# 4.13.0-0.okd-2023-09-03-082426

Created: 2023-09-03 11:56:59 +0000 UTC

Image Digest: `sha256:21589242ca379cd347bfe5ce1b0cc69fb6dcc2d3f2f536663e26632532f1ae97`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-09-03-082426


## Changes from 4.13.0-0.okd-scos-2023-07-07-043417

### Components

* Kubernetes upgraded from 1.26.6 to 1.26.7
* Fedora CoreOS upgraded from 414.9.202306050607-0 to 38.20230806.3


### New images

* [contour](https://github.com/openshift/contour) git [45e9b621](https://github.com/openshift/contour/commit/45e9b621adb42ea25f65157964381e838b598c5c) `sha256:670ea96e56d324551a7bc17d10c7fc763933b58b43bd4221bec85706951ecadb`
* [contour-operator](https://github.com/openshift/contour-operator) git [e07f7060](https://github.com/openshift/contour-operator/commit/e07f70604310311dc0547567b3b0be0fe90c3d82) `sha256:7749234f09796ea537fb80ecb6c8798ec6e11e330c0db02a9d3aebfcb8bf0575`
* [external-dns](https://github.com/openshift/external-dns) git [7511ef28](https://github.com/openshift/external-dns/commit/7511ef28574ef86581fef28e67b95af3b0d97ea9) `sha256:d760dd5ee7eacb8d84c913bf8518a57be3af14a1bed57bf59adaadeb64cc4d75`
* [fedora-coreos](https://github.com/openshift/okd-machine-os) git [c1b89631](https://github.com/openshift/okd-machine-os/commit/c1b89631c0c4894b1a808356f8bd53b33def0675) `sha256:39cd1c0b8eb26b07f21dfe9a539a9e2b899c2a32713de1833bf320d28ab3bf9c`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [62469223](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/6246922338bc8aa21276c7e679bdd082307cbd45) `sha256:24d775eba959975ced19126ca768b3073099ea8527ae909c079fb99c52e8b6c4`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [4561a388](https://github.com/openshift/sig-storage-local-static-provisioner/commit/4561a388c9eb1b47410f086b08f78e4cd87b4677) `sha256:4bfe93760e855fae291f52a96c62817766eda1867c0aa181c60da31b76700915`
* [okd-rpms](https://github.com/openshift/okd-machine-os) git [7d3cc6a4](https://github.com/openshift/okd-machine-os/commit/7d3cc6a4a8541a866202ee4b5472aa246688d25a) `sha256:f8c2f7448730a928b2bddc1ced84475b160b4afeefc0a7cfeb69645204b3c7a7`
* [ovirt-installer](https://github.com/openshift/installer) git [efdf6fb2](https://github.com/openshift/installer/commit/efdf6fb258d835614fef0d570074defa5d74aa93) `sha256:e360a3731a73fe852a1d493a2b2687a00427850cb8c46bf3afd1fe1c8eef44f3`


