/pull/10024)
* [OCPBUGS-36360](https://issues.redhat.com/browse/OCPBUGS-36360): Support certificate authentication with CAPZ [#10019](https://github.com/openshift/installer/pull/10019)
* [OCPBUGS-62870](https://issues.redhat.com/browse/OCPBUGS-62870): Fix firewall checks [#10017](https://github.com/openshift/installer/pull/10017)
* [OCPBUGS-62824](https://issues.redhat.com/browse/OCPBUGS-62824), [OCPBUGS-62826](https://issues.redhat.com/browse/OCPBUGS-62826): Fix console info for interactive agent installer [#10003](https://github.com/openshift/installer/pull/10003)
* [OCPBUGS-62085](https://issues.redhat.com/browse/OCPBUGS-62085): Update the RHCOS 4.21 bootimage metadata [#9998](https://github.com/openshift/installer/pull/9998)
* [OKD-237](https://issues.redhat.com/browse/OKD-237): Remove fcos references [#9970](https://github.com/openshift/installer/pull/9970)
* [OSASINFRA-3915](https://issues.redhat.com/browse/OSASINFRA-3915): openstack: Start setting CredentialsMode [#9734](https://github.com/openshift/installer/pull/9734)
* NO-JIRA: shiftstack: Update OWNERS [#9994](https://github.com/openshift/installer/pull/9994)
* [OCPBUGS-62125](https://issues.redhat.com/browse/OCPBUGS-62125): baremetal: set baremetalhost architecture [#9987](https://github.com/openshift/installer/pull/9987)
* [OCPBUGS-60752](https://issues.redhat.com/browse/OCPBUGS-60752): Add MTU validation for networkConfig [#9919](https://github.com/openshift/installer/pull/9919)
* [OCPBUGS-62907](https://issues.redhat.com/browse/OCPBUGS-62907): AGENT-1269: Use agent-installer-ui image from release [#9995](https://github.com/openshift/installer/pull/9995)
* [OCPBUGS-62430](https://issues.redhat.com/browse/OCPBUGS-62430): None: Allow IPv6 Primary DualStack installs on platforms None and External [#9983](https://github.com/openshift/installer/pull/9983)
* [OCPBUGS-41567](https://issues.redhat.com/browse/OCPBUGS-41567): Clean up baremetal bootstrap systemd dependencies [#8986](https://github.com/openshift/installer/pull/8986)
* [OCPBUGS-62452](https://issues.redhat.com/browse/OCPBUGS-62452): Updating ose-installer-container image to be consistent with ART for 4.21 [#9980](https://github.com/openshift/installer/pull/9980)
* [OCPBUGS-62471](https://issues.redhat.com/browse/OCPBUGS-62471): Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 [#9981](https://github.com/openshift/installer/pull/9981)
* [OCPBUGS-60538](https://issues.redhat.com/browse/OCPBUGS-60538): Update assisted-service dependencies [#9956](https://github.com/openshift/installer/pull/9956)
* [CORS-4256](https://issues.redhat.com/browse/CORS-4256): Add PSC Endpoint to the installconfig [#9991](https://github.com/openshift/installer/pull/9991)
* [OCPBUGS-62514](https://issues.redhat.com/browse/OCPBUGS-62514): Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 [#9984](https://github.com/openshift/installer/pull/9984)
* [SPLAT-2511](https://issues.redhat.com/browse/SPLAT-2511): vSphere - do not block on vSphere >7.0.2, allow 9 [#9963](https://github.com/openshift/installer/pull/9963)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): allow toggling AWS client logging [#9976](https://github.com/openshift/installer/pull/9976)
* [OCPBUGS-62363](https://issues.redhat.com/browse/OCPBUGS-62363): Set agent-extract-tui start timeout [#9975](https://github.com/openshift/installer/pull/9975)
* no-jira: Revert "Merge pull request #9939 from barbacbd/CORS-4058-release-4.21" [#9974](https://github.com/openshift/installer/pull/9974)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): bump AWS SDK v2 max backoff duration to 300s [#9966](https://github.com/openshift/installer/pull/9966)
* [CORS-4107](https://issues.redhat.com/browse/CORS-4107): Update default release image to 4.21 [#9954](https://github.com/openshift/installer/pull/9954)
* [OCPBUGS-61514](https://issues.redhat.com/browse/OCPBUGS-61514): Add check for gcp firewall deletion permission [#9935](https://github.com/openshift/installer/pull/9935)
* [OCPBUGS-62293](https://issues.redhat.com/browse/OCPBUGS-62293): Set default for PrivateDNSZone Project ID [#9967](https://github.com/openshift/installer/pull/9967)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): disable rate limiter for AWS SDK v2 [#9958](https://github.com/openshift/installer/pull/9958)
* [OCPBUGS-61901](https://issues.redhat.com/browse/OCPBUGS-61901): Update explain for Publish [#9950](https://github.com/openshift/installer/pull/9950)
* no-jira: OWNERS: switch to joelcapitao [#9951](https://github.com/openshift/installer/pull/9951)
* [OCPBUGS-61935](https://issues.redhat.com/browse/OCPBUGS-61935): Wildcards not reliable for copying container files [#9948](https://github.com/openshift/installer/pull/9948)
* [CORS-4058](https://issues.redhat.com/browse/CORS-4058): Migrate AWS Destroy to SDK v2 [#9939](https://github.com/openshift/installer/pull/9939)
* [OCPBUGS-61353](https://issues.redhat.com/browse/OCPBUGS-61353): Generated Redacted nutanix config for operator [#9931](https://github.com/openshift/installer/pull/9931)
* [CORS-3550](https://issues.redhat.com/browse/CORS-3550): add ability to opt out of the sigstore signing requirement [#9940](https://github.com/openshift/installer/pull/9940)
* [CORS-4162](https://issues.redhat.com/browse/CORS-4162): Remove GCPClusterHostedDNSInstall featuregate [#9944](https://github.com/openshift/installer/pull/9944)
* [OCPBUGS-61490](https://issues.redhat.com/browse/OCPBUGS-61490): Update code to retrieve ICSP instead of ICP [#9933](https://github.com/openshift/installer/pull/9933)
* [MGMT-21586](https://issues.redhat.com/browse/MGMT-21586): Add an option in image-based installation to specify architecture [#9934](https://github.com/openshift/installer/pull/9934)
* [SPLAT-2430](https://issues.redhat.com/browse/SPLAT-2430): Update vSphere version validations for 7 EOL and VCF 9 [#9914](https://github.com/openshift/installer/pull/9914)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix shellcheck issues in bootstrap [#9929](https://github.com/openshift/installer/pull/9929)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix agent shellcheck issues [#9928](https://github.com/openshift/installer/pull/9928)
* no-jira: Fix logging and error messages [#9917](https://github.com/openshift/installer/pull/9917)
* [SPLAT-2465](https://issues.redhat.com/browse/SPLAT-2465): Changed LB VM creation to not be hard coded and use from variables.ps1 [#9926](https://github.com/openshift/installer/pull/9926)
* [OCPBUGS-61111](https://issues.redhat.com/browse/OCPBUGS-61111): Allow user to BYO private zone without specifying name [#9922](https://github.com/openshift/installer/pull/9922)
* [Full changelog](https://github.com/openshift/installer/compare/cbd9f67f1260b158294f7dd16a87863c139702cb...5684032e6958672f98d727fd69d6231eb545f0f2)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/4e6a729c5ac8fde8859db5830def262dfdee28ea)
* [OCPBUGS-62365](https://issues.redhat.com/browse/OCPBUGS-62365): Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 [#237](https://github.com/openshift/cluster-api-provider-baremetal/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb678fec5f7e08348b281341481f33a848204e50...4e6a729c5ac8fde8859db5830def262dfdee28ea)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/eaa8c4184d7fb1f2b2009e40ca372f84717e5b53)
* [OCPBUGS-61349](https://issues.redhat.com/browse/OCPBUGS-61349), [OCPBUGS-62112](https://issues.redhat.com/browse/OCPBUGS-62112): Merge upstream [#432](https://github.com/openshift/baremetal-operator/pull/432)
* [OCPBUGS-62460](https://issues.redhat.com/browse/OCPBUGS-62460): Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 [#433](https://github.com/openshift/baremetal-operator/pull/433)
* NO-ISSUE: Merge upstream [#430](https://github.com/openshift/baremetal-operator/pull/430)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...eaa8c4184d7fb1f2b2009e40ca372f84717e5b53)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/81213da2bc0b8265d279ad3f3004fe07ca958ba7)
* [OCPBUGS-62581](https://issues.redhat.com/browse/OCPBUGS-62581): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 [#370](https://github.com/openshift/baremetal-runtimecfg/pull/370)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...81213da2bc0b8265d279ad3f3004fe07ca958ba7)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9ae657dff111d36d75300c4823b7aae4b504c7e4)
* [OCPBUGS-63683](https://issues.redhat.com/browse/OCPBUGS-63683): Replace IPv4-mapped IPv6 addresses with valid IPv6 in tests [#2123](https://github.com/openshift/oc/pull/2123)
* NO-JIRA: Add pr-review Claude command and effective-go skills [#2120](https://github.com/openshift/oc/pull/2120)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend: Drop obsolete precheckEnabled knob [#2113](https://github.com/openshift/oc/pull/2113)
* [OCPBUGS-62875](https://issues.redhat.com/browse/OCPBUGS-62875): Pass dry-run option to all create API calls [#2117](https://github.com/openshift/oc/pull/2117)
* [CNTRLPLANE-1676](https://issues.redhat.com/browse/CNTRLPLANE-1676): Update k8s dependencies to 1.34 [#2118](https://github.com/openshift/oc/pull/2118)
* NO-JIRA: Migrate to aws-sdk-go-v2 from archived aws-sdk-go [#2114](https://github.com/openshift/oc/pull/2114)
* NO-JIRA: `adm upgrade status`: capture testcase for OCPBUGS-60768 [#2081](https://github.com/openshift/oc/pull/2081)
* [OCPBUGS-62445](https://issues.redhat.com/browse/OCPBUGS-62445): prevent crash when rootDeviceHints format is invalid [#2109](https://github.com/openshift/oc/pull/2109)
* NO-JIRA: Update shellescape and sspi to newer versions [#2116](https://github.com/openshift/oc/pull/2116)
* NO-JIRA: Remove myself from update approvers, add Hongkai [#2112](https://github.com/openshift/oc/pull/2112)
* [OCPBUGS-62550](https://issues.redhat.com/browse/OCPBUGS-62550): Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 [#2111](https://github.com/openshift/oc/pull/2111)
* [OCPBUGS-61491](https://issues.redhat.com/browse/OCPBUGS-61491): Update code to retrieve ICSP instead of ICP [#2095](https://github.com/openshift/oc/pull/2095)
* [OCPBUGS-62362](https://issues.redhat.com/browse/OCPBUGS-62362): Updating ose-tools-container image to be consistent with ART for 4.21 [#2108](https://github.com/openshift/oc/pull/2108)
* [OCPBUGS-62548](https://issues.redhat.com/browse/OCPBUGS-62548): Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 [#2110](https://github.com/openshift/oc/pull/2110)
* NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 [#2107](https://github.com/openshift/oc/pull/2107)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): oc adm must-gather: Add support for context [#2105](https://github.com/openshift/oc/pull/2105)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): pkg/.../inspect: Add support for context.Context [#2100](https://github.com/openshift/oc/pull/2100)
* [WRKLDS-593](https://issues.redhat.com/browse/WRKLDS-593): oc adm must-gather: Improve cleanup order [#2080](https://github.com/openshift/oc/pull/2080)
* NO-JIRA: Add tchap as reviewer in oc [#2099](https://github.com/openshift/oc/pull/2099)
* NO-JIRA: oc adm groups sync: Use client.Unbind [#2094](https://github.com/openshift/oc/pull/2094)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2088](https://github.com/openshift/oc/pull/2088)
* [OCPBUGS-52936](https://issues.redhat.com/browse/OCPBUGS-52936): oc adm policy: Only initialize UserClient if built-in OAuth is enabled [#2090](https://github.com/openshift/oc/pull/2090)
* [OCPBUGS-61311](https://issues.redhat.com/browse/OCPBUGS-61311): Introduce auto-open-browser flag for external OIDC issuer login [#2089](https://github.com/openshift/oc/pull/2089)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example [#2093](https://github.com/openshift/oc/pull/2093)
* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): oc adm must-gather: Wrap gather in a session [#2087](https://github.com/openshift/oc/pull/2087)
* NO-JIRA: Add some warnings into excluded list [#2092](https://github.com/openshift/oc/pull/2092)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Rely on overall available disk space of the mounted volume [#2084](https://github.com/openshift/oc/pull/2084)
* [Full changelog](https://github.com/openshift/oc/compare/7f1d6f88cb0c8ed5c877fc0ae2bd99298c6339f2...9ae657dff111d36d75300c4823b7aae4b504c7e4)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/650842fbd764695c8ece96faa67c22b0f20f8912)
* NO-JIRA: docs: token migration to use next-bound-service-account-signing-key [#932](https://github.com/openshift/cloud-credential-operator/pull/932)
* [OCPBUGS-63541](https://issues.redhat.com/browse/OCPBUGS-63541): ccoctl: add public-key-file flag to create-all [#933](https://github.com/openshift/cloud-credential-operator/pull/933)
* [OCPBUGS-63561](https://issues.redhat.com/browse/OCPBUGS-63561): ccoctl: use pagination when listing resources in aws [#935](https://github.com/openshift/cloud-credential-operator/pull/935)
* NO-JIRA: Update output directory when extracting issuer URL [#925](https://github.com/openshift/cloud-credential-operator/pull/925)
* [CCO-661](https://issues.redhat.com/browse/CCO-661): Update go modules [#930](https://github.com/openshift/cloud-credential-operator/pull/930)
* [OCPBUGS-63238](https://issues.redhat.com/browse/OCPBUGS-63238): Ensure ccoctl aws commands use their own region option [#931](https://github.com/openshift/cloud-credential-operator/pull/931)
* [CCO-709](https://issues.redhat.com/browse/CCO-709): Upgrade Kubernetes v1.34 [#929](https://github.com/openshift/cloud-credential-operator/pull/929)
* [CCO-644](https://issues.redhat.com/browse/CCO-644): Upgrade msgraph-sdk-go v1.86.0 [#924](https://github.com/openshift/cloud-credential-operator/pull/924)
* [CCO-435](https://issues.redhat.com/browse/CCO-435): Migrate away from deprecated ioutil package. [#920](https://github.com/openshift/cloud-credential-operator/pull/920)
* [OCPBUGS-62495](https://issues.redhat.com/browse/OCPBUGS-62495): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 [#923](https://github.com/openshift/cloud-credential-operator/pull/923)
* [OCPBUGS-62184](https://issues.redhat.com/browse/OCPBUGS-62184): aws: remove endpoint overrides for s3 and cf clients [#921](https://github.com/openshift/cloud-credential-operator/pull/921)
* [CCO-692](https://issues.redhat.com/browse/CCO-692): Migrate to aws-ask-go-v2 [#905](https://github.com/openshift/cloud-credential-operator/pull/905)
* [OCPBUGS-61475](https://issues.redhat.com/browse/OCPBUGS-61475): set cloud-credential-operator as default-container [#914](https://github.com/openshift/cloud-credential-operator/pull/914)
* [OCPBUGS-60078](https://issues.redhat.com/browse/OCPBUGS-60078): ccoctl: aws to use proper issuer url on subsequent runs [#904](https://github.com/openshift/cloud-credential-operator/pull/904)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d391c0b339c48f49711ccff9ebac62039bf5c6f7...650842fbd764695c8ece96faa67c22b0f20f8912)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/83847568457908f24554c15d5bb5cc4c70dbcdb5)
* [OCPBUGS-60806](https://issues.redhat.com/browse/OCPBUGS-60806): Change the capacity struct from int to ptrOfInt [#183](https://github.com/openshift/cloud-network-config-controller/pull/183)
* [OCPBUGS-55625](https://issues.redhat.com/browse/OCPBUGS-55625): Retrieve subnet from vnet subnets.addressPrefixes field [#179](https://github.com/openshift/cloud-network-config-controller/pull/179)
* [OCPBUGS-62437](https://issues.redhat.com/browse/OCPBUGS-62437): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 [#181](https://github.com/openshift/cloud-network-config-controller/pull/181)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/467e50feff5a56afbf9ccefc025781c9ccff8eca...83847568457908f24554c15d5bb5cc4c70dbcdb5)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a0db9c2c476853177189a456995a647515ea8b88)
* [OCPBUGS-62941](https://issues.redhat.com/browse/OCPBUGS-62941): (bugfix): configure status controller to remove unset versions [#798](https://github.com/openshift/cluster-authentication-operator/pull/798)
* [OCPBUGS-62447](https://issues.redhat.com/browse/OCPBUGS-62447): Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 [#793](https://github.com/openshift/cluster-authentication-operator/pull/793)
* [API-1835](https://issues.redhat.com/browse/API-1835): test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController [#790](https://github.com/openshift/cluster-authentication-operator/pull/790)
* NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression [#797](https://github.com/openshift/cluster-authentication-operator/pull/797)
* [API-1835](https://issues.redhat.com/browse/API-1835): fix integration tests [#795](https://github.com/openshift/cluster-authentication-operator/pull/795)
* [OCPBUGS-57444](https://issues.redhat.com/browse/OCPBUGS-57444): set appropriate rolling update settings [#789](https://github.com/openshift/cluster-authentication-operator/pull/789)
* NO-JIRA: om: fix integration testing [#788](https://github.com/openshift/cluster-authentication-operator/pull/788)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/11e57aa35590d3481288e09003c9109e0bfc62ce...a0db9c2c476853177189a456995a647515ea8b88)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/31b44d965022987eb32dd46fe9cfc4c111ecec50)
* [OCPBUGS-60790](https://issues.redhat.com/browse/OCPBUGS-60790): refactor cloud provider options [#380](https://github.com/openshift/kubernetes-autoscaler/pull/380)
* [AUTOSCALE-335](https://issues.redhat.com/browse/AUTOSCALE-335), [AUTOSCALE-336](https://issues.redhat.com/browse/AUTOSCALE-336), [OCPBUGS-62383](https://issues.redhat.com/browse/OCPBUGS-62383), [OCPBUGS-62477](https://issues.redhat.com/browse/OCPBUGS-62477): 1.34.0 upstream rebase [#386](https://github.com/openshift/kubernetes-autoscaler/pull/386)
* [OCPBUGS-62383](https://issues.redhat.com/browse/OCPBUGS-62383): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 [#383](https://github.com/openshift/kubernetes-autoscaler/pull/383)
* [OCPBUGS-62477](https://issues.redhat.com/browse/OCPBUGS-62477): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 [#384](https://github.com/openshift/kubernetes-autoscaler/pull/384)
* NO-JIRA: Remove OWNERS automation preamble [#382](https://github.com/openshift/kubernetes-autoscaler/pull/382)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...31b44d965022987eb32dd46fe9cfc4c111ecec50)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/eb990ea483a659b4ced825848e3c58564ce67213)
* [AUTOSCALE-336](https://issues.redhat.com/browse/AUTOSCALE-336): Prepare for 4.21 [#355](https://github.com/openshift/cluster-autoscaler-operator/pull/355)
* [OCPBUGS-62589](https://issues.redhat.com/browse/OCPBUGS-62589): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 [#354](https://github.com/openshift/cluster-autoscaler-operator/pull/354)
* [AUTOSCALE-384](https://issues.redhat.com/browse/AUTOSCALE-384): Add "cordon node before terminating" option to cluster autoscaler resource [#356](https://github.com/openshift/cluster-autoscaler-operator/pull/356)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/147e5a7ff20b46ade7dd932b47e06ca82729f5e8...eb990ea483a659b4ced825848e3c58564ce67213)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7a27819c8fed53043012f7c3a63eaecc59b8d65f)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Enable runtime extraction of aarch64 images [#508](https://github.com/openshift/cluster-baremetal-operator/pull/508)
* [OCPBUGS-62577](https://issues.redhat.com/browse/OCPBUGS-62577): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 [#507](https://github.com/openshift/cluster-baremetal-operator/pull/507)
* [OCPBUGS-60498](https://issues.redhat.com/browse/OCPBUGS-60498): Always have a service for ironic-api port [#510](https://github.com/openshift/cluster-baremetal-operator/pull/510)
* [METAL-1449](https://issues.redhat.com/browse/METAL-1449): optionally deploy IPE [#490](https://github.com/openshift/cluster-baremetal-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb...7a27819c8fed53043012f7c3a63eaecc59b8d65f)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/dc0d4a5cdaf8a7477cab584208dc99352f46efe2)
* [OCPBUGS-62558](https://issues.redhat.com/browse/OCPBUGS-62558): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 [#120](https://github.com/openshift/cluster-bootstrap/pull/120)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/74abc555111bac56a67957ef517ef086e4643c50...dc0d4a5cdaf8a7477cab584208dc99352f46efe2)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/3afd7503745f097c04a2884f8e53563353b9f11e)
* [OCPBUGS-62579](https://issues.redhat.com/browse/OCPBUGS-62579): Updating ose-cluster-api-container image to be consistent with ART for 4.21 [#249](https://github.com/openshift/cluster-api/pull/249)
* NO-JIRA: Update OWNERS [#246](https://github.com/openshift/cluster-api/pull/246)
* [OCPBUGS-57605](https://issues.redhat.com/browse/OCPBUGS-57605): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#242](https://github.com/openshift/cluster-api/pull/242)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...3afd7503745f097c04a2884f8e53563353b9f11e)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ef85dc990f42ef2b02c40c1b5ec0b6ea95b635ab)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): pkg/util/sync: fix ignoring the Cluster API conversion-data annotation [#403](https://github.com/openshift/cluster-capi-operator/pull/403)
* NO-JIRA: machinesync: improve createOrUpdateCAPIMachine and implement unit tests [#396](https://github.com/openshift/cluster-capi-operator/pull/396)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): sync: allow Cluster API v1beta2 version for ownerrefs and set Cluster v1beta2 ControlPlaneInitialized [#391](https://github.com/openshift/cluster-capi-operator/pull/391)
* [OCPCLOUD-2636](https://issues.redhat.com/browse/OCPCLOUD-2636): Warn users when attempting to change Authoritative API but Synchronized condition is false [#398](https://github.com/openshift/cluster-capi-operator/pull/398)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): machine migration round trip test [#366](https://github.com/openshift/cluster-capi-operator/pull/366)
* [OCPCLOUD-2996](https://issues.redhat.com/browse/OCPCLOUD-2996): Prevent changing .spec.authoritativeAPI on MAPI when Phase Provisioning or is being deleted [#388](https://github.com/openshift/cluster-capi-operator/pull/388)
* [OCPCLOUD-2999](https://issues.redhat.com/browse/OCPCLOUD-2999): AWSMachine status conversion and syncing [#372](https://github.com/openshift/cluster-capi-operator/pull/372)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): manifests-gen: re-enable conversion, validating and mutating webhook configurations [#389](https://github.com/openshift/cluster-capi-operator/pull/389)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): Fix v1beta2 condition setting [#385](https://github.com/openshift/cluster-capi-operator/pull/385)
* [OCPCLOUD-2709](https://issues.redhat.com/browse/OCPCLOUD-2709): Implement MAPI2CAPI conversion of loadbalancers [#348](https://github.com/openshift/cluster-capi-operator/pull/348)
* [OCPBUGS-62570](https://issues.redhat.com/browse/OCPBUGS-62570): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 [#357](https://github.com/openshift/cluster-capi-operator/pull/357)
* [OCPCLOUD-2995](https://issues.redhat.com/browse/OCPCLOUD-2995): Machine status conversion and syncing [#365](https://github.com/openshift/cluster-capi-operator/pull/365)
* NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works [#380](https://github.com/openshift/cluster-capi-operator/pull/380)
* [OCPCLOUD-2641](https://issues.redhat.com/browse/OCPCLOUD-2641): Validate creation of Machine API Machines [#368](https://github.com/openshift/cluster-capi-operator/pull/368)
* [OCPBUGS-62620](https://issues.redhat.com/browse/OCPBUGS-62620): kubeconfig controller: do not error on token secret not yet populated [#373](https://github.com/openshift/cluster-capi-operator/pull/373)
* NO-JIRA: lint: add aliases for machine api's and controller-runtime log [#367](https://github.com/openshift/cluster-capi-operator/pull/367)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): refactor: split machine migration testing into multiple files [#364](https://github.com/openshift/cluster-capi-operator/pull/364)
* NO-JIRA: machine_sync: assorted fixes [#370](https://github.com/openshift/cluster-capi-operator/pull/370)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) [#359](https://github.com/openshift/cluster-capi-operator/pull/359)
* NO-JIRA: Update OWNERS [#353](https://github.com/openshift/cluster-capi-operator/pull/353)
* [OCPCLOUD-3162](https://issues.redhat.com/browse/OCPCLOUD-3162): conversion: do not set ignition version on AWSMachine [#363](https://github.com/openshift/cluster-capi-operator/pull/363)
* NO-JIRA: use go workspaces [#358](https://github.com/openshift/cluster-capi-operator/pull/358)
* [OCPCLOUD-2714](https://issues.redhat.com/browse/OCPCLOUD-2714): Add VAPs to prevent setting of CAPI fields that are not supported by MAPI [#334](https://github.com/openshift/cluster-capi-operator/pull/334)
* No-JIRA: increased timeout [#354](https://github.com/openshift/cluster-capi-operator/pull/354)
* NO-JIRA: Adds AGENTS.md [#349](https://github.com/openshift/cluster-capi-operator/pull/349)
* [OCPBUGS-54703](https://issues.redhat.com/browse/OCPBUGS-54703): Fix conversion of Machines without MachineSet [#351](https://github.com/openshift/cluster-capi-operator/pull/351)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for deleting machine [#345](https://github.com/openshift/cluster-capi-operator/pull/345)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/acf331446369b5307b6b435af14daabdca9fafbc...ef85dc990f42ef2b02c40c1b5ec0b6ea95b635ab)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/7cb9d6a0f6bf28aad902a6adf019cedf0bc7bbb3)
* [SPLAT-2297](https://issues.redhat.com/browse/SPLAT-2297): Added new cmd flag to launch of vSphere CCM [#394](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/394)
* [OCPBUGS-62585](https://issues.redhat.com/browse/OCPBUGS-62585): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 [#414](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/414)
* [OCPBUGS-51305](https://issues.redhat.com/browse/OCPBUGS-51305): ccm: disable unused secure-serving port and webhook [#415](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/415)
* [OCPBUGS-60385](https://issues.redhat.com/browse/OCPBUGS-60385): Add Microsoft.Network/publicIPAddresses/delete permission [#416](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/416)
* NO-JIRA: Update OWNERS [#413](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/413)
* [OCPBUGS-54490](https://issues.redhat.com/browse/OCPBUGS-54490): Add Azure permissions for Private Link Service operations [#417](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/417)
* [SPLAT-2341](https://issues.redhat.com/browse/SPLAT-2341): Add feature gate support in the cloud-config sync controller [#400](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e355ad389d1d09be1a83f024f54b15e844982d0a...7cb9d6a0f6bf28aad902a6adf019cedf0bc7bbb3)
### [cluster-config-api](https://github.com/openshift/api/tree/1b67472a2ba8e5bfd3614c272ce6a090b49498e4)
* [OCPBUGS-62987](https://issues.redhat.com/browse/OCPBUGS-62987): Move DynamicConfigurationManager back to DevPreview [#2552](https://github.com/openshift/api/pull/2552)
* envtest-releases: add v1.34.1 to index [#2553](https://github.com/openshift/api/pull/2553)
* [MCO-1941](https://issues.redhat.com/browse/MCO-1941): Add OSStream FeatureGate [#2549](https://github.com/openshift/api/pull/2549)
* hack: switch to `/usr/bin/env bash` [#2551](https://github.com/openshift/api/pull/2551)
