# 4.16.0-ec.2

Created: 2024-02-05 21:07:02 +0000 UTC

Image Digest: `sha256:03f2fb56ac1e3f674a683f0a6c11ea06bb437555b04a4afc66c0a9bcaf5238b4`


## Changes from 4.16.0-ec.1

### Components

* Kubectl 1.29.0
* Kubernetes upgraded from 1.29.0 to 1.29.1
* Kubernetes Tests 1.29.0
* CentOS Stream CoreOS upgraded from 416.92.202401090024-0 to 416.94.202401300012-0


### Removed images

* alibaba-cloud-csi-driver
* alibaba-disk-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [de13699f](https://github.com/openshift/agent-installer-utils/commit/de13699ffcf7518d6bc983a0db2e4c0949d9e950) `sha256:6a3a7f4802dddb3325ec3e97ffdfd10f4733c5831f4c696bfb38f61f9b6abab7`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ca6d0ed9](https://github.com/openshift/cluster-api-provider-baremetal/commit/ca6d0ed9c8674397d154911e3af8b1a42751a1ed) `sha256:e40e31e656a1921f98280812be3af1c8cc46cb3388096c0e248bc69825a5bc9a`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [724f9efc](https://github.com/openshift/cloud-network-config-controller/commit/724f9efc7452d7cdb6386229c151a62df021bc4c) `sha256:fba7e4a477f05be7c327cd1a4c6475daae30ad5d62a58a37705477feb4f59bd6`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [27bfb59f](https://github.com/openshift/cluster-bootstrap/commit/27bfb59fd0ff399224ee673869b8875ef10f1962) `sha256:1b63b83eb5c177a919c262bbca96bb7425f7aeeaed97c24187b6380d21f6c540`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [75c5dc17](https://github.com/openshift/cluster-dns-operator/commit/75c5dc17111dc498efd849f5a905b006681d8ddf) `sha256:0d162d34569598433bb00169ab06bd50aa16d9a3db6886dc495860b9a78ec5ff`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [7ac1549f](https://github.com/openshift/cluster-api-operator/commit/7ac1549f7491069ac297895641532aa4a7c48649) `sha256:d41fe0a90c82e4cc3d9b5bc921ba1c4d0217e397f4d946c963b091f9c9013fd7`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [4929daf2](https://github.com/openshift/cluster-olm-operator/commit/4929daf2587e2e22159d7971cd3bde993b60c036) `sha256:7ee6a74c3c5bdf983230fa166bf5fa2cef3e886eca76b2346e432d257e47a42a`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [cf737e27](https://github.com/openshift/platform-operators/commit/cf737e27be5288d4a21f4687d68a27c418e1c425) `sha256:b640c03c7ef5e71a1bb08e31ea706c0a79ab59c6408d30cf20e5ffbe6afa414c`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [cca2553c](https://github.com/openshift/cluster-samples-operator/commit/cca2553c92fc00d3f143b1b5dd3d0912310ccc9a) `sha256:ccb6d1a2cb9069bfc20aea8ee12a988759624789c93a431c67047d9602c3caa8`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [8045f1bd](https://github.com/openshift/cluster-update-keys/commit/8045f1bd025596a5d7a561428698accef2e8c0d1) `sha256:eb266478af3085ad3c191bb449c272c49b447cb7b10bdcdb50ed15715c5178b6`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [1e207576](https://github.com/openshift/containernetworking-plugins/commit/1e2075765b89981272e9083aca4e54e3234817a2) `sha256:a1de6041c9aadb5cd8241db9ebdc3ae387be1d33fca71a24c6e38e27ff93ca65`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [663972f4](https://github.com/openshift/cloud-provider-openstack/commit/663972f41feabc35aec033f36aba366d795d2da1) `sha256:80e5c8c7a71c174b7213480cda684f4cf139bb221f0f34ad999b363a9e2a6b32`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e72b106b](https://github.com/openshift/csi-driver-nfs/commit/e72b106b4da4360cb3b62e4aff7453701728f486) `sha256:f4d7c7a8ce976c6830df49b4a32e0afec908024f012b0f2937f14dc21e353d8e`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [17cd5190](https://github.com/openshift/csi-external-resizer/commit/17cd5190e90d682440e16b822ed1e921377db408) `sha256:adb3f44492330cab27ca221a4855eaf51b7dec0eb89b9c420ab1a29be5028269`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e876f97](https://github.com/openshift/csi-external-snapshotter/commit/1e876f976503b343c7a9939d9ba30e3010abc6b9) `sha256:999a8ed8b8019c9ccffbc92f4fd5d36469415fa44faeee75ebf5386b710646fe`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a5a99fc1](https://github.com/openshift/csi-livenessprobe/commit/a5a99fc1c089c428f9c3f2b718f1f551bdec399b) `sha256:4e7ba86c6b96d81abe04b593be4c24e7ce9acdcbbb45b59b29e173bc9a5e064e`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e876f97](https://github.com/openshift/csi-external-snapshotter/commit/1e876f976503b343c7a9939d9ba30e3010abc6b9) `sha256:19832463d8b2b938f8c31cb164c0e3b1c5393d7d3fc425b79961d9bbf08bc12e`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e876f97](https://github.com/openshift/csi-external-snapshotter/commit/1e876f976503b343c7a9939d9ba30e3010abc6b9) `sha256:e6cae8dc4d51688b79889cee42abf9d5c69a06c2d56e8e055cbd2625bef9c98a`
* [docker-builder](https://github.com/openshift/builder) git [0c0a73b2](https://github.com/openshift/builder/commit/0c0a73b21b471a2194713fa2c19d40cdbff26fa5) `sha256:2a929f4f3e3d82cb782880613a1b6e166da9a063b9876d2c2c30a1f46cf2a15a`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [e279170d](https://github.com/openshift/driver-toolkit/commit/e279170d780fccb3f13d376adab2cb32e2b0dc96) `sha256:a673cc063d6ad36c8b1b20e132e8b722d520ed807a6fe2a5f1af92333adacd22`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [7592f41b](https://github.com/openshift/egress-router-cni/commit/7592f41b1b32b21abeba329943fc536b4c781471) `sha256:02254a8f4708d6b5861a4dadae3af8537cd1ae7671c819c0615c71346d54c38b`
* [etcd](https://github.com/openshift/etcd) git [66af0e5d](https://github.com/openshift/etcd/commit/66af0e5d532b10a23f6e40ec8cbafa0f275f6ee5) `sha256:b98a364db0303b29f010b3649cdb592075f54d2638571981b7b2e01ed01f6761`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [c4b5d37b](https://github.com/openshift/cloud-provider-gcp/commit/c4b5d37b3745e3bcd0138442ad04898fcaef0844) `sha256:61eb031900211771f7f31b589c79e7044b69453357bd34d82b4451699d6a3e38`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [60d217ce](https://github.com/openshift/k8s-prometheus-adapter/commit/60d217ce6aad76f12d7ef4bce9333edd0a506788) `sha256:b3c0051271410deeb15d089bf850b298e06aa4c1be33cba4a5b1939f70a1f6d5`
* [keepalived-ipfailover](https://github.com/openshift/images) git [676f4f6c](https://github.com/openshift/images/commit/676f4f6c0792787002e12d53c5ba4febed1a7b85) `sha256:b613c031e0c2be8411e0bf24d40f33e4fcc123ff459e062e2404a598b8f72ca5`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [8969a07c](https://github.com/openshift/kube-state-metrics/commit/8969a07c40cf71e25be1d79a97a25ef8a0ce690f) `sha256:4ed0a0afc5b36607827ea8f2b67435b62bf2852ba84d79f9f7516151d03781c1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [e465e606](https://github.com/openshift/cloud-provider-kubevirt/commit/e465e606e7d17c64392cdeba099f9382580e44b0) `sha256:7ddbca0c2cc8d7984456c4e8e7cd14407523992e147f8f012540c29e902f7838`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:7d3f1c956714acc1984b1ab6605c361a647c293a94a285c0d5448994a6243b44`
* machine-os-content `sha256:2f77a4ff84bcb2968414e9cd433c61e292e2fd53df38aa622ba884e7c6b61dd8`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [6aad9b0c](https://github.com/openshift/machine-os-images/commit/6aad9b0c7366fbaadc55d6f4e54fec5d09e3f182) `sha256:169ea2dc602566ad5967271d2dc771c693d7121e5cf47be0c203b73bb0d2a295`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d1150b7c](https://github.com/openshift/multus-admission-controller/commit/d1150b7c53378376122f8605152f275fec14161f) `sha256:e89f9a6eaade0472322edd89c85a5ffc739fb0ca0eeedd93885c4cbbab4acff6`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [d164fbab](https://github.com/openshift/bond-cni/commit/d164fbab3fb0e274695f375e265aaa3a81c451b7) `sha256:506b413df31a36a68b0e3f253e358ddbb2c3556920c0e6e62d0b9d2c673b1f09`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [710bd872](https://github.com/openshift/network-metrics-daemon/commit/710bd872934572584eff4987eb638764afd04cdb) `sha256:e5c92ded491509e76e998da07fcb779ccb404ddae32e28f6840e2ccfc2b2fd18`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:e9f7e1ef2908be29aea1a84ef5ddadb89768f9fbf58f1674206b97a7479f5052`
* [oauth-server](https://github.com/openshift/oauth-server) git [8296c054](https://github.com/openshift/oauth-server/commit/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5) `sha256:f152057e78821b82b2009033f2a15e9f0ac545fbb5a14bdabccda54fadcc5b2d`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [664e875e](https://github.com/openshift/operator-framework-rukpak/commit/664e875ec38d12934df495b6c87b0bad5887bb8d) `sha256:0b8c29405938b0c73bbb94c03d91596f4fd6a74ee7470318a8ce746e8a69c079`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [2a28a782](https://github.com/openshift/openshift-controller-manager/commit/2a28a78279b127075b399a3442a2042f4a7d190d) `sha256:8990a8dece771c02fe804ccf90618cb3087ac711176d78ebea7c171e0f0e8f97`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [59b8a0ff](https://github.com/openshift/openshift-state-metrics/commit/59b8a0ffc0a472e819e0c30911201c34c85a4684) `sha256:ecf155bcf4ea5059977a034c976e781f0775d66442cb60ccf9e2da9a59cee72e`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [663972f4](https://github.com/openshift/cloud-provider-openstack/commit/663972f41feabc35aec033f36aba366d795d2da1) `sha256:896ea48472f9b2e7eb14ec6c8abff7038ddf6f4abf7c698c487040502949cf09`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [663972f4](https://github.com/openshift/cloud-provider-openstack/commit/663972f41feabc35aec033f36aba366d795d2da1) `sha256:2c6409fefd5781e29231a438a6a3644c18c51e32226be43258159cae371bfdb5`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [20e33ac0](https://github.com/openshift/cluster-api-provider-openstack/commit/20e33ac0d8042d69f9369203e4caff238e37e13d) `sha256:5bc2a9ac9ed9164cf83eca599f09de3953155b63137b314dd56e09409a79c5fa`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [5a9f33a2](https://github.com/openshift/ovirt-csi-driver-operator/commit/5a9f33a2ee400fc046f5b3c3fb1c54c8aaf708bc) `sha256:159bdf00c82aa5033b24caee22fa00a577cc10195354084900e33d424fefa3c7`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [6c98ec55](https://github.com/openshift/cloud-provider-powervs/commit/6c98ec5504ba92846fe45b7d1589240208aff6b2) `sha256:6a93801e2ac60ec8cca831ef0bdf9eee1d387030e5f60dbde6d5f948d716eb9a`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [5c19b5f4](https://github.com/openshift/machine-api-provider-powervs/commit/5c19b5f42c50d066e122e4f20dede79aa6091afc) `sha256:5491a47c51f227636da64bb920abc8d0bd7a7064ce68f5e2516c72858c153939`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [a89e4b40](https://github.com/openshift/prom-label-proxy/commit/a89e4b40e917e468722cafe5917f97def31440b1) `sha256:621359474b190ce1278937747c26f6dc6c5b6e58ab7494b758845dd6fbbec040`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [225d7ca4](https://github.com/openshift/prometheus-alertmanager/commit/225d7ca4ac046b94b4621acd13a6a59d69c7b923) `sha256:7c78b95cfd13387673ffbec263690f8132b5864082ec2084b0f897b8b780bc05`
* rhel-coreos `sha256:a3073ffe47864e939d57b67a70240a58dab5e50788a82b73e6a1ccd9b897fbe6`
* rhel-coreos-extensions `sha256:9fd7f3263c8ca292266f45922113d832174ef21d5fd3c5fe49babbf77b67fde6`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [95aa561e](https://github.com/openshift/route-controller-manager/commit/95aa561e93876a3542db3c6aa64773ee98fefe39) `sha256:67c195f395cdab098f66f4d7acc415cfbfd8015c6ae6a2b67ad89a41892e6086`
* [thanos](https://github.com/openshift/thanos) git [f137238f](https://github.com/openshift/thanos/commit/f137238f68a559925d3c741ae7b76e8f6e39cd61) `sha256:0ab130d2414a8b1d85489fb0a562385d04ea495a94b847a95bbaa748a322049b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/91b1deff72d8876ccf4f7601566014c9df3fdb0b)

* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#5913) [#5913](https://github.com/openshift/assisted-service/pull/5913)
* NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) [#5919](https://github.com/openshift/assisted-service/pull/5919)
* [MGMT-16660](https://issues.redhat.com/browse/MGMT-16660): OCI is tech-preview from OCP 4.15 (#5920) [#5920](https://github.com/openshift/assisted-service/pull/5920)
* [OCPBUGS-27376](https://issues.redhat.com/browse/OCPBUGS-27376): Allow domain names starting with a number (#5914) [#5914](https://github.com/openshift/assisted-service/pull/5914)
* NO-ISSUE: Bump OCP versions: 4.14 (#5915) [#5915](https://github.com/openshift/assisted-service/pull/5915)
* Update RHTAP references (#5899) [#5899](https://github.com/openshift/assisted-service/pull/5899)
* NO-ISSUE: migrate rhtap init step to v0.2 (#5908) [#5908](https://github.com/openshift/assisted-service/pull/5908)
* [MGMT-16208](https://issues.redhat.com/browse/MGMT-16208): Add controller stages to assisted service (#5880) [#5880](https://github.com/openshift/assisted-service/pull/5880)
* NO-ISSUE: Bump OCP versions: 4.15 (#5907) [#5907](https://github.com/openshift/assisted-service/pull/5907)
* NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) [#5903](https://github.com/openshift/assisted-service/pull/5903)
* NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) [#5902](https://github.com/openshift/assisted-service/pull/5902)
* NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) [#5904](https://github.com/openshift/assisted-service/pull/5904)
* NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) [#5901](https://github.com/openshift/assisted-service/pull/5901)
* NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) [#5897](https://github.com/openshift/assisted-service/pull/5897)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides (#5868) [#5868](https://github.com/openshift/assisted-service/pull/5868)
* NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) [#5896](https://github.com/openshift/assisted-service/pull/5896)
* NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) [#5895](https://github.com/openshift/assisted-service/pull/5895)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Add request headers to api_vip_connectivity check request (#5870) [#5870](https://github.com/openshift/assisted-service/pull/5870)
* NO-ISSUE: Use latest hypershift image in CI gather (#5886) [#5886](https://github.com/openshift/assisted-service/pull/5886)
* NO-ISSUE remove filanov from approves (#5888) [#5888](https://github.com/openshift/assisted-service/pull/5888)
* NO-ISSUE: Bump OCP versions: 4.15 (#5887) [#5887](https://github.com/openshift/assisted-service/pull/5887)
* [MGMT-16332](https://issues.redhat.com/browse/MGMT-16332): allow lvms on multi node (#5871) [#5871](https://github.com/openshift/assisted-service/pull/5871)
* NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) [#5875](https://github.com/openshift/assisted-service/pull/5875)
* NO-ISSUE: testing go1.20 in all packages (#5850) [#5850](https://github.com/openshift/assisted-service/pull/5850)
* [MGMT-16371](https://issues.redhat.com/browse/MGMT-16371): Fix additionial kargs in case of DHCP (#5818) [#5818](https://github.com/openshift/assisted-service/pull/5818)
* Removes unused assistedservice CRD (#5830) [#5830](https://github.com/openshift/assisted-service/pull/5830)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5861) [#5861](https://github.com/openshift/assisted-service/pull/5861)
* [MGMT-16505](https://issues.redhat.com/browse/MGMT-16505): Huge amount of "Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>" in cluster events (#5872) [#5872](https://github.com/openshift/assisted-service/pull/5872)
* [Full changelog](https://github.com/openshift/assisted-service/compare/2f45852d619e5d83138138ba18d3d96f53d30b58...91b1deff72d8876ccf4f7601566014c9df3fdb0b)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/460a5098ddd41aa837f6b7619b895dc9766324a9)

* NO-ISSUE: Bump the go-dependencies group with 1 update (#776) [#776](https://github.com/openshift/assisted-installer/pull/776)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) [#772](https://github.com/openshift/assisted-installer/pull/772)
* NO-ISSUE remove filanov from approves (#773) [#773](https://github.com/openshift/assisted-installer/pull/773)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/e09df7e4623a7d86651b81bf65233a6f4efc2f6c...460a5098ddd41aa837f6b7619b895dc9766324a9)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/83174d972ee5b59af91bf0520909f83522e92a96)

* NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) [#653](https://github.com/openshift/assisted-installer-agent/pull/653)
* [ACM-9504](https://issues.redhat.com/browse/ACM-9504): Remove unecessary dependency on go-git (#652) [#652](https://github.com/openshift/assisted-installer-agent/pull/652)
* [MGMT-16501](https://issues.redhat.com/browse/MGMT-16501): Use updated api_vip connectivity check API (#648) [#648](https://github.com/openshift/assisted-installer-agent/pull/648)
* NO-ISSUE remove filanov from approves (#647) [#647](https://github.com/openshift/assisted-installer-agent/pull/647)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/30d5045016ae732082970226ca106593ddbd8703...83174d972ee5b59af91bf0520909f83522e92a96)


### [alibaba-cloud-controller-manager, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/5a4819c6048e42515c3c5538b723ba6272440eee)

* NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871)
* [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841)
* [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845)
* [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849)
* [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848)
* [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e58658f67791cc808b5218b87423035e18045d39...5a4819c6048e42515c3c5538b723ba6272440eee)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f2922e2a42dde19c5fc44decace6fe9b2fd6ea40)

* [OCPBUGS-27932](https://issues.redhat.com/browse/OCPBUGS-27932): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 [#47](https://github.com/openshift/apiserver-network-proxy/pull/47)
* [OCPBUGS-25004](https://issues.redhat.com/browse/OCPBUGS-25004): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#46](https://github.com/openshift/apiserver-network-proxy/pull/46)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f0caebbab59ca8e8907f3eb8eb48f15c2a341228...f2922e2a42dde19c5fc44decace6fe9b2fd6ea40)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/ba9211cc50cf6319609391cdaec6b98df699f05e)

* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [OCPBUGS-27192](https://issues.redhat.com/browse/OCPBUGS-27192): remove retired serial NCv2 from azure tested instance type list on x86 [#7911](https://github.com/openshift/installer/pull/7911)
* no-jira:  images/altinfra: allow CAPI ARG [#7891](https://github.com/openshift/installer/pull/7891)
* [OCPBUGS-25835](https://issues.redhat.com/browse/OCPBUGS-25835): Validate baremetal capability is set for baremetal platform [#7901](https://github.com/openshift/installer/pull/7901)
* no-jira:  Add AWS m6a to tested instance types [#7851](https://github.com/openshift/installer/pull/7851)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Fix typo in CloudCredential validation [#7915](https://github.com/openshift/installer/pull/7915)
* [OCPBUGS-24303](https://issues.redhat.com/browse/OCPBUGS-24303): Check provided sha for agent ISO download [#7893](https://github.com/openshift/installer/pull/7893)
* [CORS-3203](https://issues.redhat.com/browse/CORS-3203): Fix `depreciated` typo [#7834](https://github.com/openshift/installer/pull/7834)
* [OCPBUGS-14257](https://issues.redhat.com/browse/OCPBUGS-14257): normalize ISO files extensions to three chars [#7896](https://github.com/openshift/installer/pull/7896)
* [OCPBUGS-26434](https://issues.redhat.com/browse/OCPBUGS-26434): Redact platform passwords in agent-gather output [#7873](https://github.com/openshift/installer/pull/7873)
* [OCPBUGS-27092](https://issues.redhat.com/browse/OCPBUGS-27092): baremetal: gather all recently refactored services [#7854](https://github.com/openshift/installer/pull/7854)
* [OCPBUGS-25996](https://issues.redhat.com/browse/OCPBUGS-25996): baremetal: correct external_http_url for v6-only BMCs [#7898](https://github.com/openshift/installer/pull/7898)
* [CORS-2950](https://issues.redhat.com/browse/CORS-2950): Remove openshift-sdn as an install-time option [#7720](https://github.com/openshift/installer/pull/7720)
* [OPNET-415](https://issues.redhat.com/browse/OPNET-415): Upgrade o/api to include extended network config [#7869](https://github.com/openshift/installer/pull/7869)
* [METAL-829](https://issues.redhat.com/browse/METAL-829): Set node cpu_arch from bmh [#7814](https://github.com/openshift/installer/pull/7814)
* [OCPBUGS-26399](https://issues.redhat.com/browse/OCPBUGS-26399): Support singular VIP in ACI for BareMetal [#7859](https://github.com/openshift/installer/pull/7859)
* [CORS-3190](https://issues.redhat.com/browse/CORS-3190): GCP: Add load balancer info to cluster infra [#7888](https://github.com/openshift/installer/pull/7888)
* [MULTIARCH-4072](https://issues.redhat.com/browse/MULTIARCH-4072): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7870](https://github.com/openshift/installer/pull/7870)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7884](https://github.com/openshift/installer/pull/7884)
* [OCPBUGS-25841](https://issues.redhat.com/browse/OCPBUGS-25841): preserve category name when trying to find tag category [#7876](https://github.com/openshift/installer/pull/7876)
* [ARO-4744](https://issues.redhat.com/browse/ARO-4744): Do not run platform validation on ARO [#7865](https://github.com/openshift/installer/pull/7865)
* [Full changelog](https://github.com/openshift/installer/compare/0b0271a3165b17e05806b3882b23d2b8ba3b7a05...ba9211cc50cf6319609391cdaec6b98df699f05e)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7fbd922fd14a94dfdce97f17ce8e18ed049ab8e3)

* [OCPBUGS-27825](https://issues.redhat.com/browse/OCPBUGS-27825): Merge upstream [#329](https://github.com/openshift/baremetal-operator/pull/329)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/52f6678d46b3c46652c5c463ecac7033230409a0...7fbd922fd14a94dfdce97f17ce8e18ed049ab8e3)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/9f30ad4109050f49bd5f4a572943919a7d2ea0dd)

* [OCPBUGS-24865](https://issues.redhat.com/browse/OCPBUGS-24865): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#291](https://github.com/openshift/baremetal-runtimecfg/pull/291)
* NO-ISSUE: Upgrade k8s api and client-go deps [#297](https://github.com/openshift/baremetal-runtimecfg/pull/297)
* [OCPBUGS-26765](https://issues.redhat.com/browse/OCPBUGS-26765): Add .snyk file to ignore vendor and test files [#292](https://github.com/openshift/baremetal-runtimecfg/pull/292)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/0ff1f6f41bda7046b6753f7321083290c9221f49...9f30ad4109050f49bd5f4a572943919a7d2ea0dd)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/6d67575448725bb154dcdaf5f78787c8516d47bf)

* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1661](https://github.com/openshift/oc/pull/1661)
* [OCPBUGS-27957](https://issues.redhat.com/browse/OCPBUGS-27957): pkg/cli/admin/inspect: use since/since-time for previous container logs [#1666](https://github.com/openshift/oc/pull/1666)
* NO-JIRA: Fix --parallelism flag formatting in help [#1664](https://github.com/openshift/oc/pull/1664)
* NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error [#1663](https://github.com/openshift/oc/pull/1663)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1667](https://github.com/openshift/oc/pull/1667)
* [OCPBUGS-27489](https://issues.redhat.com/browse/OCPBUGS-27489): Use correct hash sum of extracted tarball after re-signing with codesign [#1659](https://github.com/openshift/oc/pull/1659)
* NO-JIRA: Simplified kubectl component version check [#1662](https://github.com/openshift/oc/pull/1662)
* [CNV-37284](https://issues.redhat.com/browse/CNV-37284): Add --all-images flag to must-gather [#1633](https://github.com/openshift/oc/pull/1633)
* Revert "WRKLDS-1016: Bump kube dependencies to 1.29.0" [#1660](https://github.com/openshift/oc/pull/1660)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1655](https://github.com/openshift/oc/pull/1655)
* NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images [#1656](https://github.com/openshift/oc/pull/1656)
* [WRKLDS-998](https://issues.redhat.com/browse/WRKLDS-998): oc login: Built-in cred exec plugin implementation and wiring [#1640](https://github.com/openshift/oc/pull/1640)
* NO-JIRA: adm update status: add TODOs to remind us to revise early decisions [#1654](https://github.com/openshift/oc/pull/1654)
* [WRKLDS-1012](https://issues.redhat.com/browse/WRKLDS-1012): oc adm must-gather: pull gather container logs [#1641](https://github.com/openshift/oc/pull/1641)
* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): add since and since-time flags to limit log collection on must-gather [#1648](https://github.com/openshift/oc/pull/1648)
* [WRKLDS-1010](https://issues.redhat.com/browse/WRKLDS-1010): pkg/cli/admin/inspect: use since/since-time for rotated logs [#1653](https://github.com/openshift/oc/pull/1653)
* NO-ISSUE: add information about featuregate diff in a particular release [#1650](https://github.com/openshift/oc/pull/1650)
* NO-JIRA: report kubectl version to the release controller [#1651](https://github.com/openshift/oc/pull/1651)
* [OCPBUGS-25461](https://issues.redhat.com/browse/OCPBUGS-25461): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1647](https://github.com/openshift/oc/pull/1647)
* [OTA-1087](https://issues.redhat.com/browse/OTA-1087): Add upgade health section to `adm update status` [#1636](https://github.com/openshift/oc/pull/1636)
* [Full changelog](https://github.com/openshift/oc/compare/dff7dc3aeb8cb96c31cef67db5ef9925f928aee6...6d67575448725bb154dcdaf5f78787c8516d47bf)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3960889b57fbddff891d03998c97827fe9cdca63)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#663](https://github.com/openshift/cloud-credential-operator/pull/663)
* NO-JIRA: Keep metrics.md up-to-date [#664](https://github.com/openshift/cloud-credential-operator/pull/664)
* [OCPBUGS-27446](https://issues.redhat.com/browse/OCPBUGS-27446): Report manualpodidentity mode in metrics when using Azure Workload Identity [#657](https://github.com/openshift/cloud-credential-operator/pull/657)
* [OCPBUGS-27445](https://issues.redhat.com/browse/OCPBUGS-27445): Use cached clients to avoid client side throttling [#656](https://github.com/openshift/cloud-credential-operator/pull/656)
* NO-JIRA: azwi doc: apply webhook manifest to cluster [#652](https://github.com/openshift/cloud-credential-operator/pull/652)
* [CCO-454](https://issues.redhat.com/browse/CCO-454): Bump go.mod k8s deps to 0.29.1 [#655](https://github.com/openshift/cloud-credential-operator/pull/655)
* [OCPBUGS-16181](https://issues.redhat.com/browse/OCPBUGS-16181): Write manifests when AWS IAM roles already exist. [#514](https://github.com/openshift/cloud-credential-operator/pull/514)
* [CCO-519](https://issues.redhat.com/browse/CCO-519): Resolve all outstanding snyk vulnerabilities [#648](https://github.com/openshift/cloud-credential-operator/pull/648)
* [OCPBUGS-26488](https://issues.redhat.com/browse/OCPBUGS-26488): Use live client for metrics [#645](https://github.com/openshift/cloud-credential-operator/pull/645)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/77a68ad01e75162bfa04097b22f80d305c192439...3960889b57fbddff891d03998c97827fe9cdca63)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/625f76c203bcc8e124ad179ff6244360f2a7f947)

* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#632](https://github.com/openshift/cluster-authentication-operator/pull/632)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#646](https://github.com/openshift/cluster-authentication-operator/pull/646)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/7b07987d0aced88f9b1deda185c13a79e7328681...625f76c203bcc8e124ad179ff6244360f2a7f947)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5048df2503ec0a7b7efe7a5da52619c59e36c72b)

* [PODAUTO-104](https://issues.redhat.com/browse/PODAUTO-104): Add downstream pod autoscaling team member jkyros to VPA OWNERS [#283](https://github.com/openshift/kubernetes-autoscaler/pull/283)
* [OCPBUGS-27509](https://issues.redhat.com/browse/OCPBUGS-27509): Fix unstructured taint parsing in Cluster API provider [#281](https://github.com/openshift/kubernetes-autoscaler/pull/281)
* [OCPBUGS-26504](https://issues.redhat.com/browse/OCPBUGS-26504): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 [#279](https://github.com/openshift/kubernetes-autoscaler/pull/279)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/1885f6984a8ffe065a7e585bb97704dfca462fc1...5048df2503ec0a7b7efe7a5da52619c59e36c72b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/e42cff59fd4ef688b771e49c67198d5d886c8fbf)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#312](https://github.com/openshift/cluster-autoscaler-operator/pull/312)
* [MIXEDARCH-429](https://issues.redhat.com/browse/MIXEDARCH-429): Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH [#297](https://github.com/openshift/cluster-autoscaler-operator/pull/297)
* [OCPCLOUD-2432](https://issues.redhat.com/browse/OCPCLOUD-2432): Bump k8s packages to v1.29 [#310](https://github.com/openshift/cluster-autoscaler-operator/pull/310)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/bab7efd373a0f4c93c83c685f7a64d688c8c946c...e42cff59fd4ef688b771e49c67198d5d886c8fbf)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7fa363a638322e5a5f6679838c490daa092743e9)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add terminationmessagepolicy to show last of error log in API [#399](https://github.com/openshift/cluster-baremetal-operator/pull/399)
* [METAL-856](https://issues.redhat.com/browse/METAL-856): set USE_IRONIC_INSPECTOR explicitly [#398](https://github.com/openshift/cluster-baremetal-operator/pull/398)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/a5c81dfac78c41780e06087c1f4ce319cfc882a9...7fa363a638322e5a5f6679838c490daa092743e9)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c83e4bb4b646d16921b6b95b7920d89dbfdf43fa)

* [OCPCLOUD-2449](https://issues.redhat.com/browse/OCPCLOUD-2449): Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master [#192](https://github.com/openshift/cluster-api/pull/192)
* [Full changelog](https://github.com/openshift/cluster-api/compare/189371dbcb14f7b7e76d7bed760f7082409a9ac7...c83e4bb4b646d16921b6b95b7920d89dbfdf43fa)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ff92e352f7c465f9bde934e81834972250934b69)

* [OCPBUGS-26121](https://issues.redhat.com/browse/OCPBUGS-26121): Add Snyk file to exclude vendor directory on scan [#156](https://github.com/openshift/cluster-capi-operator/pull/156)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/bf4db4b033d1a0963bc63e12a57d65a62c351b08...ff92e352f7c465f9bde934e81834972250934b69)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/6cbe9c1a48f819e045cf3fd1e2aa94208f43ebf2)

* [OCPBUGS-24486](https://issues.redhat.com/browse/OCPBUGS-24486): Enforce the use of shared health checks [#326](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/326)
* [OCPCLOUD-2424](https://issues.redhat.com/browse/OCPCLOUD-2424): Bump k8s packages to v1.29 [#325](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/325)
* [OCPBUGS-25887](https://issues.redhat.com/browse/OCPBUGS-25887): IBMCloud: Patch CCM for 4.16 [#323](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/323)
* [OCPBUGS-26494](https://issues.redhat.com/browse/OCPBUGS-26494): PowerVS: handle 4.16 changes [#322](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/322)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ca380e9db9b9f7e2eda2739131cb09d171dc6c78...6cbe9c1a48f819e045cf3fd1e2aa94208f43ebf2)


### [cluster-config-api](https://github.com/openshift/api/tree/1e2afa0f76cf5f8cf671932a19c846d8102c1a56)

* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): add separate authentication config manifest for hypershift [#1732](https://github.com/openshift/api/pull/1732)
* [SPLAT-1396](https://issues.redhat.com/browse/SPLAT-1396): promote feature gate and vSphere failure domains to default [#1733](https://github.com/openshift/api/pull/1733)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): features: enabled TranslateStreamCloseWebsocketRequests through TechPreviewNoUpgrade [#1737](https://github.com/openshift/api/pull/1737)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Add new param ResourceManagerTags to GCPMachineProviderSpec [#1506](https://github.com/openshift/api/pull/1506)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): respect the cluster profile in rendering [#1734](https://github.com/openshift/api/pull/1734)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): Add feature gate for upgrade status [#1725](https://github.com/openshift/api/pull/1725)
* [SPLAT-1385](https://issues.redhat.com/browse/SPLAT-1385): introduce TagIDs field to vSphere providerSpec [#1697](https://github.com/openshift/api/pull/1697)
* Add ImagePolicyList and ClusterImagePolicyList to scheme known types [#1726](https://github.com/openshift/api/pull/1726)
* Add generated featuregate files inertly to payloads [#1720](https://github.com/openshift/api/pull/1720)
* add-IPsecExternal [#1667](https://github.com/openshift/api/pull/1667)
* [Full changelog](https://github.com/openshift/api/compare/7b0f60012113bac608e8273ab6762cb2b04ab658...1e2afa0f76cf5f8cf671932a19c846d8102c1a56)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/67541b3cf8857ca208e221111393c2a45da18bae)

* [SPLAT-1400](https://issues.redhat.com/browse/SPLAT-1400): promote vSphere control plane machinesets from tech preview [#400](https://github.com/openshift/cluster-config-operator/pull/400)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#399](https://github.com/openshift/cluster-config-operator/pull/399)
* Revert "OCPBUGS-26541: remove duplicate manifests in image" [#397](https://github.com/openshift/cluster-config-operator/pull/397)
* [OCPBUGS-26541](https://issues.redhat.com/browse/OCPBUGS-26541): remove duplicate manifests in image [#392](https://github.com/openshift/cluster-config-operator/pull/392)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/e4dc676febfe2721443f82dabac6ca40af0a1984...67541b3cf8857ca208e221111393c2a45da18bae)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/d282a9fd8dd18fce6813dc355c5cb24808731859)

* [OCPCLOUD-2415](https://issues.redhat.com/browse/OCPCLOUD-2415): Update K8s deps to 1.29 [#271](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/271)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/ad039c1e94e308a27af01adfef81af9ff566bde5...d282a9fd8dd18fce6813dc355c5cb24808731859)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/359cff0f9fbf86fabd63ee9633a04e0ba1b7955e)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#190](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/190)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#187](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/187)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/b054b5ca0b3b4e5f27f62cc7e308a1adf8e5921b...359cff0f9fbf86fabd63ee9633a04e0ba1b7955e)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1e1970f23b7a588953ad47617108a683ecc4f30f)

* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#1149](https://github.com/openshift/cluster-etcd-operator/pull/1149)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): update library-go to latest commit [#1180](https://github.com/openshift/cluster-etcd-operator/pull/1180)
* [OCPBUGS-24889](https://issues.redhat.com/browse/OCPBUGS-24889): Updating cluster-etcd-operator-container image to be consistent with ART [#1175](https://github.com/openshift/cluster-etcd-operator/pull/1175)
* NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy [#1171](https://github.com/openshift/cluster-etcd-operator/pull/1171)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9e38f4dd5ada7f72151b4ecac32d9adf5923d536...1e1970f23b7a588953ad47617108a683ecc4f30f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/2962f2bda249f04d1d4e1a9fdbcaff6115507e2c)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#992](https://github.com/openshift/cluster-image-registry-operator/pull/992)
* NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 [#989](https://github.com/openshift/cluster-image-registry-operator/pull/989)
* [OCPBUGS-26767](https://issues.redhat.com/browse/OCPBUGS-26767): MULTIARCH-4074: PowerVS: update supported regions [#987](https://github.com/openshift/cluster-image-registry-operator/pull/987)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/3f3314228c334185e8d9349d08b9cc02ceb3bce2...2962f2bda249f04d1d4e1a9fdbcaff6115507e2c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1938e2cbf206769e6195729ee751443b5c0afdaa)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1019](https://github.com/openshift/cluster-ingress-operator/pull/1019)
* [NE-1490](https://issues.redhat.com/browse/NE-1490): update to go v1.20 [#1012](https://github.com/openshift/cluster-ingress-operator/pull/1012)
* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes [#980](https://github.com/openshift/cluster-ingress-operator/pull/980)
* [CCO-249](https://issues.redhat.com/browse/CCO-249): Replace GCP role with explicit permissions [#844](https://github.com/openshift/cluster-ingress-operator/pull/844)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d09611e1ce3aea4663d4b9d790514d3f09e90769...1938e2cbf206769e6195729ee751443b5c0afdaa)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1c6d106ee87c21756d383a9369c37fd856202077)

* [OCPBUGS-24005](https://issues.redhat.com/browse/OCPBUGS-24005): when skipping a webhook check because of missing CA log the name of the webhook [#1632](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1632)
* NO-JIRA: Add ownership for the admin kubeconfig [#1584](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1584)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#1546](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1546)
* NO-ISSUE: prevent update status conflicts [#1621](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1621)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#1619](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1619)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/48b62f7304955080e979a61180dfc48c6878006a...1c6d106ee87c21756d383a9369c37fd856202077)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/fc039eb97932f5a4b1bcd4721860fe88eee36a08)

* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#786](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/786)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/6b2184e46e959aa04b22e7fded4d9b5b89127072...fc039eb97932f5a4b1bcd4721860fe88eee36a08)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0966d5f841219e8732d469198ec2442de55b9350)

* NO-JIRA: readme: describe mapping between logLevel and log level [#531](https://github.com/openshift/cluster-kube-scheduler-operator/pull/531)
* NO-JIRA: README: add notes about dumping KS's node cache [#530](https://github.com/openshift/cluster-kube-scheduler-operator/pull/530)
* [OCPBUGS-21846](https://issues.redhat.com/browse/OCPBUGS-21846): sync(library-go): revision_controller: update last revision only when a revision is completely rendered [#526](https://github.com/openshift/cluster-kube-scheduler-operator/pull/526)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ecd8b763aaade0abf29a310cfcb5faf8a5eb2eac...0966d5f841219e8732d469198ec2442de55b9350)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/9bfb5dfaec6dfa04b25f5f5dd39835012820aa2a)

* [OCPBUGS-27930](https://issues.redhat.com/browse/OCPBUGS-27930): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/103)
* [OCPBUGS-24989](https://issues.redhat.com/browse/OCPBUGS-24989): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#101](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/101)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7...9bfb5dfaec6dfa04b25f5f5dd39835012820aa2a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/2d68698410d7e6239dafa6749cc454272508db19)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#227](https://github.com/openshift/cluster-machine-approver/pull/227)
* [OCPBUGS-26116](https://issues.redhat.com/browse/OCPBUGS-26116): Add Snyk file to exclude vendor directory on scan [#225](https://github.com/openshift/cluster-machine-approver/pull/225)
* [OCPCLOUD-2417](https://issues.redhat.com/browse/OCPCLOUD-2417): Update to kube 1.29 and controller-runtime 0.17.0 [#224](https://github.com/openshift/cluster-machine-approver/pull/224)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Increase concurrent reconciles to 10 [#222](https://github.com/openshift/cluster-machine-approver/pull/222)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/54cc35bdf800a89c593ca39c4521ee567049ec7c...2d68698410d7e6239dafa6749cc454272508db19)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d45a3335c2bbada0948adef9fcba55c4e14fa1d7)

* [MON-3689](https://issues.redhat.com/browse/MON-3689): Synchronize versions of the downstream components [#2245](https://github.com/openshift/cluster-monitoring-operator/pull/2245)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 [#2244](https://github.com/openshift/cluster-monitoring-operator/pull/2244)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to cluster-storage-operator [#2235](https://github.com/openshift/cluster-monitoring-operator/pull/2235)
* [OCPBUGS-27289](https://issues.redhat.com/browse/OCPBUGS-27289): rollout metrics-server on cert rotations [#2242](https://github.com/openshift/cluster-monitoring-operator/pull/2242)
* [OCPBUGS-27213](https://issues.redhat.com/browse/OCPBUGS-27213): Adjust lastError injection to wait.PollUntilContextTimeout's final error [#2234](https://github.com/openshift/cluster-monitoring-operator/pull/2234)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#2240](https://github.com/openshift/cluster-monitoring-operator/pull/2240)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Synchronize versions of the downstream components [#2238](https://github.com/openshift/cluster-monitoring-operator/pull/2238)
* [MON-2853](https://issues.redhat.com/browse/MON-2853): add runbook link to TargetDown alert [#2237](https://github.com/openshift/cluster-monitoring-operator/pull/2237)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): [bot] Synchronize versions of the downstream components [#2236](https://github.com/openshift/cluster-monitoring-operator/pull/2236)
* [OCPBUGS-26983](https://issues.redhat.com/browse/OCPBUGS-26983): rollout monitoring plugin on TLS rotation [#2233](https://github.com/openshift/cluster-monitoring-operator/pull/2233)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): chore: update Prometheus operator to v0.71.0 [#2230](https://github.com/openshift/cluster-monitoring-operator/pull/2230)
* [MON-3667](https://issues.redhat.com/browse/MON-3667): remove outdated documentation [#2232](https://github.com/openshift/cluster-monitoring-operator/pull/2232)
* [OCPBUGS-25849](https://issues.redhat.com/browse/OCPBUGS-25849): make PrometheusAdapter and MetricsServer tasks less conflict prone [#2218](https://github.com/openshift/cluster-monitoring-operator/pull/2218)
* [OCPBUGS-25378](https://issues.redhat.com/browse/OCPBUGS-25378): drop InfoInhibitor from default Alertmanager config [#2225](https://github.com/openshift/cluster-monitoring-operator/pull/2225)
* [MON-3664](https://issues.redhat.com/browse/MON-3664): chore: avoid issues with std.set* functions [#2231](https://github.com/openshift/cluster-monitoring-operator/pull/2231)
* [MON-3654](https://issues.redhat.com/browse/MON-3654): use Go standard errors package instead of github.com/pkg/errors [#2224](https://github.com/openshift/cluster-monitoring-operator/pull/2224)
* [MON-1047](https://issues.redhat.com/browse/MON-1047): fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… [#2228](https://github.com/openshift/cluster-monitoring-operator/pull/2228)
* [MON-3552](https://issues.redhat.com/browse/MON-3552): remove temporary cleanup code and no longer needed tests [#2210](https://github.com/openshift/cluster-monitoring-operator/pull/2210)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/6b4252102a2aad5544be7f8b08419e73fd2621d9...d45a3335c2bbada0948adef9fcba55c4e14fa1d7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1d9dca6ceb5506280f01c8fcd7ce2606bb3be26c)

* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156)
* [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208)
* NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226)
* [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209)
* [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807)
* [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201)
* [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206)
* NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199)
* [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191)
* [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170)
* [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153)
* [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187)
* [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173)
* [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169)
* [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179)
* [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/873b3290a2de28fb7fb41ad498fc9872dcb1a93b...1d9dca6ceb5506280f01c8fcd7ce2606bb3be26c)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/7622d537e24ab8b05220d227bc217035e4599c6e)

* e2e: `UpdateWithRetry` only update spec (#914) [#914](https://github.com/openshift/cluster-node-tuning-operator/pull/914)
* Skip PerformanceProfile update test (#929) [#929](https://github.com/openshift/cluster-node-tuning-operator/pull/929)
* Export ValidateBasicFields for Hypershift (#916) [#916](https://github.com/openshift/cluster-node-tuning-operator/pull/916)
* e2e: log: set ctrl-runtime logger (#911) [#911](https://github.com/openshift/cluster-node-tuning-operator/pull/911)
* [OCPBUGS-22095](https://issues.redhat.com/browse/OCPBUGS-22095): Add default MCP objects for rendering (#833) [#833](https://github.com/openshift/cluster-node-tuning-operator/pull/833)
* README Doc Typo Fix (#920) [#920](https://github.com/openshift/cluster-node-tuning-operator/pull/920)
* HyperShift code linter PR837 followup (#910) [#910](https://github.com/openshift/cluster-node-tuning-operator/pull/910)
* [CNF-10786](https://issues.redhat.com/browse/CNF-10786): e2e: general improvements and cleanup  (#898) [#898](https://github.com/openshift/cluster-node-tuning-operator/pull/898)
* dnm: skip crun configuration test (#917) [#917](https://github.com/openshift/cluster-node-tuning-operator/pull/917)
* Add .snyk file for static code analysis (#902) [#902](https://github.com/openshift/cluster-node-tuning-operator/pull/902)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7820510cc1cf776a66777d6f3174fb296db220b3...7622d537e24ab8b05220d227bc217035e4599c6e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/c70b9a825565bd165d34fea8eec369f4f610ee53)

* [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#566](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/566)
* [OCPBUGS-18939](https://issues.redhat.com/browse/OCPBUGS-18939): manifest: drop slo latency metrics in favor of sli [#547](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/547)
* [WRKLDS-1004](https://issues.redhat.com/browse/WRKLDS-1004): use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs [#562](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/562)
* [OCPBUGS-24972](https://issues.redhat.com/browse/OCPBUGS-24972): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#561](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/561)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/bb83e65273bd75c5916a0c26307557f9354dec1a...c70b9a825565bd165d34fea8eec369f4f610ee53)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/28f84ab13dcc81749100fdeed4545453c611d7c4)

* [OCPBUGS-23624](https://issues.redhat.com/browse/OCPBUGS-23624): Add .snyk file to exclude vendor and ignore unit tests [#325](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/325)
* [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump k8s dependencies to 1.29.0 [#324](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/324)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/83d2ca92d4cb9b242849590fd5d6530d31aeba5f...28f84ab13dcc81749100fdeed4545453c611d7c4)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/15c068ab02d7fd767cccb1d7bfb2c8ab5e529647)

* [OCPBUGS-24877](https://issues.redhat.com/browse/OCPBUGS-24877): Updating ose-cluster-policy-controller-container image to be consistent with ART [#144](https://github.com/openshift/cluster-policy-controller/pull/144)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/efafeb428cb5fb95eb997873dc0d7c9d306df8f1...15c068ab02d7fd767cccb1d7bfb2c8ab5e529647)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/03984881b72c7a406dded724a84242a0e3ff93b3)

* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to CSO [#442](https://github.com/openshift/cluster-storage-operator/pull/442)
* [STOR-1354](https://issues.redhat.com/browse/STOR-1354): Remove Alibaba Disk CSI Driver [#440](https://github.com/openshift/cluster-storage-operator/pull/440)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#443](https://github.com/openshift/cluster-storage-operator/pull/443)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Azure disk hypershift [#420](https://github.com/openshift/cluster-storage-operator/pull/420)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#437](https://github.com/openshift/cluster-storage-operator/pull/437)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/886dd7ddd779e55b3d7c6425ca9422b9707fa31f...03984881b72c7a406dded724a84242a0e3ff93b3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a67986428479c545cf6cc57235f190078fac0d21)