### Removed images

* centos-stream-coreos-9


### Rebuilt images without code change

* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [c08d87a1](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/c08d87a1d043dc04d3d3cb59be9265ee5ed29b06) `sha256:7d54ad24ae9fe62513311945fae20e2ab9fa6481fb4fdc13b9334b15179be56f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0621fcaf](https://github.com/openshift/cloud-credential-operator/commit/0621fcaf818f57ab05602259c1eb14db07b68dce) `sha256:e6e8368d2b86ef93e9772fa1f3396a2a04b4ade9f63d4c3b054465e84247b578`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [f785bad1](https://github.com/openshift/cluster-samples-operator/commit/f785bad1227439dfdb627538b3f7ecd0eb28f33c) `sha256:94b51662dc75a39c79e1bd9ff56cebdde85965a18e424ca16948827c51b648de`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [5b725937](https://github.com/openshift/cluster-update-keys/commit/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd) `sha256:1c2dcd87d40fbcbcd669403face8f9de9c8db96a39db1e7eff854ef99a31f245`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [496fd488](https://github.com/openshift/csi-driver-manila-operator/commit/496fd488c7b7a9213006a777c4e4fe101eb97860) `sha256:6e20535d581702ed7699b8979008387e344613cc2b63ce036a96da3b83f4ad21`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [e9d59a2d](https://github.com/openshift/csi-external-attacher/commit/e9d59a2d66491d60d43488e05af7b4b673c722fd) `sha256:bc5522a4ad7d20a451e7f318bbec689371470d55378d517b64258805301647da`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [974ac363](https://github.com/openshift/csi-external-resizer/commit/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a) `sha256:61a1fc78697628892622edd64b239ce456937299b08f9a46ddea225eae802142`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:f833881476fca7dadf48cad85c93f6e8fd7d151c74218b5bfde818ac41d61950`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5f13d5e6](https://github.com/openshift/csi-node-driver-registrar/commit/5f13d5e6f5b06a99995e0697d83bbdb36efceb46) `sha256:32dcc0749823260f2e57e7d4fbab46baa0f1db32b2e07f672426bccf52aa5976`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:976d131c2325b788d37fd3bffc8cd845cdd689b800ec4cb34692487d5bb38392`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:acae100e011cfc81b1502ffc3f41a8a1c908092cec3d1a8d63fd7020933f6217`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [87651668](https://github.com/openshift/image-customization-controller/commit/87651668b314426960ea4974429f3b0ed16c3f31) `sha256:bc0ed4a09ab4051be6c487b17fec5242f201f1075ad6966d6c9b1fc98603002f`
* [machine-os-content](https://github.com/openshift/okd-machine-os) git [c1b89631](https://github.com/openshift/okd-machine-os/commit/c1b89631c0c4894b1a808356f8bd53b33def0675) `sha256:1936e87ff1d88ec942a3ab95f10531a20a59029e5f21b47b8c74668c0ade8be3`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [e548fbd0](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/e548fbd06c6ab3973e1a683cd94ec84a905c1354) `sha256:308f3a748aeb5563118657044e883625c54f994a0eca2fe097ec6b0726d0de32`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [d569c22c](https://github.com/operator-framework/operator-marketplace/commit/d569c22c518fc931ff48f66fb38064ddd976729f) `sha256:fa83286597062b31dddea11fe81d1df074bcd420faa7784a558e5dcc954f19c6`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [5984aac1](https://github.com/openshift/service-ca-operator/commit/5984aac13df6c2f4440c67a1a14d32958bce9ec3) `sha256:5a79d38a9613dc33b27cd2775d35613c0694c461b97135a04ebdbb7307532f47`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [0fe0c5c3](https://github.com/openshift/cloud-provider-vsphere/commit/0fe0c5c37d06893359f584e4b6f62d371703e9d1) `sha256:e9f821cc330b4abadda345d0b947b80357e8b9ac04c916d673ed6cfd4d76e918`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/06189bcdb0bea068f8ac51a3550fcdcbde522a76)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5346) [#5346](https://github.com/openshift/assisted-service/pull/5346)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6...06189bcdb0bea068f8ac51a3550fcdcbde522a76)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3415688ae42d7f8305e10144ea27cdf503e62ad5)

* [OCPBUGS-15557](https://issues.redhat.com/browse/OCPBUGS-15557): vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) [#565](https://github.com/openshift/assisted-installer-agent/pull/565)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f289c9e9d3abe5f7b6dc57a388ef31419d235347...3415688ae42d7f8305e10144ea27cdf503e62ad5)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/94667c6c213f07ec7613a6d6e831d64ee73181e1)

* [OCPBUGS-16377](https://issues.redhat.com/browse/OCPBUGS-16377): [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#31](https://github.com/openshift/alibaba-cloud-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f...94667c6c213f07ec7613a6d6e831d64ee73181e1)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/baf14a425efed2764c79d630d5aecb4744066397)

* [OCPBUGS-13036](https://issues.redhat.com/browse/OCPBUGS-13036): 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 [#220](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/220)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/b6dee5c3585cbc92967530cb178a09a52164bfde...baf14a425efed2764c79d630d5aecb4744066397)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b8d243397ff297baf875a88132f84d8cef34b968)

* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/fb2d232da809a58929fe86cb9a59a045c7b44aa4...b8d243397ff297baf875a88132f84d8cef34b968)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/89e21d61f6f23b2e89f1b24096e458d6ade8a40a)

* [OCPBUGS-16318](https://issues.redhat.com/browse/OCPBUGS-16318): 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 [#44](https://github.com/openshift/azure-disk-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/202e8afa8f1899d4cd1843d9e09cf8832ae0eff7...89e21d61f6f23b2e89f1b24096e458d6ade8a40a)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/842415aa35f7151c34645161ef6aede60354ae2a)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#86](https://github.com/openshift/azure-disk-csi-driver-operator/pull/86)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/67bda47232a73fe3877815d7901353f4f74ebeb0...842415aa35f7151c34645161ef6aede60354ae2a)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/60e0cb86a6055e420bfdb52530d0a0d6418f47fd)

* [OCPBUGS-16321](https://issues.redhat.com/browse/OCPBUGS-16321): 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 [#30](https://github.com/openshift/azure-file-csi-driver/pull/30)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/fd94a035e3d9dedce048f7e5f271e7ed6bea822f...60e0cb86a6055e420bfdb52530d0a0d6418f47fd)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/a79311d87a15769d1bad162d80fb9cb978478a42)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#67](https://github.com/openshift/azure-file-csi-driver-operator/pull/67)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/994c32c927a69df33f83aed440cc150e8d270341...a79311d87a15769d1bad162d80fb9cb978478a42)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/efdf6fb258d835614fef0d570074defa5d74aa93)

* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [OCPBUGS-16640](https://issues.redhat.com/browse/OCPBUGS-16640): [release-4.13] Update azure cli version to 2.49.0 [#7357](https://github.com/openshift/installer/pull/7357)
* [OCPBUGS-16777](https://issues.redhat.com/browse/OCPBUGS-16777): update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 [#7410](https://github.com/openshift/installer/pull/7410)
* [CORS-2764](https://issues.redhat.com/browse/CORS-2764): AWS Shared VPC Backport [release-4.13] [#7362](https://github.com/openshift/installer/pull/7362)
* [OCPBUGS-17104](https://issues.redhat.com/browse/OCPBUGS-17104): [release-4.13] vsphere terraform bump [#7383](https://github.com/openshift/installer/pull/7383)
* [OCPBUGS-17397](https://issues.redhat.com/browse/OCPBUGS-17397): backport openstack UPI for ansible 2.10 [#7385](https://github.com/openshift/installer/pull/7385)
* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): Use the same names for public LB in IPI and UPI Azure [#7302](https://github.com/openshift/installer/pull/7302)
* [OCPBUGS-16124](https://issues.redhat.com/browse/OCPBUGS-16124): azure: skip LB creation when not needed [#7322](https://github.com/openshift/installer/pull/7322)
* [OCPBUGS-13812](https://issues.redhat.com/browse/OCPBUGS-13812): ic: azure: validate diskTypes in AzureStack [#7195](https://github.com/openshift/installer/pull/7195)
* [OCPBUGS-15230](https://issues.redhat.com/browse/OCPBUGS-15230): azure: skip NSG creation when BYO vnet [#7263](https://github.com/openshift/installer/pull/7263)
* [OCPBUGS-15591](https://issues.redhat.com/browse/OCPBUGS-15591): [release-4.13] gcp: add confidential compute support for boostrap TF [#7298](https://github.com/openshift/installer/pull/7298)
* [Full changelog](https://github.com/openshift/installer/compare/b130aed2049b3f76db3cbe297ce505756e086e6c...efdf6fb258d835614fef0d570074defa5d74aa93)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/7de328a2d332833257fde75368e624908a3eec13)

* [OCPBUGS-16084](https://issues.redhat.com/browse/OCPBUGS-16084): Fix Metal3Remediation CRD install order [#194](https://github.com/openshift/cluster-api-provider-baremetal/pull/194)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/d20bc578a4368130d10f41ad974bf147af9410f8...7de328a2d332833257fde75368e624908a3eec13)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/12e53b8aeee5bb4d576e88dad5611c798928249b)

* [OCPBUGS-17365](https://issues.redhat.com/browse/OCPBUGS-17365): Trigger reconcile on Secret change [#295](https://github.com/openshift/baremetal-operator/pull/295)
* [OCPBUGS-16013](https://issues.redhat.com/browse/OCPBUGS-16013): Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 [#292](https://github.com/openshift/baremetal-operator/pull/292)
* [OCPBUGS-17229](https://issues.redhat.com/browse/OCPBUGS-17229): Set minimum TLS version for webhook to 1.2 [#294](https://github.com/openshift/baremetal-operator/pull/294)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3c924532a6965789f743fe37d77ed8b52a065c36...12e53b8aeee5bb4d576e88dad5611c798928249b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/a5f293f0c77046b0bd0f82ca218953c912cd4962)

* [OCPBUGS-17423](https://issues.redhat.com/browse/OCPBUGS-17423): Don't render config with incomplete unicast peer list [#267](https://github.com/openshift/baremetal-runtimecfg/pull/267)
* [OCPBUGS-14487](https://issues.redhat.com/browse/OCPBUGS-14487): Support IPv6 VIP for setup with multipe IPv6 addresses [#259](https://github.com/openshift/baremetal-runtimecfg/pull/259)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7a4597c614871c34a805a981b1601464a5879919...a5f293f0c77046b0bd0f82ca218953c912cd4962)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/17b7accf8fd25125ce015cf4bea7d3cd3f336317)

* [OCPBUGS-13527](https://issues.redhat.com/browse/OCPBUGS-13527): Bump x org deps 4.13 [#1422](https://github.com/openshift/oc/pull/1422)
* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [OCPBUGS-16193](https://issues.redhat.com/browse/OCPBUGS-16193): reboot: set ignition version to 3.1 [#1508](https://github.com/openshift/oc/pull/1508)
* [OCPBUGS-16172](https://issues.redhat.com/browse/OCPBUGS-16172): Add tls-server-name when property exists in kubeconfig [#1506](https://github.com/openshift/oc/pull/1506)
* [Full changelog](https://github.com/openshift/oc/compare/e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb...17b7accf8fd25125ce015cf4bea7d3cd3f336317)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/4f190d6b8c06257071e01b4d75ea9ae33fd20885)