* [CORS-4157](https://issues.redhat.com/browse/CORS-4157): AWS, Azure: Add IPFamily to the PlatformStatus within Infra CR [#2499](https://github.com/openshift/api/pull/2499)
* codegen: Improve performance of package loading [#2543](https://github.com/openshift/api/pull/2543)
* Fix use of API_GROUP_VERSIONS running codegen [#2530](https://github.com/openshift/api/pull/2530)
* [STOR-2627](https://issues.redhat.com/browse/STOR-2627): Add MutableCSINodeAllocatableCount to Dev- and TechPreview [#2502](https://github.com/openshift/api/pull/2502)
* Switch to invoking codegen once in general updates [#2540](https://github.com/openshift/api/pull/2540)
* `route`: improve `.spec.tls.termination` doc [#2532](https://github.com/openshift/api/pull/2532)
* [OPRUN-4156](https://issues.redhat.com/browse/OPRUN-4156): Promote OLMv1 Webhook support to GA [#2491](https://github.com/openshift/api/pull/2491)
* [OCPBUGS-55192](https://issues.redhat.com/browse/OCPBUGS-55192): Add IngressController .spec.domain validation [#2308](https://github.com/openshift/api/pull/2308)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): config/v1/types_cluster_version: Tighten force and rollback warnings [#2539](https://github.com/openshift/api/pull/2539)
* [CORENET-6005](https://issues.redhat.com/browse/CORENET-6005): network, virt: graduate preconfigured UDN addresses feature gate [#2496](https://github.com/openshift/api/pull/2496)
* [MCO-1861](https://issues.redhat.com/browse/MCO-1861): Promote ManagedBootImagesvSphere feature gate to default [#2529](https://github.com/openshift/api/pull/2529)
* [MCO-1873](https://issues.redhat.com/browse/MCO-1873): promote ManagedBootImagesAzure to default [#2526](https://github.com/openshift/api/pull/2526)
* [OCPBUGS-60457](https://issues.redhat.com/browse/OCPBUGS-60457): payload-command: remove authentication CR from hypershift payload [#2523](https://github.com/openshift/api/pull/2523)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#2427](https://github.com/openshift/api/pull/2427)
* [CNTRLPLANE-1576](https://issues.redhat.com/browse/CNTRLPLANE-1576): add event-ttl configuration to kube-apiserver [#2520](https://github.com/openshift/api/pull/2520)
* [CNTRLPLANE-1614](https://issues.redhat.com/browse/CNTRLPLANE-1614): add event-ttl feature gate [#2525](https://github.com/openshift/api/pull/2525)
* : promote InsightConfigAPI and OnDemandDataGather to v1 [#2448](https://github.com/openshift/api/pull/2448)
* Switch to slices stable sort on manifest merging [#2524](https://github.com/openshift/api/pull/2524)
* Use separate serialization linting config for Machine API provider types [#2522](https://github.com/openshift/api/pull/2522)
* Add initial AI api-review configuration [#2489](https://github.com/openshift/api/pull/2489)
* Support AMD SEV-SNP on AWS [#2424](https://github.com/openshift/api/pull/2424)
* [MCO-1805](https://issues.redhat.com/browse/MCO-1805): MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API [#2396](https://github.com/openshift/api/pull/2396)
* [OCPBUGS-62482](https://issues.redhat.com/browse/OCPBUGS-62482): Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 [#2513](https://github.com/openshift/api/pull/2513)
* [OCPBUGS-55649](https://issues.redhat.com/browse/OCPBUGS-55649): Remove SetEIPForNLBIngressController feature gate [#2501](https://github.com/openshift/api/pull/2501)
* [OCPBUGS-61382](https://issues.redhat.com/browse/OCPBUGS-61382), [STOR-2533](https://issues.redhat.com/browse/STOR-2533): move VolumeAttributesClass to GA [#2471](https://github.com/openshift/api/pull/2471)
* Promote BYO OIDC features [#2454](https://github.com/openshift/api/pull/2454)
* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#2400](https://github.com/openshift/api/pull/2400)
* [OCPBUGS-62068](https://issues.redhat.com/browse/OCPBUGS-62068): NodeSwap Feature Gate usage to be removed [#2494](https://github.com/openshift/api/pull/2494)
* [OCPBUGS-59939](https://issues.redhat.com/browse/OCPBUGS-59939): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2507](https://github.com/openshift/api/pull/2507)
* [OCPBUGS-59940](https://issues.redhat.com/browse/OCPBUGS-59940): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2506](https://github.com/openshift/api/pull/2506)
* (bugfix): crdify generator returns aggregated error when validations fail [#2493](https://github.com/openshift/api/pull/2493)
* [MCO-1669](https://issues.redhat.com/browse/MCO-1669): add BootImageSkewEnforcement API [#2357](https://github.com/openshift/api/pull/2357)
* remove unused feature gate InsightsConfigAPI [#2474](https://github.com/openshift/api/pull/2474)
* [OCPBUGS-61689](https://issues.redhat.com/browse/OCPBUGS-61689): Add 'AGE' print column to `MachineConfigNode` object [#2476](https://github.com/openshift/api/pull/2476)
* NO-JIRA: tooling: add crdify generator to run crdify against CRD changes [#2472](https://github.com/openshift/api/pull/2472)
* Update controller-tools to latest on fork [#2478](https://github.com/openshift/api/pull/2478)
* Monitoring API: Add Metric server config [#2322](https://github.com/openshift/api/pull/2322)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Add CBOR feature gate [#2235](https://github.com/openshift/api/pull/2235)
* NO-JIRA: New rules about CO's conditions [#2469](https://github.com/openshift/api/pull/2469)
* apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats [#2467](https://github.com/openshift/api/pull/2467)
* [SPLAT-2482](https://issues.redhat.com/browse/SPLAT-2482): create new featuregate for ClusterAPIMachineManagementVSphere [#2466](https://github.com/openshift/api/pull/2466)
* [MCO-1675](https://issues.redhat.com/browse/MCO-1675): Update API for Status Reporting needs (REBASED) [#2442](https://github.com/openshift/api/pull/2442)
* [CORS-3993](https://issues.redhat.com/browse/CORS-3993): Promote GCPClusterHostedDNS to Default [#2300](https://github.com/openshift/api/pull/2300)
* Adjust typos [#2243](https://github.com/openshift/api/pull/2243)
* Update schema checker to avoid incorrect new required fields checks [#2470](https://github.com/openshift/api/pull/2470)
* config/v1/cluster_operator improve documentation [#2344](https://github.com/openshift/api/pull/2344)
* Update NodeSwap with owner and doc blurb. [#2053](https://github.com/openshift/api/pull/2053)
* [CORS-4136](https://issues.redhat.com/browse/CORS-4136): Add Feature gates for AWS, Azure and GCP Dual Stack support [#2430](https://github.com/openshift/api/pull/2430)
* [Full changelog](https://github.com/openshift/api/compare/41627d81e9c18fbcc3f7ff6de2ba50e0b98435c4...1b67472a2ba8e5bfd3614c272ce6a090b49498e4)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/347bebcc14f9b512b343c90b0414e6ed4c2d6b9d)
* [OCPBUGS-62330](https://issues.redhat.com/browse/OCPBUGS-62330): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 [#450](https://github.com/openshift/cluster-config-operator/pull/450)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/657754e2beaed6295ff28bb0f7813cb1c9ce35b2...347bebcc14f9b512b343c90b0414e6ed4c2d6b9d)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/344babe6a957f1606c677b009939302659264dfb)
* [OCPCLOUD-3084](https://issues.redhat.com/browse/OCPCLOUD-3084): Bump k8s dependencies to 1.34 [#371](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/371)
* [OCPBUGS-62588](https://issues.redhat.com/browse/OCPBUGS-62588): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 [#369](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/369)
* NO-JIRA: Update OWNERS [#367](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/367)
* [MCO-1866](https://issues.redhat.com/browse/MCO-1866): Ignore boot image differences while reconciling Provider Configs [#368](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/0bbafe24ade564bc62554251f36de90d524abcde...344babe6a957f1606c677b009939302659264dfb)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/b022cf72ba3b4e982626d6d0b80bd53064bbe6ee)
* Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 [#245](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/245)
* [OCPBUGS-62247](https://issues.redhat.com/browse/OCPBUGS-62247): add all-egress label to deployments on HCP and IBM [#243](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/019abe0c7671962829eb91269e1d76916966320e...b022cf72ba3b4e982626d6d0b80bd53064bbe6ee)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/2ec8a3de79d73760abbccdbcbbf9951fc93097cd)
* [NE-2138](https://issues.redhat.com/browse/NE-2138): Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 [#448](https://github.com/openshift/cluster-dns-operator/pull/448)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#449](https://github.com/openshift/cluster-dns-operator/pull/449)
* NO-JIRA: Add davidesalerno to OWNERS [#447](https://github.com/openshift/cluster-dns-operator/pull/447)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/82578923164636746e0d74d594ab32d83a660c0b...2ec8a3de79d73760abbccdbcbbf9951fc93097cd)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/18a8bcc73fa65bea263b549c35705337191abf15)
* [OCPBUGS-63543](https://issues.redhat.com/browse/OCPBUGS-63543): fix: update redfish url validation [#1504](https://github.com/openshift/cluster-etcd-operator/pull/1504)
* [OCPBUGS-63240](https://issues.redhat.com/browse/OCPBUGS-63240): [TNF] Fix job controller startup reliability with retry and degraded status [#1500](https://github.com/openshift/cluster-etcd-operator/pull/1500)
* [OCPEDGE-1885](https://issues.redhat.com/browse/OCPEDGE-1885), [OCPEDGE-2088](https://issues.redhat.com/browse/OCPEDGE-2088): Updated state transitions & tests for TNF setup job [#1481](https://github.com/openshift/cluster-etcd-operator/pull/1481)
* [OCPBUGS-60273](https://issues.redhat.com/browse/OCPBUGS-60273): Ensure revision.json persists on ungraceful shutdown [#1494](https://github.com/openshift/cluster-etcd-operator/pull/1494)
* NO-JIRA: use scrapeClass for service monitors [#1497](https://github.com/openshift/cluster-etcd-operator/pull/1497)
* NO-JIRA: add runbook urls for alerting rules [#1496](https://github.com/openshift/cluster-etcd-operator/pull/1496)
* NO-JIRA: feat: update the ip parsing for the nodes [#1479](https://github.com/openshift/cluster-etcd-operator/pull/1479)
* [OCPEDGE-2183](https://issues.redhat.com/browse/OCPEDGE-2183): Updating Quorum detection logic to absolve TNF of quorum loss reports. [#1483](https://github.com/openshift/cluster-etcd-operator/pull/1483)
* NO-JIRA: remove etcd-backup-server from static pod lists [#1492](https://github.com/openshift/cluster-etcd-operator/pull/1492)
* [CNTRLPLANE-1315](https://issues.redhat.com/browse/CNTRLPLANE-1315): Add OpenShift Tests Extension (OTE) for cluster-etcd-operator [#1488](https://github.com/openshift/cluster-etcd-operator/pull/1488)
* [OCPBUGS-62518](https://issues.redhat.com/browse/OCPBUGS-62518): Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 [#1489](https://github.com/openshift/cluster-etcd-operator/pull/1489)
* NO-JIRA: Use secure cipher suites [#1477](https://github.com/openshift/cluster-etcd-operator/pull/1477)
* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): configure probes based on quota size [#1460](https://github.com/openshift/cluster-etcd-operator/pull/1460)
* NO-JIRA: Add priority field to prevent early shutdown [#1476](https://github.com/openshift/cluster-etcd-operator/pull/1476)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0d7067cb286ad4efad5cad9bcff17656ef9827a3...18a8bcc73fa65bea263b549c35705337191abf15)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/2212ae9c5d1b1dfeaf2036677428968a031335f5)
* [OCPBUGS-62573](https://issues.redhat.com/browse/OCPBUGS-62573): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 [#1256](https://github.com/openshift/cluster-image-registry-operator/pull/1256)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b04c7c121851704973a94a50e42af1425045899c...2212ae9c5d1b1dfeaf2036677428968a031335f5)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0cac97af560a68a5f5c0390a529726eb43556d51)
* [NE-1334](https://issues.redhat.com/browse/NE-1334): Enhancement to add brew and stage secrets for pre-release image testing [#1291](https://github.com/openshift/cluster-ingress-operator/pull/1291)
* [OCPBUGS-43919](https://issues.redhat.com/browse/OCPBUGS-43919): desiredWildcardDNSRecord: Check for nil LB field [#1189](https://github.com/openshift/cluster-ingress-operator/pull/1189)
* [OCPBUGS-62400](https://issues.redhat.com/browse/OCPBUGS-62400): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 [#1286](https://github.com/openshift/cluster-ingress-operator/pull/1286)
* [NE-1334](https://issues.redhat.com/browse/NE-1334): Script to install ossm pre-release operator and run GWAPI e2e tests [#1283](https://github.com/openshift/cluster-ingress-operator/pull/1283)
* [OCPBUGS-55649](https://issues.redhat.com/browse/OCPBUGS-55649): Remove SetEIPForNLBIngressController feature gate [#1280](https://github.com/openshift/cluster-ingress-operator/pull/1280)
* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#1242](https://github.com/openshift/cluster-ingress-operator/pull/1242)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#1281](https://github.com/openshift/cluster-ingress-operator/pull/1281)
* [NE-2139](https://issues.redhat.com/browse/NE-2139): Kubernetes to 1.33.4 and controller-runtime to 0.21 [#1279](https://github.com/openshift/cluster-ingress-operator/pull/1279)
* NO-JIRA: Add davidesalerno to OWNERS [#1278](https://github.com/openshift/cluster-ingress-operator/pull/1278)
* [OCPBUGS-60859](https://issues.redhat.com/browse/OCPBUGS-60859): Fix logic on gatewayapi test cleanup [#1273](https://github.com/openshift/cluster-ingress-operator/pull/1273)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...0cac97af560a68a5f5c0390a529726eb43556d51)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/151f2be4e47cc3826b266b16066829f3f4e16a98)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): scc: Grant authenticated users use of restricted-v3 [#1944](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1944)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespace for the operator [#1934](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1934)
* [CNTRLPLANE-1616](https://issues.redhat.com/browse/CNTRLPLANE-1616): add event-ttl config observer [#1938](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1938)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): scc: restricted-v3: Fix runAsUser range [#1947](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1947)
* NO-JIRA: Update the deprecated API usage alerts for 1.34 [#1946](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1946)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#1939](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1939)
* [OCPNODE-3758](https://issues.redhat.com/browse/OCPNODE-3758): alpha/beta apis for DRA should not be enabled in 1.34 [#1932](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1932)
* [OCPBUGS-60045](https://issues.redhat.com/browse/OCPBUGS-60045): Bump library-go to latest master [#1928](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1928)
* [OCPBUGS-62450](https://issues.redhat.com/browse/OCPBUGS-62450): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 [#1931](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1931)
* NO-JIRA: Add priority field to prevent early shutdown [#1915](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1915)
* NO-ISSUE: Use scrapeClass for service monitors [#1930](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1930)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 [#1927](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1927)
* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): move alerting rules from CMO over [#1922](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1922)
* Re-apply "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1910](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1910)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 [#1921](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1921)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cae310f190fccb3f0fa613de50c484afb039c098...151f2be4e47cc3826b266b16066829f3f4e16a98)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/8f90c01d05aaf2e265f85a08bf66c5328476f818)
* [OCPBUGS-57562](https://issues.redhat.com/browse/OCPBUGS-57562): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 [#58](https://github.com/openshift/cluster-api-operator/pull/58)
* NO-JIRA: Update OWNERS [#60](https://github.com/openshift/cluster-api-operator/pull/60)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ec30377ffff951dc9c0fc2257d290e4b4958465...8f90c01d05aaf2e265f85a08bf66c5328476f818)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ffe5113eb88f384981fdeff599f22599e11a9d7c)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#888](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/888)
* no-jira: Add priority field to prevent early shutdown [#865](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/865)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespaces for the operator [#886](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/886)
* NO-ISSUE: Use scrapeClass for service monitors [#880](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/880)
* [OCPBUGS-62408](https://issues.redhat.com/browse/OCPBUGS-62408): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 [#885](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/885)
* [OCPBUGS-62255](https://issues.redhat.com/browse/OCPBUGS-62255): Throttle resourcesynccontroller on pairs with dual writers. [#881](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/881)
* [WRKLDS-1556](https://issues.redhat.com/browse/WRKLDS-1556): Remove --cloud-provider=external from KCM [#862](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/862)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixing arch issue [#869](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/869)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixed hardcode arch issue [#866](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/866)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/5a7da72ce2d21fc0900b428334865d97f39f6037...ffe5113eb88f384981fdeff599f22599e11a9d7c)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/10d89b53f7ddcf0ee45f838c1a43e408074343e6)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#583](https://github.com/openshift/cluster-kube-scheduler-operator/pull/583)
* no-jira: Add priority field to prevent early shutdown [#572](https://github.com/openshift/cluster-kube-scheduler-operator/pull/572)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Align user namespaces for the operator [#581](https://github.com/openshift/cluster-kube-scheduler-operator/pull/581)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespace for the operator [#580](https://github.com/openshift/cluster-kube-scheduler-operator/pull/580)
* [OCPBUGS-62609](https://issues.redhat.com/browse/OCPBUGS-62609): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 [#579](https://github.com/openshift/cluster-kube-scheduler-operator/pull/579)
* NO-ISSUE: Use scrapeClass for service monitors [#578](https://github.com/openshift/cluster-kube-scheduler-operator/pull/578)
* [OCPBUGS-61301](https://issues.redhat.com/browse/OCPBUGS-61301): Add readonlyRootFilesystem [#575](https://github.com/openshift/cluster-kube-scheduler-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/58cbd296eecc61c0871739588ae65af9c05e87a6...10d89b53f7ddcf0ee45f838c1a43e408074343e6)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/194b0498b61d1774382c8bb006e59c13c93ee7cf)
* [OCPBUGS-62444](https://issues.redhat.com/browse/OCPBUGS-62444): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 [#132](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/132)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fixing arch issue [#130](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/130)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fix arch issue [#128](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/5adc14299739bc64c8812cbab0b0ff2d12863602...194b0498b61d1774382c8bb006e59c13c93ee7cf)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/5969101cd1b417261a9a71b329fb560df974670e)
* [OCPBUGS-63519](https://issues.redhat.com/browse/OCPBUGS-63519): port 9193 need to be internal and port 9194 need to have a service [#279](https://github.com/openshift/cluster-machine-approver/pull/279)
* [OCPBUGS-62583](https://issues.redhat.com/browse/OCPBUGS-62583): NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 [#277](https://github.com/openshift/cluster-machine-approver/pull/277)
* NO-JIRA: Update OWNERS [#276](https://github.com/openshift/cluster-machine-approver/pull/276)
* NO-JIRA: set machine-approver-controller as default container [#278](https://github.com/openshift/cluster-machine-approver/pull/278)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c...5969101cd1b417261a9a71b329fb560df974670e)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e3f7168eb38ce068443c685b8311412b7f3d753d)
* [OCPBUGS-62310](https://issues.redhat.com/browse/OCPBUGS-62310): Fix KSM deny-list typo [#2677](https://github.com/openshift/cluster-monitoring-operator/pull/2677)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2712](https://github.com/openshift/cluster-monitoring-operator/pull/2712)
* NO-JIRA: clarify ExternalLabels doc [#2691](https://github.com/openshift/cluster-monitoring-operator/pull/2691)
* [MON-4398](https://issues.redhat.com/browse/MON-4398): Enable UTF-8 by default in admission-webhook [#2704](https://github.com/openshift/cluster-monitoring-operator/pull/2704)
* [OCPBUGS-45671](https://issues.redhat.com/browse/OCPBUGS-45671): chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2717](https://github.com/openshift/cluster-monitoring-operator/pull/2717)
* [MON-4383](https://issues.redhat.com/browse/MON-4383): feat(auto_docs_examples): adjust and add more examples [#2573](https://github.com/openshift/cluster-monitoring-operator/pull/2573)
* [MON-4408](https://issues.redhat.com/browse/MON-4408): chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple [#2714](https://github.com/openshift/cluster-monitoring-operator/pull/2714)
* [OCPBUGS-62276](https://issues.redhat.com/browse/OCPBUGS-62276): add tls configuration for the monitoring plugin deployment [#2706](https://github.com/openshift/cluster-monitoring-operator/pull/2706)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2705](https://github.com/openshift/cluster-monitoring-operator/pull/2705)
* [OCPBUGS-62972](https://issues.redhat.com/browse/OCPBUGS-62972): enhance case 66736 [#2708](https://github.com/openshift/cluster-monitoring-operator/pull/2708)
* NO-ISSUE: Update jsonnet dependencies [#2696](https://github.com/openshift/cluster-monitoring-operator/pull/2696)
* [OCPBUGS-62160](https://issues.redhat.com/browse/OCPBUGS-62160): Remove AlertManager endpoints when disabled [#2684](https://github.com/openshift/cluster-monitoring-operator/pull/2684)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2703](https://github.com/openshift/cluster-monitoring-operator/pull/2703)
* [MON-4395](https://issues.redhat.com/browse/MON-4395): Bump prometheus-operator to v0.86.0 [#2698](https://github.com/openshift/cluster-monitoring-operator/pull/2698)
* NO-ISSUE: set openshift-state-metrics as default container [#2693](https://github.com/openshift/cluster-monitoring-operator/pull/2693)
* [OCPBUGS-61661](https://issues.redhat.com/browse/OCPBUGS-61661): Remove cluster from non-multicluster dashboards [#2679](https://github.com/openshift/cluster-monitoring-operator/pull/2679)
* [MON-4384](https://issues.redhat.com/browse/MON-4384): adding Blackwell GPU device to accelerators configmap [#2689](https://github.com/openshift/cluster-monitoring-operator/pull/2689)
* NO-ISSUE: chore: remove image locations in assets [#2683](https://github.com/openshift/cluster-monitoring-operator/pull/2683)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2687](https://github.com/openshift/cluster-monitoring-operator/pull/2687)
* NO-ISSUE: chore: remove mentions of prometheus Adapter [#2682](https://github.com/openshift/cluster-monitoring-operator/pull/2682)
* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): remove Kubernetes API alerting rules [#2671](https://github.com/openshift/cluster-monitoring-operator/pull/2671)
* NO-JIRA: chore: bump jsonnet dependencies [#2649](https://github.com/openshift/cluster-monitoring-operator/pull/2649)
* [OCPBUGS-62109](https://issues.redhat.com/browse/OCPBUGS-62109): test: remove image registry e2e tests [#2681](https://github.com/openshift/cluster-monitoring-operator/pull/2681)
* NO-ISSUE: update Go dependencies [#2674](https://github.com/openshift/cluster-monitoring-operator/pull/2674)
* [MON-4346](https://issues.redhat.com/browse/MON-4346): Bump Go to 1.24 [#2655](https://github.com/openshift/cluster-monitoring-operator/pull/2655)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2673](https://github.com/openshift/cluster-monitoring-operator/pull/2673)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages metric from MCO to telemetry [#2638](https://github.com/openshift/cluster-monitoring-operator/pull/2638)
* NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 [#2662](https://github.com/openshift/cluster-monitoring-operator/pull/2662)
* [MON-4344](https://issues.redhat.com/browse/MON-4344): chore: port the test suite over from openshift-tests-private [#2635](https://github.com/openshift/cluster-monitoring-operator/pull/2635)
* [MON-4371](https://issues.redhat.com/browse/MON-4371): chore(prometheus): enable use-uncached-io feature flag [#2637](https://github.com/openshift/cluster-monitoring-operator/pull/2637)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2668](https://github.com/openshift/cluster-monitoring-operator/pull/2668)
* [OCPBUGS-61113](https://issues.redhat.com/browse/OCPBUGS-61113): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2657](https://github.com/openshift/cluster-monitoring-operator/pull/2657)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2663](https://github.com/openshift/cluster-monitoring-operator/pull/2663)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2660](https://github.com/openshift/cluster-monitoring-operator/pull/2660)
* [OCPBUGS-61135](https://issues.redhat.com/browse/OCPBUGS-61135): Revert "MON-4343: Cleanup deprecate pa config" [#2658](https://github.com/openshift/cluster-monitoring-operator/pull/2658)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c2dfaad07a7098d4b88df54d88fa2b77f18df52b...e3f7168eb38ce068443c685b8311412b7f3d753d)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/aec3a2086170d69b4ee3ec129f9c8e9cde5acb32)
* [OCPBUGS-60032](https://issues.redhat.com/browse/OCPBUGS-60032): Configure CVO to delete default-account role binding [#2758](https://github.com/openshift/cluster-network-operator/pull/2758)
* [SPLAT-2503](https://issues.redhat.com/browse/SPLAT-2503): Fixed "null" value for vSphere api and ingress VIP in UPI scenario [#2795](https://github.com/openshift/cluster-network-operator/pull/2795)
* [CORENET-6423](https://issues.redhat.com/browse/CORENET-6423): api, l2udn: subnets must be masked [#2808](https://github.com/openshift/cluster-network-operator/pull/2808)
* [CORENET-6311](https://issues.redhat.com/browse/CORENET-6311): Skip running _stackmanager for libreswan 5.3+ [#2787](https://github.com/openshift/cluster-network-operator/pull/2787)
* [OCPBUGS-62457](https://issues.redhat.com/browse/OCPBUGS-62457): Updating cluster-network-operator-container image to be consistent with ART for 4.21 [#2807](https://github.com/openshift/cluster-network-operator/pull/2807)
