# 4.14.0-0.okd-2024-01-06-084517

Created: 2024-01-07 09:26:56 +0000 UTC

Image Digest: `sha256:c4a6b6850701202f629c0e451de784b02f0de079650a1b9ccbf610448ebc9227`

Promoted from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2024-01-06-084517


## Changes from 4.14.0-0.okd-2023-12-01-225814

### Components

* Kubernetes upgraded from 1.27.8 to 1.27.9
* Fedora CoreOS 38.20231027.3


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [02dc1175](https://github.com/openshift/assisted-installer/commit/02dc1175d8d1278f94287d14899c66344cef9174) `sha256:3babd9c93adda52bf881aefdf46db8a8bfcfbf1837e9132037e02fe21546a20a`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [02dc1175](https://github.com/openshift/assisted-installer/commit/02dc1175d8d1278f94287d14899c66344cef9174) `sha256:4f43fe2cc3d57b7bb7cec9a52a1ca033a1f4547b52dba6c14fee02d8b87acf21`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [ad7aa0ae](https://github.com/openshift/aws-pod-identity-webhook/commit/ad7aa0ae2c85eca233fbe1afc35e64452a880a1c) `sha256:6395e6ff6e910a066dbd4efe71074cc552e3f412f2837a4a49ffb362ef9a75a2`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [94ddd62d](https://github.com/openshift/cluster-monitoring-operator/commit/94ddd62daa1ed729055e97b76e07745aa02098fd) `sha256:4380bdc87c53d00e4ae00ec44db8d76812053f92fdf4da1907704dc728773ff7`
* [kube-proxy](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:c3baee4d3e085ec946f18965bda87e1f73205de9642aa64a8b61e89912971c8d`
* [sdn](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:9fc803d3e46ce9d88e5c58de2e88ca32479f8e85931434645853e72e6e45be18`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/0634e0aaf3cd89258f47ef0f255a9ff5702963d3)

* [OCPBUGS-23069](https://issues.redhat.com/browse/OCPBUGS-23069): Ignore hostPrefix validation for plugins other than OVN/SDN (#5676) [#5676](https://github.com/openshift/assisted-service/pull/5676)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4e1a1e59cef06c75a9a09f6251ecbd19eecb8be5...0634e0aaf3cd89258f47ef0f255a9ff5702963d3)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/8ba0b37a45510404a842d6dbd84d40a18008e81d)

* [OCPBUGS-21255](https://issues.redhat.com/browse/OCPBUGS-21255): Bump golang.org/x/net to v0.18.0 [#38](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8c532d2e64aa0f2fc30e49d658a47426fab38cb3...8ba0b37a45510404a842d6dbd84d40a18008e81d)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/3362d673b054807a4974b4d600486933f7e0bd42)

* [HOSTEDCP-1323](https://issues.redhat.com/browse/HOSTEDCP-1323): Merge latest code into 4.14 branch [#45](https://github.com/openshift/apiserver-network-proxy/pull/45)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/15cd4347b9384fac3d93029c6426dc15b964f557...3362d673b054807a4974b4d600486933f7e0bd42)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/557c4f4617d45e50127363e34d4512b59e8c8bb6)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#109](https://github.com/openshift/azure-disk-csi-driver-operator/pull/109)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/3e2ddb326b30b0a4bf482b2869beee2ffdf8695b...557c4f4617d45e50127363e34d4512b59e8c8bb6)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/96fab8160e575991c1f50101bf1ec8bb0259165e)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#83](https://github.com/openshift/azure-file-csi-driver-operator/pull/83)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/43838ae6c329e7d818c19ec59dfba5abde7535f6...96fab8160e575991c1f50101bf1ec8bb0259165e)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/a3cbb199faaa440a9d7e130f35b6be83f912aef9)

