# 4.16.0-ec.5

Created: 2024-04-08 13:55:02 +0000 UTC

Image Digest: `sha256:eb664d25d7100711690b24236fa0dd3638ca78da008b51239fa4c5da7b346c4a`

Promoted from registry.ci.openshift.org/ocp-ppc64le/release-ppc64le:4.16.0-0.nightly-ppc64le-2024-04-01-062610


## Changes from 4.16.0-ec.4

### Components

* Kubectl 1.29.1
* Kubernetes 1.29.2
* Kubernetes Tests 1.29.0
* CentOS Stream CoreOS upgraded from 416.94.202403081103-0 to 416.94.202403300731-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---:  |
| DisableKubeletCloudCredentialProviders <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| BareMetalLoadBalancer <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| VSphereStaticIPs <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| ExternalOIDC <br/> (0 tests)| Enabled<br/>(Changed)| Disabled| Enabled| Enabled |
| ImagePolicy <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| InsightsConfig <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| MetricsCollectionProfiles <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| NewOLM <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| NodeDisruptionPolicy <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenNodeBinding <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenNodeBindingValidation <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| ServiceAccountTokenPodNodeInfo <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### New images

* [vsphere-cluster-api-controllers](https://github.com/openshift/kubernetes) git [258f1d5f](https://github.com/openshift/kubernetes/commit/258f1d5fb6491ba65fd8201c827e179432430627) `sha256:007a040804dcdb98c04948ccf85378ce7c718f0c933a0d789eaf948159872af4`


### Removed images

* machine-os-content


### Rebuilt images without code change

* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a68945bd](https://github.com/openshift/cluster-olm-operator/commit/a68945bd7dab63d6d16543d6256e2ef9e8d0249d) `sha256:7f78c825e8e07d2eb26b6d4aa8c1911930d9fe4aa1b84e4317bf088b10df9d25`
* [etcd](https://github.com/openshift/etcd) git [c205b668](https://github.com/openshift/etcd/commit/c205b668c1fbe3db52a5227bb3fa7d8ceefc6bcc) `sha256:2128f8abc546b79b1f9012e92338b9d2b7aacaa9ebbd47c12bfe1e79cffd13cc`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [34ac5411](https://github.com/openshift/kubernetes-metrics-server/commit/34ac54111b20a626557e21701e272d2aba3e21ac) `sha256:2011ba1fd24c1de5e74394bb31687cd3b5971840e9589d28faf7b266b01d6713`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a25706b9](https://github.com/openshift/cloud-provider-kubevirt/commit/a25706b9f7e9bd9895e27be9dda238f94a0858db) `sha256:d3c766cf416c3e1fdcd06f4151d41a858a026e53f93a7b49f24796593405508f`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [6aad9b0c](https://github.com/openshift/machine-os-images/commit/6aad9b0c7366fbaadc55d6f4e54fec5d09e3f182) `sha256:504339c6341becc787f2ce922203ef8bdffae6db06f9eb9113e1f5c9e9045363`
* [must-gather](https://github.com/openshift/must-gather) git [4b03e40e](https://github.com/openshift/must-gather/commit/4b03e40e374c2e8096d6043bcfd1c23dd4cd9d0b) `sha256:24800c8123d6bdc494d6b4ab66558fd3cba79ddb8144245573ee072c2e6926b1`
* [network-tools](https://github.com/openshift/network-tools) git [bb0d417b](https://github.com/openshift/network-tools/commit/bb0d417bda8eecc739a363bf0f1046997c9f4ae4) `sha256:9a316368a8b11ba4daf3f6102cdbef5eb9ac3414da1ee8ac4e6804f25735790d`
* [oauth-server](https://github.com/openshift/oauth-server) git [8296c054](https://github.com/openshift/oauth-server/commit/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5) `sha256:3e892b07eb969bca5b8580e910fcfeb3549d3bf1babc877e830a768cb2e84834`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [e5ff3838](https://github.com/openshift/cluster-api-provider-openstack/commit/e5ff383886dcedb7b4cf84f6e1c1f913e422c657) `sha256:f319e4252a719abaea21cec8091e862fd1cf082dc5084b7e2ab7926ac97c81b3`
* [prometheus](https://github.com/openshift/prometheus) git [0e50130f](https://github.com/openshift/prometheus/commit/0e50130f22f1c56fbbf5165dcdf581d985e8ad59) `sha256:b4e18f8dd419243e2a7ec87d2cac6caf6aaae293b3e33fd7e4172652c3053106`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [4227555c](https://github.com/openshift/node_exporter/commit/4227555c70a8b37001a882e42d9389698e6397c6) `sha256:2f696dd50834ea0522b227840881022f21040fb7df4c75684720a2e495e86df9`
* rhel-coreos `sha256:4dbe5012c111961a2710bcb1fedc17979c09d92621478d9735759ab1135f8bf9`
* rhel-coreos-extensions `sha256:cf80cb8f7904f9a2981f3b406559cd444ed5b426bf64b055206d8c3b470ca3d5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [3112b458](https://github.com/openshift/route-controller-manager/commit/3112b458983c6fca6f77d5a945fb0026186dace6) `sha256:ac02f545cc095c171064a05e62fd9d4e36ed470e09dc2fedd9b89e04d1dba967`
* [sdn](https://github.com/openshift/sdn) git [f4cdaa2c](https://github.com/openshift/sdn/commit/f4cdaa2c70afd7fcfccbf816678adc1e4eb3bf9f) `sha256:37b28e9007fa8a8b7ccc20ff38a2498fefd59fd48fb4033e9d6af0b992646de8`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/17959954d606e1faac51baa251d5df3e090dd3f9)

* Revert "MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)" (#6139) [#6011](https://github.com/openshift/assisted-service/pull/6011)
* [MGMT-17369](https://issues.redhat.com/browse/MGMT-17369): Add multi-arch release images to as well when setting only_latest=true in .../openshift-versions (#6119) [#6119](https://github.com/openshift/assisted-service/pull/6119)
* [MGMT-17361](https://issues.redhat.com/browse/MGMT-17361): Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) [#6115](https://github.com/openshift/assisted-service/pull/6115)
* [MGMT-17367](https://issues.redhat.com/browse/MGMT-17367): Use ICSP in install-config for older OCP releases (#6125) [#6125](https://github.com/openshift/assisted-service/pull/6125)
* Update RHTAP references (#6117) [#6117](https://github.com/openshift/assisted-service/pull/6117)
* NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) [#6118](https://github.com/openshift/assisted-service/pull/6118)
* [MGMT-17354](https://issues.redhat.com/browse/MGMT-17354): Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) [#6113](https://github.com/openshift/assisted-service/pull/6113)
* NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) [#6116](https://github.com/openshift/assisted-service/pull/6116)
* NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) [#6114](https://github.com/openshift/assisted-service/pull/6114)
* NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) [#6111](https://github.com/openshift/assisted-service/pull/6111)
* [MGMT-17328](https://issues.redhat.com/browse/MGMT-17328): OCI should be tech preview for OCP 4.14 (#6104) [#6104](https://github.com/openshift/assisted-service/pull/6104)
* [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 (#6054) [#6054](https://github.com/openshift/assisted-service/pull/6054)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) [#6109](https://github.com/openshift/assisted-service/pull/6109)
* NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) [#6110](https://github.com/openshift/assisted-service/pull/6110)
* [MGMT-16263](https://issues.redhat.com/browse/MGMT-16263): Enable usage of custom OCP release images when we create cluster (#6025) [#6025](https://github.com/openshift/assisted-service/pull/6025)
* [MGMT-17241](https://issues.redhat.com/browse/MGMT-17241): [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) [#6092](https://github.com/openshift/assisted-service/pull/6092)
* Update RHTAP references (#6103) [#6103](https://github.com/openshift/assisted-service/pull/6103)
* [MGMT-16002](https://issues.redhat.com/browse/MGMT-16002): Accept *yml.patch* and *yaml.patch* extensions (#6070) [#6070](https://github.com/openshift/assisted-service/pull/6070)
* [MGMT-17080](https://issues.redhat.com/browse/MGMT-17080): enable infrastructure operator when MCE and storage operators are selected (#6037) [#6037](https://github.com/openshift/assisted-service/pull/6037)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#6099) [#6099](https://github.com/openshift/assisted-service/pull/6099)
* NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) [#6098](https://github.com/openshift/assisted-service/pull/6098)
* Update RHTAP references (#6086) [#6086](https://github.com/openshift/assisted-service/pull/6086)
* Allow in-progress clusters to be deleted in more cases (#6061) [#6061](https://github.com/openshift/assisted-service/pull/6061)
* [MGMT-17266](https://issues.redhat.com/browse/MGMT-17266): Add OCP 4.16 images (#6091) [#6091](https://github.com/openshift/assisted-service/pull/6091)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) [#6090](https://github.com/openshift/assisted-service/pull/6090)
* [MGMT-17196](https://issues.redhat.com/browse/MGMT-17196): Fix none existens of static MAC adr. in case of (#6087) [#6087](https://github.com/openshift/assisted-service/pull/6087)
* [AGENT-860](https://issues.redhat.com/browse/AGENT-860): Update configure command to handle multiple HostConfigs (#6062) [#6062](https://github.com/openshift/assisted-service/pull/6062)
* NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) [#6085](https://github.com/openshift/assisted-service/pull/6085)
* [MGMT-16813](https://issues.redhat.com/browse/MGMT-16813): Prioritize finding release image with exact CPU architecture (#6066) [#6066](https://github.com/openshift/assisted-service/pull/6066)
* NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) [#6083](https://github.com/openshift/assisted-service/pull/6083)
* Update RHTAP references (#6020) [#6020](https://github.com/openshift/assisted-service/pull/6020)
* Use `client_id` instead of `clientId` (#6076) [#6076](https://github.com/openshift/assisted-service/pull/6076)
* Protect must gather versions cache with mutex (#6078) [#6078](https://github.com/openshift/assisted-service/pull/6078)
* NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) [#6060](https://github.com/openshift/assisted-service/pull/6060)
* [MGMT-16759](https://issues.redhat.com/browse/MGMT-16759): Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) [#6051](https://github.com/openshift/assisted-service/pull/6051)
* use multi payload with ABI (#6000) [#6000](https://github.com/openshift/assisted-service/pull/6000)
* [MGMT-14380](https://issues.redhat.com/browse/MGMT-14380): ODF explicit type of disk error (#6072) [#6072](https://github.com/openshift/assisted-service/pull/6072)
* [Full changelog](https://github.com/openshift/assisted-service/compare/9823c09ceff57b29a5b627c6056bcf4258bdc440...17959954d606e1faac51baa251d5df3e090dd3f9)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/3e7a76c67103b2d0fe1d31fa8d3adde080bec7a3)

