# 4.13.0-0.okd-2023-08-04-164726

Created: 2023-08-06 07:20:00 +0000 UTC

Image Digest: `sha256:939918fd96101657d5763170916cac1031b4720d8d2eb65fa7878e63c5d7ff80`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-08-04-164726


## Changes from 4.13.0-0.okd-2023-06-04-080300

### Components

* Kubernetes upgraded from 1.26.5 to 1.26.6
* Fedora CoreOS upgraded from 38.20230514.3 to 38.20230709.3


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [acb52a08](https://github.com/openshift/cluster-api-provider-aws/commit/acb52a088682bf4019d616523881401526437fd3) `sha256:0752ac48aca42d58c7d71910e625537a41c8f07db2ad09896ecc825664f31244`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [ce1c9a35](https://github.com/openshift/cluster-capi-operator/commit/ce1c9a359ec9ab0c5526cd8594ea59bb52044026) `sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [e9d59a2d](https://github.com/openshift/csi-external-attacher/commit/e9d59a2d66491d60d43488e05af7b4b673c722fd) `sha256:bc5522a4ad7d20a451e7f318bbec689371470d55378d517b64258805301647da`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [974ac363](https://github.com/openshift/csi-external-resizer/commit/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a) `sha256:61a1fc78697628892622edd64b239ce456937299b08f9a46ddea225eae802142`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:f833881476fca7dadf48cad85c93f6e8fd7d151c74218b5bfde818ac41d61950`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5f13d5e6](https://github.com/openshift/csi-node-driver-registrar/commit/5f13d5e6f5b06a99995e0697d83bbdb36efceb46) `sha256:32dcc0749823260f2e57e7d4fbab46baa0f1db32b2e07f672426bccf52aa5976`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:976d131c2325b788d37fd3bffc8cd845cdd689b800ec4cb34692487d5bb38392`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:acae100e011cfc81b1502ffc3f41a8a1c908092cec3d1a8d63fd7020933f6217`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9`
* [haproxy-router](https://github.com/openshift/router) git [065deab8](https://github.com/openshift/router/commit/065deab84f342615db2d2f5c78a19ae04bb43912) `sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [5984aac1](https://github.com/openshift/service-ca-operator/commit/5984aac13df6c2f4440c67a1a14d32958bce9ec3) `sha256:5a79d38a9613dc33b27cd2775d35613c0694c461b97135a04ebdbb7307532f47`
* [telemeter](https://github.com/openshift/telemeter) git [be81b434](https://github.com/openshift/telemeter/commit/be81b43429dcbf70f6ca19a9360ba455c97a1639) `sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/06189bcdb0bea068f8ac51a3550fcdcbde522a76)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5346) [#5346](https://github.com/openshift/assisted-service/pull/5346)
* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b...06189bcdb0bea068f8ac51a3550fcdcbde522a76)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3415688ae42d7f8305e10144ea27cdf503e62ad5)

* [OCPBUGS-15557](https://issues.redhat.com/browse/OCPBUGS-15557): vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) [#565](https://github.com/openshift/assisted-installer-agent/pull/565)
* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e8de0582db56699d32653df02241c4a104755e1b...3415688ae42d7f8305e10144ea27cdf503e62ad5)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/94667c6c213f07ec7613a6d6e831d64ee73181e1)

* [OCPBUGS-16377](https://issues.redhat.com/browse/OCPBUGS-16377): [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#31](https://github.com/openshift/alibaba-cloud-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f...94667c6c213f07ec7613a6d6e831d64ee73181e1)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/baf14a425efed2764c79d630d5aecb4744066397)

* [OCPBUGS-13036](https://issues.redhat.com/browse/OCPBUGS-13036): 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 [#220](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/220)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/b6dee5c3585cbc92967530cb178a09a52164bfde...baf14a425efed2764c79d630d5aecb4744066397)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/125a4b45d02ac7596406e43810398688b25ec91d)

* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4969655df4169f19092e173b16c56c79d3a3383e...125a4b45d02ac7596406e43810398688b25ec91d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b8d243397ff297baf875a88132f84d8cef34b968)

* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7afcf26e2e9190337134e75e0981d25d05dc16c8...b8d243397ff297baf875a88132f84d8cef34b968)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8846366f4ae63a63ab75a35761cca1c95dee3c84)

* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/9885d4d37ed74d764eb83a826f3a7b013ed83d12...8846366f4ae63a63ab75a35761cca1c95dee3c84)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/89e21d61f6f23b2e89f1b24096e458d6ade8a40a)

* [OCPBUGS-16318](https://issues.redhat.com/browse/OCPBUGS-16318): 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 [#44](https://github.com/openshift/azure-disk-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/202e8afa8f1899d4cd1843d9e09cf8832ae0eff7...89e21d61f6f23b2e89f1b24096e458d6ade8a40a)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/842415aa35f7151c34645161ef6aede60354ae2a)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#86](https://github.com/openshift/azure-disk-csi-driver-operator/pull/86)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/67bda47232a73fe3877815d7901353f4f74ebeb0...842415aa35f7151c34645161ef6aede60354ae2a)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/60e0cb86a6055e420bfdb52530d0a0d6418f47fd)