* [OCPBUGS-15856](https://issues.redhat.com/browse/OCPBUGS-15856): Azure: Handle already existing IP configurations [#116](https://github.com/openshift/cloud-network-config-controller/pull/116)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/1258d548f7b8e98a08b98606e31c983b032afb3c...4f190d6b8c06257071e01b4d75ea9ae33fd20885)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a044dd9175d25911b799082fb189e4886391807b)

* [OCPBUGS-15258](https://issues.redhat.com/browse/OCPBUGS-15258): Correctly link oauth apiserver ServiceMonitor with its Service [#617](https://github.com/openshift/cluster-authentication-operator/pull/617)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/c14658f396539f25df7fa4735acfed39789af0e3...a044dd9175d25911b799082fb189e4886391807b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a00c91292ecf6512e35d6f01c2d5b8696c17ca)

* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1...29a00c91292ecf6512e35d6f01c2d5b8696c17ca)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ef4594ef3f4ca535aa1d34878b79184323ecf481)

* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Alibaba platforms should not be upgradeable [#260](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/260)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/64455eb66f17bb2c761ab529dbae76123f530d48...ef4594ef3f4ca535aa1d34878b79184323ecf481)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a9e658abf7de525b411ff005b65e061e39f58bd6)

* [CORS-2766](https://issues.redhat.com/browse/CORS-2766): AWS Shared VPC API Bump [release-4.13] [#337](https://github.com/openshift/cluster-config-operator/pull/337)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/923b864e76c6e8eb1bfcd66bb73327588dd8b75a...a9e658abf7de525b411ff005b65e061e39f58bd6)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/c6768d4537b7c2969b77fea26429b2822c0ec844)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints if, and only if, nodes have zones [#367](https://github.com/openshift/cluster-dns-operator/pull/367)
* [OCPBUGS-15225](https://issues.redhat.com/browse/OCPBUGS-15225): Add support for protocolStrategy API field to enable force_tcp configuration [#372](https://github.com/openshift/cluster-dns-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d96022a4d0d091955d73e7e99fc8cc81db56c86a...c6768d4537b7c2969b77fea26429b2822c0ec844)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f8b2f77f9e480cae8f5fbda13fd2b54b61d276ee)

* [OCPBUGS-16804](https://issues.redhat.com/browse/OCPBUGS-16804): reset snapshot default counts to avoid file already lo… [#1080](https://github.com/openshift/cluster-etcd-operator/pull/1080)
* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4a9be58b44eee435cfa28b97f5f4c0d816424717...f8b2f77f9e480cae8f5fbda13fd2b54b61d276ee)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2ecad04e6dcd3338b7180529a9f55cb13dff276d)

* [OCPBUGS-17733](https://issues.redhat.com/browse/OCPBUGS-17733): [release-4.13] remove shared VPC cred request [#972](https://github.com/openshift/cluster-ingress-operator/pull/972)
* [NE-1341](https://issues.redhat.com/browse/NE-1341): Add support for AWS shared VPC in another account [#966](https://github.com/openshift/cluster-ingress-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67...2ecad04e6dcd3338b7180529a9f55cb13dff276d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/64248a87ca421b5f28d2d472c48cd29a465e75f8)

* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0b4e454270fd837f94c8280178489add78ecc887...64248a87ca421b5f28d2d472c48cd29a465e75f8)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/547c850b30e2183f8a6c9842c82ce672ba72cc76)

* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [OCPBUGS-16023](https://issues.redhat.com/browse/OCPBUGS-16023): Add the trusted CA bundle in UWM Prometheus pods [#2041](https://github.com/openshift/cluster-monitoring-operator/pull/2041)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a5566ceac4a5ba100e2c50f0e29d71ea017b5db8...547c850b30e2183f8a6c9842c82ce672ba72cc76)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/11c7b29545be8abc0004ec3d46de1695d3f8896a)

* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [OCPBUGS-11539](https://issues.redhat.com/browse/OCPBUGS-11539): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1774](https://github.com/openshift/cluster-network-operator/pull/1774)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Add logic to pick the openshift-sdn shims from right directories [#1880](https://github.com/openshift/cluster-network-operator/pull/1880)
* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/618d519c216ac2674a118f4492f7114593d1f1f8...11c7b29545be8abc0004ec3d46de1695d3f8896a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/bf1680f951b8fa7d3e886c7ce7e50193af87e376)

* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* Improve render error handling (#755) [#755](https://github.com/openshift/cluster-node-tuning-operator/pull/755)
* nto:tuned: remove sched_min_granularity_ns settings (#726) [#726](https://github.com/openshift/cluster-node-tuning-operator/pull/726)
* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* E2E: Add memory manager sanity test case (#573) (#695) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2ac22ef24b5c11098f3fec6384a0ee6fb929b929...bf1680f951b8fa7d3e886c7ce7e50193af87e376)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)

* [OCPBUGS-15378](https://issues.redhat.com/browse/OCPBUGS-15378): decrease severity for MultipleDefaultStorageClasses alert [#383](https://github.com/openshift/cluster-storage-operator/pull/383)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6479617c1e9e92cc664d0e8c26ba62191320f4e4...98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2ba8f8d7bc59f596db65d47e80ef8765ae340c34)

* [OCPBUGS-16613](https://issues.redhat.com/browse/OCPBUGS-16613): Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 [#948](https://github.com/openshift/cluster-version-operator/pull/948)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e08a27913bc6c6d0ca0663dc131d1183773cca10...2ba8f8d7bc59f596db65d47e80ef8765ae340c34)


### [console](https://github.com/openshift/console/tree/875f16fa464ed8f2f0b9e86a5652ac085ebd5097)

* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [OCPBUGS-16668](https://issues.redhat.com/browse/OCPBUGS-16668): Dynamic plugin translation support for plurals broken [#13041](https://github.com/openshift/console/pull/13041)
* [OCPBUGS-17181](https://issues.redhat.com/browse/OCPBUGS-17181): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13060](https://github.com/openshift/console/pull/13060)
* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [OCPBUGS-15998](https://issues.redhat.com/browse/OCPBUGS-15998): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12992](https://github.com/openshift/console/pull/12992)
* [OCPBUGS-15810](https://issues.redhat.com/browse/OCPBUGS-15810): only show pipelines doc link for downstream [#12981](https://github.com/openshift/console/pull/12981)
* [OCPBUGS-15982](https://issues.redhat.com/browse/OCPBUGS-15982): get Kamelets from the camel-k-operator namespace as well [#12988](https://github.com/openshift/console/pull/12988)
* [OCPBUGS-16244](https://issues.redhat.com/browse/OCPBUGS-16244): Fix operator backed catalog page when copied CSVs disabled [#13019](https://github.com/openshift/console/pull/13019)
* [OCPBUGS-15194](https://issues.redhat.com/browse/OCPBUGS-15194): Remove tech preview badge from Pipeline repository pages [#12916](https://github.com/openshift/console/pull/12916)
* [OCPBUGS-10326](https://issues.redhat.com/browse/OCPBUGS-10326): re-enable operator-install-single-namespace.spec.ts test [#12653](https://github.com/openshift/console/pull/12653)
* [OCPBUGS-15848](https://issues.redhat.com/browse/OCPBUGS-15848): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12976](https://github.com/openshift/console/pull/12976)
* [OCPBUGS-15890](https://issues.redhat.com/browse/OCPBUGS-15890): Use proxy with web socket connection and monitoring dashboard [#12978](https://github.com/openshift/console/pull/12978)
* [OCPBUGS-15720](https://issues.redhat.com/browse/OCPBUGS-15720), [OCPBUGS-15721](https://issues.redhat.com/browse/OCPBUGS-15721), [OCPBUGS-15722](https://issues.redhat.com/browse/OCPBUGS-15722): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12963](https://github.com/openshift/console/pull/12963)
* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [Full changelog](https://github.com/openshift/console/compare/286025117bf4cb9d65488c2ab1b32cc0918f4db5...875f16fa464ed8f2f0b9e86a5652ac085ebd5097)


### [console-operator](https://github.com/openshift/console-operator/tree/6886f89bb31c59e60f35c20c05bcde0df8c29c94)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [Full changelog](https://github.com/openshift/console-operator/compare/c5f3b24448f6a7bf5dd5d145008df85e04ec5968...6886f89bb31c59e60f35c20c05bcde0df8c29c94)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)

* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/4655073266cb14756783bb06378224048f0dd3e3...dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)

* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/0dc83f5f1bd118247eaf0f91030c321da9c88aa3...f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a888237c9ab43eab0ca992f0b18eff114ea4ade1)

* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/c785aa6755bf96a4d39b4a804b7a826485965227...a888237c9ab43eab0ca992f0b18eff114ea4ade1)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/756e38455b8e08a34510e188673c77503dca3ff1)

* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/879b72bf6305ef394291ed1b4c5eeb3b11917633...756e38455b8e08a34510e188673c77503dca3ff1)


### [etcd](https://github.com/openshift/etcd/tree/1b61faa606b5393076f5835418c6ec3cdc628615)

* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* [Full changelog](https://github.com/openshift/etcd/compare/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d...1b61faa606b5393076f5835418c6ec3cdc628615)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c30195c5c3148bf6e00795b49a79954e6d920130)