* NO-ISSUE: Bump the go-dependencies group with 1 update (#803) [#803](https://github.com/openshift/assisted-installer/pull/803)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#802) [#802](https://github.com/openshift/assisted-installer/pull/802)
* [MGMT-16587](https://issues.redhat.com/browse/MGMT-16587): Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) [#801](https://github.com/openshift/assisted-installer/pull/801)
* [OCPBUGS-30056](https://issues.redhat.com/browse/OCPBUGS-30056): RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) [#800](https://github.com/openshift/assisted-installer/pull/800)
* [MGMT-16993](https://issues.redhat.com/browse/MGMT-16993): [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) [#798](https://github.com/openshift/assisted-installer/pull/798)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) [#799](https://github.com/openshift/assisted-installer/pull/799)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6586e59e964b7b9eb617d0b0cb175fc090e4034f...3e7a76c67103b2d0fe1d31fa8d3adde080bec7a3)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/d8a3cc56735ad74bc3aa4cda22d407c7d27bbdf4)

* NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) [#672](https://github.com/openshift/assisted-installer-agent/pull/672)
* [MGMT-17308](https://issues.redhat.com/browse/MGMT-17308): Offboard osherdp from maintainers list (#673) [#673](https://github.com/openshift/assisted-installer-agent/pull/673)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) [#670](https://github.com/openshift/assisted-installer-agent/pull/670)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f39ebd09ef1dd1af7fe37411714dede60180355f...d8a3cc56735ad74bc3aa4cda22d407c7d27bbdf4)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/6e6bb40d95bd966eb6b152e66c5b91794806c4bc)

* [OCPBUGS-24960](https://issues.redhat.com/browse/OCPBUGS-24960): Updating ose-agent-installer-utils-container image to be consistent with ART [#32](https://github.com/openshift/agent-installer-utils/pull/32)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/de13699ffcf7518d6bc983a0db2e4c0949d9e950...6e6bb40d95bd966eb6b152e66c5b91794806c4bc)


### [alibaba-cloud-controller-manager, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/258f1d5fb6491ba65fd8201c827e179432430627)

* [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: &lt;carry&gt;: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852)
* UPSTREAM: &lt;carry&gt;: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911)
* [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a0beecc776d492e0e7ea103af3aa4b75e5f69c67...258f1d5fb6491ba65fd8201c827e179432430627)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6bb3cae1d0daa4b4895ab4ebacb4b2e963e27f3d)

* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster  Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [Full changelog](https://github.com/openshift/installer/compare/8b207d89f799749a2ef5e17eb66f1b36ab637047...6bb3cae1d0daa4b4895ab4ebacb4b2e963e27f3d)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/11ba601fbca58557176fcc67ffe8d7d64b697a4a)

* [OCPBUGS-30477](https://issues.redhat.com/browse/OCPBUGS-30477): Bump golang-protobuf version [#213](https://github.com/openshift/cluster-api-provider-baremetal/pull/213)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/1ccda62284d3d68902736ef06b8bcf0d1198ebf6...11ba601fbca58557176fcc67ffe8d7d64b697a4a)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/01e73f0ddf8a9dd4a8b2a390e4e56deae0794b7d)

* NO-ISSUE: Update OWNERS [#339](https://github.com/openshift/baremetal-operator/pull/339)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/dee0d72518b703632f0f2dbe750d1d63632f6046...01e73f0ddf8a9dd4a8b2a390e4e56deae0794b7d)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/bd8ced04018d9976cd94db2b3bed88d0892e5929)

* make output table slightly easier to read [#1719](https://github.com/openshift/oc/pull/1719)
* NO-JIRA: update featuregate diff for clusterprofiles [#1714](https://github.com/openshift/oc/pull/1714)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): revert cli/admin/release/git: use optimized git flags [#1718](https://github.com/openshift/oc/pull/1718)
* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Remove some of newapp unit tests relying on external deprecated images [#1717](https://github.com/openshift/oc/pull/1717)
* [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): cli/admin/release/git: use optimized git flags [#1708](https://github.com/openshift/oc/pull/1708)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Remove redundant endpoint resource modification [#1692](https://github.com/openshift/oc/pull/1692)
* [OCPBUGS-30703](https://issues.redhat.com/browse/OCPBUGS-30703): Bump coreos/go-oidc to 3.10.0 [#1713](https://github.com/openshift/oc/pull/1713)
* [WRKLDS-1103](https://issues.redhat.com/browse/WRKLDS-1103): tools: extend the image with sosreport [#1704](https://github.com/openshift/oc/pull/1704)
* [Full changelog](https://github.com/openshift/oc/compare/45fe5d4c22dc44b82f7d8bc556759e9769fe61c6...bd8ced04018d9976cd94db2b3bed88d0892e5929)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/ba782161e54e0a908b001aa818a7e138144ce637)

* [OCPBUGS-30713](https://issues.redhat.com/browse/OCPBUGS-30713): update go-jose module to v4.0.1 [#687](https://github.com/openshift/cloud-credential-operator/pull/687)
* [OCPBUGS-30478](https://issues.redhat.com/browse/OCPBUGS-30478): Update to cloud.google.com/go/storage v1.39.1 [#688](https://github.com/openshift/cloud-credential-operator/pull/688)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Scope networkResourceGroup permissions to more operators [#682](https://github.com/openshift/cloud-credential-operator/pull/682)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/58431c4ff120d906e755d15710fb976c3bee0563...ba782161e54e0a908b001aa818a7e138144ce637)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/77eac0ccfb84367841487ef3159e28fcff8b2602)

* [OCPBUGS-31289](https://issues.redhat.com/browse/OCPBUGS-31289): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 [#135](https://github.com/openshift/cloud-network-config-controller/pull/135)
* [OCPBUGS-29915](https://issues.redhat.com/browse/OCPBUGS-29915): GCP: Explicitly set UniverseDomain to the default universe domain [#132](https://github.com/openshift/cloud-network-config-controller/pull/132)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f0aa29fe670cd8aafa4edd84c0f427fe2623539c...77eac0ccfb84367841487ef3159e28fcff8b2602)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/dfc291aac9c61791a36f7b413199bf9ad9d58d3d)

* NO-ISSUE: bump dependencies [#659](https://github.com/openshift/cluster-authentication-operator/pull/659)
* NO-JIRA: test/lib: create SA on deploy [#660](https://github.com/openshift/cluster-authentication-operator/pull/660)
* NO-ISSUE: oauth-apiserver: disable priority and fairness [#658](https://github.com/openshift/cluster-authentication-operator/pull/658)
* NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after [#657](https://github.com/openshift/cluster-authentication-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/551c62d05de2052ab37cf28cd95c6eb5e49e3c9c...dfc291aac9c61791a36f7b413199bf9ad9d58d3d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c852679460d8af844212462e0244eb6240d0591b)

* [OCPBUGS-31421](https://issues.redhat.com/browse/OCPBUGS-31421): add check for taint.value == nil [#292](https://github.com/openshift/kubernetes-autoscaler/pull/292)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9d29c92c3cc3d4943d58d6aed49c7c3a3ff21636...c852679460d8af844212462e0244eb6240d0591b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/287595b0ee37b893c02d51d3a461ba118b90c3dc)

* [OCPCLOUD-2493](https://issues.redhat.com/browse/OCPCLOUD-2493): Update CAO to add upstream annotations [#316](https://github.com/openshift/cluster-autoscaler-operator/pull/316)
* [OCPCLOUD-2523](https://issues.redhat.com/browse/OCPCLOUD-2523): add ExpanderOrderList api option [#304](https://github.com/openshift/cluster-autoscaler-operator/pull/304)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/9fccfabfa8211e3fc492a9cdb4209846c48770b9...287595b0ee37b893c02d51d3a461ba118b90c3dc)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e0b3bba43b85b73915e4addbdf02df7f5352608a)

* [OCPBUGS-31341](https://issues.redhat.com/browse/OCPBUGS-31341): Refactor Pull Secret application [#409](https://github.com/openshift/cluster-baremetal-operator/pull/409)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/03222f4e09198bb7af9b7b8260fc2b8223f07553...e0b3bba43b85b73915e4addbdf02df7f5352608a)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/bb7f3787e56526b77ab09f8f9e21f052b49c8ae3)

* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master [#199](https://github.com/openshift/cluster-api/pull/199)
* [Full changelog](https://github.com/openshift/cluster-api/compare/05e357cab1c2549deeb33ec6b64f0fd58775744e...bb7f3787e56526b77ab09f8f9e21f052b49c8ae3)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/8342a83c1830ac86792f9f2c205575fa96f40d8e)

* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609), [OCPCLOUD-1610](https://issues.redhat.com/browse/OCPCLOUD-1610): Add Support for VSphere [#149](https://github.com/openshift/cluster-capi-operator/pull/149)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/7b6b8ee048fda94d388acee23049e54cf67954c4...8342a83c1830ac86792f9f2c205575fa96f40d8e)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/f8e0afd382bceb6086aeb8952a889d718d4040fe)

* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition logic [#335](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/335)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/7c8ece76ab00bbdb320b1b117504d5b9b7c2c16d...f8e0afd382bceb6086aeb8952a889d718d4040fe)


### [cluster-config-api](https://github.com/openshift/api/tree/f28a8dcc06ba2448a5aa68571fc92b73b4aac19b)

* use CEL to enforce immutable featureset [#1839](https://github.com/openshift/api/pull/1839)
* NO-JIRA: enable the SA token node thing [#1831](https://github.com/openshift/api/pull/1831)
* [OCPCLOUD-2573](https://issues.redhat.com/browse/OCPCLOUD-2573): Enables kubelet cloud credential providers [#1786](https://github.com/openshift/api/pull/1786)
* update vendor for new test changes and vendoring [#1834](https://github.com/openshift/api/pull/1834)
* [MON-3486](https://issues.redhat.com/browse/MON-3486): add feature gate for Collection Profiles [#1835](https://github.com/openshift/api/pull/1835)
* Add models-schema to make clean [#1828](https://github.com/openshift/api/pull/1828)
* NO-JIRA: remove single-node-developer clusterProfile [#1827](https://github.com/openshift/api/pull/1827)
* NO-JIRA: update integration testing to be by gate [#1833](https://github.com/openshift/api/pull/1833)
* machineconfiguration/v1alpha1: add PinnedImageSetStatus [#1830](https://github.com/openshift/api/pull/1830)
* bump(golang.org/x/tools) to match k8s 1.28 [#1832](https://github.com/openshift/api/pull/1832)
* [MCO-1010](https://issues.redhat.com/browse/MCO-1010): Add node disruption policies to MachineConfiguration CRD [#1764](https://github.com/openshift/api/pull/1764)
* [MCO-838](https://issues.redhat.com/browse/MCO-838): machineconfiguration/v1alpha1: add PinnedImageSet [#1822](https://github.com/openshift/api/pull/1822)
* NO-JIRA: Switch integration tests to ordered to save time [#1823](https://github.com/openshift/api/pull/1823)
* add markdown generator for featuregates [#1820](https://github.com/openshift/api/pull/1820)
* explain roughly what the new generator is doing [#1816](https://github.com/openshift/api/pull/1816)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Updates to build API reviewers [#1792](https://github.com/openshift/api/pull/1792)
* add section about adding new APIs [#1815](https://github.com/openshift/api/pull/1815)
* add doc.go to each generated mainfest dir [#1814](https://github.com/openshift/api/pull/1814)
* [TRT-1563](https://issues.redhat.com/browse/TRT-1563): Revert #1802 "Move config v1 IP validation to CEL" [#1810](https://github.com/openshift/api/pull/1810)
* move to new directory [#1803](https://github.com/openshift/api/pull/1803)
* skip rendering mutation of CustomNoUpgrade featuresets [#1806](https://github.com/openshift/api/pull/1806)
* All remaining genererated by new generator [#1808](https://github.com/openshift/api/pull/1808)
* Move config v1 IP validation to CEL [#1802](https://github.com/openshift/api/pull/1802)
* make featuregate manifest pattern consistent and remove legacy files [#1805](https://github.com/openshift/api/pull/1805)
* convert generation in a couple more v1 APIs [#1804](https://github.com/openshift/api/pull/1804)
* update the last manifests used directly from this image to featuregate generation [#1796](https://github.com/openshift/api/pull/1796)
* [OPNET-466](https://issues.redhat.com/browse/OPNET-466): PlatformLoadBalancer becomes GA for On-Prem [#1757](https://github.com/openshift/api/pull/1757)
* updating config stragglers to by-feature-gate generation [#1793](https://github.com/openshift/api/pull/1793)
* update network group to use "normal" generation [#1795](https://github.com/openshift/api/pull/1795)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Moved vSphereStaticIPs into Default from TechPreview [#1729](https://github.com/openshift/api/pull/1729)
* update the machine group to use the featuregate generator [#1799](https://github.com/openshift/api/pull/1799)
* tighten up the useCRD interface [#1801](https://github.com/openshift/api/pull/1801)
* Add tooling for publishing OpenShift kubebuilder tools [#1774](https://github.com/openshift/api/pull/1774)
* update machineconfiguration to use featuregated generation [#1797](https://github.com/openshift/api/pull/1797)
* update sharedresource to use featuregate generation [#1798](https://github.com/openshift/api/pull/1798)
* updating console stragglers to by-feature-gate generation [#1794](https://github.com/openshift/api/pull/1794)
* Merge manifests based on clusterProfile and featureSet [#1791](https://github.com/openshift/api/pull/1791)
* specify Featuregates by cluster profile [#1788](https://github.com/openshift/api/pull/1788)
* make the serialized featuregate location an input param [#1790](https://github.com/openshift/api/pull/1790)
* remove ungated case from manifest-merge [#1784](https://github.com/openshift/api/pull/1784)
* [Full changelog](https://github.com/openshift/api/compare/f608b5d33c00c4c135926ea3a9d77f1839683b80...f28a8dcc06ba2448a5aa68571fc92b73b4aac19b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/84ae6b54db79c8957fbce4469a7c70470d2027ea)

* [TRT-1581](https://issues.redhat.com/browse/TRT-1581): default to self-managed clusterprofile [#414](https://github.com/openshift/cluster-config-operator/pull/414)
* NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable [#412](https://github.com/openshift/cluster-config-operator/pull/412)
* [OCPBUGS-29576](https://issues.redhat.com/browse/OCPBUGS-29576): Apply hypershift cluster-profile for ibm-cloud-managed [#408](https://github.com/openshift/cluster-config-operator/pull/408)
* NO-JIRA: add check to ensure clusterprofile matches for featuregates [#411](https://github.com/openshift/cluster-config-operator/pull/411)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/6719638f058aeade7f5da864abc3a68fece1fcab...84ae6b54db79c8957fbce4469a7c70470d2027ea)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/baeb063387f33ee163ca8d0c03288d68d6a89936)

* [SPLAT-1440](https://issues.redhat.com/browse/SPLAT-1440): prevent rollout due to irrelevant path artifacts [#275](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/275)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/ba09023dfce5770ebcfa1b7ddff39ab86d8c8798...baeb063387f33ee163ca8d0c03288d68d6a89936)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/8b1d35f214ed798035af5f55cb43655228e0d5fd)

* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set SecurityContext for HyperShift [#197](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/197)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/7d0230dcd8eaeed205c7ee0d23a299f300e98a92...8b1d35f214ed798035af5f55cb43655228e0d5fd)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/eeef8033eb058b0f9899c7b16aead237d5b84462)

* [ETCD-535](https://issues.redhat.com/browse/ETCD-535): Manual CA rotation should rotate all leaf certs [#1200](https://github.com/openshift/cluster-etcd-operator/pull/1200)
* Revert "OCPBUGS-30169: add timeout to etcd client.New config" [#1222](https://github.com/openshift/cluster-etcd-operator/pull/1222)
* [OCPBUGS-30873](https://issues.redhat.com/browse/OCPBUGS-30873): CEO aliveness check should only detect deadlocks [#1223](https://github.com/openshift/cluster-etcd-operator/pull/1223)
* [WRKLDS-1071](https://issues.redhat.com/browse/WRKLDS-1071): bump(library-go)=master [#1219](https://github.com/openshift/cluster-etcd-operator/pull/1219)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2f6e1dec53a275fb2d11049203986cd79d8c747d...eeef8033eb058b0f9899c7b16aead237d5b84462)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/5361c582b6d5fa44418e5748948f2af75956c716)

* [OCPBUGS-29233](https://issues.redhat.com/browse/OCPBUGS-29233): bump aws-sdk-go from v1.44 to v1.50 [#1012](https://github.com/openshift/cluster-image-registry-operator/pull/1012)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#1008](https://github.com/openshift/cluster-image-registry-operator/pull/1008)
* NO-JIRA: bump golangci-lint to v1.56.2 [#1013](https://github.com/openshift/cluster-image-registry-operator/pull/1013)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/48875d3ccb4595be9d3bec563d1fda2eb940cecf...5361c582b6d5fa44418e5748948f2af75956c716)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/bdb42fd60a64adf6f98cc7be4d90a76ea30662d6)

* [OCPCLOUD-2515](https://issues.redhat.com/browse/OCPCLOUD-2515): remove CloudControllerOwner condition [#795](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/795)
* [OCPBUGS-30488](https://issues.redhat.com/browse/OCPBUGS-30488): bump(google.golang.org/protobuf)=v1.33.0 [#798](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/798)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/5a8a98f06fe9d3ff9f26e2657db5bf5a68112147...bdb42fd60a64adf6f98cc7be4d90a76ea30662d6)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4be4e433eec566df60d6d89f09a13b706e93f2a3)

* [OCPBUGS-30489](https://issues.redhat.com/browse/OCPBUGS-30489): bump(google.golang.org/protobuf)=v1.33.0 [#538](https://github.com/openshift/cluster-kube-scheduler-operator/pull/538)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/81808652c748a608f54435f186833e74e6b9cf30...4be4e433eec566df60d6d89f09a13b706e93f2a3)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/d3b6e4ba503c8e1d13f535409db1e75844e5763f)

* [OCPBUGS-29568](https://issues.redhat.com/browse/OCPBUGS-29568): Apply hypershift cluster-profile for ibm-cloud-managed [#229](https://github.com/openshift/cluster-machine-approver/pull/229)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/2d68698410d7e6239dafa6749cc454272508db19...d3b6e4ba503c8e1d13f535409db1e75844e5763f)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a8abf187b4b97489b243facbb35730533823462b)