* [OCPBUGS-18454](https://issues.redhat.com/browse/OCPBUGS-18454): Avoid using risk names as condition reasons when invalid [#962](https://github.com/openshift/cluster-version-operator/pull/962)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): yield lock while retrieving payload [#1005](https://github.com/openshift/cluster-version-operator/pull/1005)
* NO-JIRA: manifests: fix service manifest filename [#1027](https://github.com/openshift/cluster-version-operator/pull/1027)
* [OCPBUGS-27468](https://issues.redhat.com/browse/OCPBUGS-27468): bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features [#1026](https://github.com/openshift/cluster-version-operator/pull/1026)
* [OCPBUGS-7714](https://issues.redhat.com/browse/OCPBUGS-7714): Refactor & improve SyncWorker lock code [#1020](https://github.com/openshift/cluster-version-operator/pull/1020)
* [OTA-1169](https://issues.redhat.com/browse/OTA-1169): deps: bump openshift/api and k8s.io/client.go [#1022](https://github.com/openshift/cluster-version-operator/pull/1022)
* [OCPBUGS-25862](https://issues.redhat.com/browse/OCPBUGS-25862): CO health: only track current in-progress upgrade start [#1011](https://github.com/openshift/cluster-version-operator/pull/1011)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7c22805ee23be586dcff97c673ca648f1810770b...a67986428479c545cf6cc57235f190078fac0d21)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)

* [MON-3671](https://issues.redhat.com/browse/MON-3671): add machine424 and rexagod to OWNERS [#55](https://github.com/openshift/configmap-reload/pull/55)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/f6a6be59c42812bbcc38c797a8b39d2b2f1e3d03...dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e)


### [console](https://github.com/openshift/console/tree/0ae84d51591ba1defe5e00997280bfbfdac35c4b)

* [OCPBUGS-25843](https://issues.redhat.com/browse/OCPBUGS-25843): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13483](https://github.com/openshift/console/pull/13483)
* [OCPBUGS-25881](https://issues.redhat.com/browse/OCPBUGS-25881): remove "openshift-storage" namespace usage from the console [#13418](https://github.com/openshift/console/pull/13418)
* [OCPBUGS-27455](https://issues.redhat.com/browse/OCPBUGS-27455): do not deduplicate ImageManifestVulns in Overview popover [#13529](https://github.com/openshift/console/pull/13529)
* [OCPBUGS-27016](https://issues.redhat.com/browse/OCPBUGS-27016): fix resizeObserver limit exceed for dev-console [#13502](https://github.com/openshift/console/pull/13502)
* [OCPBUGS-27152](https://issues.redhat.com/browse/OCPBUGS-27152): Fix popover jump in Tables [#13524](https://github.com/openshift/console/pull/13524)
* [OCPBUGS-25788](https://issues.redhat.com/browse/OCPBUGS-25788): Add Node Maintenance menu actions to Node list/details [#13506](https://github.com/openshift/console/pull/13506)
* [OCPBUGS-27779](https://issues.redhat.com/browse/OCPBUGS-27779): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13532](https://github.com/openshift/console/pull/13532)
* [CONSOLE-3430](https://issues.redhat.com/browse/CONSOLE-3430): add Cluster Settings > Details integration tests [#13515](https://github.com/openshift/console/pull/13515)
* [ODC-7482](https://issues.redhat.com/browse/ODC-7482): Add flags checks to hide Pipeline static plugin List and details pages [#13512](https://github.com/openshift/console/pull/13512)
* [OCPBUGS-27498](https://issues.redhat.com/browse/OCPBUGS-27498): Update get method so it can display zero value when set [#13533](https://github.com/openshift/console/pull/13533)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): Addition of optional chaining to prevent yaml crash [#13510](https://github.com/openshift/console/pull/13510)
* [OCPBUGS-27399](https://issues.redhat.com/browse/OCPBUGS-27399): Filter out Client CSRs for nodes which already exist [#13522](https://github.com/openshift/console/pull/13522)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-16814](https://issues.redhat.com/browse/OCPBUGS-16814): backend: use the k8s SelfSubjectReview API to get info about a user [#13321](https://github.com/openshift/console/pull/13321)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13276](https://github.com/openshift/console/pull/13276)
* [OCPBUGS-26772](https://issues.redhat.com/browse/OCPBUGS-26772): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13503](https://github.com/openshift/console/pull/13503)
* [OCPBUGS-26039](https://issues.redhat.com/browse/OCPBUGS-26039): Make editor sidebar width consistent [#13495](https://github.com/openshift/console/pull/13495)
* [OCPBUGS-10851](https://issues.redhat.com/browse/OCPBUGS-10851): Add source maps to production builds [#13497](https://github.com/openshift/console/pull/13497)
* [OCPBUGS-25890](https://issues.redhat.com/browse/OCPBUGS-25890): Prevent complete page reload when changing perspective [#13500](https://github.com/openshift/console/pull/13500)
* [OCPBUGS-14481](https://issues.redhat.com/browse/OCPBUGS-14481): update check for the 'provider' label on the PackageMa… [#13491](https://github.com/openshift/console/pull/13491)
* [OCPBUGS-26554](https://issues.redhat.com/browse/OCPBUGS-26554): Fixed some problems in topology Chinese translation text [#13458](https://github.com/openshift/console/pull/13458)
* [OCPBUGS-18699](https://issues.redhat.com/browse/OCPBUGS-18699): add additional check to determine if file is binary [#13496](https://github.com/openshift/console/pull/13496)
* [ODC-7465](https://issues.redhat.com/browse/ODC-7465): Update Getting started section in Openshift UI to use expandable section [#13466](https://github.com/openshift/console/pull/13466)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13441](https://github.com/openshift/console/pull/13441)
* [Full changelog](https://github.com/openshift/console/compare/e7e56f18d901212b4409a0afa38e3cf80a921232...0ae84d51591ba1defe5e00997280bfbfdac35c4b)


### [console-operator](https://github.com/openshift/console-operator/tree/67c10e696d7d8b76e03504dec4bade985fa01f47)

* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Merge auth cert configmap deployment annotations into one [#842](https://github.com/openshift/console-operator/pull/842)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): make it impossible double set conditions in a single loop [#848](https://github.com/openshift/console-operator/pull/848)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#839](https://github.com/openshift/console-operator/pull/839)
* [OCPBUGS-27335](https://issues.redhat.com/browse/OCPBUGS-27335): The console-deployment should set the number of replicas based on the ControlPlaneTopology [#838](https://github.com/openshift/console-operator/pull/838)
* NO-JIRA:(chore) remove unused loglevel [#830](https://github.com/openshift/console-operator/pull/830)
* [OCPBUGS-25484](https://issues.redhat.com/browse/OCPBUGS-25484): Bump library-go to deal with GET conflict [#836](https://github.com/openshift/console-operator/pull/836)
* [OCPBUGS-24041](https://issues.redhat.com/browse/OCPBUGS-24041): Prevent healthcheck controller from Available=False blipping [#834](https://github.com/openshift/console-operator/pull/834)
* [Full changelog](https://github.com/openshift/console-operator/compare/d1d620b278b1b688b40127472552c3c02fb5a0bc...67c10e696d7d8b76e03504dec4bade985fa01f47)


### [coredns](https://github.com/openshift/coredns/tree/022a0530038602605b8f3e8866c2a6ded97708cc)

* [OCPBUGS-27928](https://issues.redhat.com/browse/OCPBUGS-27928): Updating coredns-container image to be consistent with ART for 4.16 [#111](https://github.com/openshift/coredns/pull/111)
* [OCPBUGS-27397](https://issues.redhat.com/browse/OCPBUGS-27397): UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 [#109](https://github.com/openshift/coredns/pull/109)
* [Full changelog](https://github.com/openshift/coredns/compare/b6a657d656bef2631c4675a819ce25a4662b0978...022a0530038602605b8f3e8866c2a6ded97708cc)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/c751f25ff5c98207ee908826491ce515e55249f3)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#225](https://github.com/openshift/csi-driver-manila-operator/pull/225)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/b75692d52701ef5e759b0255616bf45a212d850a...c751f25ff5c98207ee908826491ce515e55249f3)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/42083999af7f7e357fde200ceb707482d1655fc2)

* [OCPBUGS-27860](https://issues.redhat.com/browse/OCPBUGS-27860), [OCPBUGS-28261](https://issues.redhat.com/browse/OCPBUGS-28261): address SAST/SNYK findings [#164](https://github.com/openshift/csi-driver-shared-resource/pull/164)
* [OCPBUGS-26081](https://issues.redhat.com/browse/OCPBUGS-26081), [OCPBUGS-26114](https://issues.redhat.com/browse/OCPBUGS-26114), [OCPBUGS-26145](https://issues.redhat.com/browse/OCPBUGS-26145): add snyk config file for SAST scan [#161](https://github.com/openshift/csi-driver-shared-resource/pull/161)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/b7a7644817c43f5578b3829a9f407ccc9bc0a8b3...42083999af7f7e357fde200ceb707482d1655fc2)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/97161af2e5ea321499e2bdb8651828be44de2b15)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#98](https://github.com/openshift/csi-driver-shared-resource-operator/pull/98)
* [OCPBUGS-26087](https://issues.redhat.com/browse/OCPBUGS-26087): add snyk config file for SAST scan [#95](https://github.com/openshift/csi-driver-shared-resource-operator/pull/95)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/09a8eb2c6d53285100986f9092eea35e5123358b...97161af2e5ea321499e2bdb8651828be44de2b15)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/3153853f4a19527fb8f777d5ea00a1c952230cf4)

* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#70](https://github.com/openshift/csi-external-attacher/pull/70)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/e0dc10fc609082c973aae7d40f50dfba6e2a402a...3153853f4a19527fb8f777d5ea00a1c952230cf4)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/5d94212bd88d3292b9d569fa652c7ad94745a37f)

* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#88](https://github.com/openshift/csi-external-provisioner/pull/88)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/b0f691adb5416aeedff50ec2f667c2bdadbd6d7e...5d94212bd88d3292b9d569fa652c7ad94745a37f)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/c6c714e1f308492ac5dc20c9ba95f4ca8a49c11c)

* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#64](https://github.com/openshift/csi-node-driver-registrar/pull/64)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/1226c4cc0c6928f63f8fbafd96849ee625a40f08...c6c714e1f308492ac5dc20c9ba95f4ca8a49c11c)


### [docker-registry](https://github.com/openshift/image-registry/tree/c3037e8bf78f0ac7ae9779d73e5f3eb38e8e679a)

* [OCPBUGS-26173](https://issues.redhat.com/browse/OCPBUGS-26173): Updating openshift-enterprise-registry-container image to be consistent with ART [#390](https://github.com/openshift/image-registry/pull/390)
* [Full changelog](https://github.com/openshift/image-registry/compare/ff3506f791294ffa9a858e1304604ebda84357c8...c3037e8bf78f0ac7ae9779d73e5f3eb38e8e679a)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/58876172125a189fbe38830db3163df44aae447d)

* [OCPBUGS-26143](https://issues.redhat.com/browse/OCPBUGS-26143): Fix formatting in snyk vendor exclusions [#219](https://github.com/openshift/cluster-api-provider-gcp/pull/219)
* [OCPBUGS-24875](https://issues.redhat.com/browse/OCPBUGS-24875): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#215](https://github.com/openshift/cluster-api-provider-gcp/pull/215)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/6cb4b52dfce79ff7d760a2e0dc93d6645a32bd16...58876172125a189fbe38830db3163df44aae447d)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/55babae8e85b83b5d1574b440df266a7f047d953)

* [OCPBUGS-26128](https://issues.redhat.com/browse/OCPBUGS-26128): Add Snyk file to exclude vendor directory on scan [#77](https://github.com/openshift/machine-api-provider-gcp/pull/77)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9fc1c40e00356387403ea77565f62a70e9b7d87a...55babae8e85b83b5d1574b440df266a7f047d953)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/587ce115bdba66d48c34e3ae183f7a5098c8a514)