* [OCPBUGS-54806](https://issues.redhat.com/browse/OCPBUGS-54806): Add recording rules for UDN telemetry [#2697](https://github.com/openshift/cluster-network-operator/pull/2697)
* [OCPBUGS-61215](https://issues.redhat.com/browse/OCPBUGS-61215): Tweak iptables-alerter to try to avoid crictl bug [#2802](https://github.com/openshift/cluster-network-operator/pull/2802)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Add drop flows for GARP [#2801](https://github.com/openshift/cluster-network-operator/pull/2801)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2797](https://github.com/openshift/cluster-network-operator/pull/2797)
* [OCPBUGS-61561](https://issues.redhat.com/browse/OCPBUGS-61561): Relax label req. of DPU/DPU Host/Smart NIC [#2786](https://github.com/openshift/cluster-network-operator/pull/2786)
* Revert "OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes" [#2796](https://github.com/openshift/cluster-network-operator/pull/2796)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2605](https://github.com/openshift/cluster-network-operator/pull/2605)
* [OCPBUGS-60421](https://issues.redhat.com/browse/OCPBUGS-60421): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2785](https://github.com/openshift/cluster-network-operator/pull/2785)
* [CORENET-6327](https://issues.redhat.com/browse/CORENET-6327): Update linter [#2783](https://github.com/openshift/cluster-network-operator/pull/2783)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b0393aa3e67302d89e91b8f7b1013b6d2e317f04...aec3a2086170d69b4ee3ec129f9c8e9cde5acb32)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/be65dc63b504cdd483e0fd4b95d473b71a738d3b)
* [OCPBUGS-60218](https://issues.redhat.com/browse/OCPBUGS-60218): PPC: ghw: filter out namespaces dir [#1403](https://github.com/openshift/cluster-node-tuning-operator/pull/1403)
* NO-ISSUE: pkg/metrics/server: Log client-CA-bundle handling [#1412](https://github.com/openshift/cluster-node-tuning-operator/pull/1412)
* NO-JIRA: Address false reports of bootcmdline conflicts [#1371](https://github.com/openshift/cluster-node-tuning-operator/pull/1371)
* NO-JIRA: Fix support for nvidia-smi [#1410](https://github.com/openshift/cluster-node-tuning-operator/pull/1410)
* [OCPBUGS-62940](https://issues.redhat.com/browse/OCPBUGS-62940): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1414](https://github.com/openshift/cluster-node-tuning-operator/pull/1414)
* NO-ISSUE: pkg/metrics/server: Log bind address [#1411](https://github.com/openshift/cluster-node-tuning-operator/pull/1411)
* [OCPBUGS-62839](https://issues.redhat.com/browse/OCPBUGS-62839): E2E: Add test cases related to schedulable control plane nodes [#1405](https://github.com/openshift/cluster-node-tuning-operator/pull/1405)
* [OCPBUGS-62835](https://issues.redhat.com/browse/OCPBUGS-62835): E2E: llc: make sure to remove any trailing newspaces [#1407](https://github.com/openshift/cluster-node-tuning-operator/pull/1407)
* [OCPBUGS-62153](https://issues.redhat.com/browse/OCPBUGS-62153): E2E: skip SMT disabled test when L3 cache spans entire NUMA node [#1397](https://github.com/openshift/cluster-node-tuning-operator/pull/1397)
* [OCPBUGS-62605](https://issues.redhat.com/browse/OCPBUGS-62605): e2e: refactor GetSMTLevel to remove Gomega assertions [#1399](https://github.com/openshift/cluster-node-tuning-operator/pull/1399)
* [OCPBUGS-62578](https://issues.redhat.com/browse/OCPBUGS-62578): Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 [#1391](https://github.com/openshift/cluster-node-tuning-operator/pull/1391)
* [OCPBUGS-62091](https://issues.redhat.com/browse/OCPBUGS-62091): E2E: Add function to check control plane nodes are schedulable. [#1396](https://github.com/openshift/cluster-node-tuning-operator/pull/1396)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2bcf9f0303ea6a77813f7f1c79d91cd3b67c2860...be65dc63b504cdd483e0fd4b95d473b71a738d3b)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/39ffd1b8f70dc4c75ab6eb9a04889343e28c964f)
* [OCPBUGS-62173](https://issues.redhat.com/browse/OCPBUGS-62173): Add TLS config observer to update opcon/catd [#145](https://github.com/openshift/cluster-olm-operator/pull/145)
* [OPRUN-4157](https://issues.redhat.com/browse/OPRUN-4157): Update openshift/api to latest master for WebHook GA [#146](https://github.com/openshift/cluster-olm-operator/pull/146)
* [OPRUN-4207](https://issues.redhat.com/browse/OPRUN-4207): Update feature-gate processing to support disabled features [#144](https://github.com/openshift/cluster-olm-operator/pull/144)
* NO-ISSUE: Remove conditionals for cp-manifests use [#142](https://github.com/openshift/cluster-olm-operator/pull/142)
* [OPRUN-4079](https://issues.redhat.com/browse/OPRUN-4079): Use helm to generate manifests [#140](https://github.com/openshift/cluster-olm-operator/pull/140)
* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/cluster-olm-operator/pull/138)
* [OCPBUGS-61873](https://issues.redhat.com/browse/OCPBUGS-61873): Update RBAC to update/patch/delete what we create [#139](https://github.com/openshift/cluster-olm-operator/pull/139)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...39ffd1b8f70dc4c75ab6eb9a04889343e28c964f)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/c2d0127291dfe824d9591d4e37ec319a739d988e)
* [OCPBUGS-62500](https://issues.redhat.com/browse/OCPBUGS-62500): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 [#626](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/626)
* NO-JIRA: Bump library go rm co dep [#625](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf...c2d0127291dfe824d9591d4e37ec319a739d988e)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/f90be06b151168ff43d53cb5e5ff0c2d2df80186)
* [OCPBUGS-62494](https://issues.redhat.com/browse/OCPBUGS-62494): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 [#399](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/399)
* [CNTRLPLANE-1307](https://issues.redhat.com/browse/CNTRLPLANE-1307): set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test [#395](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/aa455c043152123595c2b4f72e02279aad9dd48a...f90be06b151168ff43d53cb5e5ff0c2d2df80186)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/ef703966fe6e82f5f255b06bc5c758f105bf8b28)
* [OCPBUGS-62440](https://issues.redhat.com/browse/OCPBUGS-62440): Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 [#169](https://github.com/openshift/cluster-policy-controller/pull/169)
* [OCPBUGS-57191](https://issues.redhat.com/browse/OCPBUGS-57191): fix(psalabelsyncer): return an error instead of panic when converting an unknown volume [#167](https://github.com/openshift/cluster-policy-controller/pull/167)
* NO-JIRA: scc allocation controller: Use server-side apply [#165](https://github.com/openshift/cluster-policy-controller/pull/165)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/47c783103216aa5e1242632127a5d8f98b8b7455...ef703966fe6e82f5f255b06bc5c758f105bf8b28)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/14236f82a2cd11af091ed8ec7e6c437cb6bce092)
* [OCPBUGS-63481](https://issues.redhat.com/browse/OCPBUGS-63481): references to github.com/sclorg/django-ex.git now also refer to the branch [#654](https://github.com/openshift/cluster-samples-operator/pull/654)
* [OCPBUGS-62409](https://issues.redhat.com/browse/OCPBUGS-62409): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 [#651](https://github.com/openshift/cluster-samples-operator/pull/651)
* [OCPBUGS-62061](https://issues.redhat.com/browse/OCPBUGS-62061): Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 [#650](https://github.com/openshift/cluster-samples-operator/pull/650)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/62b3623c6a2860e7a8cc368dbe76e767508cd261...14236f82a2cd11af091ed8ec7e6c437cb6bce092)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2647d9e33f87c4dd88fc4706c386896124ffc7b0)
* NO-JIRA: Remove ibm-cloud-managed-cleanup yaml [#586](https://github.com/openshift/cluster-storage-operator/pull/586)
* [STOR-2560](https://issues.redhat.com/browse/STOR-2560): Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed [#629](https://github.com/openshift/cluster-storage-operator/pull/629)
* NO-JIRA: Update OCP documentation links to latest versions [#636](https://github.com/openshift/cluster-storage-operator/pull/636)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#627](https://github.com/openshift/cluster-storage-operator/pull/627)
* [OCPBUGS-62669](https://issues.redhat.com/browse/OCPBUGS-62669): Move metrics to vsphere driver [#625](https://github.com/openshift/cluster-storage-operator/pull/625)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): remove static value for runAsUser in securityContext [#619](https://github.com/openshift/cluster-storage-operator/pull/619)
* [OCPBUGS-62421](https://issues.redhat.com/browse/OCPBUGS-62421): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 [#624](https://github.com/openshift/cluster-storage-operator/pull/624)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add app label to Manila deployment [#628](https://github.com/openshift/cluster-storage-operator/pull/628)
* [OCPBUGS-61112](https://issues.redhat.com/browse/OCPBUGS-61112): add Azure Disk CSI driver SA name to CredentialsRequest [#618](https://github.com/openshift/cluster-storage-operator/pull/618)
* [STOR-2297](https://issues.redhat.com/browse/STOR-2297): remove oVirt code from CSO [#617](https://github.com/openshift/cluster-storage-operator/pull/617)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): HyperShift deployments should reflect user id security context [#616](https://github.com/openshift/cluster-storage-operator/pull/616)
* [OCPBUGS-62121](https://issues.redhat.com/browse/OCPBUGS-62121): add all-egress label to deployments on HCP and IBM [#621](https://github.com/openshift/cluster-storage-operator/pull/621)
* [OCPBUGS-61175](https://issues.redhat.com/browse/OCPBUGS-61175): Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy [#615](https://github.com/openshift/cluster-storage-operator/pull/615)
* [SPLAT-2467](https://issues.redhat.com/browse/SPLAT-2467): Updated VPD alerts to reflect current vSphere support [#612](https://github.com/openshift/cluster-storage-operator/pull/612)
* [OCPBUGS-61161](https://issues.redhat.com/browse/OCPBUGS-61161): Fix logging e2e also faster cleanup [#611](https://github.com/openshift/cluster-storage-operator/pull/611)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d6b7775e872264a8e53f4bfe3ba884a3888367b7...2647d9e33f87c4dd88fc4706c386896124ffc7b0)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/f4335a376852396a21e9f5b9b40d40b9b50640ed)
* [OCPBUGS-62464](https://issues.redhat.com/browse/OCPBUGS-62464): Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/cluster-update-keys/pull/86)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c40e7b9b60c62690a25333fc54ae0d3705474afb...f4335a376852396a21e9f5b9b40d40b9b50640ed)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/420e6d07d80f501cbed3d5ce6f6596323d4fdce5)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Include the compressed tests binary in the CVO container image [#1236](https://github.com/openshift/cluster-version-operator/pull/1236)
* NO-JIRA: Clean up code to remove ReconciliationIssues [#1253](https://github.com/openshift/cluster-version-operator/pull/1253)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): Add conformance test suites to the CVO tests extension [#1238](https://github.com/openshift/cluster-version-operator/pull/1238)
* [OCPBUGS-61872](https://issues.redhat.com/browse/OCPBUGS-61872): Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters [#1232](https://github.com/openshift/cluster-version-operator/pull/1232)
* [OCPBUGS-62861](https://issues.redhat.com/browse/OCPBUGS-62861): temporarily disable metrics auth for hypershift clusters [#1243](https://github.com/openshift/cluster-version-operator/pull/1243)
* [OTA-1627](https://issues.redhat.com/browse/OTA-1627): pkg/cincinnati: Centralize release metadata parsing [#1231](https://github.com/openshift/cluster-version-operator/pull/1231)
* NO-JIRA: Move myself to emeritus [#1239](https://github.com/openshift/cluster-version-operator/pull/1239)
* [OCPBUGS-62416](https://issues.redhat.com/browse/OCPBUGS-62416): Updating cluster-version-operator-container image to be consistent with ART for 4.21 [#1237](https://github.com/openshift/cluster-version-operator/pull/1237)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Rename an existing test to comply with the OTE integration guide [#1235](https://github.com/openshift/cluster-version-operator/pull/1235)
* [OTA-1531](https://issues.redhat.com/browse/OTA-1531): Rework error handling in FeatureGate processing [#1206](https://github.com/openshift/cluster-version-operator/pull/1206)
* NO-JIRA: Extend the development documentation regarding building and publishing a payload image [#1227](https://github.com/openshift/cluster-version-operator/pull/1227)
* NO-ISSUE: Update golang version to 1.24 in go.mod [#1230](https://github.com/openshift/cluster-version-operator/pull/1230)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/77782f1a4b9648f8ade2bc1e75d10779784e341f...420e6d07d80f501cbed3d5ce6f6596323d4fdce5)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/16114b8de20278b8f4b7a425ece6d35d53214773)
* [OCPBUGS-62503](https://issues.redhat.com/browse/OCPBUGS-62503): Updating configmap-reload-container image to be consistent with ART for 4.21 [#74](https://github.com/openshift/configmap-reload/pull/74)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/2438d7c8e495201361d87da205649bc38fc4822b...16114b8de20278b8f4b7a425ece6d35d53214773)
### [console](https://github.com/openshift/console/tree/bed7e7c2c9f28dff28e6d806e215cb011abb49ea)
* [CONSOLE-4601](https://issues.redhat.com/browse/CONSOLE-4601): Migration of tests from Enzyme to React Testing Library [#15510](https://github.com/openshift/console/pull/15510)
* [OCPBUGS-63471](https://issues.redhat.com/browse/OCPBUGS-63471): Render a button if there is 1 action [#15636](https://github.com/openshift/console/pull/15636)
* [OCPBUGS-63382](https://issues.redhat.com/browse/OCPBUGS-63382): Display missing environment var values and correct styling [#15625](https://github.com/openshift/console/pull/15625)
* [CONSOLE-4835](https://issues.redhat.com/browse/CONSOLE-4835): Migrate `topology` to dynamic [#15617](https://github.com/openshift/console/pull/15617)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): Add children prop to some places [#15548](https://github.com/openshift/console/pull/15548)
* NO-JIRA: reintroduce load bearing import cycles [#15651](https://github.com/openshift/console/pull/15651)
* [OCPBUGS-63707](https://issues.redhat.com/browse/OCPBUGS-63707): Never allow OTHER_CATEGORY in categories [#15660](https://github.com/openshift/console/pull/15660)
* [OCPBUGS-60937](https://issues.redhat.com/browse/OCPBUGS-60937): Updated PromQL to include component specific namespace [#15438](https://github.com/openshift/console/pull/15438)
* [OCPBUGS-62296](https://issues.redhat.com/browse/OCPBUGS-62296): Preserve path on perspective switch [#15541](https://github.com/openshift/console/pull/15541)
* [CONSOLE-4837](https://issues.redhat.com/browse/CONSOLE-4837): Migrate `console-app` to dynamic [#15620](https://github.com/openshift/console/pull/15620)
* [OCPBUGS-62939](https://issues.redhat.com/browse/OCPBUGS-62939): "View events" and 'View all events' point to the same page on 'Overview'->'Activity' card. [#15606](https://github.com/openshift/console/pull/15606)
* [CONSOLE-4718](https://issues.redhat.com/browse/CONSOLE-4718): Update Administrator nav section to use ConsoleDataView [#15567](https://github.com/openshift/console/pull/15567)
* [CONSOLE-4838](https://issues.redhat.com/browse/CONSOLE-4838): Make DataView component work with arbitrary data objects [#15622](https://github.com/openshift/console/pull/15622)
* [CONSOLE-4604](https://issues.redhat.com/browse/CONSOLE-4604): Migrate enzyme packages/console-shared unit tests to React Testing Li… [#15581](https://github.com/openshift/console/pull/15581)
* [OCPBUGS-61509](https://issues.redhat.com/browse/OCPBUGS-61509): Fix "operator installing" hint in operator details panel [#15480](https://github.com/openshift/console/pull/15480)
* [CONSOLE-4836](https://issues.redhat.com/browse/CONSOLE-4836): Migrate `console-demo-plugin` to `dynamic-demo-plugin` [#15618](https://github.com/openshift/console/pull/15618)
* [OCPBUGS-61870](https://issues.redhat.com/browse/OCPBUGS-61870): Automatically redirect all-namespaces catalog to default namespace [#15584](https://github.com/openshift/console/pull/15584)
* [OCPBUGS-63433](https://issues.redhat.com/browse/OCPBUGS-63433): Turn on `fContentSecurityPolicyEnabled` by default [#15630](https://github.com/openshift/console/pull/15630)
* [OCPBUGS-63384](https://issues.redhat.com/browse/OCPBUGS-63384): Fix eslint warnings and prevent future ones [#15629](https://github.com/openshift/console/pull/15629)
* [OCPBUGS-62937](https://issues.redhat.com/browse/OCPBUGS-62937): Add telemetry events [#15602](https://github.com/openshift/console/pull/15602)
* [OCPBUGS-62483](https://issues.redhat.com/browse/OCPBUGS-62483): limit node log length to 1000 lines [#15597](https://github.com/openshift/console/pull/15597)
* [OCPBUGS-63429](https://issues.redhat.com/browse/OCPBUGS-63429): Expose prometheus tenancy label path as a proxy [#15621](https://github.com/openshift/console/pull/15621)
* [CONSOLE-4724](https://issues.redhat.com/browse/CONSOLE-4724): Update Compute nav section to use ResourceDataView [#15604](https://github.com/openshift/console/pull/15604)
* [OCPBUGS-60636](https://issues.redhat.com/browse/OCPBUGS-60636): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15583](https://github.com/openshift/console/pull/15583)
* [CONSOLE-4761](https://issues.redhat.com/browse/CONSOLE-4761): Add sort select field with Relevance, A-Z, Z-A options [#15580](https://github.com/openshift/console/pull/15580)
* [CONSOLE-3637](https://issues.redhat.com/browse/CONSOLE-3637): Bump rjsf to 4.x [#15551](https://github.com/openshift/console/pull/15551)
* [CONSOLE-4725](https://issues.redhat.com/browse/CONSOLE-4725): Update User Management list pages to use ResourceDataView [#15579](https://github.com/openshift/console/pull/15579)
* [OCPBUGS-63059](https://issues.redhat.com/browse/OCPBUGS-63059): DRY up RTL `configure` [#15615](https://github.com/openshift/console/pull/15615)
* [CONSOLE-4776](https://issues.redhat.com/browse/CONSOLE-4776): Migrate enzyme packages/container-security unit tests to React Testin… [#15611](https://github.com/openshift/console/pull/15611)
* [OCPBUGS-62156](https://issues.redhat.com/browse/OCPBUGS-62156): Unique "key" prop warning in the UserPreferencePage [#15534](https://github.com/openshift/console/pull/15534)
* [CONSOLE-4821](https://issues.redhat.com/browse/CONSOLE-4821): Remove gitops-plugin [#15576](https://github.com/openshift/console/pull/15576)
* [OCPBUGS-62593](https://issues.redhat.com/browse/OCPBUGS-62593): Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 [#15542](https://github.com/openshift/console/pull/15542)
* [CONSOLE-4615](https://issues.redhat.com/browse/CONSOLE-4615): Update DefaultList to use ResourceDataView [#15560](https://github.com/openshift/console/pull/15560)
* [OCPBUGS-61660](https://issues.redhat.com/browse/OCPBUGS-61660): Fix Bare Metal Hosts nav item [#15609](https://github.com/openshift/console/pull/15609)
* [CONSOLE-4603](https://issues.redhat.com/browse/CONSOLE-4603): Migrate enzyme "packages/console-dynamic-plugin-sdk" unit tests to Re… [#15540](https://github.com/openshift/console/pull/15540)
* [OCPBUGS-61767](https://issues.redhat.com/browse/OCPBUGS-61767): Duplicate CRs are shown as Operand instances in operator uninstallation modal [#15557](https://github.com/openshift/console/pull/15557)
* [CONSOLE-4820](https://issues.redhat.com/browse/CONSOLE-4820): Migrate olmv0 to dynamic [#15566](https://github.com/openshift/console/pull/15566)
* [OCPBUGS-33879](https://issues.redhat.com/browse/OCPBUGS-33879): use tenancy path for project scoped status card [#15585](https://github.com/openshift/console/pull/15585)
* [OCPBUGS-62947](https://issues.redhat.com/browse/OCPBUGS-62947): bump dompurify to latest [#15586](https://github.com/openshift/console/pull/15586)
* [CONSOLE-4819](https://issues.redhat.com/browse/CONSOLE-4819): Migrate container-security to dynamic [#15565](https://github.com/openshift/console/pull/15565)
* [CONSOLE-4602](https://issues.redhat.com/browse/CONSOLE-4602): Migrate enzyme "packages/console-app" unit tests to React Testing Library [#15514](https://github.com/openshift/console/pull/15514)
* [OCPBUGS-60603](https://issues.redhat.com/browse/OCPBUGS-60603): Add bearer token file configuration to oc-environment script [#15521](https://github.com/openshift/console/pull/15521)
* [OCPBUGS-62315](https://issues.redhat.com/browse/OCPBUGS-62315): Correct the width of the cluster config toolbar filter input [#15546](https://github.com/openshift/console/pull/15546)
* [CONSOLE-4795](https://issues.redhat.com/browse/CONSOLE-4795), [CONSOLE-4797](https://issues.redhat.com/browse/CONSOLE-4797), [CONSOLE-4801](https://issues.redhat.com/browse/CONSOLE-4801): Migrate some static extensions to dynamic [#15552](https://github.com/openshift/console/pull/15552)
* [CONSOLE-4804](https://issues.redhat.com/browse/CONSOLE-4804): Migrate `TopologyCreateConnector` to dynamic [#15549](https://github.com/openshift/console/pull/15549)
* [CONSOLE-4800](https://issues.redhat.com/browse/CONSOLE-4800): Migrate `HorizontalNavTab` to dynamic [#15553](https://github.com/openshift/console/pull/15553)
* [OCPBUGS-59529](https://issues.redhat.com/browse/OCPBUGS-59529): Prevent the topology context menu items from truncating [#15524](https://github.com/openshift/console/pull/15524)
* [CONSOLE-4798](https://issues.redhat.com/browse/CONSOLE-4798): Migrate `StorageClassProvisioner` to dynamic [#15550](https://github.com/openshift/console/pull/15550)
* [OPRUN-4086](https://issues.redhat.com/browse/OPRUN-4086): Add ClusterCatalog controller [#15466](https://github.com/openshift/console/pull/15466)
* NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS [#15559](https://github.com/openshift/console/pull/15559)
* [CONSOLE-4332](https://issues.redhat.com/browse/CONSOLE-4332): Update the secrets forms to use PF components [#15513](https://github.com/openshift/console/pull/15513)
* [OCPBUGS-62313](https://issues.redhat.com/browse/OCPBUGS-62313): Returning from any Secret Create page does not return to secret page [#15543](https://github.com/openshift/console/pull/15543)
* [CONSOLE-4684](https://issues.redhat.com/browse/CONSOLE-4684): Refactor machine-set modals [#15484](https://github.com/openshift/console/pull/15484)
* [OCPBUGS-62281](https://issues.redhat.com/browse/OCPBUGS-62281): InsecureSkipVerify to true for results proxy endpoint in off-cluster [#14888](https://github.com/openshift/console/pull/14888)
* [CONSOLE-4808](https://issues.redhat.com/browse/CONSOLE-4808): update resource-log.cy.ts [#15539](https://github.com/openshift/console/pull/15539)
* [CONSOLE-4799](https://issues.redhat.com/browse/CONSOLE-4799): update tests/app/debug-pod.cy.ts [#15530](https://github.com/openshift/console/pull/15530)
* [CONSOLE-4802](https://issues.redhat.com/browse/CONSOLE-4802): Migrate `KebabActions` to dynamic [#15535](https://github.com/openshift/console/pull/15535)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Add @openshift/dynamic-plugin-sdk to core and internal pkg deps [#15518](https://github.com/openshift/console/pull/15518)
* [OCPBUGS-61536](https://issues.redhat.com/browse/OCPBUGS-61536): Fix incorrect handling of vSphere settings [#15481](https://github.com/openshift/console/pull/15481)
* [OCPBUGS-61937](https://issues.redhat.com/browse/OCPBUGS-61937): Add Missing Periods to Error Messages and update try again button link [#15511](https://github.com/openshift/console/pull/15511)
* NO-JIRA: Remove yarn-generate from post-install script [#15373](https://github.com/openshift/console/pull/15373)
* [CONSOLE-4796](https://issues.redhat.com/browse/CONSOLE-4796): Migrate some Dashboards extensions to dynamic [#15526](https://github.com/openshift/console/pull/15526)
* [OCPBUGS-61535](https://issues.redhat.com/browse/OCPBUGS-61535): Cancel PVC creation redirect user to last visited page instead of PVC list [#15502](https://github.com/openshift/console/pull/15502)
* [CONSOLE-4764](https://issues.redhat.com/browse/CONSOLE-4764): Add tech preview feature flag support [#15477](https://github.com/openshift/console/pull/15477)
* [CONSOLE-4715](https://issues.redhat.com/browse/CONSOLE-4715): Migrate the Enzyme test __tests__ root directory and remove __tests__… [#15462](https://github.com/openshift/console/pull/15462)
* NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release [#15517](https://github.com/openshift/console/pull/15517)
* [CONSOLE-4760](https://issues.redhat.com/browse/CONSOLE-4760): update CRD list to use ResourceDataView [#15469](https://github.com/openshift/console/pull/15469)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Install `@openshift/dynamic-plugin-sdk` [#15509](https://github.com/openshift/console/pull/15509)
* [OCPBUGS-60084](https://issues.redhat.com/browse/OCPBUGS-60084): Help dropdown should be closed automatically after tour model opened [#15483](https://github.com/openshift/console/pull/15483)
* [OCPBUGS-55401](https://issues.redhat.com/browse/OCPBUGS-55401): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15315](https://github.com/openshift/console/pull/15315)
* [OCPBUGS-59634](https://issues.redhat.com/browse/OCPBUGS-59634): Fix the events search input width, and incorporate PF Toolbar component [#15501](https://github.com/openshift/console/pull/15501)
* NO-JIRA: Update README.md with instructions for logging out kube:admin in local [#15482](https://github.com/openshift/console/pull/15482)
* NO-JIRA: chore(OWNERS): remove logonoff from reviewers [#15505](https://github.com/openshift/console/pull/15505)
* [CONSOLE-4710](https://issues.redhat.com/browse/CONSOLE-4710): use useOverlay to launch ErrorModal [#15475](https://github.com/openshift/console/pull/15475)
* [OCPBUGS-61087](https://issues.redhat.com/browse/OCPBUGS-61087): Updation of label from edit label doesn't work [#15460](https://github.com/openshift/console/pull/15460)
* [OCPBUGS-61519](https://issues.redhat.com/browse/OCPBUGS-61519): Fix improper DescriptionList refactor [#15495](https://github.com/openshift/console/pull/15495)
* [OCPBUGS-59972](https://issues.redhat.com/browse/OCPBUGS-59972): Add validation and type guards on healthHandler calls to prevent errors [#15470](https://github.com/openshift/console/pull/15470)
* [CONSOLE-4756](https://issues.redhat.com/browse/CONSOLE-4756): Convert more files to TypeScript [#15472](https://github.com/openshift/console/pull/15472)
* [OCPBUGS-61458](https://issues.redhat.com/browse/OCPBUGS-61458): fix MachineSet YAML template [#15478](https://github.com/openshift/console/pull/15478)
* [OCPBUGS-58118](https://issues.redhat.com/browse/OCPBUGS-58118): fix namespace path generation for non-namespaced resources [#15467](https://github.com/openshift/console/pull/15467)
* [OCPBUGS-61183](https://issues.redhat.com/browse/OCPBUGS-61183): cluster in workload identity mode is not applied with the token-auth-… [#15459](https://github.com/openshift/console/pull/15459)
* [OCPBUGS-61133](https://issues.redhat.com/browse/OCPBUGS-61133): Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation [#15444](https://github.com/openshift/console/pull/15444)
* [OCPBUGS-61468](https://issues.redhat.com/browse/OCPBUGS-61468): i18n upload/download routine task for OCP version 4.20 [#15476](https://github.com/openshift/console/pull/15476)