* [OCPBUGS-22771](https://issues.redhat.com/browse/OCPBUGS-22771): aws: use security groups from defaultMachinePlatform [#7658](https://github.com/openshift/installer/pull/7658)
* [OCPBUGS-24489](https://issues.redhat.com/browse/OCPBUGS-24489): baremetal: populate customDeploy in advance [#7802](https://github.com/openshift/installer/pull/7802)
* [OCPBUGS-22770](https://issues.redhat.com/browse/OCPBUGS-22770): destroy: gcp: fix destroying regional disks [#7657](https://github.com/openshift/installer/pull/7657)
* Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap [#7660](https://github.com/openshift/installer/pull/7660)
* [OCPBUGS-22978](https://issues.redhat.com/browse/OCPBUGS-22978): IBMCloud: Add eu-es region [#7684](https://github.com/openshift/installer/pull/7684)
* [OCPBUGS-23399](https://issues.redhat.com/browse/OCPBUGS-23399): Check if PER is enabled in the target PowerVS workspace [#7736](https://github.com/openshift/installer/pull/7736)
* [Full changelog](https://github.com/openshift/installer/compare/82051a1c3d42e394be353bbe2eacf348ccb75970...a3cbb199faaa440a9d7e130f35b6be83f912aef9)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/9cd5c076afbccee3f4297cb2c9eb1435f572abf8)

* [OCPBUGS-24489](https://issues.redhat.com/browse/OCPBUGS-24489): Do not update instance_info and deploy_interface for active nodes [#325](https://github.com/openshift/baremetal-operator/pull/325)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/8643f32fea3e50b81b70a4bd5367a7487a73e7c6...9cd5c076afbccee3f4297cb2c9eb1435f572abf8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/286cfa5f978c4a89c776347c82fa09a232eef144)

* [OCPBUGS-25983](https://issues.redhat.com/browse/OCPBUGS-25983): Remove deprecated password defaulting in default config flag [#1646](https://github.com/openshift/oc/pull/1646)
* [OCPBUGS-24197](https://issues.redhat.com/browse/OCPBUGS-24197): Add client version in must-gather summary [#1607](https://github.com/openshift/oc/pull/1607)
* [OCPBUGS-24460](https://issues.redhat.com/browse/OCPBUGS-24460): Overwrite template's namespace with the explicit one [#1616](https://github.com/openshift/oc/pull/1616)
* [Full changelog](https://github.com/openshift/oc/compare/9b1e0d27df3cf7b2ea878cd668ce709cc4e4c41a...286cfa5f978c4a89c776347c82fa09a232eef144)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/fba5608095b60438575339bd406c7a9ed40995ae)

* [OCPBUGS-25275](https://issues.redhat.com/browse/OCPBUGS-25275): Azure Workload Identity info in CredsRequests creates a Secret [#643](https://github.com/openshift/cloud-credential-operator/pull/643)
* [OCPBUGS-24346](https://issues.redhat.com/browse/OCPBUGS-24346): Discover AWS dns suffix from partition and region. [#635](https://github.com/openshift/cloud-credential-operator/pull/635)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/549cff9de8bc7a7bcf12eaa286bac04a7fc0b2f7...fba5608095b60438575339bd406c7a9ed40995ae)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2a07e2dc098b9bea4e3e27279c692da10a6a519e)

* [OCPBUGS-25384](https://issues.redhat.com/browse/OCPBUGS-25384): psa cluster fleet evaluation [#1600](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1600)
* : OCPBUGS-24022: Add workload partitioning annotation [#1590](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1590)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/d52dbad1177fdb0d27077be5b6e8d9fe0d41b30e...2a07e2dc098b9bea4e3e27279c692da10a6a519e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/2d7ced4536c90a4c848ae9a67caf4c0766cfde78)

* [OCPBUGS-24320](https://issues.redhat.com/browse/OCPBUGS-24320): Add apbroute/status patch rights for ovnkube-node to update status [#2143](https://github.com/openshift/cluster-network-operator/pull/2143)
* [OCPBUGS-22787](https://issues.redhat.com/browse/OCPBUGS-22787), [OCPBUGS-22788](https://issues.redhat.com/browse/OCPBUGS-22788), [OCPBUGS-22789](https://issues.redhat.com/browse/OCPBUGS-22789): ovnkube: container scripts cleanup [#2090](https://github.com/openshift/cluster-network-operator/pull/2090)
* [OCPBUGS-23371](https://issues.redhat.com/browse/OCPBUGS-23371): hypershift, hosted clusters: enable multi-homing and multi-net features [#2117](https://github.com/openshift/cluster-network-operator/pull/2117)
* [OCPBUGS-21717](https://issues.redhat.com/browse/OCPBUGS-21717): Bump golang.org/x/net and github.com/openshift/library-go [#2122](https://github.com/openshift/cluster-network-operator/pull/2122)
* [OCPBUGS-24633](https://issues.redhat.com/browse/OCPBUGS-24633): ipsec add pluto restart [#2152](https://github.com/openshift/cluster-network-operator/pull/2152)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/73a1db2e64e320fd2584b85c68c0bc8bfe6010cc...2d7ced4536c90a4c848ae9a67caf4c0766cfde78)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c2dffde35f3d6de662ab0f7dfa9698affba286b2)

