# 4.15.0-0.okd-scos-2023-11-10-192431

Created: 2023-11-11 00:45:39 +0000 UTC

Image Digest: `sha256:da7ee55967c0bc74a380ab75d4091d380ff7c3797caae0b2c4056afbefa69fe6`

Promoted from registry.ci.openshift.org/origin/release-scos:4.15.0-0.okd-scos-2023-11-10-192431


## Changes from 4.14.0-0.okd-scos-2023-10-19-123226

### Components

* Kubernetes upgraded from 1.27.6 to 1.28.3
* CentOS Stream CoreOS upgraded from 414.9.202310141932-0 to 415.9.202311100903-0


### New images

* [installer-altinfra](https://github.com/openshift/installer) git [f60ebb06](https://github.com/openshift/installer/commit/f60ebb065b4242586f7afacc5f2be8afddbdfbde) `sha256:c4d8e4eda88c07669cfe98c1f396ef0d7b985dcd9e73494428cca2f3342954bf`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [6a797ce8](https://github.com/openshift/kubernetes-metrics-server/commit/6a797ce811e68d47a4e63a2c53dedd1f405d029a) `sha256:e1ecfda661dd16ca5669c20d78c177225e36cba9159348cb378b2e691ff37e36`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [6fdfd82f](https://github.com/openshift/cluster-api-provider-openstack/commit/6fdfd82f7ad435fb03fe59a8b838ef4e7d76f019) `sha256:0c376df10128d429a07cb422e8dfacc4f6a6d7cf04285264a127f6af05f0dfac`


### Removed images

* driver-toolkit
* kuryr-cni
* kuryr-controller
* machine-os-content


### Rebuilt images without code change

* centos-stream-coreos-9 `sha256:d0f4565ed1c45d43ce27dcc7aa3d260de7d8e03cd9edb40879da9de2c502c471`
* centos-stream-coreos-9-extensions `sha256:37cd5abf254dfe9ce6fc349945431e95f1a21cf5d880d24150295575c49e4c49`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9e9b32821cf5301cfa486278323312d7215c86d4)

* Update RHTAP references (#5682) [#5682](https://github.com/openshift/assisted-service/pull/5682)
* NO-JIRA:  Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) [#5680](https://github.com/openshift/assisted-service/pull/5680)
* NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) [#5681](https://github.com/openshift/assisted-service/pull/5681)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS OPTIONS for s3 presigned url (#5674) [#5674](https://github.com/openshift/assisted-service/pull/5674)
* Update RHTAP references (#5654) [#5654](https://github.com/openshift/assisted-service/pull/5654)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) [#5671](https://github.com/openshift/assisted-service/pull/5671)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) [#5658](https://github.com/openshift/assisted-service/pull/5658)
* [MGMT-16077](https://issues.redhat.com/browse/MGMT-16077): Add 4.15 release and OS images (#5673) [#5673](https://github.com/openshift/assisted-service/pull/5673)
* [AGENT-723](https://issues.redhat.com/browse/AGENT-723): Use json.Marshal to correctly process vSphere credentials (#5592) [#5592](https://github.com/openshift/assisted-service/pull/5592)
* NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) [#5670](https://github.com/openshift/assisted-service/pull/5670)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger reboots for node event when day2 node moves to done (#5648) [#5648](https://github.com/openshift/assisted-service/pull/5648)
* NO-JIRA:  Allow the command in wait_for_cmd_amount to receive arguments (#5668) [#5668](https://github.com/openshift/assisted-service/pull/5668)
* [MGMT-16164](https://issues.redhat.com/browse/MGMT-16164): Install 4.14 redhat-operators catalog for LSO (#5669) [#5669](https://github.com/openshift/assisted-service/pull/5669)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Ensure that hosts emit event showing why preparation failed. (#5521) [#5521](https://github.com/openshift/assisted-service/pull/5521)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Add a condition to show the last preparation failure (#5524) [#5524](https://github.com/openshift/assisted-service/pull/5524)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): change default envoy sidecar timeout value (#5667) [#5667](https://github.com/openshift/assisted-service/pull/5667)
* [MGMT-16114](https://issues.redhat.com/browse/MGMT-16114): Update 4.14 release image to use GA version (#5651) [#5651](https://github.com/openshift/assisted-service/pull/5651)
* [MGMT-16052](https://issues.redhat.com/browse/MGMT-16052): Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) [#5659](https://github.com/openshift/assisted-service/pull/5659)
* Bump OCP versions: 4.14, 4.12 (#5661) [#5661](https://github.com/openshift/assisted-service/pull/5661)
* [MGMT-15405](https://issues.redhat.com/browse/MGMT-15405): Add a URL to infraenv to show download link from static network config (#5638) [#5638](https://github.com/openshift/assisted-service/pull/5638)
* [OCPBUGS-19823](https://issues.redhat.com/browse/OCPBUGS-19823): Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) [#5565](https://github.com/openshift/assisted-service/pull/5565)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Add the boot command line to the host inventory (#5649) [#5649](https://github.com/openshift/assisted-service/pull/5649)
* [MGMT-15680](https://issues.redhat.com/browse/MGMT-15680): Adds InfraEnv ctrl watch for pull secret changes (#5589) [#5589](https://github.com/openshift/assisted-service/pull/5589)
* NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) [#5653](https://github.com/openshift/assisted-service/pull/5653)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) [#5613](https://github.com/openshift/assisted-service/pull/5613)
* NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) [#5647](https://github.com/openshift/assisted-service/pull/5647)
* Update RHTAP references (#5637) [#5637](https://github.com/openshift/assisted-service/pull/5637)
* Bump OCP versions: 4.13 (#5645) [#5645](https://github.com/openshift/assisted-service/pull/5645)
* NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) [#5644](https://github.com/openshift/assisted-service/pull/5644)
* [MGMT-15683](https://issues.redhat.com/browse/MGMT-15683): Ensure that manifest filename has valid name part (#5635) [#5635](https://github.com/openshift/assisted-service/pull/5635)
* NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) [#5641](https://github.com/openshift/assisted-service/pull/5641)
* NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) [#5619](https://github.com/openshift/assisted-service/pull/5619)
* Update RHTAP references (#5624) [#5624](https://github.com/openshift/assisted-service/pull/5624)
* [MGMT-15684](https://issues.redhat.com/browse/MGMT-15684): Return appropriate HTTP error code for invalid manifest file path (#5634) [#5634](https://github.com/openshift/assisted-service/pull/5634)
* Bump OCP versions: 4.14 (#5633) [#5633](https://github.com/openshift/assisted-service/pull/5633)
* NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) [#5632](https://github.com/openshift/assisted-service/pull/5632)
* [MGMT-16037](https://issues.redhat.com/browse/MGMT-16037): fix messaging errors on big clusters (#5628) [#5628](https://github.com/openshift/assisted-service/pull/5628)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#5616) [#5616](https://github.com/openshift/assisted-service/pull/5616)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) [#5622](https://github.com/openshift/assisted-service/pull/5622)
* Revert "NO-ISSUE: use kubectl 1.28.2 (#5572)" (#5618) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Bump OCP versions: 4.12 (#5615) [#5615](https://github.com/openshift/assisted-service/pull/5615)
* [MGMT-16045](https://issues.redhat.com/browse/MGMT-16045): mitigate CVE-2023-44487 (#5614) [#5614](https://github.com/openshift/assisted-service/pull/5614)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Add event that shows the number of reboots for a node before completing installation (#5591) [#5591](https://github.com/openshift/assisted-service/pull/5591)
* Add skopeo to OCP build (#5558) [#5558](https://github.com/openshift/assisted-service/pull/5558)
* NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) [#5601](https://github.com/openshift/assisted-service/pull/5601)
* NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) [#5600](https://github.com/openshift/assisted-service/pull/5600)
* NO-ISSUE: vendor current master (#5594) [#5594](https://github.com/openshift/assisted-service/pull/5594)
* NO-ISSUE: fixing dependabot issues (#5595) [#5595](https://github.com/openshift/assisted-service/pull/5595)
* Bump OCP versions: 4.13, 4.14 (#5593) [#5593](https://github.com/openshift/assisted-service/pull/5593)
* Update RHTAP references (#5590) [#5590](https://github.com/openshift/assisted-service/pull/5590)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim daemonset name (#5579) [#5579](https://github.com/openshift/assisted-service/pull/5579)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5586) [#5586](https://github.com/openshift/assisted-service/pull/5586)
* [MGMT-13198](https://issues.redhat.com/browse/MGMT-13198): Add API endpoint to create assisted installer event (#5578) [#5578](https://github.com/openshift/assisted-service/pull/5578)
* [MGMT-15980](https://issues.redhat.com/browse/MGMT-15980): added missing Create op to infraenvs Webhook (#5569) [#5569](https://github.com/openshift/assisted-service/pull/5569)
* Update RHTAP references (#5573) [#5573](https://github.com/openshift/assisted-service/pull/5573)
* NO-ISSUE: use kubectl 1.28.2 (#5572) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Update RHTAP references (#5570) [#5570](https://github.com/openshift/assisted-service/pull/5570)
* [MGMT-15949](https://issues.redhat.com/browse/MGMT-15949): fix missing ImageSetRef validation (#5552) [#5552](https://github.com/openshift/assisted-service/pull/5552)
* Revert "NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)" (#5566) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) [#5549](https://github.com/openshift/assisted-service/pull/5549)
* NO-ISSUE: Fix console output in ZTP jobs (#5562) [#5562](https://github.com/openshift/assisted-service/pull/5562)
* NO-ISSUE: add console output for ztp (#5550) [#5550](https://github.com/openshift/assisted-service/pull/5550)
* Bump OCP versions: 4.14 (#5559) [#5559](https://github.com/openshift/assisted-service/pull/5559)
* [MGMT-15796](https://issues.redhat.com/browse/MGMT-15796): set CloudControllerManager to External for OCI (#5548) [#5548](https://github.com/openshift/assisted-service/pull/5548)
* NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* Bump OCP versions: 4.12, 4.14, 4.13 (#5546) [#5546](https://github.com/openshift/assisted-service/pull/5546)
* Update RHTAP references (#5539) [#5539](https://github.com/openshift/assisted-service/pull/5539)
* [MGMT-15950](https://issues.redhat.com/browse/MGMT-15950): Fix DNS wilcard domain validation (#5544) [#5544](https://github.com/openshift/assisted-service/pull/5544)
* WIP: Add assisted images service short URL routes (#5543) [#5543](https://github.com/openshift/assisted-service/pull/5543)
* Update RHTAP references (#5538) [#5538](https://github.com/openshift/assisted-service/pull/5538)
* [MGMT-15738](https://issues.redhat.com/browse/MGMT-15738): Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) [#5477](https://github.com/openshift/assisted-service/pull/5477)
* Bump OCP versions: 4.13, 4.11 (#5537) [#5537](https://github.com/openshift/assisted-service/pull/5537)
* [MGMT-14409](https://issues.redhat.com/browse/MGMT-14409): generate short image URL (#5523) [#5523](https://github.com/openshift/assisted-service/pull/5523)
* [MGMT-15762](https://issues.redhat.com/browse/MGMT-15762): fix odf validation failing where is one small disk (#5529) [#5529](https://github.com/openshift/assisted-service/pull/5529)
* Update RHTAP references (#5520) [#5520](https://github.com/openshift/assisted-service/pull/5520)
* Bump OCP versions: 4.12, 4.14 (#5528) [#5528](https://github.com/openshift/assisted-service/pull/5528)
* NO-ISSUE: fail upload if response is not 2XX (#5522) [#5522](https://github.com/openshift/assisted-service/pull/5522)
* Bump OCP versions: 4.14 (#5525) [#5525](https://github.com/openshift/assisted-service/pull/5525)
* NO-ISSUE: fix docker-ce-cli package missing (#5499) [#5499](https://github.com/openshift/assisted-service/pull/5499)
* NO-ISSUE: Add versions file to onprem event upload (#5514) [#5514](https://github.com/openshift/assisted-service/pull/5514)
* [MGMT-15699](https://issues.redhat.com/browse/MGMT-15699): Service changes for avoiding MCO reboot (#5453) [#5453](https://github.com/openshift/assisted-service/pull/5453)
* Update RHTAP references (#5517) [#5517](https://github.com/openshift/assisted-service/pull/5517)
* [MGMT-15598](https://issues.redhat.com/browse/MGMT-15598): Add a parameter to manifest list to disable filter (#5498) [#5498](https://github.com/openshift/assisted-service/pull/5498)
* Bump OCP versions: 4.12 (#5515) [#5515](https://github.com/openshift/assisted-service/pull/5515)
* Update RHTAP references (#5513) [#5513](https://github.com/openshift/assisted-service/pull/5513)
* Bump OCP versions: 4.14 (#5512) [#5512](https://github.com/openshift/assisted-service/pull/5512)
* NO-ISSUE: Fix email domain for event uploader (#5511) [#5511](https://github.com/openshift/assisted-service/pull/5511)
* Update RHTAP references (#5510) [#5510](https://github.com/openshift/assisted-service/pull/5510)
* Update RHTAP references (#5508) [#5508](https://github.com/openshift/assisted-service/pull/5508)
* Bump OCP versions: 4.12, 4.13 (#5506) [#5506](https://github.com/openshift/assisted-service/pull/5506)
* [MGMT-15808](https://issues.redhat.com/browse/MGMT-15808): change base image to stream9 (#5497) [#5497](https://github.com/openshift/assisted-service/pull/5497)
* [MGMT-15559](https://issues.redhat.com/browse/MGMT-15559): Change detached annotation condition in non-converged flow (#5445) [#5445](https://github.com/openshift/assisted-service/pull/5445)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Fix unbound variable (#5493) [#5493](https://github.com/openshift/assisted-service/pull/5493)
* Update RHTAP references (#5492) [#5492](https://github.com/openshift/assisted-service/pull/5492)
* Bump OCP versions: 4.14, 4.11 (#5496) [#5496](https://github.com/openshift/assisted-service/pull/5496)
* Update RHTAP references (#5470) [#5470](https://github.com/openshift/assisted-service/pull/5470)
* [MGMT-15715](https://issues.redhat.com/browse/MGMT-15715): Allow handling multi-document YAML custom manifests (#5480) [#5480](https://github.com/openshift/assisted-service/pull/5480)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Add extra flag var for hypershift install (#5469) [#5469](https://github.com/openshift/assisted-service/pull/5469)
* [XMGMT-15704](https://issues.redhat.com/browse/XMGMT-15704): Bugfix for local cluster import (#5484) [#5484](https://github.com/openshift/assisted-service/pull/5484)
* NO-ISSUE: update RHTAP deprecated image check (#5488) [#5488](https://github.com/openshift/assisted-service/pull/5488)
* Bump OCP versions: 4.12, 4.13 (#5483) [#5483](https://github.com/openshift/assisted-service/pull/5483)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Fix DNS regex validation (#5482) [#5482](https://github.com/openshift/assisted-service/pull/5482)
* [MGMT-15716](https://issues.redhat.com/browse/MGMT-15716): notify events when updating cluster status (#5476) [#5476](https://github.com/openshift/assisted-service/pull/5476)
* [MGMT-15503](https://issues.redhat.com/browse/MGMT-15503): Update operator bundle channel (#5474) [#5474](https://github.com/openshift/assisted-service/pull/5474)
* Bump OCP versions: 4.14 (#5472) [#5472](https://github.com/openshift/assisted-service/pull/5472)
* [MGMT-15306](https://issues.redhat.com/browse/MGMT-15306): Fix UpdateCluster for requests that include VIPS and UMA (#5462) [#5462](https://github.com/openshift/assisted-service/pull/5462)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4e1a1e59cef06c75a9a09f6251ecbd19eecb8be5...9e9b32821cf5301cfa486278323312d7215c86d4)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/fad4499d3134bfd0d3a1f4f23620f3696aeca589)

* Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) [#719](https://github.com/openshift/assisted-installer/pull/719)
* [MGMT-15926](https://issues.redhat.com/browse/MGMT-15926): Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) [#748](https://github.com/openshift/assisted-installer/pull/748)
* NO-ISSUE: Add my github account as an OWNER for this repository (#749) [#749](https://github.com/openshift/assisted-installer/pull/749)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) [#747](https://github.com/openshift/assisted-installer/pull/747)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger event that notifies the number of reboots once the node installation is completed (#744) [#744](https://github.com/openshift/assisted-installer/pull/744)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#745) [#745](https://github.com/openshift/assisted-installer/pull/745)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) [#743](https://github.com/openshift/assisted-installer/pull/743)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) [#742](https://github.com/openshift/assisted-installer/pull/742)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#741) [#741](https://github.com/openshift/assisted-installer/pull/741)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) [#738](https://github.com/openshift/assisted-installer/pull/738)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): Update dependencies to remove goproxy dependency (#701) [#701](https://github.com/openshift/assisted-installer/pull/701)
* [MGMT-15984](https://issues.redhat.com/browse/MGMT-15984): Assisted installer doesn't freeze and unmount file systems used for overwriting os image (#737) [#737](https://github.com/openshift/assisted-installer/pull/737)
* NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) [#731](https://github.com/openshift/assisted-installer/pull/731)
* Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) [#718](https://github.com/openshift/assisted-installer/pull/718)
* [MGMT-15710](https://issues.redhat.com/browse/MGMT-15710): Assisted installer changes for avoiding MCO reboot (#713) [#713](https://github.com/openshift/assisted-installer/pull/713)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): fix image missing nsenter executable (#729) [#729](https://github.com/openshift/assisted-installer/pull/729)
* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): change base image to stream9 (#725) [#725](https://github.com/openshift/assisted-installer/pull/725)
* NO-ISSUE: fix dependabot ingored packages (#724) [#724](https://github.com/openshift/assisted-installer/pull/724)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9fd99e3861fc32b8a608bb0c81344435e32ad004...fad4499d3134bfd0d3a1f4f23620f3696aeca589)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/51397c0dd85618e17158334d4ea50f2a26f7acd3)

* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Get cmdline and set IBM in vendor (#624) [#624](https://github.com/openshift/assisted-installer-agent/pull/624)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) [#623](https://github.com/openshift/assisted-installer-agent/pull/623)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) [#621](https://github.com/openshift/assisted-installer-agent/pull/621)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#619) [#619](https://github.com/openshift/assisted-installer-agent/pull/619)
* [MGMT-16011](https://issues.redhat.com/browse/MGMT-16011): Reduce agent image size (#617) [#617](https://github.com/openshift/assisted-installer-agent/pull/617)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#618) [#618](https://github.com/openshift/assisted-installer-agent/pull/618)
* [MGMT-15900](https://issues.redhat.com/browse/MGMT-15900): Add enable-skip-mco-reboot flag to assisted installer install command (#614) [#614](https://github.com/openshift/assisted-installer-agent/pull/614)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) [#612](https://github.com/openshift/assisted-installer-agent/pull/612)
* NO-ISSUE: add adriengentil as approver (#611) [#611](https://github.com/openshift/assisted-installer-agent/pull/611)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) [#608](https://github.com/openshift/assisted-installer-agent/pull/608)
* [MGMT-15809](https://issues.redhat.com/browse/MGMT-15809): change base image to stream9 (#604) [#604](https://github.com/openshift/assisted-installer-agent/pull/604)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#603) [#603](https://github.com/openshift/assisted-installer-agent/pull/603)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to v1.53.1 (#591) [#591](https://github.com/openshift/assisted-installer-agent/pull/591)
* NO-ISSUE: fix lint target and code (#605) [#605](https://github.com/openshift/assisted-installer-agent/pull/605)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Update domain validation from assisted-service changes (#599) [#599](https://github.com/openshift/assisted-installer-agent/pull/599)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e438a5e93d2b08ba670acf742c0f1c6ad44ab92b...51397c0dd85618e17158334d4ea50f2a26f7acd3)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/9d47246ba13b188a8108c959f9bf6930145b2694)

* Bump golang builder to rhel9 [#30](https://github.com/openshift/agent-installer-utils/pull/30)
* [OCPBUGS-19219](https://issues.redhat.com/browse/OCPBUGS-19219): Updating ose-agent-installer-utils images to be consistent with ART [#29](https://github.com/openshift/agent-installer-utils/pull/29)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ad8537697818870b53b6262041f0dfa78a3b41c2...9d47246ba13b188a8108c959f9bf6930145b2694)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/43228aa4b32cdce2dabaee1cb03035ba4c287491)

* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8c532d2e64aa0f2fc30e49d658a47426fab38cb3...43228aa4b32cdce2dabaee1cb03035ba4c287491)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/613efac305a59793a7acebb717c5e563f98e4067)

* [STOR-1389](https://issues.redhat.com/browse/STOR-1389): Rebase to v1.2.1 for OCP 4.15 [#41](https://github.com/openshift/alibaba-cloud-csi-driver/pull/41)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#34](https://github.com/openshift/alibaba-cloud-csi-driver/pull/34)
* [OCPBUGS-19199](https://issues.redhat.com/browse/OCPBUGS-19199): Updating ose-alibaba-cloud-csi-driver images to be consistent with ART [#33](https://github.com/openshift/alibaba-cloud-csi-driver/pull/33)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3dc363d364c43c1fb03e223147e25d9057273428...613efac305a59793a7acebb717c5e563f98e4067)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/ee57d9d359cf2f897f2444f9c42d7009842e4963)

* [OCPBUGS-22541](https://issues.redhat.com/browse/OCPBUGS-22541): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#70](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/70)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#69](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/69)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/62)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#57](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/57)
* [OCPBUGS-19111](https://issues.redhat.com/browse/OCPBUGS-19111): Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#61](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/61)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/7e0204aeee1770a98afb7ace4f3ccb5568c906e8...ee57d9d359cf2f897f2444f9c42d7009842e4963)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/3da1e37cb91389c8c6422e8f76d19a1a95a38a79)

* NO-JIRA: Update OWNERS [#45](https://github.com/openshift/cluster-api-provider-alibaba/pull/45)
* [OCPBUGS-19201](https://issues.redhat.com/browse/OCPBUGS-19201): Updating ose-alibaba-machine-controllers images to be consistent with ART [#44](https://github.com/openshift/cluster-api-provider-alibaba/pull/44)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/27f105d3b722e19f76b72588d36eeae9dac0a444...3da1e37cb91389c8c6422e8f76d19a1a95a38a79)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f0caebbab59ca8e8907f3eb8eb48f15c2a341228)

* [HOSTEDCP-1242](https://issues.redhat.com/browse/HOSTEDCP-1242), [HOSTEDCP-1243](https://issues.redhat.com/browse/HOSTEDCP-1243): Rebase to latest upstream master [#43](https://github.com/openshift/apiserver-network-proxy/pull/43)
* [OCPBUGS-16488](https://issues.redhat.com/browse/OCPBUGS-16488): rebase to latest upstream master [#42](https://github.com/openshift/apiserver-network-proxy/pull/42)
* Revert "OCPBUGS-16488: rebase to latest upstream master" [#37](https://github.com/openshift/apiserver-network-proxy/pull/37)
* [OCPBUGS-16488](https://issues.redhat.com/browse/OCPBUGS-16488): rebase to latest upstream master [#35](https://github.com/openshift/apiserver-network-proxy/pull/35)
* [OCPBUGS-19266](https://issues.redhat.com/browse/OCPBUGS-19266): Updating ose-apiserver-network-proxy images to be consistent with ART [#33](https://github.com/openshift/apiserver-network-proxy/pull/33)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/15cd4347b9384fac3d93029c6426dc15b964f557...f0caebbab59ca8e8907f3eb8eb48f15c2a341228)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/0f5434cbaf3ca4a8aa3d7ab919642bd1a4ab968c)

* [OCPBUGS-21839](https://issues.redhat.com/browse/OCPBUGS-21839): Upgrade x/net to v0.17.0 [#51](https://github.com/openshift/cloud-provider-aws/pull/51)
* Update OWNERS [#52](https://github.com/openshift/cloud-provider-aws/pull/52)
* [OCPCLOUD-2187](https://issues.redhat.com/browse/OCPCLOUD-2187): Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master [#47](https://github.com/openshift/cloud-provider-aws/pull/47)
* [OCPBUGS-19218](https://issues.redhat.com/browse/OCPBUGS-19218): Updating ose-aws-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-aws/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/1763ea56c30ec1a0589ee900911a853ae375ff0d...0f5434cbaf3ca4a8aa3d7ab919642bd1a4ab968c)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/3fb56e2d6234085ac3e4ce94ea45e2ea3ff342df)

* Update OWNERS [#480](https://github.com/openshift/cluster-api-provider-aws/pull/480)
* [OCPBUGS-21649](https://issues.redhat.com/browse/OCPBUGS-21649): Bump golang.org/x/net to v0.17.0 [#479](https://github.com/openshift/cluster-api-provider-aws/pull/479)
* [OCPBUGS-17279](https://issues.redhat.com/browse/OCPBUGS-17279), [OCPCLOUD-2216](https://issues.redhat.com/browse/OCPCLOUD-2216): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master [#478](https://github.com/openshift/cluster-api-provider-aws/pull/478)
* [OCPBUGS-19185](https://issues.redhat.com/browse/OCPBUGS-19185): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#477](https://github.com/openshift/cluster-api-provider-aws/pull/477)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/fb2b2e6126061513b2441091a1523f3214305431...3fb56e2d6234085ac3e4ce94ea45e2ea3ff342df)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/00c114fd59b237f58d429b8fbd7790b37dff39fa)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net@v0.17.0 [#237](https://github.com/openshift/aws-ebs-csi-driver/pull/237)
* [OCPBUGS-19101](https://issues.redhat.com/browse/OCPBUGS-19101): Updating ose-aws-ebs-csi-driver images to be consistent with ART [#235](https://github.com/openshift/aws-ebs-csi-driver/pull/235)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/2e2e2774b971d215c3ded5eef925980bac047253...00c114fd59b237f58d429b8fbd7790b37dff39fa)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/6d8dc60e0b455365ce124e268be7adbd081c894b)

* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* [Full changelog](https://github.com/openshift/csi-operator/compare/024bec5b1d318b874fd93d6e57018467d26333d1...6d8dc60e0b455365ce124e268be7adbd081c894b)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/d1854f853f66238befdc765a5711e2f55b19397d)

* Update OWNERS [#86](https://github.com/openshift/machine-api-provider-aws/pull/86)
* [OCPBUGS-21640](https://issues.redhat.com/browse/OCPBUGS-21640): Update golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/machine-api-provider-aws/pull/85)
* [OCPBUGS-20266](https://issues.redhat.com/browse/OCPBUGS-20266): update bad url endpoint termination handler test [#84](https://github.com/openshift/machine-api-provider-aws/pull/84)
* [OCPBUGS-19190](https://issues.redhat.com/browse/OCPBUGS-19190): Updating ose-machine-api-provider-aws images to be consistent with ART [#82](https://github.com/openshift/machine-api-provider-aws/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/8925f3b1fc95f933b029bf13946dcafea646a74b...d1854f853f66238befdc765a5711e2f55b19397d)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ff19b978a76daeb616447ebb9d1103c78736748c)

* NO-ISSUE: Sync OWNERS with team members [#173](https://github.com/openshift/aws-pod-identity-webhook/pull/173)
* snyk: exclude vendor/ [#170](https://github.com/openshift/aws-pod-identity-webhook/pull/170)
* Bump k8s deps for CVE-2023-39325 [#169](https://github.com/openshift/aws-pod-identity-webhook/pull/169)
* [OCPBUGS-19264](https://issues.redhat.com/browse/OCPBUGS-19264): Updating ose-aws-pod-identity-webhook images to be consistent with ART [#167](https://github.com/openshift/aws-pod-identity-webhook/pull/167)
* [CCO-429](https://issues.redhat.com/browse/CCO-429): Rebase master [#166](https://github.com/openshift/aws-pod-identity-webhook/pull/166)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ed5ae281ece6092735140617c486e5822ce5b7b6...ff19b978a76daeb616447ebb9d1103c78736748c)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/75ed9a21c1f0e2acfb5b27da395fdb02c918d56f)

* [OCPBUGS-22265](https://issues.redhat.com/browse/OCPBUGS-22265): Bump x/net package to v0.17.0 [#90](https://github.com/openshift/cloud-provider-azure/pull/90)
* Update OWNERS [#87](https://github.com/openshift/cloud-provider-azure/pull/87)
* [OCPBUGS-17282](https://issues.redhat.com/browse/OCPBUGS-17282): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master [#84](https://github.com/openshift/cloud-provider-azure/pull/84)
* [OCPBUGS-19267](https://issues.redhat.com/browse/OCPBUGS-19267): Updating ose-azure-cloud-controller-manager images to be consistent with ART [#86](https://github.com/openshift/cloud-provider-azure/pull/86)
* [OCPBUGS-19265](https://issues.redhat.com/browse/OCPBUGS-19265): Updating ose-azure-cloud-node-manager images to be consistent with ART [#85](https://github.com/openshift/cloud-provider-azure/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/cca9a841e807dd87708b82562fc5f376ed2f274c...75ed9a21c1f0e2acfb5b27da395fdb02c918d56f)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/4b2e1b6aca5eacbdfd26e38d6cc90f0e7f27033d)

* Update OWNERS [#287](https://github.com/openshift/cluster-api-provider-azure/pull/287)
* [OCPBUGS-21648](https://issues.redhat.com/browse/OCPBUGS-21648): Bump golang.org/x/net to v0.17.0 [#285](https://github.com/openshift/cluster-api-provider-azure/pull/285)
* [OCPCLOUD-2217](https://issues.redhat.com/browse/OCPCLOUD-2217): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master [#284](https://github.com/openshift/cluster-api-provider-azure/pull/284)
* [OCPBUGS-19147](https://issues.redhat.com/browse/OCPBUGS-19147): Updating ose-azure-cluster-api-controllers images to be consistent with ART [#282](https://github.com/openshift/cluster-api-provider-azure/pull/282)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/c015df41ed16a1eccd1ec60b77c96b4334a5bcb2...4b2e1b6aca5eacbdfd26e38d6cc90f0e7f27033d)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/14b83376e2069419ea5b0a2aba93cb45816d645b)

* [STOR-1394](https://issues.redhat.com/browse/STOR-1394): Rebase v1.29.0 for OCP 4.15 [#51](https://github.com/openshift/azure-disk-csi-driver/pull/51)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/azure-disk-csi-driver/pull/53)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver images to be consistent with ART [#50](https://github.com/openshift/azure-disk-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b19eec11854e89a3e45f27455ce54d19c25f375b...14b83376e2069419ea5b0a2aba93cb45816d645b)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/69ed226b3f33630a519c1185e442fb0c813f0cf8)

* [OCPBUGS-22560](https://issues.redhat.com/browse/OCPBUGS-22560): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#107](https://github.com/openshift/azure-disk-csi-driver-operator/pull/107)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#93](https://github.com/openshift/azure-disk-csi-driver-operator/pull/93)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#106](https://github.com/openshift/azure-disk-csi-driver-operator/pull/106)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#100](https://github.com/openshift/azure-disk-csi-driver-operator/pull/100)
* update readme [#99](https://github.com/openshift/azure-disk-csi-driver-operator/pull/99)
* simplify workload identity feature enablement [#92](https://github.com/openshift/azure-disk-csi-driver-operator/pull/92)
* update readme [#94](https://github.com/openshift/azure-disk-csi-driver-operator/pull/94)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#98](https://github.com/openshift/azure-disk-csi-driver-operator/pull/98)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/4db2f8aac33abbc600b72a82ebe205581a998a7b...69ed226b3f33630a519c1185e442fb0c813f0cf8)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/d2b7632674a6d0c62e7924079b99a14f748ec5ba)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/azure-file-csi-driver/pull/36)
* [OCPBUGS-19110](https://issues.redhat.com/browse/OCPBUGS-19110): Updating azure-file-csi-driver images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver/pull/34)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f401f53684e5aa1e94036612770ca7ee10f55b24...d2b7632674a6d0c62e7924079b99a14f748ec5ba)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/1df7e493fe0289f7da05d8ef2dce2f289b0422b9)