* [MON-3771](https://issues.redhat.com/browse/MON-3771): update Prometheus operator to v0.72.0 [#2288](https://github.com/openshift/cluster-monitoring-operator/pull/2288)
* [MON-3498](https://issues.redhat.com/browse/MON-3498): Modify prometheus-adapter e2e tests to compact with metrics server [#2196](https://github.com/openshift/cluster-monitoring-operator/pull/2196)
* [OCPBUGS-30257](https://issues.redhat.com/browse/OCPBUGS-30257): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2269](https://github.com/openshift/cluster-monitoring-operator/pull/2269)
* [OCPNODE-2100](https://issues.redhat.com/browse/OCPNODE-2100): jsonnet: update crio port to TLS port 9637 [#2257](https://github.com/openshift/cluster-monitoring-operator/pull/2257)
* [MON-3694](https://issues.redhat.com/browse/MON-3694): chore: encourage the use of the new 'slices' package instead of 'golang.org/x/exp/slices' [#2243](https://github.com/openshift/cluster-monitoring-operator/pull/2243)
* [MON-3748](https://issues.redhat.com/browse/MON-3748): Enable audit logs by default for metrics-server [#2280](https://github.com/openshift/cluster-monitoring-operator/pull/2280)
* [MON-3380](https://issues.redhat.com/browse/MON-3380): adjust prometheus-k8s service openshift.io/description [#2279](https://github.com/openshift/cluster-monitoring-operator/pull/2279)
* [MON-3747](https://issues.redhat.com/browse/MON-3747): Increase e2e test timeout to 150 min [#2278](https://github.com/openshift/cluster-monitoring-operator/pull/2278)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b60f0b68d49701c55408f0ca96bd4bff06260886...a8abf187b4b97489b243facbb35730533823462b)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/395a36af85859a27b65aa5578233cdb801bdddcc)

* [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319)
* [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309)
* [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313)
* [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307)
* [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288)
* [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8108f7a3b62db9be50b934a177e11df5326e4790...395a36af85859a27b65aa5578233cdb801bdddcc)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/8d022559f2d51d993bcadbe7865cfd67bf4e5d9c)

* NO-JIRA: Update tuned profile degraded test (#1005) [#1005](https://github.com/openshift/cluster-node-tuning-operator/pull/1005)
* Change .snyk format (#1000) [#1000](https://github.com/openshift/cluster-node-tuning-operator/pull/1000)
* Remove removePerformanceOLMOperator() (#997) [#997](https://github.com/openshift/cluster-node-tuning-operator/pull/997)
* [CNF-11213](https://issues.redhat.com/browse/CNF-11213): added mixedCpus e2e test (#967) [#967](https://github.com/openshift/cluster-node-tuning-operator/pull/967)
* NO-JIRA: Add positive tests with ginkgo timeout (#964) [#964](https://github.com/openshift/cluster-node-tuning-operator/pull/964)
* [OCPBUGS-30647](https://issues.redhat.com/browse/OCPBUGS-30647): Remove TuneD timeout code and reload on ERRORs (#998) [#998](https://github.com/openshift/cluster-node-tuning-operator/pull/998)
* Add sync for rendering extra ctrcfgs (#980) [#980](https://github.com/openshift/cluster-node-tuning-operator/pull/980)
* [OCPBUGS-29594](https://issues.redhat.com/browse/OCPBUGS-29594): Reduce number of reboots in offline tests (#940) [#940](https://github.com/openshift/cluster-node-tuning-operator/pull/940)
* makefile:hypershift: initial make target (#995) [#995](https://github.com/openshift/cluster-node-tuning-operator/pull/995)
* e2e:mixedcpus: check env variables of init process (#961) [#961](https://github.com/openshift/cluster-node-tuning-operator/pull/961)
* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 24786: update protobuf (#985) [#985](https://github.com/openshift/cluster-node-tuning-operator/pull/985)
* Ignore scheduler plugin IRQs when globally enabled (#987) [#987](https://github.com/openshift/cluster-node-tuning-operator/pull/987)
* E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) [#988](https://github.com/openshift/cluster-node-tuning-operator/pull/988)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f9c912bde967f7299c3c1aa24e48e45febcecd94...8d022559f2d51d993bcadbe7865cfd67bf4e5d9c)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/02d0d6464aabeb90aab158a7ebbe5327488b9f74)

* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#559](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c70b9a825565bd165d34fea8eec369f4f610ee53...02d0d6464aabeb90aab158a7ebbe5327488b9f74)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/8e7ea892b8af42dbe80cef69f64c28eb2161aafa)

* [OCPBUGS-29973](https://issues.redhat.com/browse/OCPBUGS-29973): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 [#337](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/337)
* [OCPBUGS-29581](https://issues.redhat.com/browse/OCPBUGS-29581): Apply hypershift cluster-profile for ibm-cloud-managed [#334](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/334)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#316](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/316)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#338](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/338)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d97bdefe3d5c1cb83d63f732fd35732a83ba7708...8e7ea892b8af42dbe80cef69f64c28eb2161aafa)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/eaea543f4c845a7b65705f12e162cc121bb12f88)

* [OCPBUGS-30496](https://issues.redhat.com/browse/OCPBUGS-30496): bump(google.golang.org/protobuf)=v1.33.0 [#147](https://github.com/openshift/cluster-policy-controller/pull/147)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/7ed07d5ee710a3c450f2134f41030f59c48c5176...eaea543f4c845a7b65705f12e162cc121bb12f88)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/d7557914e3d486dcad9272af89f808716b022835)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/fb8cb0332d46e97da2f95e159ad6694fa88e9ed2...d7557914e3d486dcad9272af89f808716b022835)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/72452fc154372ac26f3be0b3e7630e9cde2f71ad)

* [OCPBUGS-28748](https://issues.redhat.com/browse/OCPBUGS-28748): log default storage class names when collector is triggered [#460](https://github.com/openshift/cluster-storage-operator/pull/460)
* [OCPBUGS-30498](https://issues.redhat.com/browse/OCPBUGS-30498): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#463](https://github.com/openshift/cluster-storage-operator/pull/463)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b3b6723f2a57bfe2c938ebff0e77d8a7908c3250...72452fc154372ac26f3be0b3e7630e9cde2f71ad)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/69bee9174c839018795c466ce94ed2e4536c014c)

* [OTA-1210](https://issues.redhat.com/browse/OTA-1210): *: Add --update-service command-line option [#1035](https://github.com/openshift/cluster-version-operator/pull/1035)
* [OTA-1159](https://issues.redhat.com/browse/OTA-1159): [2/3] Maintain `ReconciliationIssues` condition [#1032](https://github.com/openshift/cluster-version-operator/pull/1032)
* [OCPBUGS-29868](https://issues.redhat.com/browse/OCPBUGS-29868): Apply hypershift cluster-profile for ibm-cloud-managed [#1037](https://github.com/openshift/cluster-version-operator/pull/1037)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6a76ba95ed441893e1bdf6616c47701c0464b7f4...69bee9174c839018795c466ce94ed2e4536c014c)