* [OCPBUGS-27242](https://issues.redhat.com/browse/OCPBUGS-27242): fix or ignore snyk errors for ocp storage repos [#58](https://github.com/openshift/gcp-pd-csi-driver/pull/58)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/bfa3cd0fc23efbd319937c2f28e198aec5da9b1b...587ce115bdba66d48c34e3ae183f7a5098c8a514)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/1e5ecf00841b9469cb49bd0c1c3e9397f6aa12ae)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#115](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/115)
* [OCPBUGS-26486](https://issues.redhat.com/browse/OCPBUGS-26486): Increase data source provision timeout [#112](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/112)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/780ce415acc33f3d95b2be61e8d3b718269a96a6...1e5ecf00841b9469cb49bd0c1c3e9397f6aa12ae)


### [haproxy-router](https://github.com/openshift/router/tree/fcead817a0181a6326c15c8bd2e31b5fb3acdc14)

* [OCPBUGS-25546](https://issues.redhat.com/browse/OCPBUGS-25546): Updating ose-haproxy-router-base-container image to be consistent with ART [#550](https://github.com/openshift/router/pull/550)
* [Full changelog](https://github.com/openshift/router/compare/00f1690d49de86206bee1a54c9153747565b4186...fcead817a0181a6326c15c8bd2e31b5fb3acdc14)


### [hypershift](https://github.com/openshift/hypershift/tree/f9c0490d10b3252c2a4142f264339cecb6a165de)

* [HOSTEDCP-1401](https://issues.redhat.com/browse/HOSTEDCP-1401): Enable BYO NSG [#3455](https://github.com/openshift/hypershift/pull/3455)
* NO-JIRA: Update go-jose to the latest version to fix CVE [#3475](https://github.com/openshift/hypershift/pull/3475)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): re-revert api stuff [#3463](https://github.com/openshift/hypershift/pull/3463)
* [OCPBUGS-26940](https://issues.redhat.com/browse/OCPBUGS-26940): Include OperatorHubSpec sync with HC when Config is empty [#3454](https://github.com/openshift/hypershift/pull/3454)
* NO-JIRA: Simplified kubectl component version check [#3458](https://github.com/openshift/hypershift/pull/3458)
* NO-JIRA: Remove '--attach-default-network' from productized cli [#3462](https://github.com/openshift/hypershift/pull/3462)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#3451](https://github.com/openshift/hypershift/pull/3451)
* NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 [#3466](https://github.com/openshift/hypershift/pull/3466)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): indicate cluster profile to render the correct manifests [#3443](https://github.com/openshift/hypershift/pull/3443)
* [OCPBUGS-26977](https://issues.redhat.com/browse/OCPBUGS-26977): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3403](https://github.com/openshift/hypershift/pull/3403)
* [TRT-1456](https://issues.redhat.com/browse/TRT-1456): Revert #3448 "api: move CSRA to a new group" [#3460](https://github.com/openshift/hypershift/pull/3460)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): api: move CSRA to a new group [#3448](https://github.com/openshift/hypershift/pull/3448)
* [HOSTEDCP-1397](https://issues.redhat.com/browse/HOSTEDCP-1397): Add documentation on how to debug Azure nodes [#3452](https://github.com/openshift/hypershift/pull/3452)
* NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images [#3426](https://github.com/openshift/hypershift/pull/3426)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Add e2e to ensure SA token not mounted on mgmt workloa… [#3301](https://github.com/openshift/hypershift/pull/3301)
* NO-JIRA: Fix promql testdata missing issue [#3438](https://github.com/openshift/hypershift/pull/3438)
* NO-JIRA: Update RHTAP references (main) [#3446](https://github.com/openshift/hypershift/pull/3446)
* [HOSTEDCP-1188](https://issues.redhat.com/browse/HOSTEDCP-1188): Add docs for control plane scheduling topologies [#3434](https://github.com/openshift/hypershift/pull/3434)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Set outbound LoadBalancer name on AzureCluster [#3445](https://github.com/openshift/hypershift/pull/3445)
* NO-JIRA: Bump misc dependencies 21f825371d [#3433](https://github.com/openshift/hypershift/pull/3433)
* [HOSTEDCP-1207](https://issues.redhat.com/browse/HOSTEDCP-1207): Automated etcd backup [#3034](https://github.com/openshift/hypershift/pull/3034)
* NO-JIRA: Document machine configuration in HyperShift [#3331](https://github.com/openshift/hypershift/pull/3331)
* [HOSTEDCP-1382](https://issues.redhat.com/browse/HOSTEDCP-1382): [Subtask] Restore Ability to Create HCPs on Azure [#3404](https://github.com/openshift/hypershift/pull/3404)
* [HOSTEDCP-1314](https://issues.redhat.com/browse/HOSTEDCP-1314): Ensure all e2e HCs use NLB for ingress controller [#3293](https://github.com/openshift/hypershift/pull/3293)
* [OCPBUGS-26757](https://issues.redhat.com/browse/OCPBUGS-26757): Change KAS bootstrap image to cluster-config-api [#3400](https://github.com/openshift/hypershift/pull/3400)
* NO-JIRA: Improve nodepool's machine condition message [#3354](https://github.com/openshift/hypershift/pull/3354)
* [OCPBUGS-23228](https://issues.redhat.com/browse/OCPBUGS-23228): Add storage, csisnapshotcontroller and clustercsidrive… [#3396](https://github.com/openshift/hypershift/pull/3396)
* [OCPBUGS-27027](https://issues.redhat.com/browse/OCPBUGS-27027): availability-prober: wait for infrastructure name to be set [#3409](https://github.com/openshift/hypershift/pull/3409)
* NO-JIRA: remove non-existent v1beta2 from webhook [#3407](https://github.com/openshift/hypershift/pull/3407)
* [HOSTEDCP-1376](https://issues.redhat.com/browse/HOSTEDCP-1376): Bump the sigs.k8s-dependencies group and update dependabot groupings [#3392](https://github.com/openshift/hypershift/pull/3392)
* [OCPBUGS-25696](https://issues.redhat.com/browse/OCPBUGS-25696): Apply Scheduling Configuration for kCCM [#3382](https://github.com/openshift/hypershift/pull/3382)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): remove LoadBalancer filter from external-dns [#3410](https://github.com/openshift/hypershift/pull/3410)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): fix up external-dns flags [#3408](https://github.com/openshift/hypershift/pull/3408)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): reduce external-dns route53 call volume [#3394](https://github.com/openshift/hypershift/pull/3394)
* Update RHTAP references (main) [#3401](https://github.com/openshift/hypershift/pull/3401)
* [OCPBUGS-25897](https://issues.redhat.com/browse/OCPBUGS-25897): hcco: use manual mode for CCO [#3375](https://github.com/openshift/hypershift/pull/3375)
* [HOSTEDCP-1309](https://issues.redhat.com/browse/HOSTEDCP-1309): Add GC knobs for KAS [#3384](https://github.com/openshift/hypershift/pull/3384)
* NO-JIRA: [KubeVirt] Fix external infra permissions documentation [#3391](https://github.com/openshift/hypershift/pull/3391)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3373](https://github.com/openshift/hypershift/pull/3373)
* [OCPBUGS-25974](https://issues.redhat.com/browse/OCPBUGS-25974): Do not use CPO image from status if it's not a valid image reference [#3361](https://github.com/openshift/hypershift/pull/3361)
* [OCPBUGS-23518](https://issues.redhat.com/browse/OCPBUGS-23518): consider HCP upgradeable if CVO has no upgradable condition [#3239](https://github.com/openshift/hypershift/pull/3239)
* [OCPBUGS-26232](https://issues.redhat.com/browse/OCPBUGS-26232): set KAS runtime-config in alignment with feature gates [#3377](https://github.com/openshift/hypershift/pull/3377)
* [HOSTEDCP-1372](https://issues.redhat.com/browse/HOSTEDCP-1372): Bumps k8s to v0.29 [#3360](https://github.com/openshift/hypershift/pull/3360)
* [Full changelog](https://github.com/openshift/hypershift/compare/660b17bae9de52c4de65795891d3632912e2e079...f9c0490d10b3252c2a4142f264339cecb6a165de)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/83dc07dd56184f1c428110fc778b537bec06cbd8)

* [OCPBUGS-22604](https://issues.redhat.com/browse/OCPBUGS-22604), [OCPCLOUD-2454](https://issues.redhat.com/browse/OCPCLOUD-2454): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.7.0 (e51c61e) into main [#74](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/74)
* [OCPBUGS-26135](https://issues.redhat.com/browse/OCPBUGS-26135): Fix formatting in snyk vendor exclusions [#75](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ce9828a745d797a769f52f4c1f9366e34bc2042d...83dc07dd56184f1c428110fc778b537bec06cbd8)


### [insights-operator](https://github.com/openshift/insights-operator/tree/226e25390d26777eebb7b3eff1b6317036e46919)

* NO-JIRA: fix helmchart gather unit test (#880) [#880](https://github.com/openshift/insights-operator/pull/880)
* feature: support loglevel controller (#894) [#894](https://github.com/openshift/insights-operator/pull/894)
* NO-JIRA: Adding insights-config configuration description to arch.md (#892) [#892](https://github.com/openshift/insights-operator/pull/892)
* another attempt to fix security warning for changelog script (#893) [#893](https://github.com/openshift/insights-operator/pull/893)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8ebecf82e6cfc80ebf4bd0f57b5d0e52d3be59a9...226e25390d26777eebb7b3eff1b6317036e46919)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/64c9016580cedc33c3dd926c3eab1473cb310681)

* [OCPBUGS-24858](https://issues.redhat.com/browse/OCPBUGS-24858): Updating ose-kube-metrics-server-container image to be consistent with ART [#21](https://github.com/openshift/kubernetes-metrics-server/pull/21)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/bcbf241cece8ef455be32a910f1570bae827b4a1...64c9016580cedc33c3dd926c3eab1473cb310681)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/f4cdaa2c70afd7fcfccbf816678adc1e4eb3bf9f)

* NO-JIRA: Update README to note that openshift-sdn is deprecated [#611](https://github.com/openshift/sdn/pull/611)
* NO-JIRA: Move sdn to RHEL9 base image [#598](https://github.com/openshift/sdn/pull/598)
* [OCPBUGS-25740](https://issues.redhat.com/browse/OCPBUGS-25740): Updating ose-node-container image to be consistent with ART for 4.16 [#599](https://github.com/openshift/sdn/pull/599)
* [OCPBUGS-23666](https://issues.redhat.com/browse/OCPBUGS-23666): Add Snyk file to exclude directories on scan [#604](https://github.com/openshift/sdn/pull/604)
* [OCPBUGS-25779](https://issues.redhat.com/browse/OCPBUGS-25779): Updating kube-proxy-container image to be consistent with ART for 4.16 [#600](https://github.com/openshift/sdn/pull/600)
* [Full changelog](https://github.com/openshift/sdn/compare/5ad1921b6c0165ed51f3a97d4f025e38c7264cec...f4cdaa2c70afd7fcfccbf816678adc1e4eb3bf9f)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/6ea01c5c6e0c56d07b66c90e27caeda58b4ce872)

* [OCPBUGS-24818](https://issues.redhat.com/browse/OCPBUGS-24818): Updating kube-rbac-proxy-container image to be consistent with ART [#88](https://github.com/openshift/kube-rbac-proxy/pull/88)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/e8e8c84bcc6d4419970726f3028df4b178c0b1c9...6ea01c5c6e0c56d07b66c90e27caeda58b4ce872)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)

* [OCPBUGS-27929](https://issues.redhat.com/browse/OCPBUGS-27929): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 [#203](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/203)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/2646eac05dc16eac71d1d79509ed5800c437e0de...969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/e9eb81e80a88960535412dff0c56df0e6b2550bc)