* Make MC names deterministic (#903) [#903](https://github.com/openshift/cluster-node-tuning-operator/pull/903)
* [OCPBUGS-25671](https://issues.redhat.com/browse/OCPBUGS-25671): rps: fix mask update for SR-IOV devices (#891) [#891](https://github.com/openshift/cluster-node-tuning-operator/pull/891)
* [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): Fix Racing Machine Configs and add Day 0 Support (#854) (#871) [#854](https://github.com/openshift/cluster-node-tuning-operator/pull/854)
* [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#880) [#880](https://github.com/openshift/cluster-node-tuning-operator/pull/880)
* [OCPBUGS-21845](https://issues.redhat.com/browse/OCPBUGS-21845): rps: trigger udev event per queue #832 (#832) [#832](https://github.com/openshift/cluster-node-tuning-operator/pull/832)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ab65a089808ee9d1074d3c3d9bde11cff31b5e37...c2dffde35f3d6de662ab0f7dfa9698affba286b2)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0dbbb6132ced379602040731ff889eebb4202e73)

* [OCPBUGS-25481](https://issues.redhat.com/browse/OCPBUGS-25481): NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#41](https://github.com/openshift/cluster-olm-operator/pull/41)
* [OCPBUGS-22581](https://issues.redhat.com/browse/OCPBUGS-22581): [release-4.14] OCPBUGS-24652: Bump k8s dependencies [#38](https://github.com/openshift/cluster-olm-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/9e05f328825215a8ad58c9023c0f9d62c843c5aa...0dbbb6132ced379602040731ff889eebb4202e73)


### [console](https://github.com/openshift/console/tree/52c0b1598989cea2264a4dda1372a91bcd6647ec)

* [OCPBUGS-24349](https://issues.redhat.com/browse/OCPBUGS-24349): Fix crash when ArtifactHub Task has no version [#13399](https://github.com/openshift/console/pull/13399)
* [OCPBUGS-25397](https://issues.redhat.com/browse/OCPBUGS-25397): fix runtime error on Node details Overview when Machin… [#13446](https://github.com/openshift/console/pull/13446)
* [OCPBUGS-23771](https://issues.redhat.com/browse/OCPBUGS-23771): Fix for yaml editor that crashes with MCE and ACM plugins enabled [#13360](https://github.com/openshift/console/pull/13360)
* [OCPBUGS-24667](https://issues.redhat.com/browse/OCPBUGS-24667): Fix plugin proxy handler [#13425](https://github.com/openshift/console/pull/13425)
* [OCPBUGS-24474](https://issues.redhat.com/browse/OCPBUGS-24474): S2I Build Wizard should check for Containerfile in addition to Dockerfile [#13415](https://github.com/openshift/console/pull/13415)
* [OCPBUGS-24432](https://issues.redhat.com/browse/OCPBUGS-24432): fix filtering issues on Events [#13413](https://github.com/openshift/console/pull/13413)
* [OCPBUGS-24352](https://issues.redhat.com/browse/OCPBUGS-24352): add access review for impersonate [#13400](https://github.com/openshift/console/pull/13400)
* [OCPBUGS-22240](https://issues.redhat.com/browse/OCPBUGS-22240): Save also the location.search and .hash values in localStorage to restore them after login [#13270](https://github.com/openshift/console/pull/13270)
* [OCPBUGS-24293](https://issues.redhat.com/browse/OCPBUGS-24293): ConsolePlugin metrics must no longer be grouped by the vendor [#13391](https://github.com/openshift/console/pull/13391)
* [OCPBUGS-24423](https://issues.redhat.com/browse/OCPBUGS-24423): Searching for items in quick search is confusing [#13412](https://github.com/openshift/console/pull/13412)
* [OCPBUGS-22375](https://issues.redhat.com/browse/OCPBUGS-22375): Delete results.tekton.dev annotations before rerun the pipelineRun [#13278](https://github.com/openshift/console/pull/13278)
* [OCPBUGS-22478](https://issues.redhat.com/browse/OCPBUGS-22478): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13290](https://github.com/openshift/console/pull/13290)
* [OCPBUGS-24196](https://issues.redhat.com/browse/OCPBUGS-24196): ApiVersion displayed on console is v1alpha1 whereas we support v1beta1 [#13402](https://github.com/openshift/console/pull/13402)
* [Full changelog](https://github.com/openshift/console/compare/4c3b612fa659a61a534bd858a509cccabfdcdd4c...52c0b1598989cea2264a4dda1372a91bcd6647ec)