* [CONSOLE-4727](https://issues.redhat.com/browse/CONSOLE-4727): Update OWNERS files across the repo [#15461](https://github.com/openshift/console/pull/15461)
* [CONSOLE-4598](https://issues.redhat.com/browse/CONSOLE-4598): Migrate enzyme __tests__/components/utils unit tests to React Testing… [#15442](https://github.com/openshift/console/pull/15442)
* [OCPBUGS-61393](https://issues.redhat.com/browse/OCPBUGS-61393): Change default tab size from 4 to 2 [#15474](https://github.com/openshift/console/pull/15474)
* [CONSOLE-4635](https://issues.redhat.com/browse/CONSOLE-4635): Refactor PDBActionFactory to hook form and cleanup. [#15285](https://github.com/openshift/console/pull/15285)
* NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish [#15463](https://github.com/openshift/console/pull/15463)
* [OCPBUGS-61139](https://issues.redhat.com/browse/OCPBUGS-61139): Correct the ordering of Catalog categories to be alphabetized [#15454](https://github.com/openshift/console/pull/15454)
* [CONSOLE-4610](https://issues.redhat.com/browse/CONSOLE-4610): Drop use of ceateModalLauncher from Topology package [#15446](https://github.com/openshift/console/pull/15446)
* [OCPBUGS-61090](https://issues.redhat.com/browse/OCPBUGS-61090): fix typo in update approval strategy label [#15452](https://github.com/openshift/console/pull/15452)
* [CONSOLE-4683](https://issues.redhat.com/browse/CONSOLE-4683): Refactor group action factory [#15404](https://github.com/openshift/console/pull/15404)
* And 9 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/712584257c2fb5b9b060a5e49ce44591cb4363de...bed7e7c2c9f28dff28e6d806e215cb011abb49ea)
### [console-operator](https://github.com/openshift/console-operator/tree/96fca61803ec4d60e83b0f32a3d18d118f80f3c1)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): Revert "#1052 fix(oidc): fix OIDCClientSecretGet condition" [#1058](https://github.com/openshift/console-operator/pull/1058)
* [OCPBUGS-59939](https://issues.redhat.com/browse/OCPBUGS-59939): Bumped to latest console-operator version [#1055](https://github.com/openshift/console-operator/pull/1055)
* [OCPBUGS-62512](https://issues.redhat.com/browse/OCPBUGS-62512): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 [#1050](https://github.com/openshift/console-operator/pull/1050)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix OIDCClientSecretGet condition [#1052](https://github.com/openshift/console-operator/pull/1052)
* [CONSOLE-4765](https://issues.redhat.com/browse/CONSOLE-4765), [CONSOLE-4767](https://issues.redhat.com/browse/CONSOLE-4767): Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs [#1043](https://github.com/openshift/console-operator/pull/1043)
* [OCPBUGS-61726](https://issues.redhat.com/browse/OCPBUGS-61726): Revert "OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition" [#1046](https://github.com/openshift/console-operator/pull/1046)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix OIDCClientSecretGet condition [#1041](https://github.com/openshift/console-operator/pull/1041)
* [OCPBUGS-61483](https://issues.redhat.com/browse/OCPBUGS-61483): Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 [#1044](https://github.com/openshift/console-operator/pull/1044)
* [OCPBUGS-61383](https://issues.redhat.com/browse/OCPBUGS-61383): Update QuickStarts typo and doc link [#1042](https://github.com/openshift/console-operator/pull/1042)
* [OCPBUGS-60863](https://issues.redhat.com/browse/OCPBUGS-60863): Rename Dockerfile to Dockerfile.ocp [#1039](https://github.com/openshift/console-operator/pull/1039)
* [OCPBUGS-60782](https://issues.redhat.com/browse/OCPBUGS-60782): pluginOrder field should only contain available plugins [#1038](https://github.com/openshift/console-operator/pull/1038)
* [Full changelog](https://github.com/openshift/console-operator/compare/5e127e5f49c56b47914e2ba4aedb09e99b165800...96fca61803ec4d60e83b0f32a3d18d118f80f3c1)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/4c16c7cef37364ff890defe8ccb71776663faa82)
* no-jira: Update OWNERS [#204](https://github.com/openshift/containernetworking-plugins/pull/204)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/184a96011a8cacb72319cdccb904271a99c5928d...4c16c7cef37364ff890defe8ccb71776663faa82)
### [coredns](https://github.com/openshift/coredns/tree/91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)
* NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 [#154](https://github.com/openshift/coredns/pull/154)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#153](https://github.com/openshift/coredns/pull/153)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f0f7a14152fba5ce86346c58ac282f55dc380231)
* [OSASINFRA-3954](https://issues.redhat.com/browse/OSASINFRA-3954): Rebase main onto release-1.34 [#354](https://github.com/openshift/cloud-provider-openstack/pull/354)
* [OCPBUGS-62582](https://issues.redhat.com/browse/OCPBUGS-62582): Updating csi-driver-manila-container image to be consistent with ART for 4.21 [#351](https://github.com/openshift/cloud-provider-openstack/pull/351)
* [OCPBUGS-62544](https://issues.redhat.com/browse/OCPBUGS-62544): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 [#352](https://github.com/openshift/cloud-provider-openstack/pull/352)
* [OCPBUGS-62575](https://issues.redhat.com/browse/OCPBUGS-62575): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 [#350](https://github.com/openshift/cloud-provider-openstack/pull/350)
* NO-JIRA: shiftstack: Update OWNERS [#353](https://github.com/openshift/cloud-provider-openstack/pull/353)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c4fe3e8ad29e58f081f3883de0893c2025a097b2...f0f7a14152fba5ce86346c58ac282f55dc380231)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/87e2700a9249f3ac9a35cb3aed589c918c56cb94)
* NO-JIRA:shiftstack: Update OWNERS [#162](https://github.com/openshift/csi-driver-nfs/pull/162)
* [OCPBUGS-62509](https://issues.redhat.com/browse/OCPBUGS-62509): Updating csi-driver-nfs-container image to be consistent with ART for 4.21 [#161](https://github.com/openshift/csi-driver-nfs/pull/161)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/1abaf84447384a486a9f9da7cd7b9e53784c8a55...87e2700a9249f3ac9a35cb3aed589c918c56cb94)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/8d440867f9983c59c3c54f1e382542d71126d3d3)
* [OCPBUGS-61394](https://issues.redhat.com/browse/OCPBUGS-61394): UPSTREAM: 682: Skip VolumeAttachments of other drivers [#88](https://github.com/openshift/csi-external-attacher/pull/88)
* NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 [#87](https://github.com/openshift/csi-external-attacher/pull/87)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...8d440867f9983c59c3c54f1e382542d71126d3d3)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/bc47159f8350f5b167896459914ec8659cbb3b1b)
* [OCPBUGS-62541](https://issues.redhat.com/browse/OCPBUGS-62541): Updating csi-provisioner-container image to be consistent with ART for 4.21 [#116](https://github.com/openshift/csi-external-provisioner/pull/116)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/81fca03694bca1bae8606d8970472330e1e4fcad...bc47159f8350f5b167896459914ec8659cbb3b1b)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/9d1d059b7310751b1ded1cf55b6e5b61e90375ff)
* [OCPBUGS-62504](https://issues.redhat.com/browse/OCPBUGS-62504): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 [#178](https://github.com/openshift/csi-external-resizer/pull/178)
* [OCPBUGS-61547](https://issues.redhat.com/browse/OCPBUGS-61547): Requeue PVC over PV creation [#173](https://github.com/openshift/csi-external-resizer/pull/173)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/c674bea9bb6a81e463c7fefa974e2109d829daef...9d1d059b7310751b1ded1cf55b6e5b61e90375ff)
### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/24faebef64fac7975f6556996c3c2a1388a479ff)
* NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/csi-external-snapshot-metadata/pull/5)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/693a826455777eaafc677bb2195dc071d184243b...24faebef64fac7975f6556996c3c2a1388a479ff)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/15313fb28f5c42e4b896928478652768225692a6)
* [OCPBUGS-62423](https://issues.redhat.com/browse/OCPBUGS-62423): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 [#188](https://github.com/openshift/csi-external-snapshotter/pull/188)
* NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 [#187](https://github.com/openshift/csi-external-snapshotter/pull/187)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...15313fb28f5c42e4b896928478652768225692a6)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/78dacb7c661a62c78036c2737401afd3eb6fd04d)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.17.0 for OCP 4.21 [#76](https://github.com/openshift/csi-livenessprobe/pull/76)
* [OCPBUGS-62403](https://issues.redhat.com/browse/OCPBUGS-62403): Updating csi-livenessprobe-container image to be consistent with ART for 4.21 [#77](https://github.com/openshift/csi-livenessprobe/pull/77)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/1d6d6b27460e58f24110c72ec9c96afe2c1d891d...78dacb7c661a62c78036c2737401afd3eb6fd04d)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/71080e3e777fe19e2b68a95012102c52026585da)
* [OCPBUGS-60108](https://issues.redhat.com/browse/OCPBUGS-60108): update log level verbosity to not clutter logs [#86](https://github.com/openshift/csi-node-driver-registrar/pull/86)
* [OCPBUGS-62506](https://issues.redhat.com/browse/OCPBUGS-62506): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 [#85](https://github.com/openshift/csi-node-driver-registrar/pull/85)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/6ce4713c87b735e2546a65a871bd2c7cfe383c31...71080e3e777fe19e2b68a95012102c52026585da)
### [docker-builder](https://github.com/openshift/builder/tree/9ed70da36382ff1fa11dfa1abc3db51f06183d31)
* [OCPBUGS-62340](https://issues.redhat.com/browse/OCPBUGS-62340): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 [#481](https://github.com/openshift/builder/pull/481)
* [Full changelog](https://github.com/openshift/builder/compare/ff595e4bbf5301039fc62f0cdd7b5610605f633e...9ed70da36382ff1fa11dfa1abc3db51f06183d31)
### [docker-registry](https://github.com/openshift/image-registry/tree/de5c64151fdfab6980919c7f9fc269e65bb259e6)
* [OCPBUGS-62576](https://issues.redhat.com/browse/OCPBUGS-62576): Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 [#448](https://github.com/openshift/image-registry/pull/448)
* [OCPBUGS-60845](https://issues.redhat.com/browse/OCPBUGS-60845): update OWNERS [#447](https://github.com/openshift/image-registry/pull/447)
* [Full changelog](https://github.com/openshift/image-registry/compare/0c09647aa2db93a8584dfe8079ed919145c662fb...de5c64151fdfab6980919c7f9fc269e65bb259e6)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/5c53d757ae380994b89701a98d8b61912154aca7)
* Updating the OWNERS file. (#175) [#175](https://github.com/openshift/driver-toolkit/pull/175)
* Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) [#172](https://github.com/openshift/driver-toolkit/pull/172)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...5c53d757ae380994b89701a98d8b61912154aca7)
### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/239c469ebe0bb90864de458d0ce8fc384c7f22b8)
* [OCPBUGS-63473](https://issues.redhat.com/browse/OCPBUGS-63473): 4.21 rebase 3.5.24 [#346](https://github.com/openshift/etcd/pull/346)
* [OCPBUGS-62338](https://issues.redhat.com/browse/OCPBUGS-62338): Updating ose-etcd-container image to be consistent with ART for 4.21 [#342](https://github.com/openshift/etcd/pull/342)
* [Full changelog](https://github.com/openshift/etcd/compare/9c065d4d842c8de57806426c13201413b4d595e2...239c469ebe0bb90864de458d0ce8fc384c7f22b8)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/0a0890a75e8697c2219213b4d2e8981053b60777)
* [OCPBUGS-62572](https://issues.redhat.com/browse/OCPBUGS-62572): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 [#92](https://github.com/openshift/cloud-provider-gcp/pull/92)
* NO-JIRA: Update OWNERS [#90](https://github.com/openshift/cloud-provider-gcp/pull/90)
* [OCPBUGS-61006](https://issues.redhat.com/browse/OCPBUGS-61006): Adjust vendoring to use go.work to get rid of the symlink [#91](https://github.com/openshift/cloud-provider-gcp/pull/91)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/f940e72e7611ce4a96da3e47966ba1befd25c474...0a0890a75e8697c2219213b4d2e8981053b60777)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/a476e2fcd2d4b422b176325e6dea91fc6868bc76)
* [OCPBUGS-62417](https://issues.redhat.com/browse/OCPBUGS-62417): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 [#249](https://github.com/openshift/cluster-api-provider-gcp/pull/249)
* NO-JIRA: Update OWNERS [#248](https://github.com/openshift/cluster-api-provider-gcp/pull/248)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...a476e2fcd2d4b422b176325e6dea91fc6868bc76)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/707afffc8d7ebf89d11b5301feb32c0884a6f42c)
* [OCPBUGS-62520](https://issues.redhat.com/browse/OCPBUGS-62520): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 [#130](https://github.com/openshift/machine-api-provider-gcp/pull/130)
* NO-JIRA: Update OWNERS [#129](https://github.com/openshift/machine-api-provider-gcp/pull/129)
* no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate [#128](https://github.com/openshift/machine-api-provider-gcp/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...707afffc8d7ebf89d11b5301feb32c0884a6f42c)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/223267890211674a7273aa99c3a5dee257bdc042)
* Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 [#84](https://github.com/openshift/gcp-pd-csi-driver/pull/84)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/500ab5d31ad382805070c8ae329a9a34163ebc99...223267890211674a7273aa99c3a5dee257bdc042)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ac94bf2abcd3b339764fd30e581209f37ec43938)
* NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/151)
* [CORS-4201](https://issues.redhat.com/browse/CORS-4201): Search for the feature gate for GCP Custom Endpoints [#150](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e0ad050a84bab669e0f11e080fc4c388ef417bba...ac94bf2abcd3b339764fd30e581209f37ec43938)
### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/d481e5cb9323b01964bf143b58403b62fa31e5e7)
* [OCPBUGS-62591](https://issues.redhat.com/browse/OCPBUGS-62591): Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 [#10](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/10)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8...d481e5cb9323b01964bf143b58403b62fa31e5e7)
### [haproxy-router](https://github.com/openshift/router/tree/526b4d0ad4cd9d44b43e2585b3415e513fbaf3da)
* [OCPBUGS-62501](https://issues.redhat.com/browse/OCPBUGS-62501): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 [#679](https://github.com/openshift/router/pull/679)
* [OCPBUGS-62555](https://issues.redhat.com/browse/OCPBUGS-62555): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 [#680](https://github.com/openshift/router/pull/680)
* [OCPBUGS-49769](https://issues.redhat.com/browse/OCPBUGS-49769): Validate the key and cert content before accepting [#669](https://github.com/openshift/router/pull/669)
* [NE-2137](https://issues.redhat.com/browse/NE-2137): Bump router k8s libraries to 0.33.4 [#671](https://github.com/openshift/router/pull/671)
* [OCPBUGS-60257](https://issues.redhat.com/browse/OCPBUGS-60257): fix extra space in haproxy template [#676](https://github.com/openshift/router/pull/676)
* [OCPBUGS-57896](https://issues.redhat.com/browse/OCPBUGS-57896): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#660](https://github.com/openshift/router/pull/660)
* [OCPBUGS-57845](https://issues.redhat.com/browse/OCPBUGS-57845): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#659](https://github.com/openshift/router/pull/659)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#675](https://github.com/openshift/router/pull/675)
* [OCPBUGS-61224](https://issues.redhat.com/browse/OCPBUGS-61224): Revert Prevent startup failures due to name resolution" [#672](https://github.com/openshift/router/pull/672)
* NO-JIRA: Add davidesalerno to OWNERS [#670](https://github.com/openshift/router/pull/670)
* [Full changelog](https://github.com/openshift/router/compare/96bfd2164c7885df9019ce9eeb79d506bd7e871b...526b4d0ad4cd9d44b43e2585b3415e513fbaf3da)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9ca60866127994f08fe5ce2b237ef0f3357986de)
* [OCPBUGS-61377](https://issues.redhat.com/browse/OCPBUGS-61377): UPSTREAM: <carry>: Re-enable temporarily disabled kuberc tests [#2501](https://github.com/openshift/kubernetes/pull/2501)
* NO-JIRA: enable CBOR tests [#2500](https://github.com/openshift/kubernetes/pull/2500)
* [OCPBUGS-62270](https://issues.redhat.com/browse/OCPBUGS-62270): UPSTREAM: <carry>: Skip CPU resource status for workload-pinned pods [#2490](https://github.com/openshift/kubernetes/pull/2490)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#2484](https://github.com/openshift/kubernetes/pull/2484)
* [OCPBUGS-62608](https://issues.redhat.com/browse/OCPBUGS-62608): Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 [#2481](https://github.com/openshift/kubernetes/pull/2481)
* [OCPBUGS-60610](https://issues.redhat.com/browse/OCPBUGS-60610): UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 [#2472](https://github.com/openshift/kubernetes/pull/2472)
* [OCPBUGS-43994](https://issues.redhat.com/browse/OCPBUGS-43994): UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain [#2477](https://github.com/openshift/kubernetes/pull/2477)
* [OCPBUGS-61554](https://issues.redhat.com/browse/OCPBUGS-61554): Bump 1.33.5 [#2459](https://github.com/openshift/kubernetes/pull/2459)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. [#2467](https://github.com/openshift/kubernetes/pull/2467)
* [OCPBUGS-61222](https://issues.redhat.com/browse/OCPBUGS-61222): Do not remove PVC ClaimRef to fix flaky VAC test [#2452](https://github.com/openshift/kubernetes/pull/2452)
* [OCPBUGS-58313](https://issues.redhat.com/browse/OCPBUGS-58313): apiserver library go bump [#2457](https://github.com/openshift/kubernetes/pull/2457)
* NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout [#2428](https://github.com/openshift/kubernetes/pull/2428)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Unrevert bump to v1.33.4 [#2441](https://github.com/openshift/kubernetes/pull/2441)
* [OCPBUGS-56594](https://issues.redhat.com/browse/OCPBUGS-56594): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write [#2443](https://github.com/openshift/kubernetes/pull/2443)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… [#2444](https://github.com/openshift/kubernetes/pull/2444)
* [OCPBUGS-60946](https://issues.redhat.com/browse/OCPBUGS-60946): UPSTREAM: 133425: Fix SELinux label comparison [#2417](https://github.com/openshift/kubernetes/pull/2417)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e0d42164c84ee27644b85a1d2c9bbb062066056d...9ca60866127994f08fe5ce2b237ef0f3357986de)
### [hypershift](https://github.com/openshift/hypershift/tree/7916f3f968a804eff1ffd5b83dd1af04aaec4e4a)
* [OCPBUGS-38358](https://issues.redhat.com/browse/OCPBUGS-38358): Fix nil pointer dereference in AWS CloudProviderConfig [#7129](https://github.com/openshift/hypershift/pull/7129)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): feat(cpo): enable tests for UID security context in storage components [#6934](https://github.com/openshift/hypershift/pull/6934)
* [OCPBUGS-51136](https://issues.redhat.com/browse/OCPBUGS-51136): revert scc annotation for components in kube-system [#7130](https://github.com/openshift/hypershift/pull/7130)
* [OCPBUGS-62060](https://issues.redhat.com/browse/OCPBUGS-62060): fix(cmd/destory/aws): detach managed policies before deleting inline policies [#7033](https://github.com/openshift/hypershift/pull/7033)
* NO-JIRA: fix(ai): fix plugin marketplace name [#7127](https://github.com/openshift/hypershift/pull/7127)
* [CNTRLPLANE-1756](https://issues.redhat.com/browse/CNTRLPLANE-1756): fix(ai-skill): prevent security warning in git-commit-format skill [#7125](https://github.com/openshift/hypershift/pull/7125)
* [CNTRLPLANE-1644](https://issues.redhat.com/browse/CNTRLPLANE-1644): Request serving topology end to end test [#7031](https://github.com/openshift/hypershift/pull/7031)
* [OCPBUGS-62496](https://issues.redhat.com/browse/OCPBUGS-62496): fix: delete old profile during replacement [#7089](https://github.com/openshift/hypershift/pull/7089)
* [CNTRLPLANE-1650](https://issues.redhat.com/browse/CNTRLPLANE-1650): chore(tekton): consolidate main branch pipelines [#7053](https://github.com/openshift/hypershift/pull/7053)
* [OCPBUGS-63639](https://issues.redhat.com/browse/OCPBUGS-63639): add support for control-plane-operator hotfix builds [#7119](https://github.com/openshift/hypershift/pull/7119)
* [CNTRLPLANE-1687](https://issues.redhat.com/browse/CNTRLPLANE-1687): feat(e2e): add support for azure-workload-identities-file flag [#7101](https://github.com/openshift/hypershift/pull/7101)
* [CNTRLPLANE-1681](https://issues.redhat.com/browse/CNTRLPLANE-1681): chore(deps): update mvdan.cc/unparam digest to 0df0534 [#7049](https://github.com/openshift/hypershift/pull/7049)
* [OCPBUGS-61296](https://issues.redhat.com/browse/OCPBUGS-61296): fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7087](https://github.com/openshift/hypershift/pull/7087)
* [OCPBUGS-51136](https://issues.redhat.com/browse/OCPBUGS-51136): specify SCC annotation for pods in data plane [#7091](https://github.com/openshift/hypershift/pull/7091)
* [CNTRLPLANE-1681](https://issues.redhat.com/browse/CNTRLPLANE-1681): chore(deps): update sigs.k8s.io/cluster-api-provider-openstack/orc digest to e4f56a2 [#7096](https://github.com/openshift/hypershift/pull/7096)
* [OCPBUGS-63205](https://issues.redhat.com/browse/OCPBUGS-63205): fix(e2e): correct readOnlyRootFilesystem test logic [#7076](https://github.com/openshift/hypershift/pull/7076)
* NO-JIRA: docs(ai): add reference to AGENTS.md for AI agent guidance [#7085](https://github.com/openshift/hypershift/pull/7085)
* [OCPBUGS-61941](https://issues.redhat.com/browse/OCPBUGS-61941): fix(ingress): add LoadBalancerSourceRanges support for external router service [#6859](https://github.com/openshift/hypershift/pull/6859)
* [OCPBUGS-63175](https://issues.redhat.com/browse/OCPBUGS-63175): remove NTO Service and ServiceMonitor [#7086](https://github.com/openshift/hypershift/pull/7086)
* NO-JIRA: fix(ibm): Update version information for Red Hat OpenShift on IBM Cloud [#6776](https://github.com/openshift/hypershift/pull/6776)
* [OCPBUGS-62871](https://issues.redhat.com/browse/OCPBUGS-62871): fix(e2e): refactor createHostedCluster to remove deps between option settings [#6997](https://github.com/openshift/hypershift/pull/6997)
* [CNTRLPLANE-475](https://issues.redhat.com/browse/CNTRLPLANE-475): Enable Azure NodePool API happy path to pick image [#6904](https://github.com/openshift/hypershift/pull/6904)
* NO-JIRA: Add Claude Code skills and Azure unit tests [#7074](https://github.com/openshift/hypershift/pull/7074)
* NO-JIRA: refactor(ignitionserver): move lookupMappedImage to shared util package [#6778](https://github.com/openshift/hypershift/pull/6778)
* [GCP-97](https://issues.redhat.com/browse/GCP-97): Add initial GCP platform support to Hosted Cluster API [#6960](https://github.com/openshift/hypershift/pull/6960)
* [OCPBUGS-63130](https://issues.redhat.com/browse/OCPBUGS-63130): fix: routes are not used in case of IBM Cloud [#7054](https://github.com/openshift/hypershift/pull/7054)
* [OCPBUGS-63153](https://issues.redhat.com/browse/OCPBUGS-63153): Revert "fix(capi-provider): wait for infrastructure resource before startup" [#7057](https://github.com/openshift/hypershift/pull/7057)
* [CNTRLPLANE-1550](https://issues.redhat.com/browse/CNTRLPLANE-1550), [CNTRLPLANE-1552](https://issues.redhat.com/browse/CNTRLPLANE-1552): Implement environment variable override for shared ingress HAProxy image [#6989](https://github.com/openshift/hypershift/pull/6989)
* [OCPBUGS-63049](https://issues.redhat.com/browse/OCPBUGS-63049): Make the hypershift CLI binary FIPS-compliant [#7032](https://github.com/openshift/hypershift/pull/7032)
* [OCPBUGS-61164](https://issues.redhat.com/browse/OCPBUGS-61164): Add per-pod crash toleration [#6958](https://github.com/openshift/hypershift/pull/6958)
* [OCPBUGS-60472](https://issues.redhat.com/browse/OCPBUGS-60472): fix kubevirt, use 100.66.0.0/16 for join subnet [#6978](https://github.com/openshift/hypershift/pull/6978)
* [OCPBUGS-36389](https://issues.redhat.com/browse/OCPBUGS-36389): Omit metadata for telemetry remote write and ensure _id label [#6208](https://github.com/openshift/hypershift/pull/6208)
* [OCPBUGS-63172](https://issues.redhat.com/browse/OCPBUGS-63172): control-plane-operator/.../ingress-operator/deployment: Declare a metrics port [#7052](https://github.com/openshift/hypershift/pull/7052)
* [OCPBUGS-63215](https://issues.redhat.com/browse/OCPBUGS-63215): fix: hosted cluster CRD compatibility with ocp 4.15 [#7069](https://github.com/openshift/hypershift/pull/7069)
* [CNTRLPLANE-1673](https://issues.redhat.com/browse/CNTRLPLANE-1673): feat(claude): add /test-tag-pipeline command [#7062](https://github.com/openshift/hypershift/pull/7062)
* NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins [#7068](https://github.com/openshift/hypershift/pull/7068)
* [OCPBUGS-63194](https://issues.redhat.com/browse/OCPBUGS-63194): fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline [#7064](https://github.com/openshift/hypershift/pull/7064)
* [OCPBUGS-61881](https://issues.redhat.com/browse/OCPBUGS-61881): Red Hat Konflux update hypershift-gomaxprocs-webhook [#7063](https://github.com/openshift/hypershift/pull/7063)
* [OCPBUGS-63194](https://issues.redhat.com/browse/OCPBUGS-63194): fix(konflux): fix tag pipeline EC failures [#7060](https://github.com/openshift/hypershift/pull/7060)
* [OCPBUGS-55751](https://issues.redhat.com/browse/OCPBUGS-55751): Fix Konflux tag pipeline template variable substitution [#6910](https://github.com/openshift/hypershift/pull/6910)
* [CNTRLPLANE-1620](https://issues.redhat.com/browse/CNTRLPLANE-1620): feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS [#6994](https://github.com/openshift/hypershift/pull/6994)
* [OCPBUGS-63148](https://issues.redhat.com/browse/OCPBUGS-63148): bump Konflux build images [#7055](https://github.com/openshift/hypershift/pull/7055)
* [CNTRLPLANE-1615](https://issues.redhat.com/browse/CNTRLPLANE-1615): Add repo metrics tool for tracking AI-assisted commits [#6983](https://github.com/openshift/hypershift/pull/6983)
* [CNTRLPLANE-980](https://issues.redhat.com/browse/CNTRLPLANE-980): feat(api): Validation for hc.status.configuration.authentication status [#6883](https://github.com/openshift/hypershift/pull/6883)
* [OCPBUGS-61829](https://issues.redhat.com/browse/OCPBUGS-61829): resolve initContainer permission issue after node reboot [#6990](https://github.com/openshift/hypershift/pull/6990)
* NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run [#6924](https://github.com/openshift/hypershift/pull/6924)
* NO-JIRA: migrate renovate config [#7029](https://github.com/openshift/hypershift/pull/7029)
* [CNTRLPLANE-1643](https://issues.redhat.com/browse/CNTRLPLANE-1643): implement multi-branch strategy with security-focused release management [#7023](https://github.com/openshift/hypershift/pull/7023)
* [CNTRLPLANE-1641](https://issues.redhat.com/browse/CNTRLPLANE-1641): update Tekton tasks to latest trusted versions [#6998](https://github.com/openshift/hypershift/pull/6998)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add OpenStack node drivers to allowed non-read-only root filesystem containers [#6946](https://github.com/openshift/hypershift/pull/6946)