* [OCPBUGS-22562](https://issues.redhat.com/browse/OCPBUGS-22562): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#82](https://github.com/openshift/azure-file-csi-driver-operator/pull/82)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#81](https://github.com/openshift/azure-file-csi-driver-operator/pull/81)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#75](https://github.com/openshift/azure-file-csi-driver-operator/pull/75)
* update readme [#70](https://github.com/openshift/azure-file-csi-driver-operator/pull/70)
* simplify workload identity feature enablement [#69](https://github.com/openshift/azure-file-csi-driver-operator/pull/69)
* [OCPBUGS-19170](https://issues.redhat.com/browse/OCPBUGS-19170): Updating azure-file-csi-driver-operator images to be consistent with ART [#74](https://github.com/openshift/azure-file-csi-driver-operator/pull/74)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/43838ae6c329e7d818c19ec59dfba5abde7535f6...1df7e493fe0289f7da05d8ef2dce2f289b0422b9)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/4de2d8205dfd15070d10534a6f9e6a9065ecd2ff)

* Update OWNERS [#79](https://github.com/openshift/machine-api-provider-azure/pull/79)
* [OCPBUGS-21790](https://issues.redhat.com/browse/OCPBUGS-21790): Bump x/net package to v0.17.0 [#78](https://github.com/openshift/machine-api-provider-azure/pull/78)
* [OCPBUGS-20268](https://issues.redhat.com/browse/OCPBUGS-20268): update bad url endpoint termination handler test [#77](https://github.com/openshift/machine-api-provider-azure/pull/77)
* [OCPCLOUD-2192](https://issues.redhat.com/browse/OCPCLOUD-2192): Bump k8s packages to v1.28 [#76](https://github.com/openshift/machine-api-provider-azure/pull/76)
* [OCPBUGS-19269](https://issues.redhat.com/browse/OCPBUGS-19269): Updating ose-machine-api-provider-azure images to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-azure/pull/75)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/bb6ee0623b4b83146588b9f6fd40d7f4c3284522...4de2d8205dfd15070d10534a6f9e6a9065ecd2ff)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2872dbac3b8ceee33490d974c979d309d266521d)

* [OCPBUGS-19244](https://issues.redhat.com/browse/OCPBUGS-19244): Updating ose-azure-workload-identity-webhook images to be consistent with ART [#6](https://github.com/openshift/azure-workload-identity/pull/6)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/a474b2b0bc88d30cb4661b49bc3f9adac620b773...2872dbac3b8ceee33490d974c979d309d266521d)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/f60ebb065b4242586f7afacc5f2be8afddbdfbde)

* [MULTIARCH-2590](https://issues.redhat.com/browse/MULTIARCH-2590): PowerVS create service instance [#7695](https://github.com/openshift/installer/pull/7695)
* [SPLAT-1141](https://issues.redhat.com/browse/SPLAT-1141): implement vSphere control plane machinesets [#7418](https://github.com/openshift/installer/pull/7418)
* [CORS-2428](https://issues.redhat.com/browse/CORS-2428): images: add Dockerfile for a terraform-providers image [#7687](https://github.com/openshift/installer/pull/7687)
* [OSASINFRA-3237](https://issues.redhat.com/browse/OSASINFRA-3237): move controlPlanePort API to GA [#7570](https://github.com/openshift/installer/pull/7570)
* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): use build tags to produce installer with alternate infrastructure providers [#7656](https://github.com/openshift/installer/pull/7656)
* [CORS-2877](https://issues.redhat.com/browse/CORS-2877): Install Config Feature Gate Validation [#7413](https://github.com/openshift/installer/pull/7413)
* [OCPBUGS-22772](https://issues.redhat.com/browse/OCPBUGS-22772): return Terraform statefile on error [#7671](https://github.com/openshift/installer/pull/7671)
* NO-JIRA: destroy/aws: replaced deprecated sets syntax [#7680](https://github.com/openshift/installer/pull/7680)
* [OCPBUGS-19398](https://issues.redhat.com/browse/OCPBUGS-19398): IBMCloud: Add eu-es region [#7668](https://github.com/openshift/installer/pull/7668)
* [OCPBUGS-22830](https://issues.redhat.com/browse/OCPBUGS-22830): fix google cli verson to 447.0.0 [#7663](https://github.com/openshift/installer/pull/7663)
* [OCPBUGS-22113](https://issues.redhat.com/browse/OCPBUGS-22113): Do not generate azure-cloud-provider in manual mode for aro builds [#7608](https://github.com/openshift/installer/pull/7608)
* [OCPBUGS-22757](https://issues.redhat.com/browse/OCPBUGS-22757): update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 [#7654](https://github.com/openshift/installer/pull/7654)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce pkg/clusterapi, system, and local control plane [#7630](https://github.com/openshift/installer/pull/7630)
* [OCPBUGS-20403](https://issues.redhat.com/browse/OCPBUGS-20403): OpenStack: add SG rules for compact clusters on UPI [#7576](https://github.com/openshift/installer/pull/7576)
* [OCPBUGS-17866](https://issues.redhat.com/browse/OCPBUGS-17866): check GOOGLE_APPLICATION_CREDENTIALS env var [#6863](https://github.com/openshift/installer/pull/6863)
* [OCPBUGS-22773](https://issues.redhat.com/browse/OCPBUGS-22773): PowerVS: fix removeFromLoadBalancers [#7653](https://github.com/openshift/installer/pull/7653)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7650](https://github.com/openshift/installer/pull/7650)
* Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap [#7638](https://github.com/openshift/installer/pull/7638)
* [OCPBUGS-18387](https://issues.redhat.com/browse/OCPBUGS-18387): Add Azure ConfidentialVM capability and DiskEncryptionSet validations [#7469](https://github.com/openshift/installer/pull/7469)
* [OCPBUGS-22489](https://issues.redhat.com/browse/OCPBUGS-22489): destroy: gcp: fix destroying regional disks [#7643](https://github.com/openshift/installer/pull/7643)
* [OCPBUGS-22058](https://issues.redhat.com/browse/OCPBUGS-22058): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7590](https://github.com/openshift/installer/pull/7590)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Skip the deletion of instance profiles marked shared [#7537](https://github.com/openshift/installer/pull/7537)
* hack/go-lint: update golanci-lint to v1.53.1 [#7635](https://github.com/openshift/installer/pull/7635)
* [OCPBUGS-22655](https://issues.redhat.com/browse/OCPBUGS-22655): Bump Fedora CoreOS to latest stable [#7644](https://github.com/openshift/installer/pull/7644)
* bootkube.sh: drop final mention of `machine-os-content` [#7636](https://github.com/openshift/installer/pull/7636)
* update tested x86 instance type on 4.14 [#7639](https://github.com/openshift/installer/pull/7639)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Skip gatewayd units only on OKD agent-installer [#7629](https://github.com/openshift/installer/pull/7629)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Build and package Cluster API and providers [#7620](https://github.com/openshift/installer/pull/7620)
* [AGENT-713](https://issues.redhat.com/browse/AGENT-713): Use BM hosts in install-config if not defined in agent-config [#7531](https://github.com/openshift/installer/pull/7531)
* [MIXEDARCH-353](https://issues.redhat.com/browse/MIXEDARCH-353): Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage's manifest-list image [#7567](https://github.com/openshift/installer/pull/7567)
* openstack: dual stack UPI - create security group rules for IPv6 [#7552](https://github.com/openshift/installer/pull/7552)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): bump openshift/api [#7613](https://github.com/openshift/installer/pull/7613)
* [AGENT-718](https://issues.redhat.com/browse/AGENT-718): Add vSphere credentials to install-config overrides [#7593](https://github.com/openshift/installer/pull/7593)
* Revert #7428 "OCPBUGS-13664: Add KMS encryption keys if provided" [#7625](https://github.com/openshift/installer/pull/7625)
* [OCPBUGS-10906](https://issues.redhat.com/browse/OCPBUGS-10906): check extracted base iso coreos version is in sync [#7030](https://github.com/openshift/installer/pull/7030)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Enable gatewayd units only on RHCOS [#7580](https://github.com/openshift/installer/pull/7580)
* [OCPBUGS-21720](https://issues.redhat.com/browse/OCPBUGS-21720): images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 [#6813](https://github.com/openshift/installer/pull/6813)
* [CORS-2836](https://issues.redhat.com/browse/CORS-2836): Refactor Stages, encapsulate terraform [#7488](https://github.com/openshift/installer/pull/7488)
* [OCPBUGS-20356](https://issues.redhat.com/browse/OCPBUGS-20356): update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 [#7616](https://github.com/openshift/installer/pull/7616)
* [OCPBUGS-20364](https://issues.redhat.com/browse/OCPBUGS-20364): azure: validation: validate defaultMachinePlatform [#7584](https://github.com/openshift/installer/pull/7584)
* [OCPBUGS-20525](https://issues.redhat.com/browse/OCPBUGS-20525): aws: use security groups from defaultMachinePlatform [#7589](https://github.com/openshift/installer/pull/7589)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7428](https://github.com/openshift/installer/pull/7428)
* [OCPBUGS-5471](https://issues.redhat.com/browse/OCPBUGS-5471): Try to select rendezvousIP among non-worker hosts [#7443](https://github.com/openshift/installer/pull/7443)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Rectify GCP label key validation check [#7596](https://github.com/openshift/installer/pull/7596)
* Revert skipping integration test agent sno arm [#7561](https://github.com/openshift/installer/pull/7561)
* [OCPBUGS-20350](https://issues.redhat.com/browse/OCPBUGS-20350): vSphere,segfault on version check [#7575](https://github.com/openshift/installer/pull/7575)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093): skip agent-tui on OCI [#7512](https://github.com/openshift/installer/pull/7512)
* [OCPVE-675](https://issues.redhat.com/browse/OCPVE-675): feat: bump api to add OLM capability [#7495](https://github.com/openshift/installer/pull/7495)
* Enforcing the serial execution of the integration tests [#7591](https://github.com/openshift/installer/pull/7591)
* images: Cleanup CI Dockerfiles [#7507](https://github.com/openshift/installer/pull/7507)
* [OCPBUGS-20440](https://issues.redhat.com/browse/OCPBUGS-20440): Warn about host and target compatibility [#7582](https://github.com/openshift/installer/pull/7582)
* [OCPBUGS-19444](https://issues.redhat.com/browse/OCPBUGS-19444): Use changes to AgentClusterInstall during loading [#7506](https://github.com/openshift/installer/pull/7506)
* OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules [#7577](https://github.com/openshift/installer/pull/7577)
* Remove unused method [#7438](https://github.com/openshift/installer/pull/7438)
* PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality [#7564](https://github.com/openshift/installer/pull/7564)
* [OCPBUGS-19552](https://issues.redhat.com/browse/OCPBUGS-19552): Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved [#7516](https://github.com/openshift/installer/pull/7516)
* docs: Described process of adding vGPU capable nodes. [#6606](https://github.com/openshift/installer/pull/6606)
* [OCPBUGS-19086](https://issues.redhat.com/browse/OCPBUGS-19086): Check if nmstatectl executable exists in the system [#7492](https://github.com/openshift/installer/pull/7492)
* [OCPBUGS-16666](https://issues.redhat.com/browse/OCPBUGS-16666): Change where AdditionalTrustBundle is set [#7485](https://github.com/openshift/installer/pull/7485)
* [OCPBUGS-18455](https://issues.redhat.com/browse/OCPBUGS-18455): Unable to disable external CCM for platform external [#7533](https://github.com/openshift/installer/pull/7533)
* [OCPBUGS-18552](https://issues.redhat.com/browse/OCPBUGS-18552): Truncate vlan names defined in nmstate if > 15 chars [#7486](https://github.com/openshift/installer/pull/7486)
* OpenStack: enable IPv6 primary dual-stack cluster [#7259](https://github.com/openshift/installer/pull/7259)
* [OCPBUGS-20110](https://issues.redhat.com/browse/OCPBUGS-20110): Add an unit test - at least one interface must be defined for each node [#7555](https://github.com/openshift/installer/pull/7555)
* [OSASINFRA-3199](https://issues.redhat.com/browse/OSASINFRA-3199): Configure User-Agent for OpenStack API calls [#7548](https://github.com/openshift/installer/pull/7548)
* [OCPBUGS-17757](https://issues.redhat.com/browse/OCPBUGS-17757): check credentials type to handle different gcp authentication methods [#7422](https://github.com/openshift/installer/pull/7422)
* Docs: Fix openstack command for image update in upi installation [#7556](https://github.com/openshift/installer/pull/7556)
* PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions [#7563](https://github.com/openshift/installer/pull/7563)
* PowerVS: Remove deprecated errors package [#7544](https://github.com/openshift/installer/pull/7544)
* Disable pxe sno arm integration test [#7557](https://github.com/openshift/installer/pull/7557)
* Inefficient wait for all clusteroperators [#7535](https://github.com/openshift/installer/pull/7535)
* [OCPBUGS-15844](https://issues.redhat.com/browse/OCPBUGS-15844): Enable FIPS in agent ISO [#7540](https://github.com/openshift/installer/pull/7540)
* [OCPBUGS-20058](https://issues.redhat.com/browse/OCPBUGS-20058): Use updated ansible-core for Openstack image [#7549](https://github.com/openshift/installer/pull/7549)
* OWNERS: Remove obsolete agent reviewers [#7545](https://github.com/openshift/installer/pull/7545)
* [OCPBUGS-5728](https://issues.redhat.com/browse/OCPBUGS-5728): Log "agent wait-for" commands to .openshift_install.log [#7452](https://github.com/openshift/installer/pull/7452)
* [OCPBUGS-19092](https://issues.redhat.com/browse/OCPBUGS-19092): Enable serial console for external OCI platform [#7511](https://github.com/openshift/installer/pull/7511)
* [OCPBUGS-18690](https://issues.redhat.com/browse/OCPBUGS-18690): ic: azure: validate NVMe-only family types [#7500](https://github.com/openshift/installer/pull/7500)
* [CORS-2479](https://issues.redhat.com/browse/CORS-2479): agent: Ensure registries.conf is world readable [#6745](https://github.com/openshift/installer/pull/6745)
* add jbtrystram to coreOS approvers and reviewers [#7464](https://github.com/openshift/installer/pull/7464)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093), [OCPBUGS-19688](https://issues.redhat.com/browse/OCPBUGS-19688): Allow agent-tui to use serial console [#7526](https://github.com/openshift/installer/pull/7526)
* Tweaks to validateRendezvousIPNotWorker [#7437](https://github.com/openshift/installer/pull/7437)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Tag aws instance profiles. [#7510](https://github.com/openshift/installer/pull/7510)
* [OCPBUGS-19376](https://issues.redhat.com/browse/OCPBUGS-19376): GCP default value for service account [#7519](https://github.com/openshift/installer/pull/7519)
* [MULTIARCH-3701](https://issues.redhat.com/browse/MULTIARCH-3701): Enable ppc64le for agent installer [#7366](https://github.com/openshift/installer/pull/7366)
* pkg/asset/installconfig/powervs: fix dropped error [#7419](https://github.com/openshift/installer/pull/7419)
* [OCPBUGS-19699](https://issues.redhat.com/browse/OCPBUGS-19699): Remove warning about CPUPartitioning [#7527](https://github.com/openshift/installer/pull/7527)
* [OCPBUGS-18187](https://issues.redhat.com/browse/OCPBUGS-18187): Increase bootstrap timeout for vSphere platform by 30 mins [#7518](https://github.com/openshift/installer/pull/7518)
* [OCPBUGS-18830](https://issues.redhat.com/browse/OCPBUGS-18830): AWS terraform bootstrap destroy will not refresh state [#7491](https://github.com/openshift/installer/pull/7491)
* [OCPBUGS-12707](https://issues.redhat.com/browse/OCPBUGS-12707): always write AWS cloud.conf [#7514](https://github.com/openshift/installer/pull/7514)
* [AGENT-710](https://issues.redhat.com/browse/AGENT-710): Use invoker for bootstrap template generation [#7508](https://github.com/openshift/installer/pull/7508)
* [OCPBUGS-18876](https://issues.redhat.com/browse/OCPBUGS-18876): Pass CPUPartitioning via install-config overrides if set [#7513](https://github.com/openshift/installer/pull/7513)
* OpenStack: fix IPv6 docs [#7482](https://github.com/openshift/installer/pull/7482)
* [OCPBUGS-18945](https://issues.redhat.com/browse/OCPBUGS-18945): update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 [#7499](https://github.com/openshift/installer/pull/7499)
* LICENSE: Update [#7502](https://github.com/openshift/installer/pull/7502)
* [OCPBUGS-19286](https://issues.redhat.com/browse/OCPBUGS-19286): Updating ose-installer-artifacts images to be consistent with ART [#7496](https://github.com/openshift/installer/pull/7496)
* [SPLAT-1170](https://issues.redhat.com/browse/SPLAT-1170): enable cloud controller manager type to be defined [#7457](https://github.com/openshift/installer/pull/7457)
* OpenStack: Set external network for cloud-provider [#7411](https://github.com/openshift/installer/pull/7411)
* [OCPBUGS-17724](https://issues.redhat.com/browse/OCPBUGS-17724): Graceful fail for AWS getUser on destroy [#7429](https://github.com/openshift/installer/pull/7429)
* AGENT: publish services diagrams [#7323](https://github.com/openshift/installer/pull/7323)
* [OCPBUGS-19149](https://issues.redhat.com/browse/OCPBUGS-19149): Updating ose-baremetal-installer images to be consistent with ART [#7494](https://github.com/openshift/installer/pull/7494)
* [OCPBUGS-19130](https://issues.redhat.com/browse/OCPBUGS-19130): Updating ose-installer images to be consistent with ART [#7493](https://github.com/openshift/installer/pull/7493)
* [OCPBUGS-17218](https://issues.redhat.com/browse/OCPBUGS-17218): Warn when firewall rull missing. [#7417](https://github.com/openshift/installer/pull/7417)
* [OSASINFRA-3236](https://issues.redhat.com/browse/OSASINFRA-3236): deps: Bump gophercloud to v1.6.0 [#7208](https://github.com/openshift/installer/pull/7208)
* [OCPBUGS-19037](https://issues.redhat.com/browse/OCPBUGS-19037): Handle agent tui failure gracefully [#7490](https://github.com/openshift/installer/pull/7490)
* [OCPBUGS-19017](https://issues.redhat.com/browse/OCPBUGS-19017): Add Net capabilities to dnsmasq container [#7487](https://github.com/openshift/installer/pull/7487)
* [OCPBUGS-18113](https://issues.redhat.com/browse/OCPBUGS-18113): Do not set FailureDomains on CPMS when in a single zone Azure region [#7448](https://github.com/openshift/installer/pull/7448)
* [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7450](https://github.com/openshift/installer/pull/7450)
* [OCPBUGS-18304](https://issues.redhat.com/browse/OCPBUGS-18304): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7451](https://github.com/openshift/installer/pull/7451)
* Implement workaround to allow SNO installations for OKD/FCOS [#7445](https://github.com/openshift/installer/pull/7445)
* [Full changelog](https://github.com/openshift/installer/compare/d9e0b2d88a21a13a9b76a182b76f9fc4d21359ea...f60ebb065b4242586f7afacc5f2be8afddbdfbde)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2adf4799b2b92e1536158231fc73bc5c4e4ec5e8)