### [console](https://github.com/openshift/console/tree/537716b67aa4e294ad7d44034512efabb40a59bd)

* [OCPBUGS-29479](https://issues.redhat.com/browse/OCPBUGS-29479): fix asynccache improper initialization [#13703](https://github.com/openshift/console/pull/13703)
* [OCPBUGS-24830](https://issues.redhat.com/browse/OCPBUGS-24830): Updating openshift-enterprise-console-container image to be consistent with ART [#13454](https://github.com/openshift/console/pull/13454)
* Revert "OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters" [#13705](https://github.com/openshift/console/pull/13705)
* [CONSOLE-3883](https://issues.redhat.com/browse/CONSOLE-3883): Improve local plugin development docs [#13679](https://github.com/openshift/console/pull/13679)
* [OCPBUGS-30958](https://issues.redhat.com/browse/OCPBUGS-30958): Upgrade Pipeline trigger resources to v1beta1 [#13702](https://github.com/openshift/console/pull/13702)
* [OCPBUGS-30824](https://issues.redhat.com/browse/OCPBUGS-30824): Remove react-helmet from Console provided shared modules [#13687](https://github.com/openshift/console/pull/13687)
* [CONSOLE-3971](https://issues.redhat.com/browse/CONSOLE-3971): add impersonate action to Group list and details pages [#13671](https://github.com/openshift/console/pull/13671)
* [OCPBUGS-28585](https://issues.redhat.com/browse/OCPBUGS-28585): remove generics from use*Modal docs [#13689](https://github.com/openshift/console/pull/13689)
* [OCPBUGS-24637](https://issues.redhat.com/browse/OCPBUGS-24637): Fix storage request unit dropdown to display any valid unit [#13620](https://github.com/openshift/console/pull/13620)
* [OCPBUGS-29992](https://issues.redhat.com/browse/OCPBUGS-29992), [OCPBUGS-30584](https://issues.redhat.com/browse/OCPBUGS-30584): PatternFly upgrade to 5.2.1 followup to… [#13693](https://github.com/openshift/console/pull/13693)
* [CONSOLE-3972](https://issues.redhat.com/browse/CONSOLE-3972): add Last Status to Pod details Container list and Conta… [#13674](https://github.com/openshift/console/pull/13674)
* [ODC-7531](https://issues.redhat.com/browse/ODC-7531): Added the ApprovalTask List Tabbed Page [#13651](https://github.com/openshift/console/pull/13651)
* [ODC-7546](https://issues.redhat.com/browse/ODC-7546): Fix that the UI doesn't load on non-openshift clusters [#13408](https://github.com/openshift/console/pull/13408)
* [ODC-7498](https://issues.redhat.com/browse/ODC-7498): Show an opt-in / opt-out option to the user depending on the cluster configuration [#13587](https://github.com/openshift/console/pull/13587)
* [ODC-7434](https://issues.redhat.com/browse/ODC-7434): Knative test package update concerning pf5 update [#13562](https://github.com/openshift/console/pull/13562)
* [OCPBUGS-24049](https://issues.redhat.com/browse/OCPBUGS-24049): Add option to enable/disable tailing to Pod log viewer mobile screen issues [#13394](https://github.com/openshift/console/pull/13394)
* [CONSOLE-3949](https://issues.redhat.com/browse/CONSOLE-3949): Add support for returning response.header in consoleFetchCommon function [#13623](https://github.com/openshift/console/pull/13623)
* [CONSOLE-3969](https://issues.redhat.com/browse/CONSOLE-3969): Enable French and Spanish in the OCP Console [#13665](https://github.com/openshift/console/pull/13665)
* [ODC-7519](https://issues.redhat.com/browse/ODC-7519): Update the Pipeline Topology to adjust the new node design for the CustomRun [#13613](https://github.com/openshift/console/pull/13613)
* [CONSOLE-3922](https://issues.redhat.com/browse/CONSOLE-3922): Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage [#13560](https://github.com/openshift/console/pull/13560)
* [ODC-7489](https://issues.redhat.com/browse/ODC-7489): automation for getting-started-tour-dev-perspective feature file [#13531](https://github.com/openshift/console/pull/13531)
* [OCPBUGS-30052](https://issues.redhat.com/browse/OCPBUGS-30052), [OCPBUGS-30575](https://issues.redhat.com/browse/OCPBUGS-30575): PipelineRuns in Console show wrong status or load indefinitely [#13659](https://github.com/openshift/console/pull/13659)
* [CONSOLE-3965](https://issues.redhat.com/browse/CONSOLE-3965): i18n upload/download routine task for version-4.16/ sprint-248 [#13652](https://github.com/openshift/console/pull/13652)
* [ODC-7492](https://issues.redhat.com/browse/ODC-7492): automation for sample-card-add-page feature file [#13589](https://github.com/openshift/console/pull/13589)
* [OCPBUGS-30567](https://issues.redhat.com/browse/OCPBUGS-30567): Remove wrong arguments in K8sCreate method instance for Create YAML editor [#13658](https://github.com/openshift/console/pull/13658)
* [OCPBUGS-30297](https://issues.redhat.com/browse/OCPBUGS-30297): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13650](https://github.com/openshift/console/pull/13650)
* [CONSOLE-3931](https://issues.redhat.com/browse/CONSOLE-3931): replace existing CloseButton with one from @patternfly/… [#13588](https://github.com/openshift/console/pull/13588)
* [OCPBUGS-30805](https://issues.redhat.com/browse/OCPBUGS-30805): fix Configure link in AlertmanagerReceiversNotConfigur… [#13666](https://github.com/openshift/console/pull/13666)
* [OCPBUGS-30762](https://issues.redhat.com/browse/OCPBUGS-30762): Fix bugs in Console dynamic plugin SDK webpack code [#13657](https://github.com/openshift/console/pull/13657)
* [ODC-7539](https://issues.redhat.com/browse/ODC-7539): Update devfile library to v2.2.2 [#13045](https://github.com/openshift/console/pull/13045)
* [OCPBUGS-26415](https://issues.redhat.com/browse/OCPBUGS-26415): Application creation fail when manually entering input scaling value in local setup [#13487](https://github.com/openshift/console/pull/13487)
* [OCPBUGS-30551](https://issues.redhat.com/browse/OCPBUGS-30551): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13654](https://github.com/openshift/console/pull/13654)
* [OCPBUGS-29513](https://issues.redhat.com/browse/OCPBUGS-29513): Update the Pipeline List and Details Pages to acknowledge Custom Task [#13614](https://github.com/openshift/console/pull/13614)
* [Full changelog](https://github.com/openshift/console/compare/77d383dcf65209113831019aecc7f10849bacd1c...537716b67aa4e294ad7d44034512efabb40a59bd)


### [console-operator](https://github.com/openshift/console-operator/tree/b88ce7dd8511dc8d4e62133d6b6c5bf7ed61db84)

* [OCPBUGS-31482](https://issues.redhat.com/browse/OCPBUGS-31482): oidc: synchronize the CM with a CA to trust the issuer, if configured [#879](https://github.com/openshift/console-operator/pull/879)
* [OCPBUGS-29331](https://issues.redhat.com/browse/OCPBUGS-29331): Update RHDH QuickStarts and add CR examples [#878](https://github.com/openshift/console-operator/pull/878)
* [Full changelog](https://github.com/openshift/console-operator/compare/24ed780ed478dac553a4cce2e7ca7aa79a7c3b51...b88ce7dd8511dc8d4e62133d6b6c5bf7ed61db84)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/f75dbe1b775b1567a119df8e3971d8add531ca56)

* [USHIFT-2219](https://issues.redhat.com/browse/USHIFT-2219): Dockerfile for MicroShift [#153](https://github.com/openshift/containernetworking-plugins/pull/153)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/a78d0c25647e82ec48407c3151659b313aac31bd...f75dbe1b775b1567a119df8e3971d8add531ca56)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/406cec72a10684a7545a976a8c31e60712bcc5b2)

* [OCPBUGS-30439](https://issues.redhat.com/browse/OCPBUGS-30439): Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#139](https://github.com/openshift/csi-driver-nfs/pull/139)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/f7215a8d13baf648dbc508c904746cb0e53770e0...406cec72a10684a7545a976a8c31e60712bcc5b2)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/3441a0a183eec0887881bf4352b0a861af497015)

* [OCPBUGS-30437](https://issues.redhat.com/browse/OCPBUGS-30437): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#71](https://github.com/openshift/csi-external-attacher/pull/71)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/3153853f4a19527fb8f777d5ea00a1c952230cf4...3441a0a183eec0887881bf4352b0a861af497015)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/e14e4878ef79f8ef73843452e3c8b778f0b926c9)

* [OCPBUGS-30442](https://issues.redhat.com/browse/OCPBUGS-30442): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#94](https://github.com/openshift/csi-external-provisioner/pull/94)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/6cbf415c4c9b804fa6d7c44584ef34b103cc82d3...e14e4878ef79f8ef73843452e3c8b778f0b926c9)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/9247e81c9202c0040ec972e492c59112f6037dd0)

* [OCPBUGS-30502](https://issues.redhat.com/browse/OCPBUGS-30502): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#159](https://github.com/openshift/csi-external-resizer/pull/159)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/ec0fb1092af8c54db81584d1c4b847b55e60e1c3...9247e81c9202c0040ec972e492c59112f6037dd0)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/39164d4fd75a049a4eb772095c19cda2f99a59e0)

* [STOR-1573](https://issues.redhat.com/browse/STOR-1573): Rebase external-snapshotter to v7.0.1 for OCP 4.16 [#145](https://github.com/openshift/csi-external-snapshotter/pull/145)
* [OCPBUGS-30503](https://issues.redhat.com/browse/OCPBUGS-30503): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#144](https://github.com/openshift/csi-external-snapshotter/pull/144)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/196496e722fba017252b66e76d5dc05595d32ae2...39164d4fd75a049a4eb772095c19cda2f99a59e0)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/2d60f070f5fa1d923ca9baae4bd6b36411c33266)

* [OCPBUGS-30440](https://issues.redhat.com/browse/OCPBUGS-30440): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#63](https://github.com/openshift/csi-livenessprobe/pull/63)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/ab365cbe19fee51dec536038190f17eeb3c4755d...2d60f070f5fa1d923ca9baae4bd6b36411c33266)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/2c3d80272cb6b04073ee33583ae4eef9b06281ff)

* [OCPBUGS-30441](https://issues.redhat.com/browse/OCPBUGS-30441): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#69](https://github.com/openshift/csi-node-driver-registrar/pull/69)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/b159372fe4be49bf05c3ce4d10ddd65f2e05abba...2c3d80272cb6b04073ee33583ae4eef9b06281ff)


### [docker-builder](https://github.com/openshift/builder/tree/5debab345e73b74726e24af49922b73f5536014b)

* [OCPBUGS-24746](https://issues.redhat.com/browse/OCPBUGS-24746): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#382](https://github.com/openshift/builder/pull/382)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#380](https://github.com/openshift/builder/pull/380)
* [Full changelog](https://github.com/openshift/builder/compare/0d2d5e42ffbf08230235d699701c46bfe38d2565...5debab345e73b74726e24af49922b73f5536014b)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/142ddc07962b7b065a63b2a610076f35b0af67ec)

* [MCO-392](https://issues.redhat.com/browse/MCO-392): Start using rhel-coreos image rather than machine-os-content. (#142) [#142](https://github.com/openshift/driver-toolkit/pull/142)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/a189300367b58fc166b62559dea4c93d6e707c63...142ddc07962b7b065a63b2a610076f35b0af67ec)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c76ca4039dd0f452cf0e6d70e800c25e319e5c38)

* [OCPBUGS-30586](https://issues.redhat.com/browse/OCPBUGS-30586): fix e2e tests on release branches [#222](https://github.com/openshift/cluster-api-provider-gcp/pull/222)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/a9784af23dcc74802f427d61c0d74f0ec8f5d19b...c76ca4039dd0f452cf0e6d70e800c25e319e5c38)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/fc80687e76e6d04444f20914f60915067b832e30)

* [CFE-684](https://issues.redhat.com/browse/CFE-684): Add user defined tags to the created gcp resource [#54](https://github.com/openshift/machine-api-provider-gcp/pull/54)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/40cbe7251febd07adea67b281c32ce1cb1e09fc9...fc80687e76e6d04444f20914f60915067b832e30)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/5ed71c64ce9c1879f0d2a17976387f1b0292796d)