* [OCPBUGS-62863](https://issues.redhat.com/browse/OCPBUGS-62863): feat(cmd): collect ServiceMonitor and PodMonitor resources in dump [#6970](https://github.com/openshift/hypershift/pull/6970)
* NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first [#6995](https://github.com/openshift/hypershift/pull/6995)
* [CNTRLPLANE-1493](https://issues.redhat.com/browse/CNTRLPLANE-1493): Add Claude command for automated Konflux task updates [#6921](https://github.com/openshift/hypershift/pull/6921)
* [CNTRLPLANE-1484](https://issues.redhat.com/browse/CNTRLPLANE-1484): Expose cluster autoscaler metrics in HCP [#6902](https://github.com/openshift/hypershift/pull/6902)
* [CNTRLPLANE-1582](https://issues.redhat.com/browse/CNTRLPLANE-1582): Prevent azure cluster destroy command from deleting managed/main resource group [#6956](https://github.com/openshift/hypershift/pull/6956)
* [CNTRLPLANE-1543](https://issues.redhat.com/browse/CNTRLPLANE-1543): fix(aws): use clean image for placeholder nodes [#6935](https://github.com/openshift/hypershift/pull/6935)
* [CNTRLPLANE-1468](https://issues.redhat.com/browse/CNTRLPLANE-1468): feat(install): add command line argument for ImagePullPolicy configuration [#6875](https://github.com/openshift/hypershift/pull/6875)
* NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis [#6737](https://github.com/openshift/hypershift/pull/6737)
* [CNTRLPLANE-1374](https://issues.redhat.com/browse/CNTRLPLANE-1374): feat(azure): add setup scripts for self-managed Azure hosted clusters [#6752](https://github.com/openshift/hypershift/pull/6752)
* NO-JIRA: chore(ai): configure all agents to inherit model configuration [#6906](https://github.com/openshift/hypershift/pull/6906)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(azure): add self-managed Azure HyperShift overview guide [#6948](https://github.com/openshift/hypershift/pull/6948)
* [CNTRLPLANE-1432](https://issues.redhat.com/browse/CNTRLPLANE-1432): Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate [#6923](https://github.com/openshift/hypershift/pull/6923)
* [CNTRLPLANE-1581](https://issues.redhat.com/browse/CNTRLPLANE-1581): feat(azure): relax API to make externalDNS optional for self-managed clusters [#6951](https://github.com/openshift/hypershift/pull/6951)
* [OCPBUGS-62446](https://issues.redhat.com/browse/OCPBUGS-62446): fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues [#6918](https://github.com/openshift/hypershift/pull/6918)
* NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions [#6957](https://github.com/openshift/hypershift/pull/6957)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): feat(cpo): add UID security context to CSO deployment [#6786](https://github.com/openshift/hypershift/pull/6786)
* [OCPBUGS-62407](https://issues.redhat.com/browse/OCPBUGS-62407): chore(build): update container images to 4.21 [#6936](https://github.com/openshift/hypershift/pull/6936)
* NO-JIRA: Add openstack-reviewers, openstack-approvers [#6911](https://github.com/openshift/hypershift/pull/6911)
* [GCP-96](https://issues.redhat.com/browse/GCP-96): add GCPPlatform feature gate [#6929](https://github.com/openshift/hypershift/pull/6929)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(readme): correct spelling mistake [#6943](https://github.com/openshift/hypershift/pull/6943)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(azure): add self-managed cluster setup documentation [#6808](https://github.com/openshift/hypershift/pull/6808)
* [OCPBUGS-61245](https://issues.redhat.com/browse/OCPBUGS-61245): Fix driver-config ConfigMap content flapping due to random ordering [#6907](https://github.com/openshift/hypershift/pull/6907)
* [CNTRLPLANE-1545](https://issues.redhat.com/browse/CNTRLPLANE-1545): docs(commands): improve jira-solve command with logical commit organization [#6937](https://github.com/openshift/hypershift/pull/6937)
* NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions [#6928](https://github.com/openshift/hypershift/pull/6928)
* [OCPBUGS-62328](https://issues.redhat.com/browse/OCPBUGS-62328): Add missing svc-kubeconfig mount to CAPO Deployment [#6909](https://github.com/openshift/hypershift/pull/6909)
* [OCPBUGS-62324](https://issues.redhat.com/browse/OCPBUGS-62324): Fix test-e2e `annotations` flag parsing [#6908](https://github.com/openshift/hypershift/pull/6908)
* [AUTOSCALE-322](https://issues.redhat.com/browse/AUTOSCALE-322): fix karpenter token secret leak [#6790](https://github.com/openshift/hypershift/pull/6790)
* [CNTRLPLANE-980](https://issues.redhat.com/browse/CNTRLPLANE-980): feat(api): add hc.status.configuration.authentication status field [#6261](https://github.com/openshift/hypershift/pull/6261)
* NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout [#6913](https://github.com/openshift/hypershift/pull/6913)
* [KFLUXSPRT-5246](https://issues.redhat.com/browse/KFLUXSPRT-5246): update base images from RHEL9 ELS to UBI9 minimal 9.4 [#6916](https://github.com/openshift/hypershift/pull/6916)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false [#6885](https://github.com/openshift/hypershift/pull/6885)
* NO-JIRA: fix(test): support external oidc settings on non-aws platform [#6754](https://github.com/openshift/hypershift/pull/6754)
* NO-JIRA: chore(ai): ensure jira-solve run make pre-commit [#6901](https://github.com/openshift/hypershift/pull/6901)
* NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc [#6898](https://github.com/openshift/hypershift/pull/6898)
* [OCPBUGS-61936](https://issues.redhat.com/browse/OCPBUGS-61936): fix(capi-provider): wait for infrastructure resource before startup [#6860](https://github.com/openshift/hypershift/pull/6860)
* [OCPBUGS-62224](https://issues.redhat.com/browse/OCPBUGS-62224): fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness [#6892](https://github.com/openshift/hypershift/pull/6892)
* [CNTRLPLANE-1478](https://issues.redhat.com/browse/CNTRLPLANE-1478): chore: add AI directory paths to OWNERS file [#6884](https://github.com/openshift/hypershift/pull/6884)
* NO-JIRA: chore(ai): add claude slash command jira solve [#6882](https://github.com/openshift/hypershift/pull/6882)
* [OCPBUGS-62099](https://issues.redhat.com/browse/OCPBUGS-62099): make TestAutoscalingBalancing more robust [#6877](https://github.com/openshift/hypershift/pull/6877)
* [OCPBUGS-61850](https://issues.redhat.com/browse/OCPBUGS-61850): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6843](https://github.com/openshift/hypershift/pull/6843)
* NO-JIRA: ci(dev-cluster): Fix dev token secret annotation [#6876](https://github.com/openshift/hypershift/pull/6876)
* [OCPBUGS-62056](https://issues.redhat.com/browse/OCPBUGS-62056): test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic [#6872](https://github.com/openshift/hypershift/pull/6872)
* [OCPBUGS-62128](https://issues.redhat.com/browse/OCPBUGS-62128): hcco: sync watched resource types to availability-prober [#6879](https://github.com/openshift/hypershift/pull/6879)
* [CNTRLPLANE-1331](https://issues.redhat.com/browse/CNTRLPLANE-1331): Get self-managed Azure working again [#6703](https://github.com/openshift/hypershift/pull/6703)
* [OCPBUGS-59885](https://issues.redhat.com/browse/OCPBUGS-59885): [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC [#6826](https://github.com/openshift/hypershift/pull/6826)
* [CNTRLPLANE-1455](https://issues.redhat.com/browse/CNTRLPLANE-1455): docs(contribute): consolidate contributing guide; refresh PR template; add landing page [#6866](https://github.com/openshift/hypershift/pull/6866)
* [OCPBUGS-61776](https://issues.redhat.com/browse/OCPBUGS-61776): fix(ignition-server): Don't delete user-managed cert secrets [#6836](https://github.com/openshift/hypershift/pull/6836)
* [OCPBUGS-61894](https://issues.redhat.com/browse/OCPBUGS-61894): Enable VolumeAttributesClass runtime config [#6855](https://github.com/openshift/hypershift/pull/6855)
* [CNTRLPLANE-1452](https://issues.redhat.com/browse/CNTRLPLANE-1452): docs(ci): add documentation for checking CI status [#6849](https://github.com/openshift/hypershift/pull/6849)
* [OCPBUGS-61438](https://issues.redhat.com/browse/OCPBUGS-61438): fix(security): harden konnectivity-agent DaemonSet security context [#6835](https://github.com/openshift/hypershift/pull/6835)
* [OCPBUGS-61828](https://issues.redhat.com/browse/OCPBUGS-61828): refactor FeatureGate status check [#6862](https://github.com/openshift/hypershift/pull/6862)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods [#6842](https://github.com/openshift/hypershift/pull/6842)
* [OCPBUGS-61825](https://issues.redhat.com/browse/OCPBUGS-61825): test(e2e,kubevirt): skip break-glass-credentials on kubevirt [#6856](https://github.com/openshift/hypershift/pull/6856)
* [OCPBUGS-61862](https://issues.redhat.com/browse/OCPBUGS-61862): ci: Remove the MCE 2.10 konflux pipeline [#6848](https://github.com/openshift/hypershift/pull/6848)
* [OCPBUGS-61719](https://issues.redhat.com/browse/OCPBUGS-61719): fix: propagate AWSLoadBalancerTargetNodesAnnotation to… [#6823](https://github.com/openshift/hypershift/pull/6823)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler, 2 [#6824](https://github.com/openshift/hypershift/pull/6824)
* [OCPBUGS-61177](https://issues.redhat.com/browse/OCPBUGS-61177): ci: use common MCE konflux pipeline [#6743](https://github.com/openshift/hypershift/pull/6743)
* NO-JIRA: Update Branch Tasks Docs [#6840](https://github.com/openshift/hypershift/pull/6840)
* [OCPBUGS-56249](https://issues.redhat.com/browse/OCPBUGS-56249): fix lint-fix Makefile rule [#6151](https://github.com/openshift/hypershift/pull/6151)
* [OCPBUGS-61048](https://issues.redhat.com/browse/OCPBUGS-61048): test(e2e): add autoscaler deployment verification to autoscaling test [#6779](https://github.com/openshift/hypershift/pull/6779)
* [OCPBUGS-61687](https://issues.redhat.com/browse/OCPBUGS-61687): fix(capi-provider): use single replica deployment for aws and azure [#6807](https://github.com/openshift/hypershift/pull/6807)
* fix(disable-psa): disable PSA check for 4.20 [#6831](https://github.com/openshift/hypershift/pull/6831)
* [OCPBUGS-61482](https://issues.redhat.com/browse/OCPBUGS-61482): fix(proxy): ensure URLs have scheme before proxy resolution [#6789](https://github.com/openshift/hypershift/pull/6789)
* [OCPBUGS-61587](https://issues.redhat.com/browse/OCPBUGS-61587): fix(oauth): oauth-openshift deployment should be HA [#6802](https://github.com/openshift/hypershift/pull/6802)
* [CNTRLPLANE-1277](https://issues.redhat.com/browse/CNTRLPLANE-1277): Enable TestCreateClusterCustomConfig for Azure [#6706](https://github.com/openshift/hypershift/pull/6706)
* Revert "OCPBUGS-61334: fix(kas): Set correct container port in postStart handler" [#6805](https://github.com/openshift/hypershift/pull/6805)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): resolve MIRRORED_RELEASE_IMAGE flapping [#6751](https://github.com/openshift/hypershift/pull/6751)
* [OCPBUGS-61499](https://issues.redhat.com/browse/OCPBUGS-61499): fix(control-plane): remove resource limits from kube-controller-manager [#6785](https://github.com/openshift/hypershift/pull/6785)
* [CNTRLPLANE-1364](https://issues.redhat.com/browse/CNTRLPLANE-1364): feat: enable global pull secret for AWS [#6736](https://github.com/openshift/hypershift/pull/6736)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler [#6773](https://github.com/openshift/hypershift/pull/6773)
* NO-JIRA: fix karpenter metric validation in e2e [#6714](https://github.com/openshift/hypershift/pull/6714)
* NO-JIRA: chore(AI): add claude agents for different SMEs [#6787](https://github.com/openshift/hypershift/pull/6787)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem [#6770](https://github.com/openshift/hypershift/pull/6770)
* [OCPBUGS-61462](https://issues.redhat.com/browse/OCPBUGS-61462): temporarily use v4.20 catalogs [#6782](https://github.com/openshift/hypershift/pull/6782)
* NO-JIRA: add permissions to role policy [#6783](https://github.com/openshift/hypershift/pull/6783)
* [CNTRLPLANE-1385](https://issues.redhat.com/browse/CNTRLPLANE-1385): docs: add MCP setup guide for Cursor with sample config [#6775](https://github.com/openshift/hypershift/pull/6775)
* [CNTRLPLANE-1383](https://issues.redhat.com/browse/CNTRLPLANE-1383): docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule [#6774](https://github.com/openshift/hypershift/pull/6774)
* [OCPBUGS-61218](https://issues.redhat.com/browse/OCPBUGS-61218): test(e2e): add control plane component rollout validation to upgrade test [#6767](https://github.com/openshift/hypershift/pull/6767)
* [CNTRLPLANE-203](https://issues.redhat.com/browse/CNTRLPLANE-203): feat(sharedingress): add Azure Public IP tagging support for router service [#6730](https://github.com/openshift/hypershift/pull/6730)
* [OCPBUGS-61219](https://issues.redhat.com/browse/OCPBUGS-61219): fix: cleanup old PKI operator deployment during upgrades [#6758](https://github.com/openshift/hypershift/pull/6758)
* [OCPBUGS-61282](https://issues.redhat.com/browse/OCPBUGS-61282): rename CCM deployments to align with 4.19 [#6757](https://github.com/openshift/hypershift/pull/6757)
* NO-JIRA: fix(api): enhance API NodePool's API docs [#6753](https://github.com/openshift/hypershift/pull/6753)
* NO-JIRA: chore(tests): validate conditions after executing tests [#6738](https://github.com/openshift/hypershift/pull/6738)
* [OCPBUGS-60376](https://issues.redhat.com/browse/OCPBUGS-60376): fix token rotation causing Karpenter to stop working [#6561](https://github.com/openshift/hypershift/pull/6561)
* NO-JIRA: contrib: add utility for cleaning roles [#5945](https://github.com/openshift/hypershift/pull/5945)
* [CNTRLPLANE-267](https://issues.redhat.com/browse/CNTRLPLANE-267): Restructure the OWNERS usage in the whole repo [#5784](https://github.com/openshift/hypershift/pull/5784)
* [AUTOSCALE-332](https://issues.redhat.com/browse/AUTOSCALE-332): allow karpenter-operator to support rhobs monitoring [#6704](https://github.com/openshift/hypershift/pull/6704)
* [CNTRLPLANE-1370](https://issues.redhat.com/browse/CNTRLPLANE-1370): feat(supportedversion): add OCP 4.21 support; update e2e constants and tests [#6739](https://github.com/openshift/hypershift/pull/6739)
* NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions [#6741](https://github.com/openshift/hypershift/pull/6741)
* [Full changelog](https://github.com/openshift/hypershift/compare/0e15c389eeafd816549bcda092124105a762f7d1...7916f3f968a804eff1ffd5b83dd1af04aaec4e4a)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/c566572b2cf0120499e81181f1efb1e729e9c418)
* [OCPCLOUD-3095](https://issues.redhat.com/browse/OCPCLOUD-3095): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.34 (64b1744) into main [#82](https://github.com/openshift/cloud-provider-ibm/pull/82)
* [OCPBUGS-62342](https://issues.redhat.com/browse/OCPBUGS-62342): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/cloud-provider-ibm/pull/86)
* NO-JIRA: Update OWNERS [#85](https://github.com/openshift/cloud-provider-ibm/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/36ab30f90e87de0daa926d20ccda88c41abed191...c566572b2cf0120499e81181f1efb1e729e9c418)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/ab36dcc19e6063bf55158b59588448151a200170)
* [STOR-2589](https://issues.redhat.com/browse/STOR-2589): Rebase to upstream v5.2.19 for OCP 4.21 [#113](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/113)
* Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 [#112](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/112)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/19801353c97d08b1333177be45c848082af0643c...ab36dcc19e6063bf55158b59588448151a200170)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3b63707ce26bdbdc84cda5c6f53f3af8b98ca68b)
* [OCPBUGS-62375](https://issues.redhat.com/browse/OCPBUGS-62375): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/21f405cce9573eee1c4f1cf95c0eb601ae77ed99...3b63707ce26bdbdc84cda5c6f53f3af8b98ca68b)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/69ed5e056af689cb34fd099355c0c5534ede70be)
* [OCPBUGS-62486](https://issues.redhat.com/browse/OCPBUGS-62486): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 [#130](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/130)
* NO-JIRA: Update OWNERS [#126](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/126)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/8b6396a4c78f4791b7f3c5ec404a78b499f8546b...69ed5e056af689cb34fd099355c0c5534ede70be)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/03d7a9679f70e4bc1c884ebb5d6577dd757b1553)
* [OCPBUGS-62491](https://issues.redhat.com/browse/OCPBUGS-62491): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 [#71](https://github.com/openshift/machine-api-provider-ibmcloud/pull/71)
* NO-JIRA: Update OWNERS [#70](https://github.com/openshift/machine-api-provider-ibmcloud/pull/70)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...03d7a9679f70e4bc1c884ebb5d6577dd757b1553)
### [insights-operator](https://github.com/openshift/insights-operator/tree/b414946202b350698cb388b5aa32260716735d84)
* NO-JIRA: remove trailing commas from ConfigMap example [#1166](https://github.com/openshift/insights-operator/pull/1166)
* [OCPBUGS-63015](https://issues.redhat.com/browse/OCPBUGS-63015): QEMU logs are not gathered if there are pending status virt-launcher pods [#1164](https://github.com/openshift/insights-operator/pull/1164)
* NO-JIRA: add CLAUDE.md [#1162](https://github.com/openshift/insights-operator/pull/1162)
* [CCXDEV-15577](https://issues.redhat.com/browse/CCXDEV-15577): retry mechanism for network error [#1161](https://github.com/openshift/insights-operator/pull/1161)
* NO-JIRA: remove CRD manifests [#1156](https://github.com/openshift/insights-operator/pull/1156)
* [CCXDEV-15551](https://issues.redhat.com/browse/CCXDEV-15551): Decouple CRD storage specs [#1157](https://github.com/openshift/insights-operator/pull/1157)
* [OCPBUGS-60870](https://issues.redhat.com/browse/OCPBUGS-60870): The Gather Job did not check the current configuration before running [#1154](https://github.com/openshift/insights-operator/pull/1154)
* [OCPBUGS-61893](https://issues.redhat.com/browse/OCPBUGS-61893): set extractor as default container [#1141](https://github.com/openshift/insights-operator/pull/1141)
* [OCPBUGS-62215](https://issues.redhat.com/browse/OCPBUGS-62215): operator is not set as degraded when failed [#1151](https://github.com/openshift/insights-operator/pull/1151)
* And 9 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/10a1c1746d728197c42163217764eda00a3cbb4f...b414946202b350698cb388b5aa32260716735d84)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/81d9ede484137d8609bae3ff5ebd5e7bfe88c4cd)
* [OCPBUGS-62351](https://issues.redhat.com/browse/OCPBUGS-62351): Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#53](https://github.com/openshift/insights-runtime-extractor/pull/53)
* [OCPBUGS-62433](https://issues.redhat.com/browse/OCPBUGS-62433): Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#54](https://github.com/openshift/insights-runtime-extractor/pull/54)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/3d3783698b20f5c27e4f35051b1450e47e789068...81d9ede484137d8609bae3ff5ebd5e7bfe88c4cd)
### [ironic](https://github.com/openshift/ironic-image/tree/679e491fe1e6ba4925431fdab40c19519ec4db34)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#708](https://github.com/openshift/ironic-image/pull/708)
* NO-ISSUE: Update ironic and sushy commit [#704](https://github.com/openshift/ironic-image/pull/704)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#706](https://github.com/openshift/ironic-image/pull/706)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#705](https://github.com/openshift/ironic-image/pull/705)
* [METAL-1599](https://issues.redhat.com/browse/METAL-1599): Allow additional PXE file mount point [#702](https://github.com/openshift/ironic-image/pull/702)
* [OCPBUGS-62443](https://issues.redhat.com/browse/OCPBUGS-62443): Updating ironic-container image to be consistent with ART for 4.21 [#699](https://github.com/openshift/ironic-image/pull/699)
* [OCPBUGS-62201](https://issues.redhat.com/browse/OCPBUGS-62201): Bump ironic to include idrac10 fix [#697](https://github.com/openshift/ironic-image/pull/697)
* [METAL-1446](https://issues.redhat.com/browse/METAL-1446), [METAL-1566](https://issues.redhat.com/browse/METAL-1566), [METAL-1577](https://issues.redhat.com/browse/METAL-1577): Sync Ironic and Sushy [#695](https://github.com/openshift/ironic-image/pull/695)
* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Remove temporary dependencies from source [#692](https://github.com/openshift/ironic-image/pull/692)
* [OKD-283](https://issues.redhat.com/browse/OKD-283): fixing OKD ironic-image errors and metal3 pod crashes (centos9) [#688](https://github.com/openshift/ironic-image/pull/688)
* [OCPBUGS-61459](https://issues.redhat.com/browse/OCPBUGS-61459): sync with Ironic changes, including the local RPC revert [#687](https://github.com/openshift/ironic-image/pull/687)
* [METAL-1528](https://issues.redhat.com/browse/METAL-1528): Use custom directories in the runironic-proxy script [#679](https://github.com/openshift/ironic-image/pull/679)
* [OCPBUGS-60455](https://issues.redhat.com/browse/OCPBUGS-60455): set [json_rpc]port unconditionally [#684](https://github.com/openshift/ironic-image/pull/684)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9c57a81902530b0268eddd7ad623a972b5ba4042...679e491fe1e6ba4925431fdab40c19519ec4db34)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/fb9c1e1faa73605e7bd52d509bba60d40151e5e1)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#204](https://github.com/openshift/ironic-agent-image/pull/204)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#202](https://github.com/openshift/ironic-agent-image/pull/202)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#201](https://github.com/openshift/ironic-agent-image/pull/201)
* [OKD-297](https://issues.redhat.com/browse/OKD-297): Fix broken OKD4.20 ironic-agent-image [#200](https://github.com/openshift/ironic-agent-image/pull/200)
* [OKD-295](https://issues.redhat.com/browse/OKD-295): Fix broken OKD ironic-agent-image [#199](https://github.com/openshift/ironic-agent-image/pull/199)
* [OCPBUGS-62329](https://issues.redhat.com/browse/OCPBUGS-62329): Updating ironic-agent-container image to be consistent with ART for 4.21 [#197](https://github.com/openshift/ironic-agent-image/pull/197)
* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Update deps pkgs versions [#196](https://github.com/openshift/ironic-agent-image/pull/196)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...fb9c1e1faa73605e7bd52d509bba60d40151e5e1)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555)
* [OCPBUGS-62357](https://issues.redhat.com/browse/OCPBUGS-62357): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ironic-rhcos-downloader/pull/107)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/6c92e5425b58baa9d4dd951a992b7460e8407247...08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/b95b05fe0ba17255ef61e92d4167ca4c9de789b8)
* [OCPBUGS-62511](https://issues.redhat.com/browse/OCPBUGS-62511): Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 [#54](https://github.com/openshift/ironic-static-ip-manager/pull/54)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/fa5b8b8bb73e509f74205a99a0ed1cb07a843885...b95b05fe0ba17255ef61e92d4167ca4c9de789b8)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/01fb280b85f5a31dfc1c1bbd02a8909a92b69329)
* Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 [#214](https://github.com/openshift/images/pull/214)
* Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 [#213](https://github.com/openshift/images/pull/213)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...01fb280b85f5a31dfc1c1bbd02a8909a92b69329)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ed76a5e8051caae6519342ae189088b8ddd09979)
* [OCPBUGS-62397](https://issues.redhat.com/browse/OCPBUGS-62397): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 [#47](https://github.com/openshift/kubernetes-metrics-server/pull/47)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/cfa5ee9f1c94d7faec36de970033b9e329326f38...ed76a5e8051caae6519342ae189088b8ddd09979)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/cd636680e06a55395c26570dff0cb37277014388)
* [OCPBUGS-62563](https://issues.redhat.com/browse/OCPBUGS-62563): Updating kube-rbac-proxy-container image to be consistent with ART for 4.21 [#126](https://github.com/openshift/kube-rbac-proxy/pull/126)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b9134351be37c43408334047d8eb85d0ac01fe4e...cd636680e06a55395c26570dff0cb37277014388)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/d818e81d447d78e42fc7025e95137a096e8e90f3)
* [OCPBUGS-62356](https://issues.redhat.com/browse/OCPBUGS-62356): Updating kube-state-metrics-container image to be consistent with ART for 4.21 [#125](https://github.com/openshift/kube-state-metrics/pull/125)
* NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 [#124](https://github.com/openshift/kube-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d...d818e81d447d78e42fc7025e95137a096e8e90f3)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/ce5ff17e9a81ce754567e6dd5053d13409c251e9)
* [OCPBUGS-62566](https://issues.redhat.com/browse/OCPBUGS-62566): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 [#234](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/234)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953...ce5ff17e9a81ce754567e6dd5053d13409c251e9)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9e2dbddfe27080b834c83ef93503f886ad4189b6)
* [OCPBUGS-62564](https://issues.redhat.com/browse/OCPBUGS-62564): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.21 [#70](https://github.com/openshift/kubevirt-csi-driver/pull/70)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...9e2dbddfe27080b834c83ef93503f886ad4189b6)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/74107339f3c7f657c71ef96c4cef900bfbb5eacf)
* [OCPBUGS-63738](https://issues.redhat.com/browse/OCPBUGS-63738): Revert "SPLAT-2526: Refactor openshift-tests-ext" [#1426](https://github.com/openshift/machine-api-operator/pull/1426)
* [SPLAT-2526](https://issues.redhat.com/browse/SPLAT-2526): Refactor openshift-tests-ext [#1423](https://github.com/openshift/machine-api-operator/pull/1423)
* [OCPCLOUD-3072](https://issues.redhat.com/browse/OCPCLOUD-3072): Support AMD SEV-SNP on AWS [#1420](https://github.com/openshift/machine-api-operator/pull/1420)
* [OCPBUGS-62333](https://issues.redhat.com/browse/OCPBUGS-62333): Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 [#1421](https://github.com/openshift/machine-api-operator/pull/1421)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Fixed multi nic e2e to wait for node removal after machineset tests [#1417](https://github.com/openshift/machine-api-operator/pull/1417)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Adjusted machine e2e tests to wait for nodes to clean up [#1415](https://github.com/openshift/machine-api-operator/pull/1415)
* NO-JIRA: Update OWNERS_ALIASES [#1414](https://github.com/openshift/machine-api-operator/pull/1414)
* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): bump openshift/api [#1407](https://github.com/openshift/machine-api-operator/pull/1407)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4a9b90e306a04ddfacfa408609c98b48a1cdea17...74107339f3c7f657c71ef96c4cef900bfbb5eacf)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a43523ef4c49e31e74e9ce9dec1c5178da666984)
* [MCO-1911](https://issues.redhat.com/browse/MCO-1911): Migrate the mco_password test suite from the private repository to the MCO repository [#5374](https://github.com/openshift/machine-config-operator/pull/5374)