### [console-operator](https://github.com/openshift/console-operator/tree/a5176b4e8454e5d1d28023d77ddbad880db99168)

* [OCPBUGS-23968](https://issues.redhat.com/browse/OCPBUGS-23968): Disable route controller health check for NLB setup [#817](https://github.com/openshift/console-operator/pull/817)
* [OCPBUGS-24293](https://issues.redhat.com/browse/OCPBUGS-24293): ConsolePlugin metrics must no longer be grouped by the vendor [#820](https://github.com/openshift/console-operator/pull/820)
* [Full changelog](https://github.com/openshift/console-operator/compare/966e915f8a4de635149c976689ed9cc967c7b814...a5176b4e8454e5d1d28023d77ddbad880db99168)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/da69ca4786ca424228e28f223568c7340b1de99e)

* [OCPBUGS-23443](https://issues.redhat.com/browse/OCPBUGS-23443): Fix selector for manila-csi-driver-controller-metrics service [#211](https://github.com/openshift/csi-driver-manila-operator/pull/211)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/ac1cd219045feb2d4008e9fd0e85ce56e67153bf...da69ca4786ca424228e28f223568c7340b1de99e)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/aa2b15a465b4a36e0b24902d8b373e39a8dda18d)

* Bump fedora-coreos to latest stable [#718](https://github.com/openshift/okd-machine-os/pull/718)
* Bump machine OS version [#711](https://github.com/openshift/okd-machine-os/pull/711)
* Bump fedora-coreos to latest stable [#707](https://github.com/openshift/okd-machine-os/pull/707)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/06633e25633fd15afd703729f1138cbe34f45995...aa2b15a465b4a36e0b24902d8b373e39a8dda18d)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/5c56cc35e3edc1f34290e7aaaec57e9c88c91859)

* UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 [#1552](https://github.com/openshift/kubernetes/pull/1552)
* [OCPBUGS-26006](https://issues.redhat.com/browse/OCPBUGS-26006): Update to Kubernetes 1.27.9 [#1838](https://github.com/openshift/kubernetes/pull/1838)
* [OCPBUGS-23566](https://issues.redhat.com/browse/OCPBUGS-23566): followup to #1808 [#1813](https://github.com/openshift/kubernetes/pull/1813)
* [Full changelog](https://github.com/openshift/kubernetes/compare/19254894103e33e65a58dee1337912acc9813e84...5c56cc35e3edc1f34290e7aaaec57e9c88c91859)