* [OCPBUGS-16331](https://issues.redhat.com/browse/OCPBUGS-16331): 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 [#38](https://github.com/openshift/gcp-pd-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733...c30195c5c3148bf6e00795b49a79954e6d920130)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6534fed3d667750a54fb6750bffc09bee61832e8)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#80](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d151ef0f5268ccdedf5bb43b649d4cab13b21d68...6534fed3d667750a54fb6750bffc09bee61832e8)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/0ef5eae6ff8657d9628f3961d49f1f3031a210dd)

* [OCPBUGS-17187](https://issues.redhat.com/browse/OCPBUGS-17187): Update to Kubernetes 1.26.7 [#1649](https://github.com/openshift/kubernetes/pull/1649)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#1657](https://github.com/openshift/kubernetes/pull/1657)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): remove readiness check for cache exclusion [#1625](https://github.com/openshift/kubernetes/pull/1625)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): UPSTREAM: <drop>: hack/update-vendor.sh [#1637](https://github.com/openshift/kubernetes/pull/1637)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a7ee68b55354d8c146ef81f82444c0765ea8885f...0ef5eae6ff8657d9628f3961d49f1f3031a210dd)


### [hypershift](https://github.com/openshift/hypershift/tree/86c3c63a08af8a0b2d208d437ee13f1fb463d829)

* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* chore(deps): update rhtap references (release-4.13) [#2904](https://github.com/openshift/hypershift/pull/2904)
* Update RHTAP references (release-4.13) [#2866](https://github.com/openshift/hypershift/pull/2866)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* 4.13: Add management cluster KAS network policy [#2786](https://github.com/openshift/hypershift/pull/2786)
* Leader election config update. [#2801](https://github.com/openshift/hypershift/pull/2801)
* [OCPBUGS-16160](https://issues.redhat.com/browse/OCPBUGS-16160): fix deletion bug when hostedzone is already deleted [#2813](https://github.com/openshift/hypershift/pull/2813)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): [release-4.13] Implement dedicated request serving nodes for HostedClusters [#2809](https://github.com/openshift/hypershift/pull/2809)
* Update RHTAP references (release-4.13) [#2816](https://github.com/openshift/hypershift/pull/2816)
* [OCPBUGS-16057](https://issues.redhat.com/browse/OCPBUGS-16057): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2798](https://github.com/openshift/hypershift/pull/2798)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2810](https://github.com/openshift/hypershift/pull/2810)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2799](https://github.com/openshift/hypershift/pull/2799)
* [OCPBUGS-16125](https://issues.redhat.com/browse/OCPBUGS-16125): [release-4.13] Update vendored dependencies [#2797](https://github.com/openshift/hypershift/pull/2797)
* [OCPBUGS-15774](https://issues.redhat.com/browse/OCPBUGS-15774): autoscaling balance similar groups [#2805](https://github.com/openshift/hypershift/pull/2805)
* [OCPBUGS-15965](https://issues.redhat.com/browse/OCPBUGS-15965): Reject VPCE Connections during VPCE Service cleanup [#2789](https://github.com/openshift/hypershift/pull/2789)
* [Full changelog](https://github.com/openshift/hypershift/compare/156d2b2850ac04e82104d11621cb1826bb30b5d4...86c3c63a08af8a0b2d208d437ee13f1fb463d829)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/42b5c256657da2de184c3e5ec9c619131ed1cd57)

* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/66dcaf9a0591ec321828cec5ee24f0a4df0e5080...42b5c256657da2de184c3e5ec9c619131ed1cd57)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e83df2f32ae88c84c15a12741a970607b20228ec...ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)


### [ironic](https://github.com/openshift/ironic-image/tree/fc1cca95711797767336878bfb9e2e4b9801ecfa)

* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [OCPBUGS-17158](https://issues.redhat.com/browse/OCPBUGS-17158): [4.13] Update packages with latest bugfix [#388](https://github.com/openshift/ironic-image/pull/388)
* [OCPBUGS-17551](https://issues.redhat.com/browse/OCPBUGS-17551): Expand regex for fcos/okd packages list [#390](https://github.com/openshift/ironic-image/pull/390)
* Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. [#383](https://github.com/openshift/ironic-image/pull/383)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0c7c4b6f7971d157525fc9c30880fb1118810f15...fc1cca95711797767336878bfb9e2e4b9801ecfa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c4141b13ec85e9642f60bcb55b50055c691f0b6b)

* Switch to udevadm command install instead of package [OKD] [#83](https://github.com/openshift/ironic-agent-image/pull/83)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/69d3b7f0bc111655e138ae8a30dbf276efa94604...c4141b13ec85e9642f60bcb55b50055c691f0b6b)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/12a5bcfe56550165a550230d016f3a954b18ddbe)

* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir [#558](https://github.com/openshift/sdn/pull/558)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile changes to build both rhel8 and rhel9 binaries [#557](https://github.com/openshift/sdn/pull/557)
* [Full changelog](https://github.com/openshift/sdn/compare/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a...12a5bcfe56550165a550230d016f3a954b18ddbe)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/36754b7b90928e26811e1c5ea13e7d0bd85709de)

* Bug OCPBUGS-16340: Fix np retry [#738](https://github.com/openshift/kuryr-kubernetes/pull/738)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/5baee73180230512dd0b45cf8ca23cb3da859586...36754b7b90928e26811e1c5ea13e7d0bd85709de)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/aeb7d050748a23e0474f98a447d490e3b72e0ae6)

* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [OCPBUGS-17769](https://issues.redhat.com/browse/OCPBUGS-17769): Agent-based install process the container machine-config-controller will be oom [#3868](https://github.com/openshift/machine-config-operator/pull/3868)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3845](https://github.com/openshift/machine-config-operator/pull/3845)
* [OCPBUGS-17430](https://issues.redhat.com/browse/OCPBUGS-17430): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3841](https://github.com/openshift/machine-config-operator/pull/3841)
* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Update config node spec while explicitly updating the cgroups mode [#3793](https://github.com/openshift/machine-config-operator/pull/3793)
* 4.13: Revert rhel9 binaries builds [#3802](https://github.com/openshift/machine-config-operator/pull/3802)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0ceebc00584733717887aed4c7c51b154cb33980...aeb7d050748a23e0474f98a447d490e3b72e0ae6)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bb616eff56bf0b71ad85009360231f4686a6e4a9)

* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [Full changelog](https://github.com/openshift/multus-cni/compare/38444d9e21e8a9793a382c82c7d12d01381e5c55...bb616eff56bf0b71ad85009360231f4686a6e4a9)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)

* [OCPBUGS-12641](https://issues.redhat.com/browse/OCPBUGS-12641): CVE-2022-41723: Update vendors to fix dependabot alerts [#28](https://github.com/openshift/multus-networkpolicy/pull/28)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/98a0bad1071074f0c04c35ff209f0333c5d7274b...7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6644ac7ba8481b2c7b035390d20d28ba4b55c5ab...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7ea40205ffef4c3e047153f4655444245c2792d3)

* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Denormalize IP name before checking if pod is alive [Backport 4.13] [#168](https://github.com/openshift/whereabouts-cni/pull/168)
* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#144](https://github.com/openshift/whereabouts-cni/pull/144)
* Restores RHEL specific binary build in dockerfile and updates to rhel9/8 [#139](https://github.com/openshift/whereabouts-cni/pull/139)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9f36752562fc784c9b5bf3fb4d592aae19ea31ad...7ea40205ffef4c3e047153f4655444245c2792d3)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/84bda2afb2ab260253b77d5d282df773cc6b3438)

* Add rhel9 binary [#56](https://github.com/openshift/bond-cni/pull/56)
* [Full changelog](https://github.com/openshift/bond-cni/compare/937b1e6a35d6b533a417b0c313cc0e498fffdd3b...84bda2afb2ab260253b77d5d282df773cc6b3438)


### [network-tools](https://github.com/openshift/network-tools/tree/073feda14fbd894c4238d693afa38a06392f2360)

* Dockerfile: move to RHEL9 base image [#83](https://github.com/openshift/network-tools/pull/83)
* [Full changelog](https://github.com/openshift/network-tools/compare/b4098c67659217e36ac7077229b25bbe2c3e5f38...073feda14fbd894c4238d693afa38a06392f2360)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/2f7e7bc237611601702ae32c3055a44f9694bf97)

* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [OCPBUGS-16372](https://issues.redhat.com/browse/OCPBUGS-16372): A variety of changes needed for correct operation with multi… (#661) [#661](https://github.com/openshift/oc-mirror/pull/661)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/31f847af4c69f297a328b35bb4a1ac329ccc198e...2f7e7bc237611601702ae32c3055a44f9694bf97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/385057e57752b7b4f21ef32d7a7993d266a591eb)

* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87de83867ac51730f506138ee790a56ca21d9fc9...385057e57752b7b4f21ef32d7a7993d266a591eb)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1e62b169e418e72d443ae396b797f66e520b81de)

* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* Introduce DOWNSTREAM_OWNERS file [#538](https://github.com/openshift/operator-framework-olm/pull/538)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#519](https://github.com/openshift/operator-framework-olm/pull/519)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c6396c8bf38a737b17c598931a038a1700643482...1e62b169e418e72d443ae396b797f66e520b81de)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/75d07f23eb921493aafee24c540b05771b03b6d6)