* [OCPBUGS-30511](https://issues.redhat.com/browse/OCPBUGS-30511): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#60](https://github.com/openshift/gcp-pd-csi-driver/pull/60)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/10e6f690641ca6fbdf52283283da5bf7e68003b0...5ed71c64ce9c1879f0d2a17976387f1b0292796d)


### [haproxy-router](https://github.com/openshift/router/tree/526f832abbd2c2926d6545b4a6f5c41579bc6a76)

* [OCPBUGS-22739](https://issues.redhat.com/browse/OCPBUGS-22739): Properly handle rewrite-target annotation [#534](https://github.com/openshift/router/pull/534)
* [Full changelog](https://github.com/openshift/router/compare/19e6365d90d0540c138267091235005ad32c238b...526f832abbd2c2926d6545b4a6f5c41579bc6a76)


### [hypershift](https://github.com/openshift/hypershift/tree/8dc2f6035835186a100c26089f0db619540f08af)

* NO-JIRA: Add --auto-repair flag to `hcp create nodepool` [#3163](https://github.com/openshift/hypershift/pull/3163)
* NO-JIRA: Set control plane to HA by default [#3788](https://github.com/openshift/hypershift/pull/3788)
* NO-JIRA: Fix docs commands related to Azure ephemeral OS disks [#3809](https://github.com/openshift/hypershift/pull/3809)
* Update RHTAP references [#3814](https://github.com/openshift/hypershift/pull/3814)
* NO-JIRA: Documentation overview of HCP KubeVirt Storage [#3763](https://github.com/openshift/hypershift/pull/3763)
* [OCPBUGS-31465](https://issues.redhat.com/browse/OCPBUGS-31465): remove max function usage from deicated request serving nodes [#3815](https://github.com/openshift/hypershift/pull/3815)
* [OCPBUGS-31106](https://issues.redhat.com/browse/OCPBUGS-31106): Reduce log file size for hypershift apiservers [#3781](https://github.com/openshift/hypershift/pull/3781)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): Enable TestNodePool and CreateCluster tests on Azure [#3732](https://github.com/openshift/hypershift/pull/3732)
* [OCPBUGS-31319](https://issues.redhat.com/browse/OCPBUGS-31319): copy issuerCertificateAuthority configmap into HC openshift-config [#3799](https://github.com/openshift/hypershift/pull/3799)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Request serving node scheduler that uses HC size label [#3776](https://github.com/openshift/hypershift/pull/3776)
* [OCPBUGS-31076](https://issues.redhat.com/browse/OCPBUGS-31076): Support other azure clouds [#3804](https://github.com/openshift/hypershift/pull/3804)
* [OCPBUGS-31110](https://issues.redhat.com/browse/OCPBUGS-31110): Fix empty RHCOSImage error when creating Azure Infrastructure [#3782](https://github.com/openshift/hypershift/pull/3782)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104): Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server [#3797](https://github.com/openshift/hypershift/pull/3797)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): fix race between ignition payload generation and MCS configmap update [#3795](https://github.com/openshift/hypershift/pull/3795)
* NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools [#3752](https://github.com/openshift/hypershift/pull/3752)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 [#3710](https://github.com/openshift/hypershift/pull/3710)
* [OCPBUGS-31089](https://issues.redhat.com/browse/OCPBUGS-31089): Fix empty resourceGroupName error when deleting Azure infra [#3775](https://github.com/openshift/hypershift/pull/3775)
* [OCPBUGS-31090](https://issues.redhat.com/browse/OCPBUGS-31090): Fix empty subnet name error when creating Azure infrastructure [#3778](https://github.com/openshift/hypershift/pull/3778)
* [OCPBUGS-31263](https://issues.redhat.com/browse/OCPBUGS-31263): Add missing PodSecurityViolation alert [#3733](https://github.com/openshift/hypershift/pull/3733)
* [OCPBUGS-31118](https://issues.redhat.com/browse/OCPBUGS-31118): fix(ignition): Fix priority class override [#3784](https://github.com/openshift/hypershift/pull/3784)
* [OCPBUGS-31088](https://issues.redhat.com/browse/OCPBUGS-31088): Fix loopvar issue [#3770](https://github.com/openshift/hypershift/pull/3770)
* Update RHTAP references [#3790](https://github.com/openshift/hypershift/pull/3790)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104), [HOSTEDCP-1105](https://issues.redhat.com/browse/HOSTEDCP-1105): Validate multi-arch aspects in an AWS Hosted Cluster [#3769](https://github.com/openshift/hypershift/pull/3769)
* [HOSTEDCP-1501](https://issues.redhat.com/browse/HOSTEDCP-1501): Create default ClusterSizingConfig CR on start [#3787](https://github.com/openshift/hypershift/pull/3787)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3789](https://github.com/openshift/hypershift/pull/3789)
* [OCPBUGS-30930](https://issues.redhat.com/browse/OCPBUGS-30930): Add CEL validation for NodePool autoScaling / replicas [#3786](https://github.com/openshift/hypershift/pull/3786)
* [OCPBUGS-31102](https://issues.redhat.com/browse/OCPBUGS-31102): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3780](https://github.com/openshift/hypershift/pull/3780)
* NO-JIRA: Adding Disable PKI Reconciliation annotation as an option [#2989](https://github.com/openshift/hypershift/pull/2989)
* [OCPBUGS-30991](https://issues.redhat.com/browse/OCPBUGS-30991): external OIDC: fix certificateAuthority field in structured auth config [#3773](https://github.com/openshift/hypershift/pull/3773)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): Add install flag to enable/disable size tagging [#3766](https://github.com/openshift/hypershift/pull/3766)
* [OCPBUGS-30968](https://issues.redhat.com/browse/OCPBUGS-30968): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3760](https://github.com/openshift/hypershift/pull/3760)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add managed service constants to HyperShift API [#3762](https://github.com/openshift/hypershift/pull/3762)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support subnet labels separated by periods [#3767](https://github.com/openshift/hypershift/pull/3767)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: wire up placeholder pods for sizes [#3749](https://github.com/openshift/hypershift/pull/3749)
* NO-JIRA: Increase stability in autoscaled environments [#3757](https://github.com/openshift/hypershift/pull/3757)
* NO-JIRA: Bump HO read budget in e2e to 6000 [#3761](https://github.com/openshift/hypershift/pull/3761)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3743](https://github.com/openshift/hypershift/pull/3743)
* [HOSTEDCP-1467](https://issues.redhat.com/browse/HOSTEDCP-1467): ARO HCP - Add ability to specify subnet at nodepool level [#3748](https://github.com/openshift/hypershift/pull/3748)
* NO-JIRA: Update RHTAP references [#3753](https://github.com/openshift/hypershift/pull/3753)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support specifying AWS LB subnets [#3746](https://github.com/openshift/hypershift/pull/3746)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add ability to set managed service type in HO [#3736](https://github.com/openshift/hypershift/pull/3736)
* NO-ISSUE: hypershift-operator: react to hosted cluster changes [#3735](https://github.com/openshift/hypershift/pull/3735)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: add a controller for t-shirt sizing [#3686](https://github.com/openshift/hypershift/pull/3686)
* [HOSTEDCP-929](https://issues.redhat.com/browse/HOSTEDCP-929): Add nodepool annotation to allow requesting IMDSv2 [#3584](https://github.com/openshift/hypershift/pull/3584)
* NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget [#3745](https://github.com/openshift/hypershift/pull/3745)
* [OCPBUGS-30320](https://issues.redhat.com/browse/OCPBUGS-30320): speed up HCP rollout durations [#3734](https://github.com/openshift/hypershift/pull/3734)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set env var when the mgmt cluster supports SCC [#3701](https://github.com/openshift/hypershift/pull/3701)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3742](https://github.com/openshift/hypershift/pull/3742)
* NO-JIRA: Update RHTAP references [#3737](https://github.com/openshift/hypershift/pull/3737)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): consider nigthly images in payoad version check [#3727](https://github.com/openshift/hypershift/pull/3727)
* [OCPBUGS-28634](https://issues.redhat.com/browse/OCPBUGS-28634): Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES [#3687](https://github.com/openshift/hypershift/pull/3687)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Support additional node selectors for request serving nodes [#3729](https://github.com/openshift/hypershift/pull/3729)
* Revert "HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation" [#3731](https://github.com/openshift/hypershift/pull/3731)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): honor HC image configuration [#3714](https://github.com/openshift/hypershift/pull/3714)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3689](https://github.com/openshift/hypershift/pull/3689)
* [OCPBUGS-30769](https://issues.redhat.com/browse/OCPBUGS-30769): include node local client loadbalancer address in kube-apiserver signing ips [#3699](https://github.com/openshift/hypershift/pull/3699)
* NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline [#3728](https://github.com/openshift/hypershift/pull/3728)
* [HOSTEDCP-1460](https://issues.redhat.com/browse/HOSTEDCP-1460): Remove resource limits on azure-cloud-node-manager [#3725](https://github.com/openshift/hypershift/pull/3725)
* [HOSTEDCP-1479](https://issues.redhat.com/browse/HOSTEDCP-1479): Update IBM/networking-go-sdk package [#3722](https://github.com/openshift/hypershift/pull/3722)
* [Full changelog](https://github.com/openshift/hypershift/compare/4a99cff84977e4873289d6fb8a36559526ec1763...8dc2f6035835186a100c26089f0db619540f08af)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a836d6c0cb0b2eedcbb76e7bdcbf6b162fafa098)