### [hypershift](https://github.com/openshift/hypershift/tree/e2071ef95a7904b3a748cba28ddfd3583eb358c8)

* [OCPBUGS-23936](https://issues.redhat.com/browse/OCPBUGS-23936): Use correct kubeconfig in CCM and remove CCMs access t… [#3232](https://github.com/openshift/hypershift/pull/3232)
* [OCPBUGS-12720](https://issues.redhat.com/browse/OCPBUGS-12720): Updating hypershift images to be consistent with ART [#2467](https://github.com/openshift/hypershift/pull/2467)
* [OCPBUGS-24627](https://issues.redhat.com/browse/OCPBUGS-24627): unset ServiceAccount on ignition-server-proxy [#3295](https://github.com/openshift/hypershift/pull/3295)
* [Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster [#3290](https://github.com/openshift/hypershift/pull/3290)
* [OCPBUGS-24269](https://issues.redhat.com/browse/OCPBUGS-24269): add CLI oauthclient [#3272](https://github.com/openshift/hypershift/pull/3272)
* [OCPBUGS-23569](https://issues.redhat.com/browse/OCPBUGS-23569): Added IPFamilyPolicy to services exposed at the HCP in DualStack mode [#3224](https://github.com/openshift/hypershift/pull/3224)
* [Full changelog](https://github.com/openshift/hypershift/compare/6fb4e2524a164bb23d565c442d1e977110f5c03a...e2071ef95a7904b3a748cba28ddfd3583eb358c8)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/d2c38ce33a2bc38e1d30313ca61954d09400b466)

* [OCPBUGS-21149](https://issues.redhat.com/browse/OCPBUGS-21149): Bump golang.org/x/net to v0.18.0 [#55](https://github.com/openshift/cloud-provider-ibm/pull/55)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/ea5a37bbb6bf9e340ccd85ce730c6a8545eae4cd...d2c38ce33a2bc38e1d30313ca61954d09400b466)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b90c2d6fa313e5240c3d307af6eb93c66a2d477e)

* [OCPBUGS-23962](https://issues.redhat.com/browse/OCPBUGS-23962): adds helm information gather (#868) (#877) [#868](https://github.com/openshift/insights-operator/pull/868)
* [OCPBUGS-23445](https://issues.redhat.com/browse/OCPBUGS-23445): DVO gatherer - add retry logic (#861) (#870) [#861](https://github.com/openshift/insights-operator/pull/861)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7f61093be2002697568476e402d3f668d9ac5313...b90c2d6fa313e5240c3d307af6eb93c66a2d477e)


### [ironic](https://github.com/openshift/ironic-image/tree/bd013d93f9e968f7893665644415c4e67b7a2a1a)

* [OCPBUGS-19884](https://issues.redhat.com/browse/OCPBUGS-19884): update Ironic to include secure boot fixes [#445](https://github.com/openshift/ironic-image/pull/445)
* [OCPBUGS-23903](https://issues.redhat.com/browse/OCPBUGS-23903): Ironic side of external_http_url (METAL-163) is not wired in correctly [#429](https://github.com/openshift/ironic-image/pull/429)
* [Full changelog](https://github.com/openshift/ironic-image/compare/43a83afa4d1cd7a04da805c1178421a045ecccc7...bd013d93f9e968f7893665644415c4e67b7a2a1a)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/66340dfefda40211a0bd33b1f42a625f666cf1bf)

* [OCPBUGS-25685](https://issues.redhat.com/browse/OCPBUGS-25685): Relax packages requirements [#103](https://github.com/openshift/ironic-agent-image/pull/103)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/979149f6171a232355564ebc63dd258390b29c20...66340dfefda40211a0bd33b1f42a625f666cf1bf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2a4b57d1cc6ab5095d61feab9d144c652baab5b8)

* [OCPBUGS-24047](https://issues.redhat.com/browse/OCPBUGS-24047): Update reference URL [#1186](https://github.com/openshift/machine-api-operator/pull/1186)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/6b62c759612880bcc80c67c01ac1db5c9576a288...2a4b57d1cc6ab5095d61feab9d144c652baab5b8)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7649b9274cde2fb50a61a579e3891c8ead2d79c5)

* [OCPBUGS-24596](https://issues.redhat.com/browse/OCPBUGS-24596): [release-4.14] execute cert related processes to ensure proper rotation [#4063](https://github.com/openshift/machine-config-operator/pull/4063)
* [OCPBUGS-24397](https://issues.redhat.com/browse/OCPBUGS-24397): gcp-routes: don't exit on crictl failures [#4056](https://github.com/openshift/machine-config-operator/pull/4056)
* [OCPBUGS-20554](https://issues.redhat.com/browse/OCPBUGS-20554): Ensure gcp-routes hack for internalLB hairpin traffic works for SGW [#3973](https://github.com/openshift/machine-config-operator/pull/3973)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/612c6f6bfa3ca777f9f1e260596b801c3e66375f...7649b9274cde2fb50a61a579e3891c8ead2d79c5)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)