* NO-ISSUE: Log when applying updates to BareMetalHost [#203](https://github.com/openshift/cluster-api-provider-baremetal/pull/203)
* [OCPBUGS-21794](https://issues.redhat.com/browse/OCPBUGS-21794): Uplift x/net to v0.17.0 [#197](https://github.com/openshift/cluster-api-provider-baremetal/pull/197)
* [OCPBUGS-19178](https://issues.redhat.com/browse/OCPBUGS-19178): Updating baremetal-machine-controller images to be consistent with ART [#196](https://github.com/openshift/cluster-api-provider-baremetal/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fa79a768cc7ceddc7c013851522387ab92c633f5...2adf4799b2b92e1536158231fc73bc5c4e4ec5e8)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/749609dd0fb858be72a783c5d87853cad2d303db)

* [OCPBUGS-8764](https://issues.redhat.com/browse/OCPBUGS-8764): Merge upstream [#315](https://github.com/openshift/baremetal-operator/pull/315)
* Merge upstream [#314](https://github.com/openshift/baremetal-operator/pull/314)
* [OCPBUGS-21736](https://issues.redhat.com/browse/OCPBUGS-21736): Uplift x/net to v0.17.0 [#313](https://github.com/openshift/baremetal-operator/pull/313)
* Merge upstream [#303](https://github.com/openshift/baremetal-operator/pull/303)
* [OCPBUGS-19191](https://issues.redhat.com/browse/OCPBUGS-19191): Updating ose-baremetal-operator images to be consistent with ART [#302](https://github.com/openshift/baremetal-operator/pull/302)
* Merge upstream [#301](https://github.com/openshift/baremetal-operator/pull/301)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/911a1be7478c203560e9219af16fae3b1cca5a63...749609dd0fb858be72a783c5d87853cad2d303db)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d82b9441f4e0e3379dba4f30482877cfceebeddb)

* [OCPBUGS-22204](https://issues.redhat.com/browse/OCPBUGS-22204): deps: upgrade x/sys [#280](https://github.com/openshift/baremetal-runtimecfg/pull/280)
* [OCPBUGS-19492](https://issues.redhat.com/browse/OCPBUGS-19492): Increase timeout for bootstrap kubeapi [#276](https://github.com/openshift/baremetal-runtimecfg/pull/276)
* [OCPBUGS-19098](https://issues.redhat.com/browse/OCPBUGS-19098): Updating baremetal-runtimecfg images to be consistent with ART [#274](https://github.com/openshift/baremetal-runtimecfg/pull/274)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/887b94a7453321f3f492a2de7b69c891aaceeacf...d82b9441f4e0e3379dba4f30482877cfceebeddb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7bce4b95745afecbbe31b5921828fdc9796090d0)

* NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594)
* Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591)
* [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588)
* moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532)
* [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586)
* pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583)
* oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585)
* create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582)
* pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581)
* [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557)
* [OCPBUGS-20381](https://issues.redhat.com/browse/OCPBUGS-20381): Bump golang.org/x/net to v0.17.0 [#1578](https://github.com/openshift/oc/pull/1578)
* [OCPBUGS-20528](https://issues.redhat.com/browse/OCPBUGS-20528): Revert "OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror" [#1575](https://github.com/openshift/oc/pull/1575)
* [OCPBUGS-20474](https://issues.redhat.com/browse/OCPBUGS-20474): Set ImportPolicy to PreserveOriginal to honor --keep-manifest-list when mirroring a payload to an image stream [#1572](https://github.com/openshift/oc/pull/1572)
* [OCPBUGS-20342](https://issues.redhat.com/browse/OCPBUGS-20342): Reflect container's exit code for long running tasks not attached to terminal [#1571](https://github.com/openshift/oc/pull/1571)
* [OCPBUGS-20063](https://issues.redhat.com/browse/OCPBUGS-20063): regeneratemco: explicitly check for PlatformStatus field [#1555](https://github.com/openshift/oc/pull/1555)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Bump distribution/v3 to sync with oc-mirror [#1556](https://github.com/openshift/oc/pull/1556)
* [OCPBUGS-20181](https://issues.redhat.com/browse/OCPBUGS-20181): Use quay redis image instead docker mysql [#1559](https://github.com/openshift/oc/pull/1559)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Introduce refreshable dynamic credential store for image manifests [#1540](https://github.com/openshift/oc/pull/1540)
* Updating excluded list of  unsupported oc adm commands in MicroShift [#1558](https://github.com/openshift/oc/pull/1558)
* [WINC-692](https://issues.redhat.com/browse/WINC-692): Add Windows node functionality to debug command [#1524](https://github.com/openshift/oc/pull/1524)
* [WRKLDS-537](https://issues.redhat.com/browse/WRKLDS-537): oc adm release info: Add --first-parent to git log for simplification [#1552](https://github.com/openshift/oc/pull/1552)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#1547](https://github.com/openshift/oc/pull/1547)
* [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545)
* [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544)
* [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548)
* [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546)
* [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542)
* [Full changelog](https://github.com/openshift/oc/compare/4a942f7ce874c894fda9cd3f162d1e58428364fa...7bce4b95745afecbbe31b5921828fdc9796090d0)


### [cli-manager](https://github.com/openshift/cli-manager/tree/)

* [WRKLDS-1067](https://issues.redhat.com/browse/WRKLDS-1067): Add e2e test [#10](https://github.com/openshift/cli-manager/pull/10)
* NO-JIRA: Add dockerconfigjson support for image pull authentication [#9](https://github.com/openshift/cli-manager/pull/9)
* [WRKLDS-1066](https://issues.redhat.com/browse/WRKLDS-1066): Change namespaces and remove redundant manifests [#8](https://github.com/openshift/cli-manager/pull/8)
* Fix sha256 checksum bug and update README [#7](https://github.com/openshift/cli-manager/pull/7)
* Overhaul cli-manager to have a working functionality [#6](https://github.com/openshift/cli-manager/pull/6)
* [Full changelog](https://github.com/openshift/cli-manager/compare/ff674b67fa3e979ce85793c591636dd53ea98445...)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2fb6be056561a0a13ed7a072f04308f37898df8b)

* [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611)
* snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613)
* [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610)
* Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609)
* [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607)
* Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606)
* Revert #592 "CCO-421: *: split pod identity webhooks from core controller" [#604](https://github.com/openshift/cloud-credential-operator/pull/604)
* [CCO-421](https://issues.redhat.com/browse/CCO-421): *: split pod identity webhooks from core controller [#592](https://github.com/openshift/cloud-credential-operator/pull/592)
* Docs: azure workload identity no longer requires TechPreviewNoUpgrade [#603](https://github.com/openshift/cloud-credential-operator/pull/603)
* [CCO-437](https://issues.redhat.com/browse/CCO-437): Document steps for in-place migration to Azure AD Workload Identity. [#598](https://github.com/openshift/cloud-credential-operator/pull/598)
* [OCPBUGS-19123](https://issues.redhat.com/browse/OCPBUGS-19123): Updating ose-cloud-credential-operator images to be consistent with ART [#600](https://github.com/openshift/cloud-credential-operator/pull/600)
* [OCPBUGS-18246](https://issues.redhat.com/browse/OCPBUGS-18246): Add networkResourceGroupName parameter for Azure [#597](https://github.com/openshift/cloud-credential-operator/pull/597)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/6956fe53f3a25c6e521ace789eb01d35d0548d1c...2fb6be056561a0a13ed7a072f04308f37898df8b)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/81ab2a17f2886bccd90dddf3deb213ed368c5be2)

* Kube 1.28 rebase for cloud-network-config-controller [#124](https://github.com/openshift/cloud-network-config-controller/pull/124)
* Bump CI image [#123](https://github.com/openshift/cloud-network-config-controller/pull/123)
* [OCPBUGS-5491](https://issues.redhat.com/browse/OCPBUGS-5491): Azure: skip backend pool if attached to an outbound rule [#121](https://github.com/openshift/cloud-network-config-controller/pull/121)
* [OCPBUGS-19163](https://issues.redhat.com/browse/OCPBUGS-19163): Updating ose-cloud-network-config-controller images to be consistent with ART [#122](https://github.com/openshift/cloud-network-config-controller/pull/122)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/159e2bd406a82efed33b32204b7692cc50dee64c...81ab2a17f2886bccd90dddf3deb213ed368c5be2)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/d57f7c99ac4060ce9c05aabf3c1409890a40c40a)

* [OCPBUGS-21719](https://issues.redhat.com/browse/OCPBUGS-21719): go.mod: bump golang.org/x/net to v0.17.0 [#635](https://github.com/openshift/cluster-authentication-operator/pull/635)
* [OCPBUGS-17987](https://issues.redhat.com/browse/OCPBUGS-17987): generate only >=0 number of random bits [#629](https://github.com/openshift/cluster-authentication-operator/pull/629)
* [OCPBUGS-19125](https://issues.redhat.com/browse/OCPBUGS-19125): Updating ose-cluster-authentication-operator images to be consistent with ART [#634](https://github.com/openshift/cluster-authentication-operator/pull/634)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bebf0fd3932be12594227b415fecd5d664611bc0...d57f7c99ac4060ce9c05aabf3c1409890a40c40a)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f7e7200c6a7120f6218db586ecf0264f22441f1b)

* [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265)
* Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261)
* [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262)
* [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/0822c7b7429a6fbea65e9d472594689429501491...f7e7200c6a7120f6218db586ecf0264f22441f1b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/809eb41097c8965837ead50e600e08d523f55130)

* [OCPBUGS-21791](https://issues.redhat.com/browse/OCPBUGS-21791): Bump x/net package to v0.17.0 [#295](https://github.com/openshift/cluster-autoscaler-operator/pull/295)
* Update OWNERS [#296](https://github.com/openshift/cluster-autoscaler-operator/pull/296)
* [OCPCLOUD-2196](https://issues.redhat.com/browse/OCPCLOUD-2196): Update dependencies k8s 1.28 [#293](https://github.com/openshift/cluster-autoscaler-operator/pull/293)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#284](https://github.com/openshift/cluster-autoscaler-operator/pull/284)
* [OCPBUGS-18954](https://issues.redhat.com/browse/OCPBUGS-18954): Ensure status reporter caches exit if they don't sync [#285](https://github.com/openshift/cluster-autoscaler-operator/pull/285)
* [OCPBUGS-19411](https://issues.redhat.com/browse/OCPBUGS-19411): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#287](https://github.com/openshift/cluster-autoscaler-operator/pull/287)
* [OCPBUGS-19169](https://issues.redhat.com/browse/OCPBUGS-19169): Updating ose-cluster-autoscaler-operator images to be consistent with ART [#286](https://github.com/openshift/cluster-autoscaler-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/63b23fcfd58295f24a9bc5bf524560a8f6e7b31f...809eb41097c8965837ead50e600e08d523f55130)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fb99dea6dc3fb8c74c90fb5407a32697e6d9c56c)

* [OCPBUGS-20563](https://issues.redhat.com/browse/OCPBUGS-20563): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#374](https://github.com/openshift/cluster-baremetal-operator/pull/374)
* [OCPBUGS-17003](https://issues.redhat.com/browse/OCPBUGS-17003): Trigger reconcile on service-ca CO [#365](https://github.com/openshift/cluster-baremetal-operator/pull/365)
* [OCPBUGS-21741](https://issues.redhat.com/browse/OCPBUGS-21741): Uplift x/net to v0.17.0 [#368](https://github.com/openshift/cluster-baremetal-operator/pull/368)
* Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes [#352](https://github.com/openshift/cluster-baremetal-operator/pull/352)
* [OCPBUGS-18788](https://issues.redhat.com/browse/OCPBUGS-18788): Remove metrics port from baremetal-operator [#361](https://github.com/openshift/cluster-baremetal-operator/pull/361)
* [OCPBUGS-19203](https://issues.redhat.com/browse/OCPBUGS-19203): Updating ose-cluster-baremetal-operator images to be consistent with ART [#362](https://github.com/openshift/cluster-baremetal-operator/pull/362)
* [OCPBUGS-17589](https://issues.redhat.com/browse/OCPBUGS-17589): Guard against nil PlatformStatus [#359](https://github.com/openshift/cluster-baremetal-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e3ae0d56fae72363516b87cca1a5bb2f044e12b4...fb99dea6dc3fb8c74c90fb5407a32697e6d9c56c)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/68b3168fbb4a1e5ce19e2233ee05f5a53db20f51)