* [OCPBUGS-16321](https://issues.redhat.com/browse/OCPBUGS-16321): 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 [#30](https://github.com/openshift/azure-file-csi-driver/pull/30)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/fd94a035e3d9dedce048f7e5f271e7ed6bea822f...60e0cb86a6055e420bfdb52530d0a0d6418f47fd)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/0a9a1a40a3a0dec5ae99e7bd00d2c54a4e0820d7)

* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): Use the same names for public LB in IPI and UPI Azure [#7302](https://github.com/openshift/installer/pull/7302)
* [OCPBUGS-16124](https://issues.redhat.com/browse/OCPBUGS-16124): azure: skip LB creation when not needed [#7322](https://github.com/openshift/installer/pull/7322)
* [OCPBUGS-13812](https://issues.redhat.com/browse/OCPBUGS-13812): ic: azure: validate diskTypes in AzureStack [#7195](https://github.com/openshift/installer/pull/7195)
* [OCPBUGS-15230](https://issues.redhat.com/browse/OCPBUGS-15230): azure: skip NSG creation when BYO vnet [#7263](https://github.com/openshift/installer/pull/7263)
* [OCPBUGS-15591](https://issues.redhat.com/browse/OCPBUGS-15591): [release-4.13] gcp: add confidential compute support for boostrap TF [#7298](https://github.com/openshift/installer/pull/7298)
* [OCPBUGS-15187](https://issues.redhat.com/browse/OCPBUGS-15187): images: installer: add xz to the container [#7260](https://github.com/openshift/installer/pull/7260)
* [OCPBUGS-14867](https://issues.redhat.com/browse/OCPBUGS-14867): Shorten SNO installation duration by releasing CPC lease [#7241](https://github.com/openshift/installer/pull/7241)
* [OCPBUGS-13752](https://issues.redhat.com/browse/OCPBUGS-13752): Set AdditionalTrustBundle in override when mirroring not enabled [#7191](https://github.com/openshift/installer/pull/7191)
* [OCPBUGS-15289](https://issues.redhat.com/browse/OCPBUGS-15289): gcp use preconfigured private zone for installation [#7271](https://github.com/openshift/installer/pull/7271)
* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [Full changelog](https://github.com/openshift/installer/compare/90bb61f38881d07ce94368f0b34089d152ffa4ef...0a9a1a40a3a0dec5ae99e7bd00d2c54a4e0820d7)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/7de328a2d332833257fde75368e624908a3eec13)

* [OCPBUGS-16084](https://issues.redhat.com/browse/OCPBUGS-16084): Fix Metal3Remediation CRD install order [#194](https://github.com/openshift/cluster-api-provider-baremetal/pull/194)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/d20bc578a4368130d10f41ad974bf147af9410f8...7de328a2d332833257fde75368e624908a3eec13)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3c924532a6965789f743fe37d77ed8b52a065c36)

* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/b771b3bf1ad22acf65afb123e6616aac980661b9...3c924532a6965789f743fe37d77ed8b52a065c36)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/4930ec51cf668be611e24bf8f7e7ea976f5a66b8)

* [OCPBUGS-14487](https://issues.redhat.com/browse/OCPBUGS-14487): Support IPv6 VIP for setup with multipe IPv6 addresses [#259](https://github.com/openshift/baremetal-runtimecfg/pull/259)
* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f0c1297c424d2ce8d20b376c488f8ada595b39b9...4930ec51cf668be611e24bf8f7e7ea976f5a66b8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e251b5ebd2466adde7b395bf3ab515b8f6cd0c84)

* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [OCPBUGS-16193](https://issues.redhat.com/browse/OCPBUGS-16193): reboot: set ignition version to 3.1 [#1508](https://github.com/openshift/oc/pull/1508)
* [OCPBUGS-16172](https://issues.redhat.com/browse/OCPBUGS-16172): Add tls-server-name when property exists in kubeconfig [#1506](https://github.com/openshift/oc/pull/1506)
* handle the error case of node retrieval while waiting for reboot [#1484](https://github.com/openshift/oc/pull/1484)
* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [Full changelog](https://github.com/openshift/oc/compare/05d83eff7e17160e679898a2a5cd6019ec252c49...e251b5ebd2466adde7b395bf3ab515b8f6cd0c84)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/4f190d6b8c06257071e01b4d75ea9ae33fd20885)

* [OCPBUGS-15856](https://issues.redhat.com/browse/OCPBUGS-15856): Azure: Handle already existing IP configurations [#116](https://github.com/openshift/cloud-network-config-controller/pull/116)
* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/71ccef5299dc865106a86f6f514041dbe33086bb...4f190d6b8c06257071e01b4d75ea9ae33fd20885)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a044dd9175d25911b799082fb189e4886391807b)

* [OCPBUGS-15258](https://issues.redhat.com/browse/OCPBUGS-15258): Correctly link oauth apiserver ServiceMonitor with its Service [#617](https://github.com/openshift/cluster-authentication-operator/pull/617)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#618](https://github.com/openshift/cluster-authentication-operator/pull/618)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242...a044dd9175d25911b799082fb189e4886391807b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a00c91292ecf6512e35d6f01c2d5b8696c17ca)

* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1...29a00c91292ecf6512e35d6f01c2d5b8696c17ca)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ee42773269a65998812435c0f1ab0c08cd8154f5)

* [OCPBUGS-15472](https://issues.redhat.com/browse/OCPBUGS-15472): Limit role binding to openshift-machine-api namespace [#346](https://github.com/openshift/cluster-baremetal-operator/pull/346)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/db283115e0b424e404307602701f1b6295c2f856...ee42773269a65998812435c0f1ab0c08cd8154f5)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/507f873307be10d8ddbbbe0fecba68aea7c2b5c1)

* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0142186bad9acc2d7950663129a4ef82c32a5610...507f873307be10d8ddbbbe0fecba68aea7c2b5c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ef4594ef3f4ca535aa1d34878b79184323ecf481)

* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Alibaba platforms should not be upgradeable [#260](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/260)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/64455eb66f17bb2c761ab529dbae76123f530d48...ef4594ef3f4ca535aa1d34878b79184323ecf481)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b27f0d6a463acf2e918f52ea8e6def2603f912f)

* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/923b864e76c6e8eb1bfcd66bb73327588dd8b75a...0b27f0d6a463acf2e918f52ea8e6def2603f912f)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/42f323cd02b4e86ed630ed6649e32f9a876b3444)

* [OCPBUGS-15330](https://issues.redhat.com/browse/OCPBUGS-15330): Fix lint issue [#222](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/222)
* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/9740b7ebfb127dfaa251506714e6c8cb41f0ae2b...42f323cd02b4e86ed630ed6649e32f9a876b3444)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/c6768d4537b7c2969b77fea26429b2822c0ec844)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints if, and only if, nodes have zones [#367](https://github.com/openshift/cluster-dns-operator/pull/367)
* [OCPBUGS-15225](https://issues.redhat.com/browse/OCPBUGS-15225): Add support for protocolStrategy API field to enable force_tcp configuration [#372](https://github.com/openshift/cluster-dns-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d96022a4d0d091955d73e7e99fc8cc81db56c86a...c6768d4537b7c2969b77fea26429b2822c0ec844)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f608ce75498e2c214c71ebf5616d57fb0bddade8)

* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4a9be58b44eee435cfa28b97f5f4c0d816424717...f608ce75498e2c214c71ebf5616d57fb0bddade8)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)

* [OCPBUGS-15434](https://issues.redhat.com/browse/OCPBUGS-15434): [release-4.13] Fix invalid DNS name formatting for GCP [#958](https://github.com/openshift/cluster-ingress-operator/pull/958)
* [OCPBUGS-15515](https://issues.redhat.com/browse/OCPBUGS-15515): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#955](https://github.com/openshift/cluster-ingress-operator/pull/955)
* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/502e3517f8f10b7d36c7d9d78197db49dae7f2e6...a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ad323b3657611da6bf7ea78eba8ffa998ba56fe9)

* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log jwt tokens [#1499](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba...ad323b3657611da6bf7ea78eba8ffa998ba56fe9)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/8d627a55e6d765019f4879ea20e2016e6cc0be63)

* [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Bump golang.org/x/net [#20](https://github.com/openshift/cluster-api-operator/pull/20)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b8428eb60d727565fefa4e37c845d704913cf0c5...8d627a55e6d765019f4879ea20e2016e6cc0be63)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5c00da0816faf0f15e643f05666c963d862a8299)

* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887...5c00da0816faf0f15e643f05666c963d862a8299)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/547c850b30e2183f8a6c9842c82ce672ba72cc76)

* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [OCPBUGS-16023](https://issues.redhat.com/browse/OCPBUGS-16023): Add the trusted CA bundle in UWM Prometheus pods [#2041](https://github.com/openshift/cluster-monitoring-operator/pull/2041)
* [OCPBUGS-15469](https://issues.redhat.com/browse/OCPBUGS-15469): Limit the value of GOMAXPROCS on node-exporter to 4. [#2021](https://github.com/openshift/cluster-monitoring-operator/pull/2021)
* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4a992c336804d87b53d40124ce5ba210d9239dbc...547c850b30e2183f8a6c9842c82ce672ba72cc76)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6f6b79bb994a5f38b8fc25edcd43b42229b3b70a)

* [OCPBUGS-11539](https://issues.redhat.com/browse/OCPBUGS-11539): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1774](https://github.com/openshift/cluster-network-operator/pull/1774)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Add logic to pick the openshift-sdn shims from right directories [#1880](https://github.com/openshift/cluster-network-operator/pull/1880)
* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [OCPBUGS-15476](https://issues.redhat.com/browse/OCPBUGS-15476): Add release version annotation to whereabouts-reconciler [#1853](https://github.com/openshift/cluster-network-operator/pull/1853)
* [OCPBUGS-15139](https://issues.redhat.com/browse/OCPBUGS-15139): Remove nodeSelector for architecture in whereabouts daemonset [#1840](https://github.com/openshift/cluster-network-operator/pull/1840)
* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/924fd3c589f0dc345807550965ef80099311b82a...6f6b79bb994a5f38b8fc25edcd43b42229b3b70a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9d72d310605e9b8c646552c2b6f48d10faf0ac92)

* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* E2E: Add memory manager sanity test case (#573) (#695) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* e2e: latency testing: increase the expected threshold (#709) [#709](https://github.com/openshift/cluster-node-tuning-operator/pull/709)
* Do not rollback settings on TuneD exit (#704) [#704](https://github.com/openshift/cluster-node-tuning-operator/pull/704)
* Switch to rslave/HostToContainer volume mount propagation (#705) [#705](https://github.com/openshift/cluster-node-tuning-operator/pull/705)
* e2e: perf-prof: disable truncating gomega output (#707) [#707](https://github.com/openshift/cluster-node-tuning-operator/pull/707)
* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/cbd341ba09c0f83ead652af6a8b17454fc2b5e9e...9d72d310605e9b8c646552c2b6f48d10faf0ac92)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ea4f097def493950e6e65068284084935b8ce4d9)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#541](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/aaa3cec4118d3743fd15f6197e348e86f7e48c7d...ea4f097def493950e6e65068284084935b8ce4d9)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f785bad1227439dfdb627538b3f7ecd0eb28f33c)

* [OCPBUGS-15756](https://issues.redhat.com/browse/OCPBUGS-15756): Update Jenkins and Jenkins Agent Base image versions [#505](https://github.com/openshift/cluster-samples-operator/pull/505)
* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/318d124ed3bcde76cbe960f6bef203728e34d1c6...f785bad1227439dfdb627538b3f7ecd0eb28f33c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)

* [OCPBUGS-15378](https://issues.redhat.com/browse/OCPBUGS-15378): decrease severity for MultipleDefaultStorageClasses alert [#383](https://github.com/openshift/cluster-storage-operator/pull/383)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6479617c1e9e92cc664d0e8c26ba62191320f4e4...98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2ba8f8d7bc59f596db65d47e80ef8765ae340c34)

* [OCPBUGS-16613](https://issues.redhat.com/browse/OCPBUGS-16613): Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 [#948](https://github.com/openshift/cluster-version-operator/pull/948)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e08a27913bc6c6d0ca0663dc131d1183773cca10...2ba8f8d7bc59f596db65d47e80ef8765ae340c34)


### [console](https://github.com/openshift/console/tree/67543a20dd0cd33917044eaec2199528e3be43af)

* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [OCPBUGS-15998](https://issues.redhat.com/browse/OCPBUGS-15998): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12992](https://github.com/openshift/console/pull/12992)
* [OCPBUGS-15810](https://issues.redhat.com/browse/OCPBUGS-15810): only show pipelines doc link for downstream [#12981](https://github.com/openshift/console/pull/12981)
* [OCPBUGS-15982](https://issues.redhat.com/browse/OCPBUGS-15982): get Kamelets from the camel-k-operator namespace as well [#12988](https://github.com/openshift/console/pull/12988)
* [OCPBUGS-16244](https://issues.redhat.com/browse/OCPBUGS-16244): Fix operator backed catalog page when copied CSVs disabled [#13019](https://github.com/openshift/console/pull/13019)
* [OCPBUGS-15194](https://issues.redhat.com/browse/OCPBUGS-15194): Remove tech preview badge from Pipeline repository pages [#12916](https://github.com/openshift/console/pull/12916)
* [OCPBUGS-10326](https://issues.redhat.com/browse/OCPBUGS-10326): re-enable operator-install-single-namespace.spec.ts test [#12653](https://github.com/openshift/console/pull/12653)
* [OCPBUGS-15848](https://issues.redhat.com/browse/OCPBUGS-15848): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12976](https://github.com/openshift/console/pull/12976)
* [OCPBUGS-15890](https://issues.redhat.com/browse/OCPBUGS-15890): Use proxy with web socket connection and monitoring dashboard [#12978](https://github.com/openshift/console/pull/12978)
* [OCPBUGS-15720](https://issues.redhat.com/browse/OCPBUGS-15720), [OCPBUGS-15721](https://issues.redhat.com/browse/OCPBUGS-15721), [OCPBUGS-15722](https://issues.redhat.com/browse/OCPBUGS-15722): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12963](https://github.com/openshift/console/pull/12963)
* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [OCPBUGS-14267](https://issues.redhat.com/browse/OCPBUGS-14267): Add Pipeline metrics unsupported empty page [#12864](https://github.com/openshift/console/pull/12864)
* [OCPBUGS-15410](https://issues.redhat.com/browse/OCPBUGS-15410): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12936](https://github.com/openshift/console/pull/12936)
* [OCPBUGS-15787](https://issues.redhat.com/browse/OCPBUGS-15787): Remove access review check for PipelineResource from Pipeline section [#12967](https://github.com/openshift/console/pull/12967)
* [OCPBUGS-15228](https://issues.redhat.com/browse/OCPBUGS-15228): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12937](https://github.com/openshift/console/pull/12937)
* [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading [#12931](https://github.com/openshift/console/pull/12931)
* [OCPBUGS-14166](https://issues.redhat.com/browse/OCPBUGS-14166): Fixed Make Serverless Form Error [#12857](https://github.com/openshift/console/pull/12857)
* [OCPBUGS-14336](https://issues.redhat.com/browse/OCPBUGS-14336): use service port name instead targetPort in the Pipeline Event listener route [#12870](https://github.com/openshift/console/pull/12870)
* [OCPBUGS-14310](https://issues.redhat.com/browse/OCPBUGS-14310): Could not import multiple resources via JSON (while YAML supports this) [#12868](https://github.com/openshift/console/pull/12868)
* [OCPBUGS-15335](https://issues.redhat.com/browse/OCPBUGS-15335): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12927](https://github.com/openshift/console/pull/12927)
* [OCPBUGS-15130](https://issues.redhat.com/browse/OCPBUGS-15130): Helm Repository "Edit" button results in 404 [#12909](https://github.com/openshift/console/pull/12909)
* [OCPBUGS-14189](https://issues.redhat.com/browse/OCPBUGS-14189): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12858](https://github.com/openshift/console/pull/12858)
* [OCPBUGS-13642](https://issues.redhat.com/browse/OCPBUGS-13642): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12812](https://github.com/openshift/console/pull/12812)
* [OCPBUGS-11974](https://issues.redhat.com/browse/OCPBUGS-11974): Add page title to Devconsole pages [#12844](https://github.com/openshift/console/pull/12844)
* [OCPBUGS-15465](https://issues.redhat.com/browse/OCPBUGS-15465), [OCPBUGS-15481](https://issues.redhat.com/browse/OCPBUGS-15481): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore and disable operator-uninstall test [#12949](https://github.com/openshift/console/pull/12949)
* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [Full changelog](https://github.com/openshift/console/compare/237aa38b64f8cb4d20aa4d17f272d8deb5849b8d...67543a20dd0cd33917044eaec2199528e3be43af)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/26001de8244adb4bd1ae4c4046932b5a9831edce)

* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/4655073266cb14756783bb06378224048f0dd3e3...26001de8244adb4bd1ae4c4046932b5a9831edce)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)

* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/0dc83f5f1bd118247eaf0f91030c321da9c88aa3...f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a888237c9ab43eab0ca992f0b18eff114ea4ade1)

* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/c785aa6755bf96a4d39b4a804b7a826485965227...a888237c9ab43eab0ca992f0b18eff114ea4ade1)


### [docker-builder](https://github.com/openshift/builder/tree/1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)

* [OCPBUGS-15606](https://issues.redhat.com/browse/OCPBUGS-15606): Add the git-lfs package [#352](https://github.com/openshift/builder/pull/352)
* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/756e38455b8e08a34510e188673c77503dca3ff1)

* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/879b72bf6305ef394291ed1b4c5eeb3b11917633...756e38455b8e08a34510e188673c77503dca3ff1)


### [etcd](https://github.com/openshift/etcd/tree/1b61faa606b5393076f5835418c6ec3cdc628615)

* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* [Full changelog](https://github.com/openshift/etcd/compare/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d...1b61faa606b5393076f5835418c6ec3cdc628615)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/8b310a39c1cad43ff3443b264524526b76ab1ac2)

* Bump FCOS version [#638](https://github.com/openshift/okd-machine-os/pull/638)
* Bump fedora-coreos to latest stable [#635](https://github.com/openshift/okd-machine-os/pull/635)
* Bump to latest fedora-coreos stable [#630](https://github.com/openshift/okd-machine-os/pull/630)
* manifests: remove intel_pstate=disable, enforce cgroupsv2 [#629](https://github.com/openshift/okd-machine-os/pull/629)
* Bump fedora-coreos to latest stable [#625](https://github.com/openshift/okd-machine-os/pull/625)
* Bump fedora-coreos to latest stable [#620](https://github.com/openshift/okd-machine-os/pull/620)
* Bump openshift-os to latest release-4.13 [#615](https://github.com/openshift/okd-machine-os/pull/615)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/5e6acfcdc385e7c2653d082d9c8a1dbee32aed49...8b310a39c1cad43ff3443b264524526b76ab1ac2)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)

* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c30195c5c3148bf6e00795b49a79954e6d920130)

* [OCPBUGS-16331](https://issues.redhat.com/browse/OCPBUGS-16331): 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 [#38](https://github.com/openshift/gcp-pd-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733...c30195c5c3148bf6e00795b49a79954e6d920130)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf)

* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): remove readiness check for cache exclusion [#1625](https://github.com/openshift/kubernetes/pull/1625)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): UPSTREAM: <drop>: hack/update-vendor.sh [#1637](https://github.com/openshift/kubernetes/pull/1637)
* [OCPBUGS-15246](https://issues.redhat.com/browse/OCPBUGS-15246): Bump to k8s 1.26.6 [#1610](https://github.com/openshift/kubernetes/pull/1610)
* [OCPBUGS-8738](https://issues.redhat.com/browse/OCPBUGS-8738): bump apiserver-lib-go [#1611](https://github.com/openshift/kubernetes/pull/1611)
* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7a891f05c7beb9527024c7616d95f6ff5c309f27...73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf)