* [OCPBUGS-18057](https://issues.redhat.com/browse/OCPBUGS-18057): [release-4.13] Create egress firewall with one db transaction [#1834](https://github.com/openshift/ovn-kubernetes/pull/1834)
* [OCPBUGS-17910](https://issues.redhat.com/browse/OCPBUGS-17910): Emit node events only when retry failure [#1825](https://github.com/openshift/ovn-kubernetes/pull/1825)
* [OCPBUGS-17503](https://issues.redhat.com/browse/OCPBUGS-17503): [release-4.13] libovsdb: give monitor setup time to process than normal transactions [#1807](https://github.com/openshift/ovn-kubernetes/pull/1807)
* [OCPBUGS-13175](https://issues.redhat.com/browse/OCPBUGS-13175): Check the status of a pod before trying to get its ip [#1724](https://github.com/openshift/ovn-kubernetes/pull/1724)
* [OCPBUGS-15496](https://issues.redhat.com/browse/OCPBUGS-15496): Fix default GW IPs retrieval [#1738](https://github.com/openshift/ovn-kubernetes/pull/1738)
* [OCPBUGS-17001](https://issues.redhat.com/browse/OCPBUGS-17001): Inactivity probe for ovndb connection [#1796](https://github.com/openshift/ovn-kubernetes/pull/1796)
* [OCPBUGS-17120](https://issues.redhat.com/browse/OCPBUGS-17120): Bump OVN to 23.06-23.06.0-51 [#1790](https://github.com/openshift/ovn-kubernetes/pull/1790)
* [OCPBUGS-16121](https://issues.redhat.com/browse/OCPBUGS-16121): [release-4.13]: Delete address sets after acls that reference them [#1762](https://github.com/openshift/ovn-kubernetes/pull/1762)
* [OCPBUGS-15368](https://issues.redhat.com/browse/OCPBUGS-15368): [release-4.13]: initial pods are not wired for hybrid overlay [#1721](https://github.com/openshift/ovn-kubernetes/pull/1721)
* [OCPBUGS-15651](https://issues.redhat.com/browse/OCPBUGS-15651): Improve syncNodes to remove stale data [#1731](https://github.com/openshift/ovn-kubernetes/pull/1731)
* [OCPBUGS-15586](https://issues.redhat.com/browse/OCPBUGS-15586): [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector [#1745](https://github.com/openshift/ovn-kubernetes/pull/1745)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1748](https://github.com/openshift/ovn-kubernetes/pull/1748)
* [OCPBUGS-15585](https://issues.redhat.com/browse/OCPBUGS-15585): [release-4.13] Fix egressFirewall create error handling [#1733](https://github.com/openshift/ovn-kubernetes/pull/1733)
* [OCPBUGS-14492](https://issues.redhat.com/browse/OCPBUGS-14492): Backport OVN component templates for NodePort services. [#1709](https://github.com/openshift/ovn-kubernetes/pull/1709)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9f6376ea994246a3b609038f6fbfe2614032fe3b...75d07f23eb921493aafee24c540b05771b03b6d6)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/26d166e8f7d1f33eff1efd7ccab92a27a188f431)

* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* Openshiftrelease 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e0e89f1b778799e45b3d5095a9275e2802de376a...26d166e8f7d1f33eff1efd7ccab92a27a188f431)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/2d8e82b25c39fd0617632ae32fec070b7c5f8f21)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#34](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/34)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b40850568a7c9de0f5493147d7126a12af889b45...2d8e82b25c39fd0617632ae32fec070b7c5f8f21)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/5409afd036445411969ed074e681c73f2df36909)

* [OCPBUGS-14274](https://issues.redhat.com/browse/OCPBUGS-14274): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#127](https://github.com/openshift/node_exporter/pull/127)
* [Full changelog](https://github.com/openshift/node_exporter/compare/10dc380d4ce996d2557b10991b3f7623a4551e21...5409afd036445411969ed074e681c73f2df36909)


### [tests](https://github.com/openshift/origin/tree/62852a2a543c7e12a2bca8d7393b1e84eab700b9)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): allow cluster-config-operator to manage featuregate upgrade block [#28050](https://github.com/openshift/origin/pull/28050)
* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [Full changelog](https://github.com/openshift/origin/compare/a241c84844297f145c1eca02378578aad6178355...62852a2a543c7e12a2bca8d7393b1e84eab700b9)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/9079a510ebbe7bc0df6a06aae43b6dbada3adb32)

* [OCPBUGS-16398](https://issues.redhat.com/browse/OCPBUGS-16398): Rebase v3.0.2 [#83](https://github.com/openshift/vmware-vsphere-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e0efc3911345f62ef6fa6ae7334d01fbf4de4bd...9079a510ebbe7bc0df6a06aae43b6dbada3adb32)