* [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/93fba13f576831ba0953190663ab26aaf5766984...68b3168fbb4a1e5ce19e2233ee05f5a53db20f51)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/689b4ffaf6ebb30d4a39cf781a06d1d0e2e31550)

* Update OWNERS [#183](https://github.com/openshift/cluster-api/pull/183)
* [OCPBUGS-21645](https://issues.redhat.com/browse/OCPBUGS-21645): Bump golang.org/x/net to v0.17.0 [#182](https://github.com/openshift/cluster-api/pull/182)
* [OCPBUGS-17286](https://issues.redhat.com/browse/OCPBUGS-17286), [OCPCLOUD-2222](https://issues.redhat.com/browse/OCPCLOUD-2222): Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master [#181](https://github.com/openshift/cluster-api/pull/181)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-cluster-api images to be consistent with ART [#180](https://github.com/openshift/cluster-api/pull/180)
* [Full changelog](https://github.com/openshift/cluster-api/compare/4efea4967a1de8d60393f1b5b5c89e1145992c8a...689b4ffaf6ebb30d4a39cf781a06d1d0e2e31550)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/8e5ab9915fefd19b32a5248a29197d189197a6e3)

* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Bump CAPG to v1.5.0 [#142](https://github.com/openshift/cluster-capi-operator/pull/142)
* [OCPBUGS-22403](https://issues.redhat.com/browse/OCPBUGS-22403): Disable CAPI Azure Infrastructure Provider [#141](https://github.com/openshift/cluster-capi-operator/pull/141)
* Update OWNERS [#133](https://github.com/openshift/cluster-capi-operator/pull/133)
* [OCPBUGS-17287](https://issues.redhat.com/browse/OCPBUGS-17287), [OCPBUGS-21642](https://issues.redhat.com/browse/OCPBUGS-21642), [OCPCLOUD-2214](https://issues.redhat.com/browse/OCPCLOUD-2214): Bump capi/capi providers/k8s 1.27 [#132](https://github.com/openshift/cluster-capi-operator/pull/132)
* [OCPBUGS-19240](https://issues.redhat.com/browse/OCPBUGS-19240): Updating ose-cluster-capi-operator images to be consistent with ART [#129](https://github.com/openshift/cluster-capi-operator/pull/129)
* [MULTIARCH-3761](https://issues.redhat.com/browse/MULTIARCH-3761): Power VS CAPI Remove deprecated flag [#128](https://github.com/openshift/cluster-capi-operator/pull/128)
* [OCPBUGS-18504](https://issues.redhat.com/browse/OCPBUGS-18504): e2e: set ControlPlaneEndpoint in AWSCluster [#126](https://github.com/openshift/cluster-capi-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/504be5bee927f7c1d0265b82054049283699b988...8e5ab9915fefd19b32a5248a29197d189197a6e3)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/d5b14bb7aa5debc7db57e98ea733ef5a817807b6)

* [OSASINFRA-3284](https://issues.redhat.com/browse/OSASINFRA-3284): Add Events to OpenStack's RBAC [#292](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/292)
* [OCPBUGS-20213](https://issues.redhat.com/browse/OCPBUGS-20213): Add azure cloud config transformer [#291](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/291)
* Update OWNERS [#290](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/290)
* [OCPBUGS-17652](https://issues.redhat.com/browse/OCPBUGS-17652): apply necessary RBAC for the alibaba cloud controller manager [#276](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/276)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Additional permissions for internal load balancer on STS [#287](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/287)
* [OCPCLOUD-2188](https://issues.redhat.com/browse/OCPCLOUD-2188): Bump k8s packages to v1.28 [#285](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/285)
* update readme to stable status [#286](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/286)
* [OCPBUGS-19205](https://issues.redhat.com/browse/OCPBUGS-19205): Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#278](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/278)
* [OCPBUGS-18641](https://issues.redhat.com/browse/OCPBUGS-18641): Set dual-stack IPFamilyPriority for vSphere [#279](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/279)
* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Ensure subnets read permission for granular roles [#281](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/281)
* [OCPBUGS-14718](https://issues.redhat.com/browse/OCPBUGS-14718): Add message for CABundleControllerDegradedCondition error [#275](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/275)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6036333a63fbc93726ae704f1af359af49ab0987...d5b14bb7aa5debc7db57e98ea733ef5a817807b6)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/403ea8439974377024a76b024a1c0cd080f94894)

* [MCO-813](https://issues.redhat.com/browse/MCO-813): add MCN featuregate [#368](https://github.com/openshift/cluster-config-operator/pull/368)
* [SPLAT-1127](https://issues.redhat.com/browse/SPLAT-1127): bring in vSphere CPMSO API updates [#342](https://github.com/openshift/cluster-config-operator/pull/342)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Update openshift/api package to latest version [#365](https://github.com/openshift/cluster-config-operator/pull/365)
* [OCPBUGS-21744](https://issues.redhat.com/browse/OCPBUGS-21744): bump library-go to include switch to HTTP/1.1 [#366](https://github.com/openshift/cluster-config-operator/pull/366)
* [CFE-887](https://issues.redhat.com/browse/CFE-887): Bump openshift/api to add DNSNameResolver. [#364](https://github.com/openshift/cluster-config-operator/pull/364)
* Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. [#358](https://github.com/openshift/cluster-config-operator/pull/358)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Remove Build CRD [#360](https://github.com/openshift/cluster-config-operator/pull/360)
* Remove AdmissionWebhookMatchConditions feature gate [#359](https://github.com/openshift/cluster-config-operator/pull/359)
* [OCPVE-708](https://issues.redhat.com/browse/OCPVE-708): feat: bump(api) [#357](https://github.com/openshift/cluster-config-operator/pull/357)
* [OCPCLOUD-1989](https://issues.redhat.com/browse/OCPCLOUD-1989): Promote GCP CCM from TPNU to default [#319](https://github.com/openshift/cluster-config-operator/pull/319)
* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator images to be consistent with ART [#353](https://github.com/openshift/cluster-config-operator/pull/353)
* [CCO-412](https://issues.redhat.com/browse/CCO-412): Bump API to promote azureWorkloadIdentity to defaultFeatures [#351](https://github.com/openshift/cluster-config-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/fa99c083c1e6044855246c18042e6da2476964bb...403ea8439974377024a76b024a1c0cd080f94894)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/6bcb8f1b6692eac883ef9c84efdbe42e65017d5d)

* Revert #239 "OCPCLOUD-2167: Test unhealthy node cases" [#262](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/262)
* OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices [#255](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/255)
* [OCPCLOUD-2167](https://issues.redhat.com/browse/OCPCLOUD-2167): Test unhealthy node cases [#239](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/239)
* [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Reimplement "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#234](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/234)
* [SPLAT-1211](https://issues.redhat.com/browse/SPLAT-1211): recognize topology and failure domains represented by the infrastructure resource [#250](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/250)
* Update OWNERS [#253](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/253)
* [OCPBUGS-21863](https://issues.redhat.com/browse/OCPBUGS-21863): webhooks: set min version TLS 1.2 [#252](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/252)
* [OCPBUGS-21641](https://issues.redhat.com/browse/OCPBUGS-21641): Bump golang.org/x/net to v0.17.0 [#251](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/251)
* [OCPBUGS-17288](https://issues.redhat.com/browse/OCPBUGS-17288), [OCPCLOUD-2179](https://issues.redhat.com/browse/OCPCLOUD-2179): Update dependencies to k8s 1.28 [#248](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/248)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): e2e: gcp e2-custom increase memory [#246](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/246)
* [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): fix: e2e: add gcp custom type to test framework [#244](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/244)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Check CPMS events are not present when we expect error [#243](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/243)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Add events for machine creation/deletion [#242](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/242)
* [OCPBUGS-19226](https://issues.redhat.com/browse/OCPBUGS-19226): Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#241](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/241)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/3b946f36550d499537e551f353529e51044b9868...6bcb8f1b6692eac883ef9c84efdbe42e65017d5d)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/0929c76c5d2ed00b8175c95435586908a27c6495)

* [OCPBUGS-22569](https://issues.redhat.com/browse/OCPBUGS-22569): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#173](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/173)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#172](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/172)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#166](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/166)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Restart webhook Pods if `csi-snapshot-webhook-secret` changed [#157](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/157)
* [OCPBUGS-19162](https://issues.redhat.com/browse/OCPBUGS-19162): Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#160](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/160)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Move readonlyRootFilesystem to the right place [#159](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/159)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/5d8bae88fdceefd3cc6e9befe3da641839403d9c...0929c76c5d2ed00b8175c95435586908a27c6495)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/25020f49f5ad8aa0f2409e0ac26738b52a9dc2e4)

* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Ignore max unavailable for status [#386](https://github.com/openshift/cluster-dns-operator/pull/386)
* [OCPBUGS-22018](https://issues.redhat.com/browse/OCPBUGS-22018): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#387](https://github.com/openshift/cluster-dns-operator/pull/387)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "Revert "Set DNS DaemonSet's maxSurge value to 10%"" [#384](https://github.com/openshift/cluster-dns-operator/pull/384)
* [OCPBUGS-19510](https://issues.redhat.com/browse/OCPBUGS-19510): test/e2e: Set controller-runtime logger [#381](https://github.com/openshift/cluster-dns-operator/pull/381)
* [OCPBUGS-19126](https://issues.redhat.com/browse/OCPBUGS-19126): Updating ose-cluster-dns-operator images to be consistent with ART [#380](https://github.com/openshift/cluster-dns-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/f5f12b76e1d19ca9c98013158a0a5aae278a4d57...25020f49f5ad8aa0f2409e0ac26738b52a9dc2e4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a060517d1452b3756b230de1d1393e3573de4f45)

* [OCPBUGS-21922](https://issues.redhat.com/browse/OCPBUGS-21922): fixing CVE-2023-39325 by updating dependencies [#1141](https://github.com/openshift/cluster-etcd-operator/pull/1141)
* [OCPBUGS-17199](https://issues.redhat.com/browse/OCPBUGS-17199): remove revision stability check from bootstrap complet… [#1087](https://github.com/openshift/cluster-etcd-operator/pull/1087)
* [ETCD-478](https://issues.redhat.com/browse/ETCD-478): Use golang etcd client for auto backups [#1099](https://github.com/openshift/cluster-etcd-operator/pull/1099)
* [OCPBUGS-19987](https://issues.redhat.com/browse/OCPBUGS-19987): relax readiness to local serializable requests [#1134](https://github.com/openshift/cluster-etcd-operator/pull/1134)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): prioritize podman pull in etcdctl dl [#1132](https://github.com/openshift/cluster-etcd-operator/pull/1132)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): remove UpgradeBackupController [#1129](https://github.com/openshift/cluster-etcd-operator/pull/1129)
* [ETCD-187](https://issues.redhat.com/browse/ETCD-187): add dashboards CPU iotwait on master nodes [#1119](https://github.com/openshift/cluster-etcd-operator/pull/1119)
* [OCPBUGS-19528](https://issues.redhat.com/browse/OCPBUGS-19528): introduce backup removal controller [#1126](https://github.com/openshift/cluster-etcd-operator/pull/1126)
* [OCPBUGS-19137](https://issues.redhat.com/browse/OCPBUGS-19137): Updating cluster-etcd-operator images to be consistent with ART [#1115](https://github.com/openshift/cluster-etcd-operator/pull/1115)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1123](https://github.com/openshift/cluster-etcd-operator/pull/1123)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): Avoid caching etcdctl on cluster-backup.sh [#1113](https://github.com/openshift/cluster-etcd-operator/pull/1113)
* indicate ownership of etcd certificates [#1110](https://github.com/openshift/cluster-etcd-operator/pull/1110)
* [OCPBUGS-18990](https://issues.redhat.com/browse/OCPBUGS-18990): restore the correct static pod list [#1111](https://github.com/openshift/cluster-etcd-operator/pull/1111)
* [OCPBUGS-18357](https://issues.redhat.com/browse/OCPBUGS-18357): prepend authfile to podman create [#1105](https://github.com/openshift/cluster-etcd-operator/pull/1105)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a30b074095df7195ed0126bcd212b74114a88ee9...a060517d1452b3756b230de1d1393e3573de4f45)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/06dfe471e15f6a54640b363747fd45afa5111052)

* [OCPBUGS-2889](https://issues.redhat.com/browse/OCPBUGS-2889): accept user/pass OR application credentials on Swift UPI secret [#924](https://github.com/openshift/cluster-image-registry-operator/pull/924)
* [IR-406](https://issues.redhat.com/browse/IR-406), [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): bump k8s and openshift packages [#936](https://github.com/openshift/cluster-image-registry-operator/pull/936)
* [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): disable http2 for metrics endpoint [#938](https://github.com/openshift/cluster-image-registry-operator/pull/938)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): move pruner role creation from openshift-apiserver [#925](https://github.com/openshift/cluster-image-registry-operator/pull/925)
* [OCPBUGS-19262](https://issues.redhat.com/browse/OCPBUGS-19262): Updating ose-cluster-image-registry-operator images to be consistent with ART [#918](https://github.com/openshift/cluster-image-registry-operator/pull/918)
* [OCPBUGS-18469](https://issues.redhat.com/browse/OCPBUGS-18469): increase storage account key cache expiration [#912](https://github.com/openshift/cluster-image-registry-operator/pull/912)
* [OCPBUGS-17060](https://issues.redhat.com/browse/OCPBUGS-17060): use Recreate on operator deployment [#908](https://github.com/openshift/cluster-image-registry-operator/pull/908)
* [OCPBUGS-18103](https://issues.redhat.com/browse/OCPBUGS-18103): check if response is nil before using it [#909](https://github.com/openshift/cluster-image-registry-operator/pull/909)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b0ee859b641ff2b1d9896d0cd13743ee3335051a...06dfe471e15f6a54640b363747fd45afa5111052)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/9e775905596fbfcbce19ff0018ea8398693da714)

* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Revert "OCPBUGS-16762: Bump openshift/api for container.maxLength fix" [#982](https://github.com/openshift/cluster-ingress-operator/pull/982)
* [OCPBUGS-14994](https://issues.redhat.com/browse/OCPBUGS-14994): Don't add clientca-configmap finalizer if deleting [#948](https://github.com/openshift/cluster-ingress-operator/pull/948)
* [OCPBUGS-22020](https://issues.redhat.com/browse/OCPBUGS-22020): Bump golang.org/x/net for CVE-2023-44487 [#985](https://github.com/openshift/cluster-ingress-operator/pull/985)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): test/e2e: Add test case for 2000000 maxConnections [#983](https://github.com/openshift/cluster-ingress-operator/pull/983)
* [OCPBUGS-20192](https://issues.redhat.com/browse/OCPBUGS-20192): Require non-readonly filesystem in router container [#981](https://github.com/openshift/cluster-ingress-operator/pull/981)
* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Bump openshift/api for container.maxLength fix [#979](https://github.com/openshift/cluster-ingress-operator/pull/979)
* [OCPBUGS-3541](https://issues.redhat.com/browse/OCPBUGS-3541): Don't create route metrics for ingress controllers that are not admitted [#869](https://github.com/openshift/cluster-ingress-operator/pull/869)
* [OCPBUGS-18248](https://issues.redhat.com/browse/OCPBUGS-18248): Prevent GatewayClass from getting recreated [#975](https://github.com/openshift/cluster-ingress-operator/pull/975)
* [OCPBUGS-19268](https://issues.redhat.com/browse/OCPBUGS-19268): Updating ose-cluster-ingress-operator images to be consistent with ART [#977](https://github.com/openshift/cluster-ingress-operator/pull/977)
* [OCPBUGS-15900](https://issues.redhat.com/browse/OCPBUGS-15900): TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. [#973](https://github.com/openshift/cluster-ingress-operator/pull/973)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): E2E test for cookie length truncation [#871](https://github.com/openshift/cluster-ingress-operator/pull/871)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cd9777112490675bcb38d1aaff13e6082965eeb5...9e775905596fbfcbce19ff0018ea8398693da714)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/13bd0c1f2f2697b09966bc19093f79094e965046)