* NO-JIRA: (refactor) reduce cognitive and adding unit tests (#889) [#889](https://github.com/openshift/insights-operator/pull/889)
* update & refactor "checkSummaryAndSend" function in the insightsuploader (#919) [#919](https://github.com/openshift/insights-operator/pull/919)
* delete all active jobs during restart (#920) [#920](https://github.com/openshift/insights-operator/pull/920)
* [OCPBUGS-31031](https://issues.redhat.com/browse/OCPBUGS-31031): use retrywatcher when watching job (#921) [#921](https://github.com/openshift/insights-operator/pull/921)
* [OCPBUGS-30515](https://issues.redhat.com/browse/OCPBUGS-30515): update protobuf version (#918) [#918](https://github.com/openshift/insights-operator/pull/918)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0b8a79c204ea4bd7a78ddda497361affcae050d2...a836d6c0cb0b2eedcbb76e7bdcbf6b162fafa098)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/12c414afb090a2ff63172652984aa117782dd005)

* [OCPBUGS-31276](https://issues.redhat.com/browse/OCPBUGS-31276): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/kubevirt-csi-driver/pull/37)
* [CNV-32073](https://issues.redhat.com/browse/CNV-32073): Sync upstream 2024-03-15 [#36](https://github.com/openshift/kubevirt-csi-driver/pull/36)
* NO-JIRA: Address CVE-2024-1725:  Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#32](https://github.com/openshift/kubevirt-csi-driver/pull/32)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/fdc8d94ba7fa3752c0e7ae5b0586a2489c82f711...12c414afb090a2ff63172652984aa117782dd005)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1d5df20e0c3a50de5372a8dcd64769a13f773174)

* [TRT-1587](https://issues.redhat.com/browse/TRT-1587): Revert #4275 "MCO-1092: Adapt the MCO's featuregate usage to new API" [#4295](https://github.com/openshift/machine-config-operator/pull/4295)
* [OCPBUGS-31376](https://issues.redhat.com/browse/OCPBUGS-31376): kubelet: restorecon necessary files on kubelet's prestart [#4287](https://github.com/openshift/machine-config-operator/pull/4287)
* [MCO-1092](https://issues.redhat.com/browse/MCO-1092): Adapt the MCO's featuregate usage to new API [#4275](https://github.com/openshift/machine-config-operator/pull/4275)
* [OCPBUGS-31067](https://issues.redhat.com/browse/OCPBUGS-31067): server: still serve kubeconfig with node-bootstrapper-token [#4276](https://github.com/openshift/machine-config-operator/pull/4276)
* [OCPBUGS-9108](https://issues.redhat.com/browse/OCPBUGS-9108): OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading [#4240](https://github.com/openshift/machine-config-operator/pull/4240)
* [OCPBUGS-27316](https://issues.redhat.com/browse/OCPBUGS-27316): configure-ovs: generate profiles directly in /run [#4042](https://github.com/openshift/machine-config-operator/pull/4042)
* [OCPBUGS-25744](https://issues.redhat.com/browse/OCPBUGS-25744), [OPNET-303](https://issues.redhat.com/browse/OPNET-303): Remove weights from ingress check script [#3698](https://github.com/openshift/machine-config-operator/pull/3698)
* [OCPBUGS-31365](https://issues.redhat.com/browse/OCPBUGS-31365): make verify should use MCO's kube version [#4280](https://github.com/openshift/machine-config-operator/pull/4280)
* [MCO-760](https://issues.redhat.com/browse/MCO-760): add rebuild mechanism to ocb [#4189](https://github.com/openshift/machine-config-operator/pull/4189)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Updates GCR CredentialProviderConfig [#4260](https://github.com/openshift/machine-config-operator/pull/4260)
* [OCPBUGS-30852](https://issues.redhat.com/browse/OCPBUGS-30852): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4261](https://github.com/openshift/machine-config-operator/pull/4261)
* [MCO-909](https://issues.redhat.com/browse/MCO-909): Openshift/Kubernetes 1.29 Rebase Updates [#4256](https://github.com/openshift/machine-config-operator/pull/4256)
* [OCPBUGS-30239](https://issues.redhat.com/browse/OCPBUGS-30239): Prevent OVS-configuration to run before kdump [#4213](https://github.com/openshift/machine-config-operator/pull/4213)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514), [OCPCLOUD-2516](https://issues.redhat.com/browse/OCPCLOUD-2516): Remove reliance on feature gates for cloud provider flags [#4228](https://github.com/openshift/machine-config-operator/pull/4228)
* NO-JIRA: Sync CRI-O owners [#4234](https://github.com/openshift/machine-config-operator/pull/4234)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a07395300232d2dd00fd86dca0a14068f0d8cdc2...1d5df20e0c3a50de5372a8dcd64769a13f773174)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a0e1bb4ebb622469a59503d51fa8d5c3659fa487)

* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Disable nginx module for rhel9 [#110](https://github.com/openshift/monitoring-plugin/pull/110)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#108](https://github.com/openshift/monitoring-plugin/pull/108)
* [OCPBUGS-31111](https://issues.redhat.com/browse/OCPBUGS-31111): Updating monitoring-plugin-container image to be consistent with ART for 4.16 [#103](https://github.com/openshift/monitoring-plugin/pull/103)
* [OCPBUGS-29947](https://issues.redhat.com/browse/OCPBUGS-29947): upgrade sanitize-html vulnerable dependency [#105](https://github.com/openshift/monitoring-plugin/pull/105)
* [OCPBUGS-31291](https://issues.redhat.com/browse/OCPBUGS-31291): Upgrade Webpack dev server [#104](https://github.com/openshift/monitoring-plugin/pull/104)
* NO-ISSUE: Add peteryurkovich to OWNERS [#102](https://github.com/openshift/monitoring-plugin/pull/102)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8209c904b7b576140f0330c7b245caddf6eccc40...a0e1bb4ebb622469a59503d51fa8d5c3659fa487)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/bb911451158fc06f193917863778434944e88ae1)

* [OCPBUGS-28578](https://issues.redhat.com/browse/OCPBUGS-28578): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 [#62](https://github.com/openshift/bond-cni/pull/62)
* [Full changelog](https://github.com/openshift/bond-cni/compare/d164fbab3fb0e274695f375e265aaa3a81c451b7...bb911451158fc06f193917863778434944e88ae1)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/4516f529cbe08e6d789f31f165d227aaf0b3d51e)

* NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness [#106](https://github.com/openshift/oauth-apiserver/pull/106)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/9df0f56903f10d89dab9b4e37a898bf8eb233956...4516f529cbe08e6d789f31f165d227aaf0b3d51e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/03ce0ca797e73b6762fd3e24100ce043199519e9)

* [CLID-8](https://issues.redhat.com/browse/CLID-8): Initial E2E test (#798) [#798](https://github.com/openshift/oc-mirror/pull/798)
* [OCPBUGS-19853](https://issues.redhat.com/browse/OCPBUGS-19853): improve support for multiarch (#813) [#813](https://github.com/openshift/oc-mirror/pull/813)
* [CLID-17](https://issues.redhat.com/browse/CLID-17): feat: docker v2s2 manifest list (fat manifest) / oci image index implementation (#810) [#810](https://github.com/openshift/oc-mirror/pull/810)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c4f829512107f7d0f52a057cd429de2030b9b3b3...03ce0ca797e73b6762fd3e24100ce043199519e9)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/ff172fea9c3838541a9faed6f522759bc1584310)

* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#47](https://github.com/openshift/operator-framework-catalogd/pull/47)
* NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-catalogd/pull/46)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/9666df2685f24f4fc949c6e99900b0a369525cb5...ff172fea9c3838541a9faed6f522759bc1584310)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/cdbbea5a2ac79b5cce580fbdd098ce9ae568ff8b)

* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#89](https://github.com/openshift/operator-framework-operator-controller/pull/89)
* NO-ISSUE: Synchronize From Upstream Repositories [#92](https://github.com/openshift/operator-framework-operator-controller/pull/92)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#91](https://github.com/openshift/operator-framework-operator-controller/pull/91)
* NO-ISSUE: Synchronize From Upstream Repositories [#90](https://github.com/openshift/operator-framework-operator-controller/pull/90)
* NO-ISSUE: Synchronize From Upstream Repositories [#88](https://github.com/openshift/operator-framework-operator-controller/pull/88)
* [OCPBUGS-31285](https://issues.redhat.com/browse/OCPBUGS-31285): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 [#86](https://github.com/openshift/operator-framework-operator-controller/pull/86)
* NO-ISSUE: Synchronize From Upstream Repositories [#87](https://github.com/openshift/operator-framework-operator-controller/pull/87)
* NO-ISSUE: Synchronize From Upstream Repositories [#84](https://github.com/openshift/operator-framework-operator-controller/pull/84)
* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-operator-controller/pull/83)
* NO-ISSUE: Synchronize From Upstream Repositories [#82](https://github.com/openshift/operator-framework-operator-controller/pull/82)
* NO-ISSUE: Synchronize From Upstream Repositories [#81](https://github.com/openshift/operator-framework-operator-controller/pull/81)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/88a5c687b62567e1eb08dc5393ea11099542680c...cdbbea5a2ac79b5cce580fbdd098ce9ae568ff8b)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/38965a71a46318b8b133d46188a6b2795fce7c68)

* NO-ISSUE: Synchronize From Upstream Repositories [#83](https://github.com/openshift/operator-framework-rukpak/pull/83)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#82](https://github.com/openshift/operator-framework-rukpak/pull/82)
* [OCPBUGS-31278](https://issues.redhat.com/browse/OCPBUGS-31278): Updating ose-olm-rukpak-container image to be consistent with ART for 4.16 [#81](https://github.com/openshift/operator-framework-rukpak/pull/81)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/7589a1f04ea198b2c38dd65a88f9fb9673817d7f...38965a71a46318b8b133d46188a6b2795fce7c68)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/58e5b3475ccb4b0d53c546a911cf995aedd77a51)