* [OCPBUGS-24664](https://issues.redhat.com/browse/OCPBUGS-24664): disable query link for non metric-based alerts [#82](https://github.com/openshift/monitoring-plugin/pull/82)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/87571978825e63392a56f6920e068af3a71cda6e...a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/69d0021a4b60db315f47d83bde1c455362a03808)

* Added METRIC_TEST_IMAGE var (#88) [#88](https://github.com/openshift/network-metrics-daemon/pull/88)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/64dbc3bf37824f0b32e73cdceabc497505876b24...69d0021a4b60db315f47d83bde1c455362a03808)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/058c3324517b7a043a823e203bf6b282de5e3b8f)

* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#766) [#766](https://github.com/openshift/oc-mirror/pull/766)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a9d1320cb1150a1aa25a2e67eb8bb2042fb8c9ac...058c3324517b7a043a823e203bf6b282de5e3b8f)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/d714b463a400b2138af5d589a45bddca2404c298)

* [OCPBUGS-22616](https://issues.redhat.com/browse/OCPBUGS-22616): [release-4.14] Bump go.opentelemetry.io dependencies [#58](https://github.com/openshift/operator-framework-operator-controller/pull/58)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/17343293267cad10f074fbe155c7fa31ed6b9336...d714b463a400b2138af5d589a45bddca2404c298)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d5770c29b0dad798ab77f3a76f78a78dbc721934)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#142](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/142)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/dcf0e7d57cce1ff6264c3575f73396f73ace6719...d5770c29b0dad798ab77f3a76f78a78dbc721934)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/898587671ad3ed5c1844f549175411736ebcabc1)

* [OCPBUGS-23202](https://issues.redhat.com/browse/OCPBUGS-23202): Don't build InstanceSpec during delete operations [#95](https://github.com/openshift/machine-api-provider-openstack/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/47ad2845b2477e1bce01eca4ffc016c2a2af9bf8...898587671ad3ed5c1844f549175411736ebcabc1)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f5327f08e8f332f036c4f46bc87e1195088717d6)

* [OCPBUGS-22538](https://issues.redhat.com/browse/OCPBUGS-22538): bump otelhttp to 44.0 for api [#647](https://github.com/openshift/operator-framework-olm/pull/647)
* [OCPBUGS-22538](https://issues.redhat.com/browse/OCPBUGS-22538): otelhttp bump [release-4.14] [#632](https://github.com/openshift/operator-framework-olm/pull/632)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/427c2db7b6ba237584c86d643551dd3037d682a1...f5327f08e8f332f036c4f46bc87e1195088717d6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f27cd40338356e2e979e82b0151d0ed3246d36da)

* [OCPBUGS-25903](https://issues.redhat.com/browse/OCPBUGS-25903): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2003](https://github.com/openshift/ovn-kubernetes/pull/2003)
* [OCPBUGS-25746](https://issues.redhat.com/browse/OCPBUGS-25746), [OCPBUGS-25747](https://issues.redhat.com/browse/OCPBUGS-25747): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1996](https://github.com/openshift/ovn-kubernetes/pull/1996)
* [OCPBUGS-24320](https://issues.redhat.com/browse/OCPBUGS-24320): APB status not updated when fails to process during the first reconciliations [#1968](https://github.com/openshift/ovn-kubernetes/pull/1968)
* [OCPBUGS-23257](https://issues.redhat.com/browse/OCPBUGS-23257): Update leaderelection config to allow retries [#1955](https://github.com/openshift/ovn-kubernetes/pull/1955)
* [OCPBUGS-23387](https://issues.redhat.com/browse/OCPBUGS-23387): Ignore completed virt-launcher pods [#1954](https://github.com/openshift/ovn-kubernetes/pull/1954)
* [OCPBUGS-25087](https://issues.redhat.com/browse/OCPBUGS-25087): Fragment oversized reply packets in LGW mode [#1982](https://github.com/openshift/ovn-kubernetes/pull/1982)
* [OCPBUGS-22735](https://issues.redhat.com/browse/OCPBUGS-22735): OVNK/GW: Ignore headless services in syncServices [#1970](https://github.com/openshift/ovn-kubernetes/pull/1970)
* [OCPBUGS-24350](https://issues.redhat.com/browse/OCPBUGS-24350): [release-4.14] fixes MTU configuration on gateway router [#1969](https://github.com/openshift/ovn-kubernetes/pull/1969)
* [OCPBUGS-24209](https://issues.redhat.com/browse/OCPBUGS-24209): Significantly reduce shared informer memory usage [#1964](https://github.com/openshift/ovn-kubernetes/pull/1964)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7a232386623498f099ccdedfc58bc1c134c61ddd...f27cd40338356e2e979e82b0151d0ed3246d36da)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8ecfd7fd6a201844bb9a926146db70468345852b)