* [OCPBUGS-19160](https://issues.redhat.com/browse/OCPBUGS-19160): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1550](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1550)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules [#1566](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1566)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests: rename API performance dashboard [#1565](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1565)
* [OCPBUGS-21729](https://issues.redhat.com/browse/OCPBUGS-21729): bump library-go to include switch to HTTP/1.1 [#1567](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1567)
* Update required GV for ValidatingAdmissionPolicy gate. [#1561](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1561)
* Update "deprecated API in use" alert expressions for 1.28. [#1562](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1562)
* bump(openshift/client-go,library-go) [#1560](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1560)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1557](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1557)
* [OCPBUGS-19024](https://issues.redhat.com/browse/OCPBUGS-19024): remove featuregate upgradeable controller that moved to cluster-config-operator [#1547](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1547)
* [OCPBUGS-18247](https://issues.redhat.com/browse/OCPBUGS-18247): manifests: don't include recording rules when Console capability is not enabled [#1542](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1542)
* [OCPBUGS-15504](https://issues.redhat.com/browse/OCPBUGS-15504): manifest: remove kube-apiserver PrometheusRule [#1543](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1543)
* Bump openshift/* libs [#1549](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1549)
* Update to Kubernetes 1.28.2 [#1548](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1548)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1534](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1534)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8b38d12efe5f4c4906473acbe53e36961e91490f...13bd0c1f2f2697b09966bc19093f79094e965046)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/4c6b685796e38a41debaa5a6d810f65291bc89b7)

* Update OWNERS [#26](https://github.com/openshift/cluster-api-operator/pull/26)
* [OCPBUGS-17289](https://issues.redhat.com/browse/OCPBUGS-17289), [OCPBUGS-21650](https://issues.redhat.com/browse/OCPBUGS-21650), [OCPCLOUD-2215](https://issues.redhat.com/browse/OCPCLOUD-2215): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main [#25](https://github.com/openshift/cluster-api-operator/pull/25)
* [OCPBUGS-19135](https://issues.redhat.com/browse/OCPBUGS-19135): Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#24](https://github.com/openshift/cluster-api-operator/pull/24)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/466582d5b0ecd28b1d62a3300fbe3770dca6224a...4c6b685796e38a41debaa5a6d810f65291bc89b7)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/839167b47a547bc10658fda1d89f2f80b8b66cb2)

* bump(k8s) [#763](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/763)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): bump(openshift/api|client-go|library-go) to pick up http2 disablement [#762](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/762)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): Bump deps to address CVE-2023-44487 [#755](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/755)
* bump(openshift/client-go,library-go) [#753](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/753)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#750](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/750)
* [OCPBUGS-19263](https://issues.redhat.com/browse/OCPBUGS-19263): Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#747](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/747)
* Bump openshift/* libs [#746](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/746)
* Update to Kubernetes 1.28.2 [#744](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/744)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#742](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/742)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/78354fc395484f25482319281fd48a2de4d5c40b...839167b47a547bc10658fda1d89f2f80b8b66cb2)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/00304850028f5e65c9d6eea1dc7be04b85cb09e0)

* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump openshift/library-go to disable http/2 by default [#503](https://github.com/openshift/cluster-kube-scheduler-operator/pull/503)
* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump deps to address CVE-2023-44487 [#500](https://github.com/openshift/cluster-kube-scheduler-operator/pull/500)
* bump(openshift/client-go,library-go) [#498](https://github.com/openshift/cluster-kube-scheduler-operator/pull/498)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#496](https://github.com/openshift/cluster-kube-scheduler-operator/pull/496)
* [OCPBUGS-19175](https://issues.redhat.com/browse/OCPBUGS-19175): Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-kube-scheduler-operator/pull/493)
* Bump openshift/* libs [#492](https://github.com/openshift/cluster-kube-scheduler-operator/pull/492)
* Update to Kubernetes 1.28.2 [#491](https://github.com/openshift/cluster-kube-scheduler-operator/pull/491)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#490](https://github.com/openshift/cluster-kube-scheduler-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dd7f55355efb68f3d3566a9405ef70530140e065...00304850028f5e65c9d6eea1dc7be04b85cb09e0)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7)

* [OCPBUGS-21738](https://issues.redhat.com/browse/OCPBUGS-21738): bump library-go to include switch to HTTP/1.1 [#95](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/95)
* [OCPBUGS-19253](https://issues.redhat.com/browse/OCPBUGS-19253): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#94](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/94)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/332cb1cd0f9a00c03e3f9d400ae8483abd03036c...e55e78a941daa4f3ac10aec8faf68caef7f4d8b7)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f540a2547afb262c8d08c5af7533043a37c59564)

* [OCPBUGS-21594](https://issues.redhat.com/browse/OCPBUGS-21594): Filter non node CSRs in metrics [#208](https://github.com/openshift/cluster-machine-approver/pull/208)
* [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204)
* Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205)
* [OCPBUGS-19250](https://issues.redhat.com/browse/OCPBUGS-19250): Updating ose-cluster-machine-approver images to be consistent with ART [#201](https://github.com/openshift/cluster-machine-approver/pull/201)
* [OCPCLOUD-2181](https://issues.redhat.com/browse/OCPCLOUD-2181): Update K8s dependencies to 1.28 [#203](https://github.com/openshift/cluster-machine-approver/pull/203)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d364966705ccb291cc9e14a614c3a2f638128b81...f540a2547afb262c8d08c5af7533043a37c59564)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5a4cfa95bdddf69c6bdd7bc649305660370de286)

* [OCPBUGS-22742](https://issues.redhat.com/browse/OCPBUGS-22742): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2138](https://github.com/openshift/cluster-monitoring-operator/pull/2138)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2145](https://github.com/openshift/cluster-monitoring-operator/pull/2145)
* [MON-3398](https://issues.redhat.com/browse/MON-3398): Add RHACM telemetry metric [#2100](https://github.com/openshift/cluster-monitoring-operator/pull/2100)
* Synchronize versions of the downstream components [#2135](https://github.com/openshift/cluster-monitoring-operator/pull/2135)
* Fix UWM alert access permissions [#2131](https://github.com/openshift/cluster-monitoring-operator/pull/2131)
* Synchronize versions of the downstream components [#2133](https://github.com/openshift/cluster-monitoring-operator/pull/2133)
* [OCPBUGS-4069](https://issues.redhat.com/browse/OCPBUGS-4069): Prometheus Adatper takes metrics from kubelet job only. [#2117](https://github.com/openshift/cluster-monitoring-operator/pull/2117)
* [MON-3422](https://issues.redhat.com/browse/MON-3422): Remove temporary no more needed code [#2132](https://github.com/openshift/cluster-monitoring-operator/pull/2132)
* fix: force HTTP/1.1 connections [#2128](https://github.com/openshift/cluster-monitoring-operator/pull/2128)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2105](https://github.com/openshift/cluster-monitoring-operator/pull/2105)
* [OCPBUGS-21631](https://issues.redhat.com/browse/OCPBUGS-21631): upgrade golang.org/x/net to v0.17.0 [#2120](https://github.com/openshift/cluster-monitoring-operator/pull/2120)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): revert previous fix to avoid activating console capability during update [#2118](https://github.com/openshift/cluster-monitoring-operator/pull/2118)
* [MON-3286](https://issues.redhat.com/browse/MON-3286): Remove no longer needed code. [#2116](https://github.com/openshift/cluster-monitoring-operator/pull/2116)
* [OCPBUGS-17850](https://issues.redhat.com/browse/OCPBUGS-17850): replace nonResourceURLs permissions by subresource [#2099](https://github.com/openshift/cluster-monitoring-operator/pull/2099)
* Synchronize versions of the downstream components [#2115](https://github.com/openshift/cluster-monitoring-operator/pull/2115)
* Update jsonnet dependencies [#2076](https://github.com/openshift/cluster-monitoring-operator/pull/2076)
* OWNERS: remove sthaha [#2114](https://github.com/openshift/cluster-monitoring-operator/pull/2114)
* build: add `-e` to `go list` command to install tools [#2112](https://github.com/openshift/cluster-monitoring-operator/pull/2112)
* Change kube-rbac-proxy-thanos port [#2113](https://github.com/openshift/cluster-monitoring-operator/pull/2113)
* [OCPBUGS-11344](https://issues.redhat.com/browse/OCPBUGS-11344): alertmanager: use alertmanager CRD's automountServiceAccountToken option [#2111](https://github.com/openshift/cluster-monitoring-operator/pull/2111)
* Remove deprecated ioutil [#2108](https://github.com/openshift/cluster-monitoring-operator/pull/2108)
* [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add console capability annotation to dashboards and monitoring-plugin. [#2101](https://github.com/openshift/cluster-monitoring-operator/pull/2101)
* [MON-3302](https://issues.redhat.com/browse/MON-3302): add RHACS telemetry metrics [#2062](https://github.com/openshift/cluster-monitoring-operator/pull/2062)
* add `machine424` and `rexagod`  to OWNERS [#2083](https://github.com/openshift/cluster-monitoring-operator/pull/2083)
* Remove bparees from approvers [#2104](https://github.com/openshift/cluster-monitoring-operator/pull/2104)
* Revert "feat: add olm capability annotation" [#2103](https://github.com/openshift/cluster-monitoring-operator/pull/2103)
* [MON-3270](https://issues.redhat.com/browse/MON-3270): Add kube-metrics-server to image-references [#2102](https://github.com/openshift/cluster-monitoring-operator/pull/2102)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2095](https://github.com/openshift/cluster-monitoring-operator/pull/2095)
* chore: fix imports order [#2098](https://github.com/openshift/cluster-monitoring-operator/pull/2098)
* Set Thanos version in the Thanos Ruler spec [#2094](https://github.com/openshift/cluster-monitoring-operator/pull/2094)
* [OCPBUGS-19237](https://issues.redhat.com/browse/OCPBUGS-19237): Updating cluster-monitoring-operator images to be consistent with ART [#2084](https://github.com/openshift/cluster-monitoring-operator/pull/2084)
* Synchronize versions of the downstream components [#2093](https://github.com/openshift/cluster-monitoring-operator/pull/2093)
* Synchronize versions of the downstream components [#2089](https://github.com/openshift/cluster-monitoring-operator/pull/2089)
* [MON-3383](https://issues.redhat.com/browse/MON-3383): Remove weak cryptograhic primitive usage [#2086](https://github.com/openshift/cluster-monitoring-operator/pull/2086)
* [OCPBUGS-18390](https://issues.redhat.com/browse/OCPBUGS-18390): jsonnet/rules: exclude -1 from etcd objects count [#2081](https://github.com/openshift/cluster-monitoring-operator/pull/2081)
* [OCPBUGS-19059](https://issues.redhat.com/browse/OCPBUGS-19059): Enable ipv6 on monitoring-plugin nginx [#2090](https://github.com/openshift/cluster-monitoring-operator/pull/2090)
* [MON-3376](https://issues.redhat.com/browse/MON-3376): Remove deprecated --logtostderr argument [#2077](https://github.com/openshift/cluster-monitoring-operator/pull/2077)
* [OCPBUGS-19356](https://issues.redhat.com/browse/OCPBUGS-19356): Topology spread constraints admission webhook [#2073](https://github.com/openshift/cluster-monitoring-operator/pull/2073)
* [OCPBUGS-17682](https://issues.redhat.com/browse/OCPBUGS-17682): add topologySpreadConstraints to UWM prometheus operator [#2072](https://github.com/openshift/cluster-monitoring-operator/pull/2072)
* Synchronize versions of the downstream components [#2082](https://github.com/openshift/cluster-monitoring-operator/pull/2082)
* [MON-2642](https://issues.redhat.com/browse/MON-2642): Improve e2e tests for alertrelabelconfigs CRD [#2080](https://github.com/openshift/cluster-monitoring-operator/pull/2080)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/6a1a0ffab4bfe635ec06c2b800f9eff450aac118...5a4cfa95bdddf69c6bdd7bc649305660370de286)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d25562d4a52220b7ed3be76bc848ba26eae068f2)

* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060)
* [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084)
* two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052)
* [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047)
* [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048)
* [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795)
* multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010)
* [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986)
* [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074)
* [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819)
* Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929)
* [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065)
* Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037)
* Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056)
* [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051)
* [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049)
* Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038)
* Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778)
* [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042)
* Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985)
* [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039)
* [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018)
* [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021)
* [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031)
* [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030)
* [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978)
* [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009)
* [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007)
* [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983)
* [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020)
* [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003)
* [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015)
* [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845)
* Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982)
* [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999)
* [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006)
* separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938)
* [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981)
* [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990)
* [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996)
* [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5572bce9c04feaf970862db03fe4c4fe03b912b4...d25562d4a52220b7ed3be76bc848ba26eae068f2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f2e0fb325588c2c8bb6af6f643fdd124b5e7c91a)

* [CNF-10294](https://issues.redhat.com/browse/CNF-10294): main: remove deprecated multi ns function (#770) [#770](https://github.com/openshift/cluster-node-tuning-operator/pull/770)
* [OCPBUGS-22519](https://issues.redhat.com/browse/OCPBUGS-22519): bump opentelemetry package (#840) [#840](https://github.com/openshift/cluster-node-tuning-operator/pull/840)
* Disable HTTP/2 for webhook and metrics servers (#834) [#834](https://github.com/openshift/cluster-node-tuning-operator/pull/834)
* Remove obsolete protocols and weak ciphers (#827) [#827](https://github.com/openshift/cluster-node-tuning-operator/pull/827)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): rps: trigger udev even per queue (#816) [#816](https://github.com/openshift/cluster-node-tuning-operator/pull/816)
* render: change dir path (#824) [#824](https://github.com/openshift/cluster-node-tuning-operator/pull/824)
* Makefile: remote tmp folder on clean target (#823) [#823](https://github.com/openshift/cluster-node-tuning-operator/pull/823)
* Add golangci-lint (#793) [#793](https://github.com/openshift/cluster-node-tuning-operator/pull/793)
* Updating cluster-node-tuning-operator images to be consistent with ART (#795) [#795](https://github.com/openshift/cluster-node-tuning-operator/pull/795)
* fix: add if check for no resource match error (#801) [#801](https://github.com/openshift/cluster-node-tuning-operator/pull/801)
* nto: avoid timeout when there are too many CSV (#731) [#731](https://github.com/openshift/cluster-node-tuning-operator/pull/731)
* Set non-default UserAgent for easier debugging (#807) [#807](https://github.com/openshift/cluster-node-tuning-operator/pull/807)
* Improve co/node-tuning operand version reporting (#792) [#792](https://github.com/openshift/cluster-node-tuning-operator/pull/792)
* Add the k8s reporter to the configuration suite (#815) [#815](https://github.com/openshift/cluster-node-tuning-operator/pull/815)
* [OCPBUGS-18783](https://issues.redhat.com/browse/OCPBUGS-18783): e2e: perfprof: enhance the scheduling domain tests (#791) [#791](https://github.com/openshift/cluster-node-tuning-operator/pull/791)
* Add kubeconfig path for IBM Managed OpenShift (#810) [#810](https://github.com/openshift/cluster-node-tuning-operator/pull/810)
* Add k8s reporter to e2e tests (#666) [#666](https://github.com/openshift/cluster-node-tuning-operator/pull/666)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#804) [#804](https://github.com/openshift/cluster-node-tuning-operator/pull/804)
* Memory manager E2E test fixes (#784) [#784](https://github.com/openshift/cluster-node-tuning-operator/pull/784)
* Some unit tests fail with go1.19 as some modules require 1.20 (#794) [#794](https://github.com/openshift/cluster-node-tuning-operator/pull/794)
* e2e: add expected max latancy to hwlatdetec test & rename constant (#719) [#719](https://github.com/openshift/cluster-node-tuning-operator/pull/719)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): e2e:rps: improve logging (#787) [#787](https://github.com/openshift/cluster-node-tuning-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a91f9945a89f6c5b68ee15618d20bc89e1c0caa6...f2e0fb325588c2c8bb6af6f643fdd124b5e7c91a)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a7956af630d892e350e78be90615ee48426cadd1)