* [MCO-1898](https://issues.redhat.com/browse/MCO-1898): MCS serves image-aware first-boot config [#5357](https://github.com/openshift/machine-config-operator/pull/5357)
* [OCPBUGS-62714](https://issues.redhat.com/browse/OCPBUGS-62714): Temporary policy.json for PIS rpm-ostree rebasing [#5345](https://github.com/openshift/machine-config-operator/pull/5345)
* [MCO-1807](https://issues.redhat.com/browse/MCO-1807): Add CPMS support in the MCO's boot image controller [#5332](https://github.com/openshift/machine-config-operator/pull/5332)
* [OCPNODE-3806](https://issues.redhat.com/browse/OCPNODE-3806): Do not change default PSI setting in MCO [#5343](https://github.com/openshift/machine-config-operator/pull/5343)
* [OCPBUGS-62925](https://issues.redhat.com/browse/OCPBUGS-62925): RHEL10 RT kernel packages filtering [#5362](https://github.com/openshift/machine-config-operator/pull/5362)
* NO-ISSUE: Add AMI update automation script [#5351](https://github.com/openshift/machine-config-operator/pull/5351)
* [OCPBUGS-62376](https://issues.redhat.com/browse/OCPBUGS-62376): Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 [#5316](https://github.com/openshift/machine-config-operator/pull/5316)
* [OCPBUGS-52302](https://issues.redhat.com/browse/OCPBUGS-52302): MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields [#5282](https://github.com/openshift/machine-config-operator/pull/5282)
* [OCPBUGS-54682](https://issues.redhat.com/browse/OCPBUGS-54682): Fix - NetworkManager restart or crash renders br-ex unusable [#5304](https://github.com/openshift/machine-config-operator/pull/5304)
* [OCPNODE-3747](https://issues.redhat.com/browse/OCPNODE-3747): Disable Swap mode in Kubelet and enable drop-in directory [#5294](https://github.com/openshift/machine-config-operator/pull/5294)
* [OCPEDGE-2188](https://issues.redhat.com/browse/OCPEDGE-2188): embed fencing validator into TNF MCO [#5285](https://github.com/openshift/machine-config-operator/pull/5285)
* NO-JIRA: shiftstack: Update OWNERS [#5334](https://github.com/openshift/machine-config-operator/pull/5334)
* [OCPBUGS-62510](https://issues.redhat.com/browse/OCPBUGS-62510): Skip rpm-ostree local rebase if no PIS [#5333](https://github.com/openshift/machine-config-operator/pull/5333)
* [OCPBUGS-62493](https://issues.redhat.com/browse/OCPBUGS-62493): Only fire OSImageURLOverridden and set metrics on changes [#5319](https://github.com/openshift/machine-config-operator/pull/5319)
* [MCO-1844](https://issues.redhat.com/browse/MCO-1844): Remove MissingMachineConfig Alert [#5261](https://github.com/openshift/machine-config-operator/pull/5261)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize utility main logic [#5303](https://github.com/openshift/machine-config-operator/pull/5303)
* [OCPBUGS-59968](https://issues.redhat.com/browse/OCPBUGS-59968): Cert Controller should live fetch SAN IPs during cert rotation [#5245](https://github.com/openshift/machine-config-operator/pull/5245)
* [OCPBUGS-62341](https://issues.redhat.com/browse/OCPBUGS-62341): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5305](https://github.com/openshift/machine-config-operator/pull/5305)
* [OCPBUGS-60805](https://issues.redhat.com/browse/OCPBUGS-60805): configure-ovs: work around a Cisco switch issue [#5274](https://github.com/openshift/machine-config-operator/pull/5274)
* [MCO-408](https://issues.redhat.com/browse/MCO-408): Add OpenShift-native access to change logLevel for MachineConfigOperator components [#5291](https://github.com/openshift/machine-config-operator/pull/5291)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Networking: reset ovn-remote config and allow ovnkube controller to s… [#5123](https://github.com/openshift/machine-config-operator/pull/5123)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize file processing logic [#5298](https://github.com/openshift/machine-config-operator/pull/5298)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize redactor [#5295](https://github.com/openshift/machine-config-operator/pull/5295)
* [OCPBUGS-58198](https://issues.redhat.com/browse/OCPBUGS-58198): Fix MCP updated machine count for image mode disabling case [#5271](https://github.com/openshift/machine-config-operator/pull/5271)
* [MCO-1673](https://issues.redhat.com/browse/MCO-1673): Add Component Readiness tests for Azure boot image updates [#5257](https://github.com/openshift/machine-config-operator/pull/5257)
* [MCO-1840](https://issues.redhat.com/browse/MCO-1840): Remove MCN CRD cleanup cronjob [#5234](https://github.com/openshift/machine-config-operator/pull/5234)
* [OCPBUGS-60120](https://issues.redhat.com/browse/OCPBUGS-60120): Add nil/null checks to image registry secret decode [#5253](https://github.com/openshift/machine-config-operator/pull/5253)
* NO-ISSUE: Add delays to reduce TestOSBuildController failures [#5239](https://github.com/openshift/machine-config-operator/pull/5239)
* [MCO-1808](https://issues.redhat.com/browse/MCO-1808): MCO-1790: Implement Azure boot image updates [#5202](https://github.com/openshift/machine-config-operator/pull/5202)
* [OCPBUGS-61695](https://issues.redhat.com/browse/OCPBUGS-61695): Override NMState service definition [#5284](https://github.com/openshift/machine-config-operator/pull/5284)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages recording rule [#5242](https://github.com/openshift/machine-config-operator/pull/5242)
* [CORS-4170](https://issues.redhat.com/browse/CORS-4170): Extending in-cluster DNS support to Azure [#5216](https://github.com/openshift/machine-config-operator/pull/5216)
* [OCPBUGS-60537](https://issues.redhat.com/browse/OCPBUGS-60537): Machine-config controller should actively manage cordon while draining [#5276](https://github.com/openshift/machine-config-operator/pull/5276)
* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Recheck `generatedByControllerVersion` annotation prior to deleting a degraded MC [#5259](https://github.com/openshift/machine-config-operator/pull/5259)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d239f7a5eacf418d8333d021dc02abe3ec176ace...a43523ef4c49e31e74e9ce9dec1c5178da666984)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d958f0bf39ee93368c89919b7dbe23363f38493e)
* [METAL-1564](https://issues.redhat.com/browse/METAL-1564): Use available images [#147](https://github.com/openshift/image-customization-controller/pull/147)
* [OCPBUGS-62505](https://issues.redhat.com/browse/OCPBUGS-62505): Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/image-customization-controller/pull/148)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/20f6d615c03b9c579037cdcdc327bd2bcefde4e6...d958f0bf39ee93368c89919b7dbe23363f38493e)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/28e97553a97b689d068d5523a7cb2b1a6e53df63)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Acquire aarch64 ISO at runtime [#67](https://github.com/openshift/machine-os-images/pull/67)
* [OCPBUGS-56049](https://issues.redhat.com/browse/OCPBUGS-56049): Force rebuild for OCP 4.21 [#66](https://github.com/openshift/machine-os-images/pull/66)
* [OCPBUGS-62596](https://issues.redhat.com/browse/OCPBUGS-62596): Updating ose-machine-os-images-container image to be consistent with ART for 4.21 [#69](https://github.com/openshift/machine-os-images/pull/69)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/64bfec79ae03b50b1da5b614a4cca2937ea9927d...28e97553a97b689d068d5523a7cb2b1a6e53df63)
### [metallb-frr](https://github.com/openshift/frr/tree/e10e0cfd561798433a7399711540b29399842691)
* [OCPBUGS-62371](https://issues.redhat.com/browse/OCPBUGS-62371): Bump the root image version [#109](https://github.com/openshift/frr/pull/109)
* [Full changelog](https://github.com/openshift/frr/compare/fc0fe74f94b415b28d772dbc61f6323171a11b50...e10e0cfd561798433a7399711540b29399842691)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/d0fb01179c00727b12dd4c0e81c07b561e0b26bb)
* NO-JIRA: chore: make dockerfile consistent with konflux, add make podman-cross-build command [#619](https://github.com/openshift/monitoring-plugin/pull/619)
* [OU-1031](https://issues.redhat.com/browse/OU-1031): Show the alert request error to the user [#607](https://github.com/openshift/monitoring-plugin/pull/607)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Regression for Silences [#615](https://github.com/openshift/monitoring-plugin/pull/615)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Add filtering regression tests [#613](https://github.com/openshift/monitoring-plugin/pull/613)
* [OU-1036](https://issues.redhat.com/browse/OU-1036): fetch metric labels from tenancy path when appropriate [#608](https://github.com/openshift/monitoring-plugin/pull/608)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Regression for Charts Display [#609](https://github.com/openshift/monitoring-plugin/pull/609)
* NO-JIRA: Display incidents' last update time [#610](https://github.com/openshift/monitoring-plugin/pull/610)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): Tests for Incidents Redux Related Regressions [#606](https://github.com/openshift/monitoring-plugin/pull/606)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Improve Cypress Incidents Testing Infrastructure [#595](https://github.com/openshift/monitoring-plugin/pull/595)
* [OU-1033](https://issues.redhat.com/browse/OU-1033): close the first dropdown when deselecting incident [#599](https://github.com/openshift/monitoring-plugin/pull/599)
* [OU-1032](https://issues.redhat.com/browse/OU-1032): resolve stale Redux state bug in incidents time range calculation [#598](https://github.com/openshift/monitoring-plugin/pull/598)
* [OCPBUGS-63056](https://issues.redhat.com/browse/OCPBUGS-63056), [OCPBUGS-63061](https://issues.redhat.com/browse/OCPBUGS-63061): Improve alignment with console SDK [#600](https://github.com/openshift/monitoring-plugin/pull/600)
* [OU-1030](https://issues.redhat.com/browse/OU-1030): revert most of my previous changes & avoid flickering when chang… [#596](https://github.com/openshift/monitoring-plugin/pull/596)
* [OU-995](https://issues.redhat.com/browse/OU-995): automation monitoring testing namespace level [#594](https://github.com/openshift/monitoring-plugin/pull/594)
* [OU-1024](https://issues.redhat.com/browse/OU-1024): Add translations for all strings in Incidents page [#570](https://github.com/openshift/monitoring-plugin/pull/570)
* [OU-1022](https://issues.redhat.com/browse/OU-1022): recalculate incident x values when filtering [#589](https://github.com/openshift/monitoring-plugin/pull/589)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): Display determistic start and end dates [#585](https://github.com/openshift/monitoring-plugin/pull/585)
* [OU-999](https://issues.redhat.com/browse/OU-999): automation monitoring plugin image injection and kubevirt installation cleanup working [#590](https://github.com/openshift/monitoring-plugin/pull/590)
* [OCPBUGS-62276](https://issues.redhat.com/browse/OCPBUGS-62276): allow additional TLS config [#580](https://github.com/openshift/monitoring-plugin/pull/580)
* [OCPBUGS-62454](https://issues.redhat.com/browse/OCPBUGS-62454): Updating monitoring-plugin-container image to be consistent with ART for 4.21 [#566](https://github.com/openshift/monitoring-plugin/pull/566)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): Render short-lived incidents and alerts [#581](https://github.com/openshift/monitoring-plugin/pull/581)
* [OU-1016](https://issues.redhat.com/browse/OU-1016): avoid displaying stale alerts data when selecting another incident detail [#573](https://github.com/openshift/monitoring-plugin/pull/573)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Sort alerts by start time [#577](https://github.com/openshift/monitoring-plugin/pull/577)
* NO-JIRA: fix handle empty queries when removing incident filters [#574](https://github.com/openshift/monitoring-plugin/pull/574)
* NO-JIRA: Fix tooltip vertical position [#576](https://github.com/openshift/monitoring-plugin/pull/576)
* [OU-986](https://issues.redhat.com/browse/OU-986): automation removing uncaught exception [#575](https://github.com/openshift/monitoring-plugin/pull/575)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Fix alert loading and processing [#569](https://github.com/openshift/monitoring-plugin/pull/569)
* [OU-1025](https://issues.redhat.com/browse/OU-1025): keep alerts populated for the incident, when the graph is hidden… [#572](https://github.com/openshift/monitoring-plugin/pull/572)
* NO-JIRA: chore: add unit test command and dependencies [#571](https://github.com/openshift/monitoring-plugin/pull/571)
* [OBSINTA-857](https://issues.redhat.com/browse/OBSINTA-857): Cypress add SKIP_ALL_INSTALL [#568](https://github.com/openshift/monitoring-plugin/pull/568)
* NO-JIRA: fix hermetic builds [#564](https://github.com/openshift/monitoring-plugin/pull/564)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents incident traversing robustness [#556](https://github.com/openshift/monitoring-plugin/pull/556)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents mocking metric name change workaround [#553](https://github.com/openshift/monitoring-plugin/pull/553)
* [COO-1134](https://issues.redhat.com/browse/COO-1134): fix: update vulnerable dependencies [#561](https://github.com/openshift/monitoring-plugin/pull/561)
* NO-JIRA: Update .gitignore (Cypress specific) [#558](https://github.com/openshift/monitoring-plugin/pull/558)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): REVERT add a 5 minute to the first alert timestamp [#559](https://github.com/openshift/monitoring-plugin/pull/559)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): add a 5 minute to the first alert timestamp [#550](https://github.com/openshift/monitoring-plugin/pull/550)
* NO-JIRA: automation log and debug mode in headless mode [#557](https://github.com/openshift/monitoring-plugin/pull/557)
* [OU-1015](https://issues.redhat.com/browse/OU-1015): fix: incidents dropdown stays open fix [#554](https://github.com/openshift/monitoring-plugin/pull/554)
* NO-JIRA: Update translations for incidents [#555](https://github.com/openshift/monitoring-plugin/pull/555)
* [OBSINTA-795](https://issues.redhat.com/browse/OBSINTA-795): Data Test Selectors for Incidents Page [#545](https://github.com/openshift/monitoring-plugin/pull/545)
* NO-JIRA: fix: immer dependency anr patternfly icons import [#542](https://github.com/openshift/monitoring-plugin/pull/542)
* [OU-989](https://issues.redhat.com/browse/OU-989): Kubevirt with fixes after namespace level and session handler [#543](https://github.com/openshift/monitoring-plugin/pull/543)
* NO-JIRA: Improve incidents timeline chart domain and loading UX [#551](https://github.com/openshift/monitoring-plugin/pull/551)
* [OU-1005](https://issues.redhat.com/browse/OU-1005): upgrade perses plugins [#540](https://github.com/openshift/monitoring-plugin/pull/540)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Fix alerts chart empty state [#549](https://github.com/openshift/monitoring-plugin/pull/549)
* [RHINENG-20863](https://issues.redhat.com/browse/RHINENG-20863): improved fetching logic for incidents [#546](https://github.com/openshift/monitoring-plugin/pull/546)
* NO-JIRA: Login validation for all session flows [#544](https://github.com/openshift/monitoring-plugin/pull/544)
* [OU-833](https://issues.redhat.com/browse/OU-833): fix 2 bugs for incidents page [#539](https://github.com/openshift/monitoring-plugin/pull/539)
* NO-JIRA: Cypress Testsuite – Enhance Session Management [#536](https://github.com/openshift/monitoring-plugin/pull/536)
* [OBSINTA-463](https://issues.redhat.com/browse/OBSINTA-463): Rename the cluster health metrics [#514](https://github.com/openshift/monitoring-plugin/pull/514)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Update layout and labels [#534](https://github.com/openshift/monitoring-plugin/pull/534)
* [OU-863](https://issues.redhat.com/browse/OU-863): fix step calculation to fix non existent data gaps [#535](https://github.com/openshift/monitoring-plugin/pull/535)
* [RHINENG-20701](https://issues.redhat.com/browse/RHINENG-20701): fix utc timestamps in chart tooltips [#531](https://github.com/openshift/monitoring-plugin/pull/531)
* [OBSINTA-798](https://issues.redhat.com/browse/OBSINTA-798): Cypress Incident Tests – Query Mocking [#521](https://github.com/openshift/monitoring-plugin/pull/521)
* NO-JIRA: set rules as silenced if all alerts are silenced [#533](https://github.com/openshift/monitoring-plugin/pull/533)
* [RHINENG-20667](https://issues.redhat.com/browse/RHINENG-20667): silenced alerts for chart and table [#530](https://github.com/openshift/monitoring-plugin/pull/530)
* [OU-658](https://issues.redhat.com/browse/OU-658): Major Refactor + Adding Namespace dropdown to admin pages [#483](https://github.com/openshift/monitoring-plugin/pull/483)
* NO-JIRA: automation - fix monitoring-plugin injection [#532](https://github.com/openshift/monitoring-plugin/pull/532)
* NO-JIRA: Update build-image.sh [#528](https://github.com/openshift/monitoring-plugin/pull/528)
* [OU-671](https://issues.redhat.com/browse/OU-671): Add Patternfly Theming to Perses [#522](https://github.com/openshift/monitoring-plugin/pull/522)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): fix clear filter bug with incident selected [#527](https://github.com/openshift/monitoring-plugin/pull/527)
* [OU-783](https://issues.redhat.com/browse/OU-783): Fit the alerts timeline to the actual data timespan [#529](https://github.com/openshift/monitoring-plugin/pull/529)
* [OU-727](https://issues.redhat.com/browse/OU-727): Filter incidents by max severity over time [#526](https://github.com/openshift/monitoring-plugin/pull/526)
* [OU-988](https://issues.redhat.com/browse/OU-988): automation - cleanup for all scripts and fix on MP injection [#523](https://github.com/openshift/monitoring-plugin/pull/523)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): Incident ID filter for the Incidents Page [#520](https://github.com/openshift/monitoring-plugin/pull/520)
* [OU-897](https://issues.redhat.com/browse/OU-897): automation OU-721 and hygiene of existing scripts [#519](https://github.com/openshift/monitoring-plugin/pull/519)
* NO-JIRA: automation - regression testing for metrics - changes [#516](https://github.com/openshift/monitoring-plugin/pull/516)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): improved filters for severity and state [#515](https://github.com/openshift/monitoring-plugin/pull/515)
* [OU-501](https://issues.redhat.com/browse/OU-501): automation - dashboards legacy and export csv [#517](https://github.com/openshift/monitoring-plugin/pull/517)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/736cb4836b5b86c2fcf9aed4e87d3f528d6f9246...d0fb01179c00727b12dd4c0e81c07b561e0b26bb)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/6284bf7d0e3163a827aff46afe1df285fbeab135)
* [OCPBUGS-62412](https://issues.redhat.com/browse/OCPBUGS-62412): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 [#110](https://github.com/openshift/multus-admission-controller/pull/110)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/fc73c803caa1140e5a9115ceeb0e38504b001722...6284bf7d0e3163a827aff46afe1df285fbeab135)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)
* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) [#75](https://github.com/openshift/multus-networkpolicy/pull/75)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/278ec20e795c3a590500e789716be7fcc4d7107b...ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)
### [must-gather](https://github.com/openshift/must-gather/tree/ff2a11af23d70278f5332926592a892274464b4e)
* [OSSM-10530](https://issues.redhat.com/browse/OSSM-10530): add Istio/Gateway API gather scripts [#503](https://github.com/openshift/must-gather/pull/503)
* [OCPBUGS-62551](https://issues.redhat.com/browse/OCPBUGS-62551): Updating ose-must-gather-container image to be consistent with ART for 4.21 [#507](https://github.com/openshift/must-gather/pull/507)
* [Full changelog](https://github.com/openshift/must-gather/compare/f0c64742c79afce5e367ca2c7b830ad448abe1df...ff2a11af23d70278f5332926592a892274464b4e)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/8bdeb1b47598f74f713ca8898734e4354e36637c)
* [OCPBUGS-62415](https://issues.redhat.com/browse/OCPBUGS-62415): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 [#97](https://github.com/openshift/bond-cni/pull/97)
* [Full changelog](https://github.com/openshift/bond-cni/compare/dd3c4d0b886138d974022b963e72f2e90293abfe...8bdeb1b47598f74f713ca8898734e4354e36637c)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/6841ce34a290098f99a961ded646513e12dbd66c)
* [OCPBUGS-62414](https://issues.redhat.com/browse/OCPBUGS-62414): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.21 [#137](https://github.com/openshift/network-metrics-daemon/pull/137)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b81340a9fc6963fa3d64d215a12e8528ca797131...6841ce34a290098f99a961ded646513e12dbd66c)
### [network-tools](https://github.com/openshift/network-tools/tree/b3053c24f9799e8357fbed7af82cd8e4643bfab9)
* NO-JIRA: Fix jira ID for new members [#164](https://github.com/openshift/network-tools/pull/164)
* [OCPBUGS-62553](https://issues.redhat.com/browse/OCPBUGS-62553): Updating ose-network-tools-container image to be consistent with ART for 4.21 [#162](https://github.com/openshift/network-tools/pull/162)
* NO-JIRA:Add two new team members [#163](https://github.com/openshift/network-tools/pull/163)
* NO-JIRA: Add Marty P to bug tooling [#161](https://github.com/openshift/network-tools/pull/161)
* [OCPBUGS-53196](https://issues.redhat.com/browse/OCPBUGS-53196): Update references of `master` to `main` [#160](https://github.com/openshift/network-tools/pull/160)
* [Full changelog](https://github.com/openshift/network-tools/compare/26d09174cbd92386469e777e3bf49bfa95d035d5...b3053c24f9799e8357fbed7af82cd8e4643bfab9)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/6b846bf5ba7f456c6901eb299d662eacacb8f55e)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): replace useProjectsWithPrimaryUserDefinedLabel hook for VM networks [#287](https://github.com/openshift/networking-console-plugin/pull/287)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): fix selecting multiple projects for VM network [#286](https://github.com/openshift/networking-console-plugin/pull/286)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): rename VirtualMachine networks to Virtual Machine Networks [#289](https://github.com/openshift/networking-console-plugin/pull/289)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): show VirtualMachine network pages only if nmstate plugin is installed [#288](https://github.com/openshift/networking-console-plugin/pull/288)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): SelectTypeahead selection fixes [#285](https://github.com/openshift/networking-console-plugin/pull/285)
* [CNV-60063](https://issues.redhat.com/browse/CNV-60063): fixing the Create ClusterUserDefinedNetwork form appearance [#280](https://github.com/openshift/networking-console-plugin/pull/280)
* [CNV-62168](https://issues.redhat.com/browse/CNV-62168): Typos in Networking Pages [#277](https://github.com/openshift/networking-console-plugin/pull/277)
* [CNV-56937](https://issues.redhat.com/browse/CNV-56937): Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin [#284](https://github.com/openshift/networking-console-plugin/pull/284)
* [CNV-56937](https://issues.redhat.com/browse/CNV-56937): Hiding the option to create cluster user defined networks or non-priv users [#283](https://github.com/openshift/networking-console-plugin/pull/283)
* [CNV-61569](https://issues.redhat.com/browse/CNV-61569): Mark OVN K8s secondary localnet as deprecated [#282](https://github.com/openshift/networking-console-plugin/pull/282)
* [OCPBUGS-62442](https://issues.redhat.com/browse/OCPBUGS-62442): Updating networking-console-plugin-container image to be consistent with ART for 4.21 [#279](https://github.com/openshift/networking-console-plugin/pull/279)
* [CNV-70018](https://issues.redhat.com/browse/CNV-70018): fix null error [#278](https://github.com/openshift/networking-console-plugin/pull/278)
* Merge [#273](https://github.com/openshift/networking-console-plugin/pull/273)
* [CNV-59876](https://issues.redhat.com/browse/CNV-59876): use correct name space when switching tabs [#276](https://github.com/openshift/networking-console-plugin/pull/276)
* [OCPBUGS-61531](https://issues.redhat.com/browse/OCPBUGS-61531): show VM network menu only on admin [#275](https://github.com/openshift/networking-console-plugin/pull/275)
* [OCPBUGS-61548](https://issues.redhat.com/browse/OCPBUGS-61548): use console extension to render same nad actions [#274](https://github.com/openshift/networking-console-plugin/pull/274)
* [CNV-59629](https://issues.redhat.com/browse/CNV-59629): set default MTU visible in form and yaml [#272](https://github.com/openshift/networking-console-plugin/pull/272)
* [CNV-68685](https://issues.redhat.com/browse/CNV-68685): add primary UDN label info to VirtualMachine network creation form [#271](https://github.com/openshift/networking-console-plugin/pull/271)
* [CNV-68643](https://issues.redhat.com/browse/CNV-68643): fix documentation links [#270](https://github.com/openshift/networking-console-plugin/pull/270)
* [CNV-68676](https://issues.redhat.com/browse/CNV-68676): fix wizard cancel button [#269](https://github.com/openshift/networking-console-plugin/pull/269)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f09c58b909fd6479e0099f7962ef73b70e280685...6b846bf5ba7f456c6901eb299d662eacacb8f55e)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/30e83e611c277c0fe5a633a5c3e6f8d5af212aa6)
* [OCPBUGS-62418](https://issues.redhat.com/browse/OCPBUGS-62418): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 [#51](https://github.com/openshift/cloud-provider-nutanix/pull/51)
* NO-JIRA: Update OWNERS [#50](https://github.com/openshift/cloud-provider-nutanix/pull/50)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b575ef15f13e1434c793ae50824fd0676480be05...30e83e611c277c0fe5a633a5c3e6f8d5af212aa6)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/4de6797aaaa95df3907b43f6208be6cc41913fe1)
* [OCPBUGS-62378](https://issues.redhat.com/browse/OCPBUGS-62378): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 [#123](https://github.com/openshift/machine-api-provider-nutanix/pull/123)
* NO-JIRA: Update OWNERS [#122](https://github.com/openshift/machine-api-provider-nutanix/pull/122)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/3200ddef48a5a8d47b96539419c51f3619cb1fd5...4de6797aaaa95df3907b43f6208be6cc41913fe1)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/152c28fa5090409f892000624a0006e8b489b91b)
* [OCPBUGS-62612](https://issues.redhat.com/browse/OCPBUGS-62612): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#148](https://github.com/openshift/oauth-apiserver/pull/148)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#146](https://github.com/openshift/oauth-apiserver/pull/146)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#142](https://github.com/openshift/oauth-apiserver/pull/142)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa...152c28fa5090409f892000624a0006e8b489b91b)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/39f8426add0e2b669cae3232c3fb793ad1b6bb07)
* [OCPBUGS-62590](https://issues.redhat.com/browse/OCPBUGS-62590): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.21 [#337](https://github.com/openshift/oauth-proxy/pull/337)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991...39f8426add0e2b669cae3232c3fb793ad1b6bb07)