### [hypershift](https://github.com/openshift/hypershift/tree/227d6e1e0a50691ec8e858513c7ab8b2d21e55e2)

* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* 4.13: Add management cluster KAS network policy [#2786](https://github.com/openshift/hypershift/pull/2786)
* Leader election config update. [#2801](https://github.com/openshift/hypershift/pull/2801)
* [OCPBUGS-16160](https://issues.redhat.com/browse/OCPBUGS-16160): fix deletion bug when hostedzone is already deleted [#2813](https://github.com/openshift/hypershift/pull/2813)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): [release-4.13] Implement dedicated request serving nodes for HostedClusters [#2809](https://github.com/openshift/hypershift/pull/2809)
* Update RHTAP references (release-4.13) [#2816](https://github.com/openshift/hypershift/pull/2816)
* [OCPBUGS-16057](https://issues.redhat.com/browse/OCPBUGS-16057): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2798](https://github.com/openshift/hypershift/pull/2798)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2810](https://github.com/openshift/hypershift/pull/2810)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2799](https://github.com/openshift/hypershift/pull/2799)
* [OCPBUGS-16125](https://issues.redhat.com/browse/OCPBUGS-16125): [release-4.13] Update vendored dependencies [#2797](https://github.com/openshift/hypershift/pull/2797)
* [OCPBUGS-15774](https://issues.redhat.com/browse/OCPBUGS-15774): autoscaling balance similar groups [#2805](https://github.com/openshift/hypershift/pull/2805)
* [OCPBUGS-15965](https://issues.redhat.com/browse/OCPBUGS-15965): Reject VPCE Connections during VPCE Service cleanup [#2789](https://github.com/openshift/hypershift/pull/2789)
* Update RHTAP references (release-4.13) [#2751](https://github.com/openshift/hypershift/pull/2751)
* [OCPBUGS-15171](https://issues.redhat.com/browse/OCPBUGS-15171): Skip AWS resource deletion for 'Unknown' OIDC state [#2701](https://github.com/openshift/hypershift/pull/2701)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2758](https://github.com/openshift/hypershift/pull/2758)
* [OCPBUGS-15281](https://issues.redhat.com/browse/OCPBUGS-15281): Check OwningIngressController also in Labels [#2715](https://github.com/openshift/hypershift/pull/2715)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2748](https://github.com/openshift/hypershift/pull/2748)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2735](https://github.com/openshift/hypershift/pull/2735)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2670](https://github.com/openshift/hypershift/pull/2670)
* OCPBUGS-15268 properly handle user CA bundle not existing [#2710](https://github.com/openshift/hypershift/pull/2710)
* [OCPBUGS-15301](https://issues.redhat.com/browse/OCPBUGS-15301): [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2696](https://github.com/openshift/hypershift/pull/2696)
* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [Full changelog](https://github.com/openshift/hypershift/compare/7b6e5a22af222f82ee93877c165a5e02f503fa4e...227d6e1e0a50691ec8e858513c7ab8b2d21e55e2)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/42b5c256657da2de184c3e5ec9c619131ed1cd57)

* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/66dcaf9a0591ec321828cec5ee24f0a4df0e5080...42b5c256657da2de184c3e5ec9c619131ed1cd57)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e83df2f32ae88c84c15a12741a970607b20228ec...ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)

* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/283a614ee34e83afa065338dee25d4ee202c8aeb...96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f87e4120ed55da397a323ddbc7fe1a5edb0f088c)

* [OCPBUGS-14773](https://issues.redhat.com/browse/OCPBUGS-14773): extend configmap gatherer to get gateway-mode-config (#788) (#791) [#788](https://github.com/openshift/insights-operator/pull/788)
* [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-14318](https://issues.redhat.com/browse/OCPBUGS-14318): gather PDBs only from openshift namespaces (#786) [#786](https://github.com/openshift/insights-operator/pull/786)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0babf2b1fa2d68eae51a578f40fcdfb722fe485a...f87e4120ed55da397a323ddbc7fe1a5edb0f088c)


### [ironic](https://github.com/openshift/ironic-image/tree/5212a6350a01e730c623e462d040431233b9a1d5)

* Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. [#383](https://github.com/openshift/ironic-image/pull/383)
* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2acc3b02b1bc6d7c6e5676f20d3eddf1b2612036...5212a6350a01e730c623e462d040431233b9a1d5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c4141b13ec85e9642f60bcb55b50055c691f0b6b)

* Switch to udevadm command install instead of package [OKD] [#83](https://github.com/openshift/ironic-agent-image/pull/83)
* "Bug OCPBUGS-15777: Switch to udevadm command install instead of package" [#81](https://github.com/openshift/ironic-agent-image/pull/81)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ee5bee32747e1053fc6add76fcdd98f5816b27ba...c4141b13ec85e9642f60bcb55b50055c691f0b6b)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ce2917794de5723248fe3302c8833f89fb54265a)

* [OCPBUGS-15734](https://issues.redhat.com/browse/OCPBUGS-15734): Binary should be compiled on rhel9 [#91](https://github.com/openshift/ironic-rhcos-downloader/pull/91)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/2ba6060dc968488a495fbcd1250cfb186e4ada78...ce2917794de5723248fe3302c8833f89fb54265a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/12a5bcfe56550165a550230d016f3a954b18ddbe)

* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir [#558](https://github.com/openshift/sdn/pull/558)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile changes to build both rhel8 and rhel9 binaries [#557](https://github.com/openshift/sdn/pull/557)
* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...12a5bcfe56550165a550230d016f3a954b18ddbe)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f1205e66bf34421046288bc74aed0d69b8434206)