* [OCPBUGS-21670](https://issues.redhat.com/browse/OCPBUGS-21670): Bump golang.org/x/net to v0.17.0 [#32](https://github.com/openshift/cluster-olm-operator/pull/32)
* [OCPBUGS-19095](https://issues.redhat.com/browse/OCPBUGS-19095): Updating ose-cluster-olm-operator images to be consistent with ART [#31](https://github.com/openshift/cluster-olm-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/9e05f328825215a8ad58c9023c0f9d62c843c5aa...a7956af630d892e350e78be90615ee48426cadd1)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ad9febd4ed1dbb28380d78e3c3a8ae50eb1906db)

* [OCPBUGS-19231](https://issues.redhat.com/browse/OCPBUGS-19231): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#548](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/548)
* [OCPBUGS-21733](https://issues.redhat.com/browse/OCPBUGS-21733): bump library-go to include switch to HTTP/1.1 [#552](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/00f7e4cc95063ba5aba1992568088d924cfbf516...ad9febd4ed1dbb28380d78e3c3a8ae50eb1906db)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/e6f885abcd9923abf87c3b96908e69393b06efef)

* Revert "Revert #300 "API-1666: add image pull secret cleanup controller"" [#314](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/314)
* Revert #300 "API-1666: add image pull secret cleanup controller" [#313](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/313)
* [API-1642](https://issues.redhat.com/browse/API-1642): add image pull secret cleanup controller [#300](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/300)
* [API-1642](https://issues.redhat.com/browse/API-1642): Do not generate image pull secrets for internal registry when internal registry is disabled. [#298](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/298)
* [OCPBUGS-21830](https://issues.redhat.com/browse/OCPBUGS-21830): bump(k8s,openshift) to address CVE-2023-44487 [#308](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/308)
* [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Include Build CRD in manifests [#306](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/306)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#305](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/305)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#304](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/304)
* [OCPBUGS-18932](https://issues.redhat.com/browse/OCPBUGS-18932): Always sort disabled controller list [#302](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/302)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable BuildConfigChange controller when Build cap is disabled [#299](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d6ded7f422c87ceea152a22976833f4148d9b954...e6f885abcd9923abf87c3b96908e69393b06efef)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/25dbb307143ea9576fc977f737c0331a9b8e879f)

* manifests: Simplify filenames for default runlevel [#101](https://github.com/openshift/platform-operators/pull/101)
* Makefile: Drop yq prerequisite from 'manifests' target [#103](https://github.com/openshift/platform-operators/pull/103)
* [OCPBUGS-22457](https://issues.redhat.com/browse/OCPBUGS-22457): manifests/0000_50_cluster-platform-operator-manager_07-aggregated-clusteroperator: Drop namespace [#100](https://github.com/openshift/platform-operators/pull/100)
* switch to bingo for dependency management (and bump golangci-lint@v1.51.0) [#95](https://github.com/openshift/platform-operators/pull/95)
* [OCPBUGS-20511](https://issues.redhat.com/browse/OCPBUGS-20511): Bump golang.org/x/net to v0.17.0 [#92](https://github.com/openshift/platform-operators/pull/92)
* [OCPBUGS-19118](https://issues.redhat.com/browse/OCPBUGS-19118): Updating ose-cluster-platform-operators-manager images to be consistent with ART [#91](https://github.com/openshift/platform-operators/pull/91)
* [Full changelog](https://github.com/openshift/platform-operators/compare/08fb27e72e32ea0a06ab02b3b746114148d96c25...25dbb307143ea9576fc977f737c0331a9b8e879f)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/50c2a8337f08856bbae4cd419bb8ffcbdf92567c)

* go.mod: remove replaces [#138](https://github.com/openshift/cluster-policy-controller/pull/138)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): bump(k8s,openshift) to address CVE-2023-44487 [#137](https://github.com/openshift/cluster-policy-controller/pull/137)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): Bump deps to address CVE-2023-44487 [#133](https://github.com/openshift/cluster-policy-controller/pull/133)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#132](https://github.com/openshift/cluster-policy-controller/pull/132)
* [OCPBUGS-19119](https://issues.redhat.com/browse/OCPBUGS-19119): Updating cluster-policy-controller images to be consistent with ART [#131](https://github.com/openshift/cluster-policy-controller/pull/131)
* [OCPBUGS-17458](https://issues.redhat.com/browse/OCPBUGS-17458): ps syncer: don't hotloop on a missing namespace [#130](https://github.com/openshift/cluster-policy-controller/pull/130)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8af8cf302764c912993869db399b22f6c53b52c5...50c2a8337f08856bbae4cd419bb8ffcbdf92567c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/05e9bb907a82490a52a04afb76adb3bdb80b0342)

* [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519)
* Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5e0d408e382eea606527ac32a750e0117a3214e1...05e9bb907a82490a52a04afb76adb3bdb80b0342)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/4bb54663eae6e60f07703fd876decd36f458776c)

* [STOR-1453](https://issues.redhat.com/browse/STOR-1453): Grant permissions to access `apiserver` to CSI driver operators [#415](https://github.com/openshift/cluster-storage-operator/pull/415)
* [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404)
* [OCPBUGS-13669](https://issues.redhat.com/browse/OCPBUGS-13669): skip Azure File installation on Azure StackHub [#395](https://github.com/openshift/cluster-storage-operator/pull/395)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Move KAS access label to right place [#403](https://github.com/openshift/cluster-storage-operator/pull/403)
* update readme [#400](https://github.com/openshift/cluster-storage-operator/pull/400)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399)
* [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398)
* [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dbb1514dbf9923c56a4a198374cc59e45f9bc0cc...4bb54663eae6e60f07703fd876decd36f458776c)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/804dfeceb7caa41a6212fb405bbcd3f3139b8a6f)

* [OCPBUGS-19189](https://issues.redhat.com/browse/OCPBUGS-19189): Updating ose-cluster-update-keys images to be consistent with ART [#51](https://github.com/openshift/cluster-update-keys/pull/51)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/9dd3eedebc62725e806d7b52d640b70e61a96f98...804dfeceb7caa41a6212fb405bbcd3f3139b8a6f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/52b7f32cc1703bd56b6ef6ea7b465870d8af66ad)

* [OCPBUGS-8079](https://issues.redhat.com/browse/OCPBUGS-8079): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#992](https://github.com/openshift/cluster-version-operator/pull/992)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): vendor: bump openshift/api [#984](https://github.com/openshift/cluster-version-operator/pull/984)
* [OCPBUGS-21933](https://issues.redhat.com/browse/OCPBUGS-21933): Bump http-related deps [#983](https://github.com/openshift/cluster-version-operator/pull/983)
* [OCPVE-673](https://issues.redhat.com/browse/OCPVE-673): Bump API to Add OLM Capability [#971](https://github.com/openshift/cluster-version-operator/pull/971)
* Revert openshift/api bump PR merged by mistake (977) [#978](https://github.com/openshift/cluster-version-operator/pull/978)
* [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api [#977](https://github.com/openshift/cluster-version-operator/pull/977)
* [OCPBUGS-19868](https://issues.redhat.com/browse/OCPBUGS-19868): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#975](https://github.com/openshift/cluster-version-operator/pull/975)
* [OCPBUGS-19512](https://issues.redhat.com/browse/OCPBUGS-19512): pkg/clusterconditions/promql: Warm cache with 1s delay [#939](https://github.com/openshift/cluster-version-operator/pull/939)
* [OCPBUGS-18386](https://issues.redhat.com/browse/OCPBUGS-18386): Properly reconcile SCC resources [#966](https://github.com/openshift/cluster-version-operator/pull/966)
* [OTA-854](https://issues.redhat.com/browse/OTA-854): Add configurable CVO knobs for risk-evaluation PromQL target [#926](https://github.com/openshift/cluster-version-operator/pull/926)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition [#968](https://github.com/openshift/cluster-version-operator/pull/968)
* [OCPBUGS-19222](https://issues.redhat.com/browse/OCPBUGS-19222): Updating cluster-version-operator images to be consistent with ART [#970](https://github.com/openshift/cluster-version-operator/pull/970)
* [OCPBUGS-18567](https://issues.redhat.com/browse/OCPBUGS-18567): lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment [#965](https://github.com/openshift/cluster-version-operator/pull/965)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/a091f80be76fbcb92fe49b2668c81fe6bf685c4e...52b7f32cc1703bd56b6ef6ea7b465870d8af66ad)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/4b2efe5ce6af3f345b56194baabddb83083df577)

* [OCPBUGS-19171](https://issues.redhat.com/browse/OCPBUGS-19171): Updating configmap-reload images to be consistent with ART [#56](https://github.com/openshift/configmap-reload/pull/56)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/716a0c33bb693127fba3b3512622710785a59e8e...4b2efe5ce6af3f345b56194baabddb83083df577)