* [OCPBUGS-25980](https://issues.redhat.com/browse/OCPBUGS-25980): Rebase with upstream: Fix snyk code issue: Path Traversal [#72](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/72)
* [OCPBUGS-24713](https://issues.redhat.com/browse/OCPBUGS-24713): synk: ignore vendor dir [#60](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/60)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e9694cefd775cd6313acdd8d6382fe60cec8559c...8ecfd7fd6a201844bb9a926146db70468345852b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)

* [OCPBUGS-25715](https://issues.redhat.com/browse/OCPBUGS-25715): snyk: ignore vendor dir [#60](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/60)
* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#48](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/48)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/48b56bbfa3557eb528b20d7d34a99bbd0d542355...5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/32c1028ecf58851eb1270f47351a4423ba081c3b)

* [OCPBUGS-24727](https://issues.redhat.com/browse/OCPBUGS-24727): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#54](https://github.com/openshift/cloud-provider-powervs/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/0a89a6ef29a15f2fa51a0735c200e54f5af122c6...32c1028ecf58851eb1270f47351a4423ba081c3b)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/1a957dae3a7c9c36752b4869854a90e6b88eaf7e)

* [OCPBUGS-24730](https://issues.redhat.com/browse/OCPBUGS-24730): snyk code scan exclude vendor directory [#65](https://github.com/openshift/machine-api-provider-powervs/pull/65)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/02379e59576940766549f8d5c0ccec245a2682e3...1a957dae3a7c9c36752b4869854a90e6b88eaf7e)


### [prometheus](https://github.com/openshift/prometheus/tree/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd)

* [OCPBUGS-22531](https://issues.redhat.com/browse/OCPBUGS-22531): bump otel dependencies [#183](https://github.com/openshift/prometheus/pull/183)
* [Full changelog](https://github.com/openshift/prometheus/compare/bcb475d970214c3f48308426014b1ffb05758e34...b7c61bcba6ff69bbb91d1a4b86ba7191653776cd)


### [telemeter](https://github.com/openshift/telemeter/tree/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9)

* [OCPBUGS-22647](https://issues.redhat.com/browse/OCPBUGS-22647): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#494](https://github.com/openshift/telemeter/pull/494)
* [Full changelog](https://github.com/openshift/telemeter/compare/c8b876a2ba2965c90a57ca543d4f55d7bf9a8702...c683f6571479cdb0e7577a22e9cf0f64d9ed77f9)


### [tests](https://github.com/openshift/origin/tree/c35d76db9ee8a2f5b67f12fc708989b66015eab8)

* [OCPBUGS-26044](https://issues.redhat.com/browse/OCPBUGS-26044): Adding test case for when exceed openshift.io/image-tags will ban to … [#28493](https://github.com/openshift/origin/pull/28493)
* [OCPBUGS-21774](https://issues.redhat.com/browse/OCPBUGS-21774): backport #28316 to 4.14 release [#28335](https://github.com/openshift/origin/pull/28335)
* [Full changelog](https://github.com/openshift/origin/compare/661425bdbe1f6fcec2c37ee482b8e4f2b3abe38a...c35d76db9ee8a2f5b67f12fc708989b66015eab8)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/cbfec1135914340ef16c7dd109ac9271a2e5d2ee)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#186](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/186)
* [OCPBUGS-23169](https://issues.redhat.com/browse/OCPBUGS-23169): Fix vsphere csi controller pods from getting constantly restarted [#193](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/193)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/f46e4b57a7e96016b68d0c01f41d869ec1a1ffc8...cbfec1135914340ef16c7dd109ac9271a2e5d2ee)