* NO-JIRA: Auto sync upstream 2024 01 05 18 36 [#27](https://github.com/openshift/kubevirt-csi-driver/pull/27)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/dce478b3a51f6ed95c385c0a6bc292b1a99cee67...e9eb81e80a88960535412dff0c56df0e6b2550bc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/92cfcfa2e499cce8fc3e4f82516b5f50856f1281)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1211](https://github.com/openshift/machine-api-operator/pull/1211)
* [CFE-684](https://issues.redhat.com/browse/CFE-684), [OCPCLOUD-2430](https://issues.redhat.com/browse/OCPCLOUD-2430): Rebase k8s 1.29 and update dependencies [#1208](https://github.com/openshift/machine-api-operator/pull/1208)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Update GCPCloudCredentials with TagUser role [#1158](https://github.com/openshift/machine-api-operator/pull/1158)
* [OCPBUGS-27385](https://issues.redhat.com/browse/OCPBUGS-27385): Add useExternalIp gcp permission [#1206](https://github.com/openshift/machine-api-operator/pull/1206)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Set --max-concurrent-reconciles=10 for Azure machine controller [#1203](https://github.com/openshift/machine-api-operator/pull/1203)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Add AddWithActuatorOpts to allow overriding Machine controller options [#1202](https://github.com/openshift/machine-api-operator/pull/1202)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/8d8b7e58cbe80097ed556582da4d6a2daa44591b...92cfcfa2e499cce8fc3e4f82516b5f50856f1281)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c5f53e25f337f003a388d9108713a6230f197044)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#4147](https://github.com/openshift/machine-config-operator/pull/4147)
* [OCPBUGS-24366](https://issues.redhat.com/browse/OCPBUGS-24366): Delete state files on reboot only [#4124](https://github.com/openshift/machine-config-operator/pull/4124)
* [OCPBUGS-17788](https://issues.redhat.com/browse/OCPBUGS-17788): Improved error handling for missing MC [#4096](https://github.com/openshift/machine-config-operator/pull/4096)
* [OCPBUGS-27508](https://issues.redhat.com/browse/OCPBUGS-27508): daemon: allow the user to override drains on IR changes [#4139](https://github.com/openshift/machine-config-operator/pull/4139)
* [MCO-831](https://issues.redhat.com/browse/MCO-831): added feature gate to mco for on cluster builds [#4060](https://github.com/openshift/machine-config-operator/pull/4060)
* [OCPNODE-2005](https://issues.redhat.com/browse/OCPNODE-2005): crio: add support for LinkLogs annotation by default [#4116](https://github.com/openshift/machine-config-operator/pull/4116)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Bump k8s api to v0.29.0 [#4119](https://github.com/openshift/machine-config-operator/pull/4119)
* [OCPBUGS-27190](https://issues.redhat.com/browse/OCPBUGS-27190): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4125](https://github.com/openshift/machine-config-operator/pull/4125)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Add Image Credential Provider flags for Kubelet on AWS [#4103](https://github.com/openshift/machine-config-operator/pull/4103)
* [OCPNODE-2021](https://issues.redhat.com/browse/OCPNODE-2021): add crio-kube-rbac-proxy [#4108](https://github.com/openshift/machine-config-operator/pull/4108)
* [OCPBUGS-24831](https://issues.redhat.com/browse/OCPBUGS-24831): Updating ose-machine-config-operator-container image to be consistent with ART [#4070](https://github.com/openshift/machine-config-operator/pull/4070)
* [OCPBUGS-22664](https://issues.redhat.com/browse/OCPBUGS-22664): Mount /run/nodeip-configuration into coredns containers [#4058](https://github.com/openshift/machine-config-operator/pull/4058)
* [OCPBUGS-27261](https://issues.redhat.com/browse/OCPBUGS-27261): Fix typo in AWS node env unit [#4126](https://github.com/openshift/machine-config-operator/pull/4126)
* NO-ISSUE: Update the design doc dual support icsp and idms [#4085](https://github.com/openshift/machine-config-operator/pull/4085)
* NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets [#4089](https://github.com/openshift/machine-config-operator/pull/4089)
* [OCPBUGS-25725](https://issues.redhat.com/browse/OCPBUGS-25725): ManagedBootImages: failed to fetch architecture type of machineset no linked machine found [#4088](https://github.com/openshift/machine-config-operator/pull/4088)
* [OCPBUGS-26605](https://issues.redhat.com/browse/OCPBUGS-26605): use machine client instead of oc for teardown [#4110](https://github.com/openshift/machine-config-operator/pull/4110)
* [OCPBUGS-5452](https://issues.redhat.com/browse/OCPBUGS-5452): If node is not in pool, error [#4097](https://github.com/openshift/machine-config-operator/pull/4097)
* [OCPBUGS-24416](https://issues.redhat.com/browse/OCPBUGS-24416): Sync MCN with node creation and deletion [#4062](https://github.com/openshift/machine-config-operator/pull/4062)
* NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports [#4091](https://github.com/openshift/machine-config-operator/pull/4091)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7dae64aaa1edede1149c2d3b40f0fe1c39896076...c5f53e25f337f003a388d9108713a6230f197044)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ce5024a2998519e8269d5948fc77c0ef8c5d4d29)

* [OU-310](https://issues.redhat.com/browse/OU-310): Add an extension point for alerts, to be able to add an inspect link [#95](https://github.com/openshift/monitoring-plugin/pull/95)
* [OU-309](https://issues.redhat.com/browse/OU-309): consider all metric keys to display all results on dashboards tables [#96](https://github.com/openshift/monitoring-plugin/pull/96)
* [OCPBUGS-27201](https://issues.redhat.com/browse/OCPBUGS-27201): upgrade follow-redirects parent dependency [#92](https://github.com/openshift/monitoring-plugin/pull/92)
* [OU-311](https://issues.redhat.com/browse/OU-311): Add Dockerfile for local testing [#91](https://github.com/openshift/monitoring-plugin/pull/91)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/73a1c3b1840ae4e6ad1b5a08108295c919ff916f...ce5024a2998519e8269d5948fc77c0ef8c5d4d29)


### [multus-cni](https://github.com/openshift/multus-cni/tree/63bcef35cff256436fa6cdbd1ef90f3d84147f2b)

* [OCPBUGS-28583](https://issues.redhat.com/browse/OCPBUGS-28583): Updating multus-cni-container image to be consistent with ART for 4.16 [#212](https://github.com/openshift/multus-cni/pull/212)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait to account for the possiblity of a not ready unix socket [#208](https://github.com/openshift/multus-cni/pull/208)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#204](https://github.com/openshift/multus-cni/pull/204)
* [Full changelog](https://github.com/openshift/multus-cni/compare/8a0e06a01018e80842e4c9725aa2d0e8764fb3e8...63bcef35cff256436fa6cdbd1ef90f3d84147f2b)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/675057f0b08b6015bfc1757f64699e8de768dab1)

* Updating ose-multus-networkpolicy-container image to be consistent with ART (#47) [#47](https://github.com/openshift/multus-networkpolicy/pull/47)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/899bf25df6b8bc4a65126d06372eefae39aedf13...675057f0b08b6015bfc1757f64699e8de768dab1)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/6a04feea1b1ab85914d9793a3bb8502c54bef172)

* [OCPBUGS-28557](https://issues.redhat.com/browse/OCPBUGS-28557): Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 [#54](https://github.com/openshift/route-override-cni/pull/54)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/db0913d9de04bee356d6b4b6f95b02c59dda66ad...6a04feea1b1ab85914d9793a3bb8502c54bef172)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/b24729e5b72c2341a5bf86ff05a5ed14f23a9e09)

* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Downstream sync - includes configurable schedule for reconciler [#227](https://github.com/openshift/whereabouts-cni/pull/227)
* [OCPBUGS-26017](https://issues.redhat.com/browse/OCPBUGS-26017): Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART [#223](https://github.com/openshift/whereabouts-cni/pull/223)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/abcd947801db127eac5ad3f992ecc30a249fcc69...b24729e5b72c2341a5bf86ff05a5ed14f23a9e09)


### [must-gather](https://github.com/openshift/must-gather/tree/c8fec85caeab4757d1c67daf38620fc89aabca69)

* [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): use must-gather since and since time env vars on inspect cmds [#400](https://github.com/openshift/must-gather/pull/400)
* [Full changelog](https://github.com/openshift/must-gather/compare/4c685e04ae7dd236782a1b09912bd2f95c3c5690...c8fec85caeab4757d1c67daf38620fc89aabca69)


### [network-tools](https://github.com/openshift/network-tools/tree/83f58550a861399dcc3d94432289f88ec7f049e9)

* NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional [#101](https://github.com/openshift/network-tools/pull/101)
* [OCPBUGS-26490](https://issues.redhat.com/browse/OCPBUGS-26490): Updating ose-network-tools-container image to be consistent with ART [#108](https://github.com/openshift/network-tools/pull/108)
* NO-JIRA: jira-scripts: disable flavio [#111](https://github.com/openshift/network-tools/pull/111)
* [Full changelog](https://github.com/openshift/network-tools/compare/d34fc49be91d48435f1381ba39860d6fc02fd619...83f58550a861399dcc3d94432289f88ec7f049e9)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/9d90b159dfaacd413fc86befa960cc69a9f67895)

* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#95](https://github.com/openshift/oauth-apiserver/pull/95)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/a87bd939d5c94392745fd52a784633476f5ddd13...9d90b159dfaacd413fc86befa960cc69a9f67895)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/02fd61468567fbf5b059c2fa3e338a2e8aed4816)

* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: adds 2 new scenarios (#785) [#785](https://github.com/openshift/oc-mirror/pull/785)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): docs: add 3 new scenarios for catalog filtering (#782) [#782](https://github.com/openshift/oc-mirror/pull/782)
* [OCPBUGS-26513](https://issues.redhat.com/browse/OCPBUGS-26513): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) [#772](https://github.com/openshift/oc-mirror/pull/772)
* [CLID-14](https://issues.redhat.com/browse/CLID-14): Add study results in docs (#778) [#778](https://github.com/openshift/oc-mirror/pull/778)
* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both binaries for rhel8 and rhel9 (#767) [#767](https://github.com/openshift/oc-mirror/pull/767)
* Add documentation for enclave support (#771) [#771](https://github.com/openshift/oc-mirror/pull/771)
* [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#773) [#773](https://github.com/openshift/oc-mirror/pull/773)
* Fix to ensure operator not found error exits with correct status (#770) [#770](https://github.com/openshift/oc-mirror/pull/770)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/82781f2b717ade54f21397606518d1bfe6745a28...02fd61468567fbf5b059c2fa3e338a2e8aed4816)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/ae2f3d22260228b0143b65a4ceb36a656e43822f)

* NO-ISSUE: Synchronize From Upstream Repositories [#38](https://github.com/openshift/operator-framework-catalogd/pull/38)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/533df47cebe1ff0a24a3555ded93e09d898a86e5...ae2f3d22260228b0143b65a4ceb36a656e43822f)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/f33e998ebcbb77d0c7ba03c8904f23f7202fd2b2)

* NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-operator-controller/pull/66)
* NO-ISSUE: Synchronize From Upstream Repositories [#65](https://github.com/openshift/operator-framework-operator-controller/pull/65)
* NO-ISSUE: Synchronize From Upstream Repositories [#64](https://github.com/openshift/operator-framework-operator-controller/pull/64)
* NO-ISSUE: Synchronize From Upstream Repositories [#63](https://github.com/openshift/operator-framework-operator-controller/pull/63)
* NO-ISSUE: Synchronize From Upstream Repositories [#62](https://github.com/openshift/operator-framework-operator-controller/pull/62)
* NO-ISSUE: Synchronize From Upstream Repositories [#61](https://github.com/openshift/operator-framework-operator-controller/pull/61)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/be16663416f7b254e1170e39c6ad1a5a55220140...f33e998ebcbb77d0c7ba03c8904f23f7202fd2b2)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/c5ba848e78463f9c73e1d2daec9e565daa4a6f4a)