* [OCPBUGS-12513](https://issues.redhat.com/browse/OCPBUGS-12513): go.mod: update golang.org/x/net to v0.7.0 [#68](https://github.com/openshift/kube-rbac-proxy/pull/68)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/11b1439d48a47a408ae7e2dd851989f7b7b4f595...f1205e66bf34421046288bc74aed0d69b8434206)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/36754b7b90928e26811e1c5ea13e7d0bd85709de)

* Bug OCPBUGS-16340: Fix np retry [#738](https://github.com/openshift/kuryr-kubernetes/pull/738)
* [OCPBUGS-15457](https://issues.redhat.com/browse/OCPBUGS-15457): Remove unneeded grpcio dependencies from RPM [#735](https://github.com/openshift/kuryr-kubernetes/pull/735)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/3055dbe26667d6cf2d1f452a7dd97ca2113b606d...36754b7b90928e26811e1c5ea13e7d0bd85709de)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/88fcb47c150db0de0bb1507919b55d0e81233139)

* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Update config node spec while explicitly updating the cgroups mode [#3793](https://github.com/openshift/machine-config-operator/pull/3793)
* 4.13: Revert rhel9 binaries builds [#3802](https://github.com/openshift/machine-config-operator/pull/3802)
* [OCPBUGS-14459](https://issues.redhat.com/browse/OCPBUGS-14459): daemon: Remove noisy log message [#3723](https://github.com/openshift/machine-config-operator/pull/3723)
* [OCPBUGS-15580](https://issues.redhat.com/browse/OCPBUGS-15580): 4.13: Dockerfile: update rhel7 nmstate pin [#3764](https://github.com/openshift/machine-config-operator/pull/3764)
* [OCPBUGS-15463](https://issues.redhat.com/browse/OCPBUGS-15463): Minor fix to support protectKernelDefaults field in Kubelet Config [#3757](https://github.com/openshift/machine-config-operator/pull/3757)
* 4.13: Dockerfile: use proper rhel9 image [#3771](https://github.com/openshift/machine-config-operator/pull/3771)
* 4.13: use rhel9 builder for daemon binary [#3760](https://github.com/openshift/machine-config-operator/pull/3760)
* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5c5a902aeb55c02b5abda80f90fae264a2d5ad69...88fcb47c150db0de0bb1507919b55d0e81233139)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bb616eff56bf0b71ad85009360231f4686a6e4a9)

* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [Full changelog](https://github.com/openshift/multus-cni/compare/38444d9e21e8a9793a382c82c7d12d01381e5c55...bb616eff56bf0b71ad85009360231f4686a6e4a9)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)

* [OCPBUGS-12641](https://issues.redhat.com/browse/OCPBUGS-12641): CVE-2022-41723: Update vendors to fix dependabot alerts [#28](https://github.com/openshift/multus-networkpolicy/pull/28)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/98a0bad1071074f0c04c35ff209f0333c5d7274b...7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6644ac7ba8481b2c7b035390d20d28ba4b55c5ab...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/08aaed367e959629693b6734018eb7bda5f6f09e)

* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#144](https://github.com/openshift/whereabouts-cni/pull/144)
* Restores RHEL specific binary build in dockerfile and updates to rhel9/8 [#139](https://github.com/openshift/whereabouts-cni/pull/139)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9f36752562fc784c9b5bf3fb4d592aae19ea31ad...08aaed367e959629693b6734018eb7bda5f6f09e)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/84bda2afb2ab260253b77d5d282df773cc6b3438)

* Add rhel9 binary [#56](https://github.com/openshift/bond-cni/pull/56)
* [Full changelog](https://github.com/openshift/bond-cni/compare/937b1e6a35d6b533a417b0c313cc0e498fffdd3b...84bda2afb2ab260253b77d5d282df773cc6b3438)


### [network-tools](https://github.com/openshift/network-tools/tree/073feda14fbd894c4238d693afa38a06392f2360)

* Dockerfile: move to RHEL9 base image [#83](https://github.com/openshift/network-tools/pull/83)
* [Full changelog](https://github.com/openshift/network-tools/compare/b4098c67659217e36ac7077229b25bbe2c3e5f38...073feda14fbd894c4238d693afa38a06392f2360)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f11a9001caad8fe146c73baf2acc38ddcf3642b5)

* [OCPBUGS-16372](https://issues.redhat.com/browse/OCPBUGS-16372): A variety of changes needed for correct operation with multi… (#661) [#661](https://github.com/openshift/oc-mirror/pull/661)
* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/74d32079a96c431136aa7444cc043ec548ceffd0...f11a9001caad8fe146c73baf2acc38ddcf3642b5)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/385057e57752b7b4f21ef32d7a7993d266a591eb)

* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87de83867ac51730f506138ee790a56ca21d9fc9...385057e57752b7b4f21ef32d7a7993d266a591eb)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9)

* Allow cpb to be statically compiled / exempt from FIPS compliance [#519](https://github.com/openshift/operator-framework-olm/pull/519)
* [OCPBUGS-15589](https://issues.redhat.com/browse/OCPBUGS-15589): fix dynamic conversion webhook [#499](https://github.com/openshift/operator-framework-olm/pull/499)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ce46f5b97e4838c4508f6dc471cabc1199a8f0b9...f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6627b2a22d70fa740de8bb35f0beea3816b01ec4)

* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/3e49f77c34922a7e2ce675825cb5ff3bca3a6dbd...6627b2a22d70fa740de8bb35f0beea3816b01ec4)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/13cba4453587d3080eaf126ecf9ae6de429da180)

* [OCPBUGS-13175](https://issues.redhat.com/browse/OCPBUGS-13175): Check the status of a pod before trying to get its ip [#1724](https://github.com/openshift/ovn-kubernetes/pull/1724)
* [OCPBUGS-15496](https://issues.redhat.com/browse/OCPBUGS-15496): Fix default GW IPs retrieval [#1738](https://github.com/openshift/ovn-kubernetes/pull/1738)
* [OCPBUGS-17001](https://issues.redhat.com/browse/OCPBUGS-17001): Inactivity probe for ovndb connection [#1796](https://github.com/openshift/ovn-kubernetes/pull/1796)
* [OCPBUGS-17120](https://issues.redhat.com/browse/OCPBUGS-17120): Bump OVN to 23.06-23.06.0-51 [#1790](https://github.com/openshift/ovn-kubernetes/pull/1790)
* [OCPBUGS-16121](https://issues.redhat.com/browse/OCPBUGS-16121): [release-4.13]: Delete address sets after acls that reference them [#1762](https://github.com/openshift/ovn-kubernetes/pull/1762)
* [OCPBUGS-15368](https://issues.redhat.com/browse/OCPBUGS-15368): [release-4.13]: initial pods are not wired for hybrid overlay [#1721](https://github.com/openshift/ovn-kubernetes/pull/1721)
* [OCPBUGS-15651](https://issues.redhat.com/browse/OCPBUGS-15651): Improve syncNodes to remove stale data [#1731](https://github.com/openshift/ovn-kubernetes/pull/1731)
* [OCPBUGS-15586](https://issues.redhat.com/browse/OCPBUGS-15586): [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector [#1745](https://github.com/openshift/ovn-kubernetes/pull/1745)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1748](https://github.com/openshift/ovn-kubernetes/pull/1748)
* [OCPBUGS-15585](https://issues.redhat.com/browse/OCPBUGS-15585): [release-4.13] Fix egressFirewall create error handling [#1733](https://github.com/openshift/ovn-kubernetes/pull/1733)
* [OCPBUGS-14492](https://issues.redhat.com/browse/OCPBUGS-14492): Backport OVN component templates for NodePort services. [#1709](https://github.com/openshift/ovn-kubernetes/pull/1709)
* [OCPBUGS-15608](https://issues.redhat.com/browse/OCPBUGS-15608): Nuke old .rhel9 Dockerfiles [#1711](https://github.com/openshift/ovn-kubernetes/pull/1711)
* [OCPBUGS-13745](https://issues.redhat.com/browse/OCPBUGS-13745): [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1675](https://github.com/openshift/ovn-kubernetes/pull/1675)
* [OCPBUGS-15372](https://issues.redhat.com/browse/OCPBUGS-15372): [release-4.13] Fix network policy to work with long namespace names [#1722](https://github.com/openshift/ovn-kubernetes/pull/1722)
* [OCPBUGS-14979](https://issues.redhat.com/browse/OCPBUGS-14979): Validate port before deleting conntrack flow [#1712](https://github.com/openshift/ovn-kubernetes/pull/1712)
* [OCPBUGS-15140](https://issues.redhat.com/browse/OCPBUGS-15140): Fix stale SNAT entries for completed pods [#1715](https://github.com/openshift/ovn-kubernetes/pull/1715)
* [OCPBUGS-14482](https://issues.redhat.com/browse/OCPBUGS-14482): Dockerfiles: sync RHEL9 dockerfiles to regular unused ones [#1695](https://github.com/openshift/ovn-kubernetes/pull/1695)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a69523609f7bbfa2a487e0d1bef52e194c282f90...13cba4453587d3080eaf126ecf9ae6de429da180)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/95a117826360e23e092be5bbee2da8dbcf44f17a)

* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df...95a117826360e23e092be5bbee2da8dbcf44f17a)


### [tests](https://github.com/openshift/origin/tree/b1f4ee96d1d1f95af75b2701b8c5e42886a9912a)

* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): allow cluster-config-operator to manage featuregate upgrade block [#28050](https://github.com/openshift/origin/pull/28050)
* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Skip CCM upgradable condition on AlibabaCloud [#28025](https://github.com/openshift/origin/pull/28025)
* [OCPBUGS-7762](https://issues.redhat.com/browse/OCPBUGS-7762): Bump with latest openshift/kubernetes at 4.13 [#27973](https://github.com/openshift/origin/pull/27973)
* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [Full changelog](https://github.com/openshift/origin/compare/f210c2da9130c61196dde41a3b2d16e8a392e974...b1f4ee96d1d1f95af75b2701b8c5e42886a9912a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/64f62bff177c6f2df6f106eacecc05e49e9a9828)

* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e10dc55232d1bf9f11251f63abcb72fe75bedd75...64f62bff177c6f2df6f106eacecc05e49e9a9828)