### [oauth-server](https://github.com/openshift/oauth-server/tree/34b3502e2a62f27fba5e5f1a424ddc3e0c1538e0)
* [OCPBUGS-62391](https://issues.redhat.com/browse/OCPBUGS-62391): Updating oauth-server-container image to be consistent with ART for 4.21 [#199](https://github.com/openshift/oauth-server/pull/199)
* [Full changelog](https://github.com/openshift/oauth-server/compare/81098796234cbe75e656ffddd8a015953e0bb1c7...34b3502e2a62f27fba5e5f1a424ddc3e0c1538e0)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/6dc33ccc26b8e899726b4717b04e373fc7ab73a1)
* [CLID-405](https://issues.redhat.com/browse/CLID-405): move v2 code to base folder [#1294](https://github.com/openshift/oc-mirror/pull/1294)
* no-jira: v2: add golangci-lint v2 config [#1295](https://github.com/openshift/oc-mirror/pull/1295)
* [CLID-460](https://issues.redhat.com/browse/CLID-460): Adds a column with the actual implemented logic [#1288](https://github.com/openshift/oc-mirror/pull/1288)
* [CLID-443](https://issues.redhat.com/browse/CLID-443): add mandatory --v1/--v2 flag [#1284](https://github.com/openshift/oc-mirror/pull/1284)
* [OCPBUGS-60571](https://issues.redhat.com/browse/OCPBUGS-60571): reject configurations with duplicated keys and/or entries [#1275](https://github.com/openshift/oc-mirror/pull/1275)
* [CLID-430](https://issues.redhat.com/browse/CLID-430): migration to containers/container-libs [#1255](https://github.com/openshift/oc-mirror/pull/1255)
* [OCPBUGS-55489](https://issues.redhat.com/browse/OCPBUGS-55489): removes unintended exec permissions [#1285](https://github.com/openshift/oc-mirror/pull/1285)
* [OCPBUGS-56398](https://issues.redhat.com/browse/OCPBUGS-56398): Removes the clean up of logs directory [#1289](https://github.com/openshift/oc-mirror/pull/1289)
* [OCPBUGS-62478](https://issues.redhat.com/browse/OCPBUGS-62478): Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) [#1283](https://github.com/openshift/oc-mirror/pull/1283)
* [OCPBUGS-62478](https://issues.redhat.com/browse/OCPBUGS-62478): Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 [#1280](https://github.com/openshift/oc-mirror/pull/1280)
* [OCPBUGS-60929](https://issues.redhat.com/browse/OCPBUGS-60929): generate the archive only after mirroring [#1272](https://github.com/openshift/oc-mirror/pull/1272)
* [OCPBUGS-62106](https://issues.redhat.com/browse/OCPBUGS-62106): v2/cli: show binary version in output [#1273](https://github.com/openshift/oc-mirror/pull/1273)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b51b46d4d6000054d1a11568b3302f709a28bdde...6dc33ccc26b8e899726b4717b04e373fc7ab73a1)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/b2e343a5706fb41b81faaf77d489f951c5da31fe)
* NO-ISSUE: Synchronize From Upstream Repositories [#538](https://github.com/openshift/operator-framework-operator-controller/pull/538)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c69 ) [#539](https://github.com/openshift/operator-framework-operator-controller/pull/539)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups [#536](https://github.com/openshift/operator-framework-operator-controller/pull/536)
* NO-ISSUE: Update to new feature-gate options in helm [#537](https://github.com/openshift/operator-framework-operator-controller/pull/537)
* NO-ISSUE: Synchronize From Upstream Repositories [#532](https://github.com/openshift/operator-framework-operator-controller/pull/532)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): Define Default timeouts and apply their usage accross to avoid flakes [#535](https://github.com/openshift/operator-framework-operator-controller/pull/535)
* NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes [#528](https://github.com/openshift/operator-framework-operator-controller/pull/528)
* [OPRUN-4181](https://issues.redhat.com/browse/OPRUN-4181): UPSTREAM: <carry>: support singleown cases in disconnected [#524](https://github.com/openshift/operator-framework-operator-controller/pull/524)
* NO-ISSUE: Synchronize From Upstream Repositories [#526](https://github.com/openshift/operator-framework-operator-controller/pull/526)
* [OPRUN-4194](https://issues.redhat.com/browse/OPRUN-4194): Update OCP catalogs to v4.21 [#518](https://github.com/openshift/operator-framework-operator-controller/pull/518)
* NO-ISSUE: Synchronize From Upstream Repositories [#523](https://github.com/openshift/operator-framework-operator-controller/pull/523)
* [OPRUN-4197](https://issues.redhat.com/browse/OPRUN-4197): Upgrade OCP image from 4.20 to 4.21 [#517](https://github.com/openshift/operator-framework-operator-controller/pull/517)
* [OPRUN-4134](https://issues.redhat.com/browse/OPRUN-4134): Add 2 new tests for Single/Own Namespace install mode support [#502](https://github.com/openshift/operator-framework-operator-controller/pull/502)
* [OPRUN-4199](https://issues.redhat.com/browse/OPRUN-4199): [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml [#521](https://github.com/openshift/operator-framework-operator-controller/pull/521)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Synchronize from upstream [#519](https://github.com/openshift/operator-framework-operator-controller/pull/519)
* [OPRUN-4176](https://issues.redhat.com/browse/OPRUN-4176): Consolidate build API [#514](https://github.com/openshift/operator-framework-operator-controller/pull/514)
* [OPRUN-4156](https://issues.redhat.com/browse/OPRUN-4156): UPSTREAM: <carry>: support webhook case in disconnected [#508](https://github.com/openshift/operator-framework-operator-controller/pull/508)
* NO-ISSUE: Synchronize From Upstream Repositories [#512](https://github.com/openshift/operator-framework-operator-controller/pull/512)
* [OPRUN-4176](https://issues.redhat.com/browse/OPRUN-4176): Update does-not-exist and simple install to work i… [#510](https://github.com/openshift/operator-framework-operator-controller/pull/510)
* NO-ISSUE: Clean up cp-manifests [#511](https://github.com/openshift/operator-framework-operator-controller/pull/511)
* NO-ISSUE: Synchronize From Upstream Repositories [#506](https://github.com/openshift/operator-framework-operator-controller/pull/506)
* NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite [#507](https://github.com/openshift/operator-framework-operator-controller/pull/507)
* NO-ISSUE: Fix VERSION replacement in catalog bindata [#505](https://github.com/openshift/operator-framework-operator-controller/pull/505)
* NO-ISSUE: Synchronize From Upstream Repositories [#498](https://github.com/openshift/operator-framework-operator-controller/pull/498)
* [OCPBUGS-62753](https://issues.redhat.com/browse/OCPBUGS-62753): for incompatible test add func to wait SA creation [#501](https://github.com/openshift/operator-framework-operator-controller/pull/501)
* NO-ISSUE: Synchronize From Upstream Repositories [#497](https://github.com/openshift/operator-framework-operator-controller/pull/497)
* [OPRUN-4169](https://issues.redhat.com/browse/OPRUN-4169): OTE building controller image [#483](https://github.com/openshift/operator-framework-operator-controller/pull/483)
* [OPRUN-4080](https://issues.redhat.com/browse/OPRUN-4080): Remove kustomize manifests from images and repo [#494](https://github.com/openshift/operator-framework-operator-controller/pull/494)
* NO-ISSUE: Synchronize From Upstream Repositories [#493](https://github.com/openshift/operator-framework-operator-controller/pull/493)
* [OCPBUGS-62372](https://issues.redhat.com/browse/OCPBUGS-62372): Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 [#491](https://github.com/openshift/operator-framework-operator-controller/pull/491)
* NO-ISSUE: Synchronize From Upstream Repositories [#492](https://github.com/openshift/operator-framework-operator-controller/pull/492)
* [OCPBUGS-62370](https://issues.redhat.com/browse/OCPBUGS-62370): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 [#490](https://github.com/openshift/operator-framework-operator-controller/pull/490)
* [OCPQE-30671](https://issues.redhat.com/browse/OCPQE-30671): UPSTREAM: <carry>: migrate more cases from tests-private [#488](https://github.com/openshift/operator-framework-operator-controller/pull/488)
* NO-ISSUE: Synchronize From Upstream Repositories [#489](https://github.com/openshift/operator-framework-operator-controller/pull/489)
* [OPRUN-4160](https://issues.redhat.com/browse/OPRUN-4160): Fix cp-manifests copying of helm charts [#482](https://github.com/openshift/operator-framework-operator-controller/pull/482)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#487](https://github.com/openshift/operator-framework-operator-controller/pull/487)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#484](https://github.com/openshift/operator-framework-operator-controller/pull/484)
* NO-ISSUE: Add pedjak and trgeiger as reviewers [#463](https://github.com/openshift/operator-framework-operator-controller/pull/463)
* NO-ISSUE: Synchronize From Upstream Repositories [#480](https://github.com/openshift/operator-framework-operator-controller/pull/480)
* NO-ISSUE: Synchronize From Upstream Repositories [#479](https://github.com/openshift/operator-framework-operator-controller/pull/479)
* [OCPQE-29416](https://issues.redhat.com/browse/OCPQE-29416): Init OLMv1 OTE Framework for tests-private to migrate first case [#467](https://github.com/openshift/operator-framework-operator-controller/pull/467)
* [OPRUN-4076](https://issues.redhat.com/browse/OPRUN-4076), [OPRUN-4078](https://issues.redhat.com/browse/OPRUN-4078): Replace kustomize config with helm config [#475](https://github.com/openshift/operator-framework-operator-controller/pull/475)
* NO-ISSUE: add jiazha to approvers [#477](https://github.com/openshift/operator-framework-operator-controller/pull/477)
* NO-ISSUE: Synchronize From Upstream Repositories [#476](https://github.com/openshift/operator-framework-operator-controller/pull/476)
* NO-ISSUE: Synchronize From Upstream Repositories [#473](https://github.com/openshift/operator-framework-operator-controller/pull/473)
* NO-ISSUE: Synchronize From Upstream Repositories [#471](https://github.com/openshift/operator-framework-operator-controller/pull/471)
* NO-ISSUE: Synchronize From Upstream Repositories [#465](https://github.com/openshift/operator-framework-operator-controller/pull/465)
* NO-ISSUE: Grant QE approver permissions for OTE contributions [#457](https://github.com/openshift/operator-framework-operator-controller/pull/457)
* NO-ISSUE: Synchronize From Upstream Repositories [#464](https://github.com/openshift/operator-framework-operator-controller/pull/464)
* NO-ISSUE: Synchronize From Upstream Repositories [#456](https://github.com/openshift/operator-framework-operator-controller/pull/456)
* [OCPBUGS-60868](https://issues.redhat.com/browse/OCPBUGS-60868): Revert "Handle service-ca cert availability/rotation" [#460](https://github.com/openshift/operator-framework-operator-controller/pull/460)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/3e2401f23ef666e8f33789a397d81a7d352b0a33...b2e343a5706fb41b81faaf77d489f951c5da31fe)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/42d570e1098bbfee31e3a86b7a5c56417bc77cdb)
* NO-JIRA: Created an OWNERS file for the tests-extension directory for separate ote scaffold [#567](https://github.com/openshift/openshift-apiserver/pull/567)
* [OCPBUGS-62516](https://issues.redhat.com/browse/OCPBUGS-62516): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 [#560](https://github.com/openshift/openshift-apiserver/pull/560)
* [OCPBUGS-61768](https://issues.redhat.com/browse/OCPBUGS-61768): update pkg/image/OWNERS [#555](https://github.com/openshift/openshift-apiserver/pull/555)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#556](https://github.com/openshift/openshift-apiserver/pull/556)
* [OCPBUGS-61228](https://issues.redhat.com/browse/OCPBUGS-61228): Bump Route generation when spec is updated [#550](https://github.com/openshift/openshift-apiserver/pull/550)
* [OCPBUGS-37215](https://issues.redhat.com/browse/OCPBUGS-37215): pkg/image: conditionally parse raw image manifest [#551](https://github.com/openshift/openshift-apiserver/pull/551)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#549](https://github.com/openshift/openshift-apiserver/pull/549)
* [OCPBUGS-57474](https://issues.redhat.com/browse/OCPBUGS-57474): ensure cache invalidation after a time [#547](https://github.com/openshift/openshift-apiserver/pull/547)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a1535bf4ed12bd3210135bbe459f9324875f24ce...42d570e1098bbfee31e3a86b7a5c56417bc77cdb)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/433bd500afb879dd82e27336359cd4e3051245b0)
* [OCPBUGS-62559](https://issues.redhat.com/browse/OCPBUGS-62559): Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.21 [#414](https://github.com/openshift/openshift-controller-manager/pull/414)
* [OCPBUGS-61899](https://issues.redhat.com/browse/OCPBUGS-61899): CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging [#419](https://github.com/openshift/openshift-controller-manager/pull/419)
* [CNTRLPLANE-1308](https://issues.redhat.com/browse/CNTRLPLANE-1308): set up openshift-tests-extension for openshift-controller-manager and add a sanity test [#417](https://github.com/openshift/openshift-controller-manager/pull/417)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/d9e543dd31e981f279c447e4f92f0dac3f665f9e...433bd500afb879dd82e27336359cd4e3051245b0)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8)
* [OCPBUGS-62431](https://issues.redhat.com/browse/OCPBUGS-62431): Updating openshift-state-metrics-container image to be consistent with ART for 4.21 [#126](https://github.com/openshift/openshift-state-metrics/pull/126)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/b04e2ef05498c2a4504bd9396a3290c4f263fc37...ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/19b666d6f3675775e0cdf2e0a9f243800c3c5da6)
* [OCPBUGS-62567](https://issues.redhat.com/browse/OCPBUGS-62567): Updating openstack-cluster-api-controllers-container image to be cons… [#379](https://github.com/openshift/cluster-api-provider-openstack/pull/379)
* NO-JIRA: Fix internal vendoring [#378](https://github.com/openshift/cluster-api-provider-openstack/pull/378)
* NO-JIRA: shiftstack: Update OWNERS [#377](https://github.com/openshift/cluster-api-provider-openstack/pull/377)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...19b666d6f3675775e0cdf2e0a9f243800c3c5da6)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/2011501b227250ea1ee403b6a93aa4d17dd19ad1)
* [OCPBUGS-62473](https://issues.redhat.com/browse/OCPBUGS-62473): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/machine-api-provider-openstack/pull/138)
* NO-JIRA: shiftstack: Update OWNERS [#139](https://github.com/openshift/machine-api-provider-openstack/pull/139)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5085f184c7d2ed21f36e5e3fe65bf023b38afe67...2011501b227250ea1ee403b6a93aa4d17dd19ad1)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72)
* [OCPBUGS-62455](https://issues.redhat.com/browse/OCPBUGS-62455): Updating openstack-resource-controller-container image to be consistent with ART for 4.21 [#22](https://github.com/openshift/openstack-resource-controller/pull/22)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc...70f5ad34915041c82ad0a8ed6ea64bd8859d1e72)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/4d2698b29ca486fdc0ef083df25b7bc58a22f483)
* NO-ISSUE: Synchronize From Upstream Repositories [#1134](https://github.com/openshift/operator-framework-olm/pull/1134)
* NO-ISSUE: Update verify_commits.sh to use main branch [#1127](https://github.com/openshift/operator-framework-olm/pull/1127)
* [OCPQE-30995](https://issues.redhat.com/browse/OCPQE-30995): Define AI Guide for OLMv0 QE Migration cases [#1128](https://github.com/openshift/operator-framework-olm/pull/1128)
* [OCPBUGS-59768](https://issues.redhat.com/browse/OCPBUGS-59768): Synchronize From Upstream Repositories [#1129](https://github.com/openshift/operator-framework-olm/pull/1129)
* [OCPQE-30680](https://issues.redhat.com/browse/OCPQE-30680): migrate opm cases to OTE [#1126](https://github.com/openshift/operator-framework-olm/pull/1126)
* [OCPQE-30741](https://issues.redhat.com/browse/OCPQE-30741): support opm cases [#1121](https://github.com/openshift/operator-framework-olm/pull/1121)
* [OCPQE-30781](https://issues.redhat.com/browse/OCPQE-30781): support hypershift binary [#1119](https://github.com/openshift/operator-framework-olm/pull/1119)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): migrate more cases from tests-private to make layout [#1118](https://github.com/openshift/operator-framework-olm/pull/1118)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): correct suite name [#1117](https://github.com/openshift/operator-framework-olm/pull/1117)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): enhance filters to add more suites [#1116](https://github.com/openshift/operator-framework-olm/pull/1116)
* NO-ISSUE: Synchronize From Upstream Repositories [#1115](https://github.com/openshift/operator-framework-olm/pull/1115)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add testing framework based on OTE and the first tests-private case [#1113](https://github.com/openshift/operator-framework-olm/pull/1113)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): move golangci-lint and go-bindata to new location to fix sync [#1114](https://github.com/openshift/operator-framework-olm/pull/1114)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add OTE into olmv0 with new location [#1108](https://github.com/openshift/operator-framework-olm/pull/1108)
* NO-ISSUE: Synchronize From Upstream Repositories [#1112](https://github.com/openshift/operator-framework-olm/pull/1112)
* NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers [#1110](https://github.com/openshift/operator-framework-olm/pull/1110)
* Revert "OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0" [#1109](https://github.com/openshift/operator-framework-olm/pull/1109)
* NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 [#1106](https://github.com/openshift/operator-framework-olm/pull/1106)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): UPSTREAM: <carry>: add OTE into olmv0 [#1105](https://github.com/openshift/operator-framework-olm/pull/1105)
* NO-ISSUE: set package-server-manager as default container [#1104](https://github.com/openshift/operator-framework-olm/pull/1104)
* NO-ISSUE: Synchronize From Upstream Repositories [#1103](https://github.com/openshift/operator-framework-olm/pull/1103)
* NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 [#1100](https://github.com/openshift/operator-framework-olm/pull/1100)
* NO-ISSUE: Synchronize From Upstream Repositories [#1101](https://github.com/openshift/operator-framework-olm/pull/1101)
* NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 [#1094](https://github.com/openshift/operator-framework-olm/pull/1094)
* NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions [#1092](https://github.com/openshift/operator-framework-olm/pull/1092)
* NO-ISSUE: Synchronize From Upstream Repositories [#1088](https://github.com/openshift/operator-framework-olm/pull/1088)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/10d327b38876b2fbc654ddc54eee6199ea0dbbb8...4d2698b29ca486fdc0ef083df25b7bc58a22f483)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ead8b7e18a400bb3efd8970972d4e1046b4456fd)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 [#682](https://github.com/operator-framework/operator-marketplace/pull/682)
* NO-ISSUE: 🌱 Upgrade dependencies ( github.com/openshift/api, github.com/openshift/library-go and indirect github.com/prometheus/procfs ) [#681](https://github.com/operator-framework/operator-marketplace/pull/681)
* NO-ISSUE: Upgrade OCP dependencies [#680](https://github.com/operator-framework/operator-marketplace/pull/680)
* [OPRUN-4198](https://issues.redhat.com/browse/OPRUN-4198): Upgrade deps to have compatible k8s version [#676](https://github.com/operator-framework/operator-marketplace/pull/676)
* [OPRUN-4198](https://issues.redhat.com/browse/OPRUN-4198): upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo [#677](https://github.com/operator-framework/operator-marketplace/pull/677)
* NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 [#678](https://github.com/operator-framework/operator-marketplace/pull/678)
* [OCPBUGS-62384](https://issues.redhat.com/browse/OCPBUGS-62384): Updating marketplace-operator-container image to be consistent with ART for 4.21 [#674](https://github.com/operator-framework/operator-marketplace/pull/674)
* NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 [#661](https://github.com/operator-framework/operator-marketplace/pull/661)
* [OCPBUGS-62132](https://issues.redhat.com/browse/OCPBUGS-62132): Remove Expect func so that the test case can use the retry logic [#665](https://github.com/operator-framework/operator-marketplace/pull/665)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 [#658](https://github.com/operator-framework/operator-marketplace/pull/658)
* NO-ISSUE: Update CRD version installed via makefile target [#648](https://github.com/operator-framework/operator-marketplace/pull/648)
* NO-ISSUE: Fix hyperlink [#651](https://github.com/operator-framework/operator-marketplace/pull/651)
* [OCPBUGS-60669](https://issues.redhat.com/browse/OCPBUGS-60669): Add NetworkPolicy for hypershift [#656](https://github.com/operator-framework/operator-marketplace/pull/656)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c6abd3acc6af77a7f117bd89cececfae8c4830b1...ead8b7e18a400bb3efd8970972d4e1046b4456fd)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f16540770027ce1480bce084b5b916c07677df82)
* [OCPBUGS-50709](https://issues.redhat.com/browse/OCPBUGS-50709): DownStream Merge [10-28-2025] [#2832](https://github.com/openshift/ovn-kubernetes/pull/2832)
* [OCPBUGS-56749](https://issues.redhat.com/browse/OCPBUGS-56749): DownStream Merge [10-24-2025] [#2829](https://github.com/openshift/ovn-kubernetes/pull/2829)
* [OCPBUGS-59552](https://issues.redhat.com/browse/OCPBUGS-59552), [OCPBUGS-61865](https://issues.redhat.com/browse/OCPBUGS-61865), [OCPBUGS-62636](https://issues.redhat.com/browse/OCPBUGS-62636): DownStream Merge [10-19-2025] [#2817](https://github.com/openshift/ovn-kubernetes/pull/2817)
* [OCPBUGS-62546](https://issues.redhat.com/browse/OCPBUGS-62546): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.21 [#2772](https://github.com/openshift/ovn-kubernetes/pull/2772)
* [CORENET-6160](https://issues.redhat.com/browse/CORENET-6160): DownStream Merge [10-10-2025] [#2798](https://github.com/openshift/ovn-kubernetes/pull/2798)
* [OCPBUGS-62545](https://issues.redhat.com/browse/OCPBUGS-62545): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 [#2771](https://github.com/openshift/ovn-kubernetes/pull/2771)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055): Dockerfile: Unpin OVN and consume the latest from FDP. [#2721](https://github.com/openshift/ovn-kubernetes/pull/2721)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303), [OCPBUGS-56783](https://issues.redhat.com/browse/OCPBUGS-56783): DownStream Merge [10-08-2025] [#2790](https://github.com/openshift/ovn-kubernetes/pull/2790)
* [OCPBUGS-62574](https://issues.redhat.com/browse/OCPBUGS-62574): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 [#2756](https://github.com/openshift/ovn-kubernetes/pull/2756)
* [OCPBUGS-60468](https://issues.redhat.com/browse/OCPBUGS-60468): DownStream Merge [09-23-2025] [#2762](https://github.com/openshift/ovn-kubernetes/pull/2762)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303), [OCPBUGS-58501](https://issues.redhat.com/browse/OCPBUGS-58501), [OCPBUGS-59657](https://issues.redhat.com/browse/OCPBUGS-59657), [OCPBUGS-61566](https://issues.redhat.com/browse/OCPBUGS-61566): DownStream Merge [09-09-2025] [#2750](https://github.com/openshift/ovn-kubernetes/pull/2750)
* [OCPBUGS-61065](https://issues.redhat.com/browse/OCPBUGS-61065): Adding ovndb-raft-functions.sh to ovnk image [#2740](https://github.com/openshift/ovn-kubernetes/pull/2740)
* NO-JIRA: DownStream Merge [08-27-2025] [#2736](https://github.com/openshift/ovn-kubernetes/pull/2736)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/050ed2c215b55aef456c73c5217427600756ae75...f16540770027ce1480bce084b5b916c07677df82)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)
* Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/81cde359b14d706804e53d88a423ad0c726a92f9)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#89](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/89)
* [OCPBUGS-62373](https://issues.redhat.com/browse/OCPBUGS-62373): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#88](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/88)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...81cde359b14d706804e53d88a423ad0c726a92f9)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/969a04e9dcb4cdde10e3038a9e28d2e27548918d)
* [OCPBUGS-62515](https://issues.redhat.com/browse/OCPBUGS-62515): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 [#88](https://github.com/openshift/cloud-provider-powervs/pull/88)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4...969a04e9dcb4cdde10e3038a9e28d2e27548918d)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/a4dee9d7237df12bca941080a9801e4d2398d81c)
* [OCPBUGS-62519](https://issues.redhat.com/browse/OCPBUGS-62519): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 [#129](https://github.com/openshift/machine-api-provider-powervs/pull/129)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/f011b3c727c5377302b2ab0a203457490b930a3d...a4dee9d7237df12bca941080a9801e4d2398d81c)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494)
* [OCPBUGS-62508](https://issues.redhat.com/browse/OCPBUGS-62508): Updating prom-label-proxy-container image to be consistent with ART for 4.21 [#386](https://github.com/openshift/prom-label-proxy/pull/386)
* NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 [#385](https://github.com/openshift/prom-label-proxy/pull/385)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...610c11b59dd17f1d6dc35b62ca1d0602b5c0f494)
### [prometheus](https://github.com/openshift/prometheus/tree/ad27870101a40340f4ec54f8db8a324ba1d4f548)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 [#278](https://github.com/openshift/prometheus/pull/278)
* NO-JIRA: update Prometheus to v3.6.0 [#277](https://github.com/openshift/prometheus/pull/277)
* [OCPBUGS-62401](https://issues.redhat.com/browse/OCPBUGS-62401): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 [#274](https://github.com/openshift/prometheus/pull/274)
* [OCPBUGS-62166](https://issues.redhat.com/browse/OCPBUGS-62166): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#272](https://github.com/openshift/prometheus/pull/272)
* NO-JIRA: [bot] sync rh-manifest.txt [#261](https://github.com/openshift/prometheus/pull/261)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore: compute highestTimestamp at queryManager level [#262](https://github.com/openshift/prometheus/pull/262)
* [Full changelog](https://github.com/openshift/prometheus/compare/af9b206808f8eaeb4acec7fe74ba6b145bbdc921...ad27870101a40340f4ec54f8db8a324ba1d4f548)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/ad4aede0b0370bd1cbe4a97909865241845e55b5)
* [OCPBUGS-62428](https://issues.redhat.com/browse/OCPBUGS-62428): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/prometheus-alertmanager/pull/107)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/419f2843332265d44982920d6fb4db220ec26f91...ad4aede0b0370bd1cbe4a97909865241845e55b5)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/417f45abe76d10634105551abc4683d97bf6aa9f)
* NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 [#345](https://github.com/openshift/prometheus-operator/pull/345)
* [MON-4395](https://issues.redhat.com/browse/MON-4395): Bump openshift/prometheus-operator to v0.86.0 [#344](https://github.com/openshift/prometheus-operator/pull/344)