* NO-ISSUE: go mod tidy && go mod vendor [#420](https://github.com/openshift/openshift-apiserver/pull/420)
* [OCPBUGS-30279](https://issues.redhat.com/browse/OCPBUGS-30279): vendor upgrade runtime-utils [#419](https://github.com/openshift/openshift-apiserver/pull/419)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/c5ba848e78463f9c73e1d2daec9e565daa4a6f4a...58e5b3475ccb4b0d53c546a911cf995aedd77a51)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b3c423f97c7ea9f811b715242d3dca25a8be08c7)

* [BUILD-725](https://issues.redhat.com/browse/BUILD-725): Adds build & deployer controller [#289](https://github.com/openshift/openshift-controller-manager/pull/289)
* [OCPBUGS-23848](https://issues.redhat.com/browse/OCPBUGS-23848): Bumps otelgrpc version & dependencies [#293](https://github.com/openshift/openshift-controller-manager/pull/293)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#290](https://github.com/openshift/openshift-controller-manager/pull/290)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/3369227f301f7bc98e3f364c9bfb6fff788302d6...b3c423f97c7ea9f811b715242d3dca25a8be08c7)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/bf45c1fb232122e978eb73336be6d5e441c41d9d)

* [OCPBUGS-30855](https://issues.redhat.com/browse/OCPBUGS-30855): Ensure portSecurity is correctly set in the Port [#107](https://github.com/openshift/machine-api-provider-openstack/pull/107)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/d1d44b4ef935c6aecb12ede72e776ee0b69eb881...bf45c1fb232122e978eb73336be6d5e441c41d9d)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b8e1c913098f02dd0d311e40bacc25d8d835a84e)

* NO-ISSUE: Synchronize From Upstream Repositories [#723](https://github.com/openshift/operator-framework-olm/pull/723)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-olm/pull/722)
* [OCPBUGS-31080](https://issues.redhat.com/browse/OCPBUGS-31080), [OCPBUGS-31438](https://issues.redhat.com/browse/OCPBUGS-31438): Manual downstream sync [#719](https://github.com/openshift/operator-framework-olm/pull/719)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: update owners [#720](https://github.com/openshift/operator-framework-olm/pull/720)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): rename from 'clis' to 'tools' [#718](https://github.com/openshift/operator-framework-olm/pull/718)
* [OCPBUGS-29553](https://issues.redhat.com/browse/OCPBUGS-29553): Apply hypershift cluster-profile for ibm-cloud-managed [#700](https://github.com/openshift/operator-framework-olm/pull/700)
* NO-ISSUE: Synchronize From Upstream Repositories [#717](https://github.com/openshift/operator-framework-olm/pull/717)
* NO-ISSUE: Synchronize From Upstream Repositories [#716](https://github.com/openshift/operator-framework-olm/pull/716)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): image just as a cli source for mirror publishing [#713](https://github.com/openshift/operator-framework-olm/pull/713)
* NO-ISSUE: Semver lastedge error (#1169)  [sync] [#714](https://github.com/openshift/operator-framework-olm/pull/714)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c84b6ad72f4e3e8670b72e27b217044fe8a58713...b8e1c913098f02dd0d311e40bacc25d8d835a84e)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/47c277341b6501927893e412784cb42a87a27942)

* [OPECO-3031](https://issues.redhat.com/browse/OPECO-3031): Update community index to 4.16 [#558](https://github.com/operator-framework/operator-marketplace/pull/558)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/9340c5627b1fe690a313f86dc35307a55670fac4...47c277341b6501927893e412784cb42a87a27942)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/ac852f3eb077c877e998fee0359534349d07c604)

* [OCPBUGS-24852](https://issues.redhat.com/browse/OCPBUGS-24852): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.16 [#130](https://github.com/openshift/ovirt-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/5a9f33a2ee400fc046f5b3c3fb1c54c8aaf708bc...ac852f3eb077c877e998fee0359534349d07c604)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/531eba5fe164c79afd97e24ecd1a7c8aa112a2e3)

* [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/d4f6ab30b9c38a027da5dc28bf3d213cb21f4a69...531eba5fe164c79afd97e24ecd1a7c8aa112a2e3)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)

* [OCPBUGS-29980](https://issues.redhat.com/browse/OCPBUGS-29980): Updating prom-label-proxy-container image to be consistent with ART for 4.16 [#365](https://github.com/openshift/prom-label-proxy/pull/365)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/661e800461f4987a91225d28729c718e1aceb37b...5e14722ecfb3323ce2eb9c75a6bd9c5274b06040)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/4f9d09439d4bf0fa0c529310abbf69cc970e4e60)

* [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/87f3edd60a74da27ef2fa8ed79d17f3d7e2631cd...4f9d09439d4bf0fa0c529310abbf69cc970e4e60)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/cb3093f23618be6898e540b97855450cc198db2d)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#235](https://github.com/openshift/service-ca-operator/pull/235)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f409fb9e308ace1e5f8596add187d2239b073e23...cb3093f23618be6898e540b97855450cc198db2d)


### [telemeter](https://github.com/openshift/telemeter/tree/98f29eba931d35cdab4079834fa50061640ba641)

* [OCPBUGS-30724](https://issues.redhat.com/browse/OCPBUGS-30724): CVE-2024-28180 bump go-jose to v3.0.3 [#524](https://github.com/openshift/telemeter/pull/524)
* [OCPBUGS-30832](https://issues.redhat.com/browse/OCPBUGS-30832): bump Go 1.21 [#521](https://github.com/openshift/telemeter/pull/521)
* [Full changelog](https://github.com/openshift/telemeter/compare/763c9ed8dabc32fc2d19872a16e50c67523db2d2...98f29eba931d35cdab4079834fa50061640ba641)


### [tests](https://github.com/openshift/origin/tree/8b3dee6ac31a5ba48f20bcefe96b10c8a2102b54)

* [OCPBUGS-31484](https://issues.redhat.com/browse/OCPBUGS-31484): Use centos7 tag instead of latest for cmd images tests [#28675](https://github.com/openshift/origin/pull/28675)
* [OCPBUGS-30267](https://issues.redhat.com/browse/OCPBUGS-30267): Clarify a misleading message in patho event failures [#28667](https://github.com/openshift/origin/pull/28667)
* NO-JIRA: add conditional execution of featuregated tests [#28670](https://github.com/openshift/origin/pull/28670)
* [TRT-1494](https://issues.redhat.com/browse/TRT-1494): Add monitortest for cloud function on azure [#28582](https://github.com/openshift/origin/pull/28582)
* [OSD-21709](https://issues.redhat.com/browse/OSD-21709): Add temporary exceptions for managed services alerts [#28669](https://github.com/openshift/origin/pull/28669)
* [TRT-1559](https://issues.redhat.com/browse/TRT-1559): Remove two sets of logs to bring build-log.txt size down [#28654](https://github.com/openshift/origin/pull/28654)
* NO-JIRA: Add skip condition for Cluster-CSI-Snapshot-Controller-Operator feature [#28635](https://github.com/openshift/origin/pull/28635)
* [TRT-1493](https://issues.redhat.com/browse/TRT-1493): Add monitortest for cloud function on aws [#28581](https://github.com/openshift/origin/pull/28581)
* NO-JIRA: add simple test for server side apply to demonstrate field clearing [#28491](https://github.com/openshift/origin/pull/28491)
* [OCPBUGS-31074](https://issues.redhat.com/browse/OCPBUGS-31074): fix: add check for static container [#28662](https://github.com/openshift/origin/pull/28662)
* [TRT-1567](https://issues.redhat.com/browse/TRT-1567): Revert #28589 "AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads" [#28659](https://github.com/openshift/origin/pull/28659)
* [AUTH-483](https://issues.redhat.com/browse/AUTH-483): Add a monitor test to check the existence of required-scc annotation in platform workloads [#28589](https://github.com/openshift/origin/pull/28589)
* [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Check idling annotation in services not endpoints [#28619](https://github.com/openshift/origin/pull/28619)
* [OCPBUGS-30604](https://issues.redhat.com/browse/OCPBUGS-30604): fix panic on non-standard node-role labels [#28650](https://github.com/openshift/origin/pull/28650)
* [TRT-1557](https://issues.redhat.com/browse/TRT-1557): Align three unknown tests to kube-apiserver [#28649](https://github.com/openshift/origin/pull/28649)
* [MULTIARCH-4352](https://issues.redhat.com/browse/MULTIARCH-4352): Censor private key from pod dump logs [#28638](https://github.com/openshift/origin/pull/28638)
* trt-1538: additional timeout bumps [#28644](https://github.com/openshift/origin/pull/28644)
* [OCPBUGS-29614](https://issues.redhat.com/browse/OCPBUGS-29614): update skipUnlessMachineAPIOperator function [#28625](https://github.com/openshift/origin/pull/28625)
* [Full changelog](https://github.com/openshift/origin/compare/0708aaa98ab26628af350f4046a0a66cf51863a8...8b3dee6ac31a5ba48f20bcefe96b10c8a2102b54)


### [thanos](https://github.com/openshift/thanos/tree/bc1b70df8951c9ecda519c49a019625c579af8af)

* [OCPBUGS-30537](https://issues.redhat.com/browse/OCPBUGS-30537): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#143](https://github.com/openshift/thanos/pull/143)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): Update OWNERS: move raptorsun out of reviewer [#140](https://github.com/openshift/thanos/pull/140)
* [MON-3753](https://issues.redhat.com/browse/MON-3753): Increase thanos tests timeout [#144](https://github.com/openshift/thanos/pull/144)
* [Full changelog](https://github.com/openshift/thanos/compare/08705106e2b9f94a82d94d056266cf12cd1fdc51...bc1b70df8951c9ecda519c49a019625c579af8af)