* [OCPBUGS-27927](https://issues.redhat.com/browse/OCPBUGS-27927): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 [#415](https://github.com/openshift/openshift-apiserver/pull/415)
* [OCPBUGS-27094](https://issues.redhat.com/browse/OCPBUGS-27094): UPSTREAM: <carry>: retry etcd Unavailable errors [#410](https://github.com/openshift/openshift-apiserver/pull/410)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/767d68b1463210d7c399a9a7f3c91d2f6ffc7631...c5ba848e78463f9c73e1d2daec9e565daa4a6f4a)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/0629c6e4fb7048ff59aa4410b423f6b9761fbe35)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#158](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/158)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/8f66ae25e0a80a2ecf31fd562ceffc0873528091...0629c6e4fb7048ff59aa4410b423f6b9761fbe35)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/8f245d0e74b5305e4758364f9151f19fd17c140c)

* NO-JIRA: Stop setting logtostderr flag and rely on defaults [#102](https://github.com/openshift/machine-api-provider-openstack/pull/102)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/13f87ed92895d8af828be4884d27d27751c83fa0...8f245d0e74b5305e4758364f9151f19fd17c140c)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/57904773441fd8e71e36abd6dd66ab6556fbfb84)

* NO-ISSUE: Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-olm/pull/676)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-olm/pull/667)
* [OCPBUGS-27140](https://issues.redhat.com/browse/OCPBUGS-27140): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 [#658](https://github.com/openshift/operator-framework-olm/pull/658)
* [OCPBUGS-25989](https://issues.redhat.com/browse/OCPBUGS-25989): Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-olm/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-olm/pull/659)
* [OCPBUGS-25262](https://issues.redhat.com/browse/OCPBUGS-25262): Updating operator-registry-container image to be consistent with ART for 4.16 [#657](https://github.com/openshift/operator-framework-olm/pull/657)
* [OCPBUGS-24526](https://issues.redhat.com/browse/OCPBUGS-24526), [OPRUN-3182](https://issues.redhat.com/browse/OPRUN-3182): Sync with upstream [#654](https://github.com/openshift/operator-framework-olm/pull/654)
* [OCPBUGS-24994](https://issues.redhat.com/browse/OCPBUGS-24994): Updating operator-lifecycle-manager-container image to be consistent with ART [#631](https://github.com/openshift/operator-framework-olm/pull/631)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e5030f3ef73b758d9d94383478f014fa25417b31...57904773441fd8e71e36abd6dd66ab6556fbfb84)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/9b536e72be5bac5e84d52c6baf7aa2bb330670b0)

* Delete deploy dir [#529](https://github.com/operator-framework/operator-marketplace/pull/529)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/53c124a3f0edfd151652e1f23c87dd39ed7646bb...9b536e72be5bac5e84d52c6baf7aa2bb330670b0)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/1db726a940d5ec150fd185a215f1368990653082)

* [OCPBUGS-24868](https://issues.redhat.com/browse/OCPBUGS-24868): Updating ose-ovirt-csi-driver-container image to be consistent with ART [#132](https://github.com/openshift/ovirt-csi-driver/pull/132)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/b8d25ad6d140a198e96527b46a9dbde65aae41ce...1db726a940d5ec150fd185a215f1368990653082)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/7679c1259fc009096f0c50ca50b168975d3de6b6)

* [OCPBUGS-24925](https://issues.redhat.com/browse/OCPBUGS-24925): Updating ose-ovirt-machine-controllers-container image to be consistent with ART [#176](https://github.com/openshift/cluster-api-provider-ovirt/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47...7679c1259fc009096f0c50ca50b168975d3de6b6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e8f87e81e05164cc0a93a2d90d17c43fda35ecb2)

* [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027)
* [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995)
* [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/00ebd11d646c014771420e6eeaab26d5cacb7b65...e8f87e81e05164cc0a93a2d90d17c43fda35ecb2)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/2868598bff198014d4d42f3d808fd6a920a86777)

* [MULTIARCH-4092](https://issues.redhat.com/browse/MULTIARCH-4092): Rebase with upstream: v0.6.0 release [#74](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/74)
* [OCPBUGS-25513](https://issues.redhat.com/browse/OCPBUGS-25513): CVE-2023-48795 Update crypto lib [#73](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/73)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/eaa8f88cc0494057aa35589ad415055b8cfb6b0b...2868598bff198014d4d42f3d808fd6a920a86777)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/bb16bb13a9447a08abe457931cb1c9b24f17bca6)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#64](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/64)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/49e800f59ff0359c0a972ee98b5b8078e11ea457...bb16bb13a9447a08abe457931cb1c9b24f17bca6)


### [prometheus](https://github.com/openshift/prometheus/tree/32db55b07b49e17ebe2a4c9761054b00e0c4352e)

* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192)
* [Full changelog](https://github.com/openshift/prometheus/compare/51f2df253782917a7feabd275d82f50c3395fcfa...32db55b07b49e17ebe2a4c9761054b00e0c4352e)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/39566f5069a89fd6aaf7ec0386d9848f2dfaa332)

* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271)
* [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/e569d7b282eef568e328bd25caa9cb2da0996664...39566f5069a89fd6aaf7ec0386d9848f2dfaa332)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/db7cbef5695128525d6ec779e659c96aa48368d2)

* [OCPBUGS-24722](https://issues.redhat.com/browse/OCPBUGS-24722): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART [#140](https://github.com/openshift/node_exporter/pull/140)
* [Full changelog](https://github.com/openshift/node_exporter/compare/aed837c322b6eb54d88956acada07b5b390b5c25...db7cbef5695128525d6ec779e659c96aa48368d2)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f409fb9e308ace1e5f8596add187d2239b073e23)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#230](https://github.com/openshift/service-ca-operator/pull/230)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4d3d966edaaafcae7c9d4a1aa87a67ac627a6ebd...f409fb9e308ace1e5f8596add187d2239b073e23)


### [telemeter](https://github.com/openshift/telemeter/tree/2dd35e375ee91d523bcd82d857ec4ad1f4dc01bb)

* [MON-3669](https://issues.redhat.com/browse/MON-3669): Removing newlines from the jsonnet configuration for the recording rules.libsonnet [#503](https://github.com/openshift/telemeter/pull/503)
* [MON-3669](https://issues.redhat.com/browse/MON-3669): Add rule for effective CPU cores for subscription usage purposes [#501](https://github.com/openshift/telemeter/pull/501)
* [Full changelog](https://github.com/openshift/telemeter/compare/e1f625aa31e46a84fb5d9f97c8224b9059e27d8a...2dd35e375ee91d523bcd82d857ec4ad1f4dc01bb)


### [tests](https://github.com/openshift/origin/tree/724daa89740a099deca979048def6697875aec9b)

* NO-JIRA: Skip external cloud provider test for HyperShift clusters [#28562](https://github.com/openshift/origin/pull/28562)
* [MON-3449](https://issues.redhat.com/browse/MON-3449): Ensure monitoring statefulsets are not recreated after upgr… [#28361](https://github.com/openshift/origin/pull/28361)
* NO-JIRA: techpreview can install unstable CRDs [#28532](https://github.com/openshift/origin/pull/28532)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): replace curl calls by net/http [#28546](https://github.com/openshift/origin/pull/28546)
* [MON-3693](https://issues.redhat.com/browse/MON-3693): Adding slashpai and machine424 to Prometheus owners [#28552](https://github.com/openshift/origin/pull/28552)
* [OCPBUGS-27892](https://issues.redhat.com/browse/OCPBUGS-27892): fix panic in service-poller [#28544](https://github.com/openshift/origin/pull/28544)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28538](https://github.com/openshift/origin/pull/28538)
* NO-JIRA: remove unnecessary setup code from monitor [#28534](https://github.com/openshift/origin/pull/28534)
* trt-1141: bump timeout values [#28527](https://github.com/openshift/origin/pull/28527)
* NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… [#28542](https://github.com/openshift/origin/pull/28542)
* [OCPBUGS-27465](https://issues.redhat.com/browse/OCPBUGS-27465): Do not assume there is just a single kubelet systemd service [#28529](https://github.com/openshift/origin/pull/28529)
* [OCPBUGS-27502](https://issues.redhat.com/browse/OCPBUGS-27502): collect certs on disk: set pause image [#28541](https://github.com/openshift/origin/pull/28541)
* NO-ISSUE: Automated - Update synthetic test data [#28537](https://github.com/openshift/origin/pull/28537)
* [OCPBUGS-27210](https://issues.redhat.com/browse/OCPBUGS-27210): Restore HTTP/2 tests in test/extended/router [#28540](https://github.com/openshift/origin/pull/28540)
* [OCPBUGS-20487](https://issues.redhat.com/browse/OCPBUGS-20487): update egressFWTestE2E image which contains ping binary [#28408](https://github.com/openshift/origin/pull/28408)
* NO-JIRA: Update Omer to be the SNO lead [#28451](https://github.com/openshift/origin/pull/28451)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Automated - Update synthetic test data [#28484](https://github.com/openshift/origin/pull/28484)
* NO-JIRA: Update WinC team lead [#28472](https://github.com/openshift/origin/pull/28472)
* [OCPBUGS-26594](https://issues.redhat.com/browse/OCPBUGS-26594): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28530](https://github.com/openshift/origin/pull/28530)
* [OCPBUGS-27341](https://issues.redhat.com/browse/OCPBUGS-27341): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28480](https://github.com/openshift/origin/pull/28480)
* [NE-1444](https://issues.redhat.com/browse/NE-1444): test/extended/router/http2: delete skipped tests [#28522](https://github.com/openshift/origin/pull/28522)
* NO-JIRA: Collect certs from disk [#28444](https://github.com/openshift/origin/pull/28444)
* [TRT-1370](https://issues.redhat.com/browse/TRT-1370): Track etcd leadership changes in etcd-leaders section of spyglass chart [#28441](https://github.com/openshift/origin/pull/28441)
* [TRT-1440](https://issues.redhat.com/browse/TRT-1440): Allow BestMatchDuration to pass even on fallback [#28526](https://github.com/openshift/origin/pull/28526)
* NO-JIRA: add kubernetes level to openshift tests image for payload [#28521](https://github.com/openshift/origin/pull/28521)
* [TRT-1441](https://issues.redhat.com/browse/TRT-1441): Stop uploading intervals to loki [#28525](https://github.com/openshift/origin/pull/28525)
* [NP-877](https://issues.redhat.com/browse/NP-877): Live migration suite e2e [#28462](https://github.com/openshift/origin/pull/28462)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): Bump k8s api to v1.29.0 [#28473](https://github.com/openshift/origin/pull/28473)
* trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive [#28518](https://github.com/openshift/origin/pull/28518)
* add test to ensure all accessible-by-default apis are stable [#28467](https://github.com/openshift/origin/pull/28467)
* [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28517](https://github.com/openshift/origin/pull/28517)
* [OCPBUGS-18577](https://issues.redhat.com/browse/OCPBUGS-18577): updated timeout to 3 seconds to account for network timing issues [#28300](https://github.com/openshift/origin/pull/28300)
* "NO-JIRA: Reduce top level origin approvers to TRT members only" [#28439](https://github.com/openshift/origin/pull/28439)
* watch the operator resources during resource watch [#28513](https://github.com/openshift/origin/pull/28513)
* add featureset into the raw-tls artifact names [#28509](https://github.com/openshift/origin/pull/28509)
* [OCPBUGS-25730](https://issues.redhat.com/browse/OCPBUGS-25730): Kuryr: Ignore Upgradeable=False on operators tests [#28478](https://github.com/openshift/origin/pull/28478)
* [OCPBUGS-26025](https://issues.redhat.com/browse/OCPBUGS-26025): Do not apply master label to make sure SNO jobs pass [#28499](https://github.com/openshift/origin/pull/28499)
* [Full changelog](https://github.com/openshift/origin/compare/ad7a60da798dd24165b5ba8876fc2887f757c779...724daa89740a099deca979048def6697875aec9b)