* [OCPBUGS-62448](https://issues.redhat.com/browse/OCPBUGS-62448): Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 [#341](https://github.com/openshift/prometheus-operator/pull/341)
* [OCPBUGS-62542](https://issues.redhat.com/browse/OCPBUGS-62542): Updating prometheus-operator-container image to be consistent with ART for 4.21 [#342](https://github.com/openshift/prometheus-operator/pull/342)
* Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 [#340](https://github.com/openshift/prometheus-operator/pull/340)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666...417f45abe76d10634105551abc4683d97bf6aa9f)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/39d728735779afef886bc10a8bc7cf72f54d51a0)
* [OCPBUGS-62727](https://issues.redhat.com/browse/OCPBUGS-62727): Bump openshift/node_exporter to v1.10.2 [#172](https://github.com/openshift/node_exporter/pull/172)
* NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 [#170](https://github.com/openshift/node_exporter/pull/170)
* [Full changelog](https://github.com/openshift/node_exporter/compare/56f6158e797ab80e5e0da2cb0ba701cb02902ef7...39d728735779afef886bc10a8bc7cf72f54d51a0)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c337cf413bbbfc2154dc1d3c1bf8007ea1edfbc8)
* [OCPBUGS-62586](https://issues.redhat.com/browse/OCPBUGS-62586): Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 [#65](https://github.com/openshift/route-controller-manager/pull/65)
* [NE-2169](https://issues.redhat.com/browse/NE-2169): Move annotations and metrics to a constants file [#66](https://github.com/openshift/route-controller-manager/pull/66)
* NO-JIRA: Add new team members to OWNERS [#64](https://github.com/openshift/route-controller-manager/pull/64)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20...c337cf413bbbfc2154dc1d3c1bf8007ea1edfbc8)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/87df21ba56cebef9c3ead023ceb8a5b5e4e277d6)
* [TRT-2385](https://issues.redhat.com/browse/TRT-2385): Remove all tests and add fake test that always passes [#289](https://github.com/openshift/service-ca-operator/pull/289)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate OTE scaffold for service-ca-operator [#285](https://github.com/openshift/service-ca-operator/pull/285)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate ote scaffold for test extension [#283](https://github.com/openshift/service-ca-operator/pull/283)
* NO-JIRA:Created an OWNERS file for the tests-extension directory [#284](https://github.com/openshift/service-ca-operator/pull/284)
* [OCPBUGS-62377](https://issues.redhat.com/browse/OCPBUGS-62377): Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 [#276](https://github.com/openshift/service-ca-operator/pull/276)
* [OCPBUGS-63124](https://issues.redhat.com/browse/OCPBUGS-63124): Fix e2e-aws-operator e2e test failures [#281](https://github.com/openshift/service-ca-operator/pull/281)
* [OCPBUGS-56599](https://issues.redhat.com/browse/OCPBUGS-56599): don't hotloop on secret creation errors [#274](https://github.com/openshift/service-ca-operator/pull/274)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/37e0c31790b6a954214817974a56c9a699d0cf78...87df21ba56cebef9c3ead023ceb8a5b5e4e277d6)
### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/2b6ac09e306e4b2fa293a887ef88196bfe6c3143)
* NO-JIRA: update the okd repo for 4.21 [#1862](https://github.com/openshift/os/pull/1862)
* NO-JIRA: OWNERS: switch to joelcapitao [#1861](https://github.com/openshift/os/pull/1861)
* NO-JIRA: bump version to 4.21 [#1860](https://github.com/openshift/os/pull/1860)
* [Full changelog](https://github.com/openshift/os/compare/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f...2b6ac09e306e4b2fa293a887ef88196bfe6c3143)
### [telemeter](https://github.com/openshift/telemeter/tree/0634eee9f7efb2c53eb3b13f9ebfb1315386e285)
* Updating telemeter-container image to be consistent with ART for 4.21 [#565](https://github.com/openshift/telemeter/pull/565)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...0634eee9f7efb2c53eb3b13f9ebfb1315386e285)
### [tests](https://github.com/openshift/origin/tree/387947a603b155fae1aef09f9216ba95d3548527)
* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert "Revert "Merge pull request #30296 from hongkailiu/OTA-1637-reboot"" [#30438](https://github.com/openshift/origin/pull/30438)
* [OCPBUGS-63333](https://issues.redhat.com/browse/OCPBUGS-63333): Add Dot Net 9.0 to Origin Tests [#30401](https://github.com/openshift/origin/pull/30401)
* [STOR-2340](https://issues.redhat.com/browse/STOR-2340): Add e2e tests for storage network policy [#30359](https://github.com/openshift/origin/pull/30359)
* [TRT-2373](https://issues.redhat.com/browse/TRT-2373): Revert "Revert "Merge pull request openshift#30269 from hongkailiu/OTA-1626"" [#30426](https://github.com/openshift/origin/pull/30426)
* [CNTRLPLANE-1485](https://issues.redhat.com/browse/CNTRLPLANE-1485): fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30307](https://github.com/openshift/origin/pull/30307)
* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert #30296 "OTA-1637: ClusterOperators should not go Progressing only for a node reboot" [#30437](https://github.com/openshift/origin/pull/30437)
* NO-ISSUE: Automated - Update synthetic test data [#30416](https://github.com/openshift/origin/pull/30416)
* [OCPBUGS-63201](https://issues.redhat.com/browse/OCPBUGS-63201): Updated the upgrade duration limit to 100 minutes for ppc64le [#30390](https://github.com/openshift/origin/pull/30390)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Revert " flake the missing port 9194 and 9193 once the team will fix will remove it" [#30430](https://github.com/openshift/origin/pull/30430)
* [OTA-1637](https://issues.redhat.com/browse/OTA-1637): ClusterOperators should not go Progressing only for a node reboot [#30296](https://github.com/openshift/origin/pull/30296)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): tests: authorization/rbac: Align restricted-v3 rule [#30427](https://github.com/openshift/origin/pull/30427)
* [OCPBUGS-57334](https://issues.redhat.com/browse/OCPBUGS-57334): Redact bearertoken in TestContext [#29912](https://github.com/openshift/origin/pull/29912)
* [OCPBUGS-63383](https://issues.redhat.com/browse/OCPBUGS-63383): Fix empty operator name [#30407](https://github.com/openshift/origin/pull/30407)
* [OCPBUGS-61376](https://issues.redhat.com/browse/OCPBUGS-61376): Isolate HPA tests [#30411](https://github.com/openshift/origin/pull/30411)
* [TRT-2373](https://issues.redhat.com/browse/TRT-2373): Revert #30269 "OTA-1626: fail CI if any ClusterOperator takes too long to update" [#30425](https://github.com/openshift/origin/pull/30425)
* [OCPBUGS-63519](https://issues.redhat.com/browse/OCPBUGS-63519): flake the missing port 9194 and 9193 once the team will fix will remove it [#30424](https://github.com/openshift/origin/pull/30424)
* [TRT-2144](https://issues.redhat.com/browse/TRT-2144): Add tcpdump to in cluster disruption monitor test when disruption is … [#30177](https://github.com/openshift/origin/pull/30177)
* NO-JIRA: fix hcpclustername [#30422](https://github.com/openshift/origin/pull/30422)
* NO-ISSUE: Fixing and investigating flakes during overlapping test execution [#30410](https://github.com/openshift/origin/pull/30410)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): tests: authorization/rbac: Add restricted-v3 scc [#30384](https://github.com/openshift/origin/pull/30384)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#30346](https://github.com/openshift/origin/pull/30346)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): add a test that should validate the communication matrix ports match the node's listening ports [#30003](https://github.com/openshift/origin/pull/30003)
* NO-JIRA: known-image-checker: do nothing in WriteContentToStorage [#30344](https://github.com/openshift/origin/pull/30344)
* [OTA-1626](https://issues.redhat.com/browse/OTA-1626): fail CI if any ClusterOperator takes too long to update [#30269](https://github.com/openshift/origin/pull/30269)
* NO-JIRA: Extend project deletion timeout [#30393](https://github.com/openshift/origin/pull/30393)
* NO-JIRA: enhance TNF e2e test to handle quick member promotion [#30385](https://github.com/openshift/origin/pull/30385)
* [CNTRLPLANE-1662](https://issues.redhat.com/browse/CNTRLPLANE-1662): Migrate OCP-32383 to upstream [#30378](https://github.com/openshift/origin/pull/30378)
* [CORENET-6373](https://issues.redhat.com/browse/CORENET-6373): ovn-k, virt, preconfigured udn addresses: Test MAC conflict detection [#30314](https://github.com/openshift/origin/pull/30314)
* NO-ISSUE: Automated - Update synthetic test data [#30334](https://github.com/openshift/origin/pull/30334)
* [OCPBUGS-56281](https://issues.redhat.com/browse/OCPBUGS-56281): gatewayapicontroller: Use dynamic client for OLM [#30397](https://github.com/openshift/origin/pull/30397)
* [MULTIARCH-5391](https://issues.redhat.com/browse/MULTIARCH-5391): Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite [#30239](https://github.com/openshift/origin/pull/30239)
* [OCPBUGS-62359](https://issues.redhat.com/browse/OCPBUGS-62359): Check more operatorsProgressing [#30367](https://github.com/openshift/origin/pull/30367)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): some enhancement for e2e-analysis [#30276](https://github.com/openshift/origin/pull/30276)
* [OCPBUGS-63149](https://issues.redhat.com/browse/OCPBUGS-63149): revert https://github.com/openshift/origin/pull/30054 [#30386](https://github.com/openshift/origin/pull/30386)
* NO-JIRA: Combine global and command args in BackgroundRC [#30382](https://github.com/openshift/origin/pull/30382)
* NO-JIRA: MCO add GetAlerts to the Monitor thanos struct [#30379](https://github.com/openshift/origin/pull/30379)
* NO-JIRA: enhance-waitnodeready-util [#30377](https://github.com/openshift/origin/pull/30377)
* [OCPBUGS-63040](https://issues.redhat.com/browse/OCPBUGS-63040): Add imagestream update dryrun test [#30357](https://github.com/openshift/origin/pull/30357)
* [OCPEDGE-1565](https://issues.redhat.com/browse/OCPEDGE-1565): [TNF] Add double node failure recovery test [#30370](https://github.com/openshift/origin/pull/30370)
* NO-JIRA: implement WithoutKubeconf method to clear config path [#30371](https://github.com/openshift/origin/pull/30371)
* NO-JIRA: `oc adm upgrade status`: Record err and outputs [#30151](https://github.com/openshift/origin/pull/30151)
* NO-JIRA:I Fixing race condtion [#30360](https://github.com/openshift/origin/pull/30360)
* [OCPBUGS-62552](https://issues.redhat.com/browse/OCPBUGS-62552): Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 [#30327](https://github.com/openshift/origin/pull/30327)
* NO-JIRA: init lease-checker namespaces [#30373](https://github.com/openshift/origin/pull/30373)
* NO-JIRA: generate unique namespace names for UDN tests [#30348](https://github.com/openshift/origin/pull/30348)
* NO-JIRA: update namespace privilege check to use PSA label [#30355](https://github.com/openshift/origin/pull/30355)
* [OCPBUGS-56281](https://issues.redhat.com/browse/OCPBUGS-56281): gatewayapicontroller: Clean up resources when done [#29900](https://github.com/openshift/origin/pull/29900)
* NO-JIRA: another attempt at disabling blank issues [#30369](https://github.com/openshift/origin/pull/30369)
* NO-JIRA: Make it clear that we do not monitor GH issues [#30368](https://github.com/openshift/origin/pull/30368)
* NO-JIRA: Update OWNERS for compat_otp [#30361](https://github.com/openshift/origin/pull/30361)
* NO-ISSUE: Add webhook image for the olmv1 tests [#30356](https://github.com/openshift/origin/pull/30356)
* [OTA-1637](https://issues.redhat.com/browse/OTA-1637): ClusterOperators should not go Progressing only for cluster scaling [#30297](https://github.com/openshift/origin/pull/30297)
* [OCPBUGS-60593](https://issues.redhat.com/browse/OCPBUGS-60593): Skip oauth test for external control plane topology [#30200](https://github.com/openshift/origin/pull/30200)
* [TRT-2351](https://issues.redhat.com/browse/TRT-2351): Revert "NO-JIRA: Improve case execution time" [#30363](https://github.com/openshift/origin/pull/30363)
* [TRT-2349](https://issues.redhat.com/browse/TRT-2349): Revert "make TLS registry tests required" [#30358](https://github.com/openshift/origin/pull/30358)
* [OCPNODE-3238](https://issues.redhat.com/browse/OCPNODE-3238): Add SigstoreImageVerificationPKI image policy validation tests [#30315](https://github.com/openshift/origin/pull/30315)
* [TRT-2346](https://issues.redhat.com/browse/TRT-2346): Fix not initializing adminRESTConfig [#30345](https://github.com/openshift/origin/pull/30345)
* [OCPBUGS-60853](https://issues.redhat.com/browse/OCPBUGS-60853): make TLS registry tests required [#29074](https://github.com/openshift/origin/pull/29074)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): remove upstream annotation framework [#30340](https://github.com/openshift/origin/pull/30340)
* NO-JIRA: Filter preconfiguredIPs based on cluster IP family support [#30338](https://github.com/openshift/origin/pull/30338)
* NO-JIRA: Improve case execution time [#30329](https://github.com/openshift/origin/pull/30329)
* [CORENET-6363](https://issues.redhat.com/browse/CORENET-6363): Add PreconfiguredUDNAddresses duplicate IP detection tests [#30197](https://github.com/openshift/origin/pull/30197)
* [OCPBUGS-62701](https://issues.redhat.com/browse/OCPBUGS-62701): Revert TRT-1854: remove upstream annotation framework [#30337](https://github.com/openshift/origin/pull/30337)
* Revert "Revert "NO-JIRA: Add olm into the known operator set"" [#30325](https://github.com/openshift/origin/pull/30325)
* NO-JIRA: BugFix- don't modify finalArgs in Template func [#30328](https://github.com/openshift/origin/pull/30328)
* [OCPNODE-3659](https://issues.redhat.com/browse/OCPNODE-3659): Not fail upgrade checks if all nodes are ready [#30318](https://github.com/openshift/origin/pull/30318)
* [OCPBUGS-62249](https://issues.redhat.com/browse/OCPBUGS-62249): Tweak Endpoints admission test for upcoming change [#30304](https://github.com/openshift/origin/pull/30304)
* [MCO-1828](https://issues.redhat.com/browse/MCO-1828): Remove pathological test in disruptive [#30272](https://github.com/openshift/origin/pull/30272)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add test that the ServiceCIDR API is blocked [#30234](https://github.com/openshift/origin/pull/30234)
* NO-JIRA: `oc adm upgrade status`: Skip test in multihop update jobs [#30150](https://github.com/openshift/origin/pull/30150)
* [MCO-1865](https://issues.redhat.com/browse/MCO-1865): Update MCO tests to be in only one test suite each [#30309](https://github.com/openshift/origin/pull/30309)
* [OCPBUGS-62474](https://issues.redhat.com/browse/OCPBUGS-62474): CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator [#30270](https://github.com/openshift/origin/pull/30270)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): remove upstream annotation framework [#30305](https://github.com/openshift/origin/pull/30305)
* Revert "NO-JIRA: Add olm into the known operator set" [#30313](https://github.com/openshift/origin/pull/30313)
* NO-JIRA: Add olm into the known operator set [#30308](https://github.com/openshift/origin/pull/30308)
* [MCO-1875](https://issues.redhat.com/browse/MCO-1875): Bump timeout for vSphereBootimageUpdate tests [#30288](https://github.com/openshift/origin/pull/30288)
* NO-ISSUE: Automated - Update synthetic test data [#30277](https://github.com/openshift/origin/pull/30277)
* [OCPBUGS-62227](https://issues.redhat.com/browse/OCPBUGS-62227): bump telemetry series limit to 1000 [#30302](https://github.com/openshift/origin/pull/30302)
* [OCPERT-151](https://issues.redhat.com/browse/OCPERT-151): Migrate new func for Compare structured data instead of string from openshift-test-private repo [#30291](https://github.com/openshift/origin/pull/30291)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(ginkgo): avoid nil deref and harden env var setup [#30289](https://github.com/openshift/origin/pull/30289)
* [OCPQE-30698](https://issues.redhat.com/browse/OCPQE-30698): enable OTE for olmv0 [#30285](https://github.com/openshift/origin/pull/30285)
* [OTA-1626](https://issues.redhat.com/browse/OTA-1626): Fail CI if alert/ClusterOperatorDegraded is fired [#30282](https://github.com/openshift/origin/pull/30282)
* [TRT-2071](https://issues.redhat.com/browse/TRT-2071): Remove annotations and replace with environment selector based test skipping and disablement [#30064](https://github.com/openshift/origin/pull/30064)
* trt-2246: lower parallelism based on worker nodes [#30226](https://github.com/openshift/origin/pull/30226)
* [OCPSTRAT-2045](https://issues.redhat.com/browse/OCPSTRAT-2045): Automating OCPSTRAT-2045 feature in upstream [#30067](https://github.com/openshift/origin/pull/30067)
* [OCPBUGS-61980](https://issues.redhat.com/browse/OCPBUGS-61980): Temporarily remove commatrix documentation test for rework [#30280](https://github.com/openshift/origin/pull/30280)
* [OCPBUGS-61905](https://issues.redhat.com/browse/OCPBUGS-61905): oidc: improve rollout wait times [#30274](https://github.com/openshift/origin/pull/30274)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): image: add busybox to list of allowed images [#30281](https://github.com/openshift/origin/pull/30281)
* [CORENET-6418](https://issues.redhat.com/browse/CORENET-6418): drop openshift-sdn tests [#29085](https://github.com/openshift/origin/pull/29085)
* [OCPEDGE-1483](https://issues.redhat.com/browse/OCPEDGE-1483): Add TNF E2E tests for network failure [#30110](https://github.com/openshift/origin/pull/30110)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Skip ServiceCIDR in etcd_storage_path test [#30254](https://github.com/openshift/origin/pull/30254)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase [#30275](https://github.com/openshift/origin/pull/30275)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(test): prevent nil pointer dereference in ginkgo test runner [#30224](https://github.com/openshift/origin/pull/30224)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): CRD Apply Alert Allowance [#30265](https://github.com/openshift/origin/pull/30265)
* [NE-2090](https://issues.redhat.com/browse/NE-2090): adding one GIE automation test [#30189](https://github.com/openshift/origin/pull/30189)
* [OTA-1601](https://issues.redhat.com/browse/OTA-1601): upgrade status: recover checking the updating COs [#30154](https://github.com/openshift/origin/pull/30154)
* NO-JIRA: Allow systemd-coredump test to fail [#30261](https://github.com/openshift/origin/pull/30261)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update etcd test data for k8s 1.34 release [#30242](https://github.com/openshift/origin/pull/30242)
* [OCPBUGS-61733](https://issues.redhat.com/browse/OCPBUGS-61733): Restore retries for port-forward test [#30255](https://github.com/openshift/origin/pull/30255)
* [OCPEDGE-2090](https://issues.redhat.com/browse/OCPEDGE-2090): Add validation tests for tnf topology effects [#30252](https://github.com/openshift/origin/pull/30252)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): introduce cluster e2e-analysis sub command for openshift-tests [#30211](https://github.com/openshift/origin/pull/30211)
* [MON-4290](https://issues.redhat.com/browse/MON-4290): add test for must-gather gather_metrics [#30054](https://github.com/openshift/origin/pull/30054)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): 2/2: make 'targets auth' test more lenient and more resilient [#30256](https://github.com/openshift/origin/pull/30256)
* [OCPBUGS-57325](https://issues.redhat.com/browse/OCPBUGS-57325): update machines scale test [#30028](https://github.com/openshift/origin/pull/30028)
* Trt-2246: network test isolation [#30192](https://github.com/openshift/origin/pull/30192)
* NO-ISSUE: Automated - Update synthetic test data [#30244](https://github.com/openshift/origin/pull/30244)
* NO-JIRA: Remove runbook exceptions for fixed bugs [#30246](https://github.com/openshift/origin/pull/30246)
* trt-2230: Add monitor test annotation [#30196](https://github.com/openshift/origin/pull/30196)
* NO-JIRA: Increase request-timeout to deflake test [#30248](https://github.com/openshift/origin/pull/30248)
* NO-JIRA: Deflake oc observe test by using explicit port number [#30247](https://github.com/openshift/origin/pull/30247)
* [OTA-1559](https://issues.redhat.com/browse/OTA-1559): test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time [#30160](https://github.com/openshift/origin/pull/30160)
* NO-JIRA: Add intervals and a test for systemd-coredumps [#30222](https://github.com/openshift/origin/pull/30222)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: add retry logic for Keycloak route creation [#30233](https://github.com/openshift/origin/pull/30233)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Update vendor to include communication matrix bug fix [#30232](https://github.com/openshift/origin/pull/30232)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): images: add keycloak images and use them in ExternalOIDC tests [#30221](https://github.com/openshift/origin/pull/30221)
* NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo [#30193](https://github.com/openshift/origin/pull/30193)
* NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster [#30161](https://github.com/openshift/origin/pull/30161)
* [OCPBUGS-61538](https://issues.redhat.com/browse/OCPBUGS-61538): Skip config-operator checking when featureSet is DevPreviewNoUpgrade [#30236](https://github.com/openshift/origin/pull/30236)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): make 'targets auth' test more lenient and more resilient. [#30219](https://github.com/openshift/origin/pull/30219)
* NO-ISSUE: Automated - Update synthetic test data [#30020](https://github.com/openshift/origin/pull/30020)
* [OCPBUGS-61287](https://issues.redhat.com/browse/OCPBUGS-61287): Add flaky kubectl logs test to the retry list to clean signal for release [#30215](https://github.com/openshift/origin/pull/30215)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump to latest openshift/kubernetes (v1.33.4) [#30227](https://github.com/openshift/origin/pull/30227)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): update the commatrix vendor version to contain new changes [#30220](https://github.com/openshift/origin/pull/30220)
* Trt-2257: track run options [#30195](https://github.com/openshift/origin/pull/30195)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): test/extended/cli/adm_upgrade/recommend: Enable precheck and accept [#30113](https://github.com/openshift/origin/pull/30113)
* NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted [#30188](https://github.com/openshift/origin/pull/30188)
* [OCPBUGS-61194](https://issues.redhat.com/browse/OCPBUGS-61194): Mark etcd net overload logging test as a flake [#30210](https://github.com/openshift/origin/pull/30210)
* [CORENET-5329](https://issues.redhat.com/browse/CORENET-5329): revert primary udn test workaround from virt tests [#29386](https://github.com/openshift/origin/pull/29386)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): improve logging, add startup probe to Keycloak Deployment [#30184](https://github.com/openshift/origin/pull/30184)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Enable OTE for cluster-kube-storage-version-migrator-operator [#30199](https://github.com/openshift/origin/pull/30199)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/30f0ace4f4f3fc575a05c253e8893e92d2a68404...387947a603b155fae1aef09f9216ba95d3548527)
### [thanos](https://github.com/openshift/thanos/tree/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)
* Updating ose-thanos-container image to be consistent with ART for 4.21 [#164](https://github.com/openshift/thanos/pull/164)
* [Full changelog](https://github.com/openshift/thanos/compare/c0951032b34b832d0f5467e616999490a284101b...6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)
### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/241816559ead1a8b5d455827400888babb6ce352)
* [OCPBUGS-62367](https://issues.redhat.com/browse/OCPBUGS-62367): Updating volume-data-source-validator-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/volume-data-source-validator/pull/5)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/0e61642f8d898ee199e42f37319864851dd3627f...241816559ead1a8b5d455827400888babb6ce352)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e)
* [OCPCLOUD-3087](https://issues.redhat.com/browse/OCPCLOUD-3087): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (5691b82) into main [#97](https://github.com/openshift/cloud-provider-vsphere/pull/97)
* [OCPBUGS-62571](https://issues.redhat.com/browse/OCPBUGS-62571): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 [#100](https://github.com/openshift/cloud-provider-vsphere/pull/100)
* NO-JIRA: Update OWNERS [#99](https://github.com/openshift/cloud-provider-vsphere/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b93eb64ff72e7c005687813c8b478d694a0f517a...f69584d6ed7411504b0fff77eb36d0fd64f0fd5e)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/bb598980bdac48449b7fe817a99b546586fd1c19)
* [OCPBUGS-62332](https://issues.redhat.com/browse/OCPBUGS-62332): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 [#75](https://github.com/openshift/cluster-api-provider-vsphere/pull/75)
* [OCPBUGS-57668](https://issues.redhat.com/browse/OCPBUGS-57668): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#59](https://github.com/openshift/cluster-api-provider-vsphere/pull/59)
* NO-JIRA: Update OWNERS [#65](https://github.com/openshift/cluster-api-provider-vsphere/pull/65)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default [#67](https://github.com/openshift/cluster-api-provider-vsphere/pull/67)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): Fix openshift/unit-tests.sh [#66](https://github.com/openshift/cluster-api-provider-vsphere/pull/66)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1ff9e11f5a117505d935549b96cd0d129917c015...bb598980bdac48449b7fe817a99b546586fd1c19)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/133442c239c6ebfeec175f1620b5b08d887cbe90)
* Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/vmware-vsphere-csi-driver/pull/150)
* NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/vmware-vsphere-csi-driver/pull/148)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/61d0d00a78ee60ee57fcc99648a8851f0db52e5a...133442c239c6ebfeec175f1620b5b08d887cbe90)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/3587e730f04295359304e6abfa0eb7b409eece0d)
* [OCPBUGS-62344](https://issues.redhat.com/browse/OCPBUGS-62344): Fix escaping of password [#312](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/312)
* [OCPBUGS-57797](https://issues.redhat.com/browse/OCPBUGS-57797): Degrade OCP cluster on storagepolicy sync errors [#310](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/310)
* Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 [#311](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/311)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5cd04d61c20872edaaa2c3958779ff29ea6e6d82...3587e730f04295359304e6abfa0eb7b409eece0d)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/822424d11b9f14b9fc8a9fe3d509f9f290da2b7e)
* NO-JIRA: Add cursor command to debug the operator [#192](https://github.com/openshift/vsphere-problem-detector/pull/192)
* [OCPBUGS-62595](https://issues.redhat.com/browse/OCPBUGS-62595): Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 [#191](https://github.com/openshift/vsphere-problem-detector/pull/191)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9d55c028b27bc63c687342f0b7172ce39e07ec5a...822424d11b9f14b9fc8a9fe3d509f9f290da2b7e)