### [console](https://github.com/openshift/console/tree/33225d2158c47b0699c6b4c9e2c01322ffaaac9f)

* [CONSOLE-3695](https://issues.redhat.com/browse/CONSOLE-3695): Add details item extension to console dynamic plugin SDK [#13240](https://github.com/openshift/console/pull/13240)
* [CONSOLE-3814](https://issues.redhat.com/browse/CONSOLE-3814): Conditionally render "Users" and "Groups" nav items [#13287](https://github.com/openshift/console/pull/13287)
* [OCPBUGS-23110](https://issues.redhat.com/browse/OCPBUGS-23110): Disable Pipelines E2E Tests [#13318](https://github.com/openshift/console/pull/13318)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Address memory issues in CI [#13309](https://github.com/openshift/console/pull/13309)
* [CONSOLE-3614](https://issues.redhat.com/browse/CONSOLE-3614): Remove multicluster code from Bridge [#13244](https://github.com/openshift/console/pull/13244)
* [CONSOLE-3822](https://issues.redhat.com/browse/CONSOLE-3822): Update obsolete deps [#13294](https://github.com/openshift/console/pull/13294)
* [OCPBUGS-22930](https://issues.redhat.com/browse/OCPBUGS-22930): remove expandable toggle for conditional update risk d… [#13306](https://github.com/openshift/console/pull/13306)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name by using unique-names-generator [#13263](https://github.com/openshift/console/pull/13263)
* [CONSOLE-3781](https://issues.redhat.com/browse/CONSOLE-3781): remove cypress.config comments [#13301](https://github.com/openshift/console/pull/13301)
* [CONSOLE-3819](https://issues.redhat.com/browse/CONSOLE-3819): change Cypress' default browser to Electron [#13300](https://github.com/openshift/console/pull/13300)
* [OCPBUGS-19916](https://issues.redhat.com/browse/OCPBUGS-19916): Fix MachineSetList capacity logic [#13259](https://github.com/openshift/console/pull/13259)
* [CNV-30298](https://issues.redhat.com/browse/CNV-30298): Add UI for OVN Secondary Localnet Network [#13293](https://github.com/openshift/console/pull/13293)
* [OCPBUGS-19875](https://issues.redhat.com/browse/OCPBUGS-19875): Fix plugin proxy handler [#13272](https://github.com/openshift/console/pull/13272)
* [CONSOLE-3808](https://issues.redhat.com/browse/CONSOLE-3808): Remove Protactor from console-plugin-sdk [#13283](https://github.com/openshift/console/pull/13283)
* [OCPBUGS-22747](https://issues.redhat.com/browse/OCPBUGS-22747): Display "With Data upload form" in Create PVC drop down once [#13292](https://github.com/openshift/console/pull/13292)
* [CONSOLE-3811](https://issues.redhat.com/browse/CONSOLE-3811): remove shared Protractor files [#13282](https://github.com/openshift/console/pull/13282)
* [ODC-7409](https://issues.redhat.com/browse/ODC-7409): Use @kubernetes-models/shipwright types in shipwright-plugin [#13267](https://github.com/openshift/console/pull/13267)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove local-storage-operator-plugin Protractor tests [#13291](https://github.com/openshift/console/pull/13291)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove network-attachment-definition-plugin Protractor … [#13286](https://github.com/openshift/console/pull/13286)
* [ODC-7386](https://issues.redhat.com/browse/ODC-7386): Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed [#13145](https://github.com/openshift/console/pull/13145)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): migrate console Protractor tests to Cypress [#13257](https://github.com/openshift/console/pull/13257)
* [OCPBUGS-22419](https://issues.redhat.com/browse/OCPBUGS-22419): Fix the forms when BC is not installed in the cluster [#13241](https://github.com/openshift/console/pull/13241)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove cnv console tests [#13280](https://github.com/openshift/console/pull/13280)
* [OCPBUGS-10562](https://issues.redhat.com/browse/OCPBUGS-10562): fix operator uninstall test [#13214](https://github.com/openshift/console/pull/13214)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): remove references to removed packages [#13281](https://github.com/openshift/console/pull/13281)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13274](https://github.com/openshift/console/pull/13274)
* [CONSOLE-3816](https://issues.redhat.com/browse/CONSOLE-3816): Goodbye! [#13255](https://github.com/openshift/console/pull/13255)
* [OCPBUGS-19458](https://issues.redhat.com/browse/OCPBUGS-19458), [OU-241](https://issues.redhat.com/browse/OU-241): Remove unused Observe > Metrics page code [#13114](https://github.com/openshift/console/pull/13114)
* [OCPBUGS-20295](https://issues.redhat.com/browse/OCPBUGS-20295): clarify Operator installMode error message [#13232](https://github.com/openshift/console/pull/13232)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): fix bug where renamed tests weren't updated [#13275](https://github.com/openshift/console/pull/13275)
* [OCPBUGS-22284](https://issues.redhat.com/browse/OCPBUGS-22284): updating doc links for 4.14 GA [#13266](https://github.com/openshift/console/pull/13266)
* [OCPBUGS-22199](https://issues.redhat.com/browse/OCPBUGS-22199): Save also the location.search and .hash values in localStorage to restore them after login [#13268](https://github.com/openshift/console/pull/13268)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13265](https://github.com/openshift/console/pull/13265)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Workloads-AddPage: upload JAR file's i18n misses [#13264](https://github.com/openshift/console/pull/13264)
* [OCPBUGS-16756](https://issues.redhat.com/browse/OCPBUGS-16756): Cluster dropdown items are not marked for i18n when ACM/MCE installed [#13238](https://github.com/openshift/console/pull/13238)
* [OCPBUGS-20362](https://issues.redhat.com/browse/OCPBUGS-20362): Delete results.tekton.dev annotations before rerun the pipelineRun [#13230](https://github.com/openshift/console/pull/13230)
* [OCPBUGS-9422](https://issues.redhat.com/browse/OCPBUGS-9422): Telemetry- Current page was sometimes not tracked when reloading the current page [#13088](https://github.com/openshift/console/pull/13088)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): check that user dropdown is present to verify logged in [#13260](https://github.com/openshift/console/pull/13260)
* [CONSOLE-3812](https://issues.redhat.com/browse/CONSOLE-3812): remove packages/ceph-storage-plugin/integration-tests [#13249](https://github.com/openshift/console/pull/13249)
* [CONSOLE-3809](https://issues.redhat.com/browse/CONSOLE-3809): remove orphaned OLM Protractor views [#13248](https://github.com/openshift/console/pull/13248)
* [OCPBUGS-19783](https://issues.redhat.com/browse/OCPBUGS-19783): Channel page shows "Required" message for the default name when navigate to create channel page [#13222](https://github.com/openshift/console/pull/13222)
* [OCPBUGS-20229](https://issues.redhat.com/browse/OCPBUGS-20229): Service details page shows revisions and routes from other service also [#13221](https://github.com/openshift/console/pull/13221)
* [CONSOLE-3766](https://issues.redhat.com/browse/CONSOLE-3766): Update i18next-parser dev dependency in console [#13197](https://github.com/openshift/console/pull/13197)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): follow-on fixes and cleanup for Cypress upgrade [#13242](https://github.com/openshift/console/pull/13242)
* [OCPBUGS-20305](https://issues.redhat.com/browse/OCPBUGS-20305): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13236](https://github.com/openshift/console/pull/13236)
* [OCPBUGS-19714](https://issues.redhat.com/browse/OCPBUGS-19714): hide page-specific doc links for ROSA and OSD [#13229](https://github.com/openshift/console/pull/13229)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 [#13201](https://github.com/openshift/console/pull/13201)
* [OCPBUGS-21616](https://issues.redhat.com/browse/OCPBUGS-21616): Fix empty editor error [#13176](https://github.com/openshift/console/pull/13176)
* [ODC-7401](https://issues.redhat.com/browse/ODC-7401): Remove protractor from dev-console and knative plugins [#13247](https://github.com/openshift/console/pull/13247)
* [ODC-7400](https://issues.redhat.com/browse/ODC-7400): Fix e2e for dev-console, knative, topology, helm and pipeline packages [#13231](https://github.com/openshift/console/pull/13231)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Upgrade Cypress [#13070](https://github.com/openshift/console/pull/13070)
* [CONSOLE-3758](https://issues.redhat.com/browse/CONSOLE-3758): add support for new features annotations while preserv… [#13183](https://github.com/openshift/console/pull/13183)
* [ODC-7396](https://issues.redhat.com/browse/ODC-7396): Add Pipeline metrics tab using plugin [#13225](https://github.com/openshift/console/pull/13225)
* [CONSOLE-3084](https://issues.redhat.com/browse/CONSOLE-3084): frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA [#13184](https://github.com/openshift/console/pull/13184)
* [CONSOLE-3675](https://issues.redhat.com/browse/CONSOLE-3675): Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component [#13105](https://github.com/openshift/console/pull/13105)
* [OCPBUGS-20270](https://issues.redhat.com/browse/OCPBUGS-20270): Add instructions to the README for running the monitoring plugin locally [#13226](https://github.com/openshift/console/pull/13226)
* [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): use setTimeout to allow model to be created [#13195](https://github.com/openshift/console/pull/13195)
* [OCPBUGS-4242](https://issues.redhat.com/browse/OCPBUGS-4242): Fix CSV list and details page managed namespaces for copied CSVs. [#13194](https://github.com/openshift/console/pull/13194)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Home-Projects-Default-workloads-AddPage: upload JAR file's i18n misses [#13208](https://github.com/openshift/console/pull/13208)
* [OCPBUGS-19966](https://issues.redhat.com/browse/OCPBUGS-19966): Builds - BuildConfigs : i18n misses [#13211](https://github.com/openshift/console/pull/13211)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue (additional fixes) [#13198](https://github.com/openshift/console/pull/13198)
* [ODC-7377](https://issues.redhat.com/browse/ODC-7377), [ODC-7378](https://issues.redhat.com/browse/ODC-7378): Add Revisions, Routes and Pods tab for service details page [#13174](https://github.com/openshift/console/pull/13174)
* [CONSOLE-3763](https://issues.redhat.com/browse/CONSOLE-3763): Update null-loader dev dependency in console [#13154](https://github.com/openshift/console/pull/13154)
* [OCPBUGS-7893](https://issues.redhat.com/browse/OCPBUGS-7893): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13077](https://github.com/openshift/console/pull/13077)
* [OCPBUGS-14322](https://issues.redhat.com/browse/OCPBUGS-14322): fix ResourceLog permissions when impersonating [#13196](https://github.com/openshift/console/pull/13196)
* [ODC-7391](https://issues.redhat.com/browse/ODC-7391): Add a new allowInsecure option to the internet proxy API [#13175](https://github.com/openshift/console/pull/13175)
* [OCPBUGS-19743](https://issues.redhat.com/browse/OCPBUGS-19743): Fix Invalid URL crash [#13192](https://github.com/openshift/console/pull/13192)
* [OCPBUGS-18267](https://issues.redhat.com/browse/OCPBUGS-18267): 404 - not found will show on Knative-serving Details page [#13156](https://github.com/openshift/console/pull/13156)
* [OCPBUGS-17676](https://issues.redhat.com/browse/OCPBUGS-17676): Enable white space retain in resource logs [#13101](https://github.com/openshift/console/pull/13101)
* [OCPBUGS-4426](https://issues.redhat.com/browse/OCPBUGS-4426): All Projects' dropdown": Roles and RoleBindings "before all" hook for "test Roles detail page breadcrumbs to list page restores [#13190](https://github.com/openshift/console/pull/13190)
* [OCPBUGS-8777](https://issues.redhat.com/browse/OCPBUGS-8777): Don't redirect after logout from login error route [#13102](https://github.com/openshift/console/pull/13102)
* [OCPBUGS-9157](https://issues.redhat.com/browse/OCPBUGS-9157): ‘Create Pod’ button should be disabled for normal user … [#13040](https://github.com/openshift/console/pull/13040)
* [OCPBUGS-19640](https://issues.redhat.com/browse/OCPBUGS-19640): Dont render ARN mode role field and warning for HyperShift clusters [#13191](https://github.com/openshift/console/pull/13191)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue [#13180](https://github.com/openshift/console/pull/13180)
* [OCPBUGS-19546](https://issues.redhat.com/browse/OCPBUGS-19546): Set unlimited line width in YAML editor [#13182](https://github.com/openshift/console/pull/13182)
* [OCPBUGS-19413](https://issues.redhat.com/browse/OCPBUGS-19413): Fix demo dynamic plugin dev mode cypress tests [#13172](https://github.com/openshift/console/pull/13172)
* [OCPBUGS-19367](https://issues.redhat.com/browse/OCPBUGS-19367): Console should not panic when no response is retrieved for plugin assets [#13166](https://github.com/openshift/console/pull/13166)
* [OCPBUGS-19394](https://issues.redhat.com/browse/OCPBUGS-19394): document kebab menu cell props [#13177](https://github.com/openshift/console/pull/13177)
* [OCPBUGS-13152](https://issues.redhat.com/browse/OCPBUGS-13152): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13065](https://github.com/openshift/console/pull/13065)
* [OCPBUGS-9719](https://issues.redhat.com/browse/OCPBUGS-9719): Correct logout process [#10177](https://github.com/openshift/console/pull/10177)
* [OCPBUGS-18832](https://issues.redhat.com/browse/OCPBUGS-18832): change resource icon for FenceAgentRemediationTemplate… [#13162](https://github.com/openshift/console/pull/13162)
* [OCPBUGS-18996](https://issues.redhat.com/browse/OCPBUGS-18996): fix issues with refactored "Create StorageClass" form [#13153](https://github.com/openshift/console/pull/13153)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console images to be consistent with ART [#13157](https://github.com/openshift/console/pull/13157)
* [OCPBUGS-11286](https://issues.redhat.com/browse/OCPBUGS-11286): Check if filtered object contains name property [#12810](https://github.com/openshift/console/pull/12810)
* [OCPBUGS-18464](https://issues.redhat.com/browse/OCPBUGS-18464): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13141](https://github.com/openshift/console/pull/13141)
* [OCPBUGS-18494](https://issues.redhat.com/browse/OCPBUGS-18494): Upgrade DomainMapping apiVersion to v1beta1 [#13133](https://github.com/openshift/console/pull/13133)
* [OCPBUGS-19314](https://issues.redhat.com/browse/OCPBUGS-19314): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13130](https://github.com/openshift/console/pull/13130)
* [OCPBUGS-6515](https://issues.redhat.com/browse/OCPBUGS-6515): address ConsoleExternalLogLink test flake [#13110](https://github.com/openshift/console/pull/13110)
* [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Remove redundant break line [#13109](https://github.com/openshift/console/pull/13109)
* [OCPBUGS-5571](https://issues.redhat.com/browse/OCPBUGS-5571): Update API docs content based on docs review [#13108](https://github.com/openshift/console/pull/13108)
* [OCPBUGS-3403](https://issues.redhat.com/browse/OCPBUGS-3403): Fix resource table sorting crash [#13103](https://github.com/openshift/console/pull/13103)
* [OCPBUGS-17203](https://issues.redhat.com/browse/OCPBUGS-17203): mock apis for git repo in test serverless function tests [#13064](https://github.com/openshift/console/pull/13064)
* [OCPBUGS-19313](https://issues.redhat.com/browse/OCPBUGS-19313): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13129](https://github.com/openshift/console/pull/13129)
* [OCPBUGS-19311](https://issues.redhat.com/browse/OCPBUGS-19311): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13128](https://github.com/openshift/console/pull/13128)
* [OCPBUGS-18188](https://issues.redhat.com/browse/OCPBUGS-18188): Added React Icon [#13111](https://github.com/openshift/console/pull/13111)
* [OCPBUGS-18485](https://issues.redhat.com/browse/OCPBUGS-18485): Monitoring: Fix display of silenced alerts in dev console [#13151](https://github.com/openshift/console/pull/13151)
* [OCPBUGS-6513](https://issues.redhat.com/browse/OCPBUGS-6513): Fixed Edit Application form for Knative Services [#12832](https://github.com/openshift/console/pull/12832)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13092](https://github.com/openshift/console/pull/13092)
* [OCPBUGS-18439](https://issues.redhat.com/browse/OCPBUGS-18439): use active namespace in Create cta href of create action for operator backed [#13132](https://github.com/openshift/console/pull/13132)
* [Full changelog](https://github.com/openshift/console/compare/2656b27e4aeba660cd8b57194a81ec5eb8058204...33225d2158c47b0699c6b4c9e2c01322ffaaac9f)


### [console-operator](https://github.com/openshift/console-operator/tree/7dfdcf9c317b29c4a84738cca34198d33c7847dc)

* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Remove multicluster code from console operator [#799](https://github.com/openshift/console-operator/pull/799)
* [OCPBUGS-21972](https://issues.redhat.com/browse/OCPBUGS-21972): Disable HTTP/2 for webhook [#802](https://github.com/openshift/console-operator/pull/802)
* [OCPVE-719](https://issues.redhat.com/browse/OCPVE-719): feat: add support for olm capability [#795](https://github.com/openshift/console-operator/pull/795)
* [HOSTEDCP-1250](https://issues.redhat.com/browse/HOSTEDCP-1250): remove redundant cert check [#801](https://github.com/openshift/console-operator/pull/801)
* [CONSOLE-3717](https://issues.redhat.com/browse/CONSOLE-3717): Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests [#782](https://github.com/openshift/console-operator/pull/782)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console-operator images to be consistent with ART [#794](https://github.com/openshift/console-operator/pull/794)
* [OCPBUGS-19080](https://issues.redhat.com/browse/OCPBUGS-19080): Reset console operator's conditions [#796](https://github.com/openshift/console-operator/pull/796)
* [Full changelog](https://github.com/openshift/console-operator/compare/483bbcfcf019a58afb70ae1b021ba01e074b09e0...7dfdcf9c317b29c4a84738cca34198d33c7847dc)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/8f26066eb4418174775b89d3c37292a5f6d4b482)

* [OCPBUGS-21906](https://issues.redhat.com/browse/OCPBUGS-21906): Bumps x/net + upstream sync november 2023 [#128](https://github.com/openshift/containernetworking-plugins/pull/128)
* [OCPBUGS-19127](https://issues.redhat.com/browse/OCPBUGS-19127): Updating ose-containernetworking-plugins images to be consistent with ART [#122](https://github.com/openshift/containernetworking-plugins/pull/122)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/463386589579bd9e74578b3c0fb278840570cd0f...8f26066eb4418174775b89d3c37292a5f6d4b482)


### [coredns](https://github.com/openshift/coredns/tree/68ef945a78841a4a1be007fcefa929cc30eb9553)

* [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101)
* [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94)
* [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95)
* [Full changelog](https://github.com/openshift/coredns/compare/fd70cf1b81d3d3a907663f61b651201de5f8e4e7...68ef945a78841a4a1be007fcefa929cc30eb9553)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/5c8b9e4a8697f1e228cef5fa932dd9e48d950059)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#207](https://github.com/openshift/csi-driver-manila-operator/pull/207)
* [OCPBUGS-21940](https://issues.redhat.com/browse/OCPBUGS-21940): Update k8s.io/apimachinery and k8s.io/apiserver [#206](https://github.com/openshift/csi-driver-manila-operator/pull/206)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#205](https://github.com/openshift/csi-driver-manila-operator/pull/205)
* [OCPBUGS-19166](https://issues.redhat.com/browse/OCPBUGS-19166): Updating csi-driver-manila-operator images to be consistent with ART [#204](https://github.com/openshift/csi-driver-manila-operator/pull/204)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/ea34192d229b15ef335be349005df184b4814be8...5c8b9e4a8697f1e228cef5fa932dd9e48d950059)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/8e85ebf79047bbb8d97fa8fe052aecb399636de6)

* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): Merge upstream [#133](https://github.com/openshift/csi-driver-nfs/pull/133)
* [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/csi-driver-nfs/pull/131)
* [OCPBUGS-19212](https://issues.redhat.com/browse/OCPBUGS-19212): Updating csi-driver-nfs images to be consistent with ART [#129](https://github.com/openshift/csi-driver-nfs/pull/129)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#128](https://github.com/openshift/csi-driver-nfs/pull/128)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...8e85ebf79047bbb8d97fa8fe052aecb399636de6)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/6b609e2c0d35044e484eec9a60a16f33f341a4e0)

* [OCPBUGS-23108](https://issues.redhat.com/browse/OCPBUGS-23108): Should reference configmaps instead of secrets [#151](https://github.com/openshift/csi-driver-shared-resource/pull/151)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource images to be consistent with ART [#143](https://github.com/openshift/csi-driver-shared-resource/pull/143)
* [OCPBUGS-21730](https://issues.redhat.com/browse/OCPBUGS-21730): bump golang.org/x/net to v0.17.0 [#145](https://github.com/openshift/csi-driver-shared-resource/pull/145)
* [OCPBUGS-19291](https://issues.redhat.com/browse/OCPBUGS-19291): Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#144](https://github.com/openshift/csi-driver-shared-resource/pull/144)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#142](https://github.com/openshift/csi-driver-shared-resource/pull/142)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/740b4427f2c3d72f47c0cd7b9af6b9c51c009c31...6b609e2c0d35044e484eec9a60a16f33f341a4e0)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/4339ee9b25f4bb27c7736809fd59fee34fb69411)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90)
* [OCPBUGS-21724](https://issues.redhat.com/browse/OCPBUGS-21724): bump golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/csi-driver-shared-resource-operator/pull/85)
* [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/73ddf3e313dbcec4238657af9b4237b405b16c4a...4339ee9b25f4bb27c7736809fd59fee34fb69411)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/6745e86fb53f74793b8fe422182b19b212b0c0d9)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-external-attacher/pull/59)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-attacher` to v4.4.0 for OCP 4.15 [#58](https://github.com/openshift/csi-external-attacher/pull/58)
* [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/06e8ce0d36f7c23f0906327cd66ec6bd15165366...6745e86fb53f74793b8fe422182b19b212b0c0d9)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/1f086c1e4b14c25271ebfcea883b5ca1f08f8d37)

* [OCPBUGS-23062](https://issues.redhat.com/browse/OCPBUGS-23062): UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#78](https://github.com/openshift/csi-external-provisioner/pull/78)
* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528): UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#77](https://github.com/openshift/csi-external-provisioner/pull/77)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#71](https://github.com/openshift/csi-external-provisioner/pull/71)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-provisioner` to v3.6.0 for OCP 4.15 [#70](https://github.com/openshift/csi-external-provisioner/pull/70)
* [OCPBUGS-19114](https://issues.redhat.com/browse/OCPBUGS-19114): Updating csi-provisioner images to be consistent with ART [#69](https://github.com/openshift/csi-external-provisioner/pull/69)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/78a710fd2ccd6f87f7789c314349192d063f9f37...1f086c1e4b14c25271ebfcea883b5ca1f08f8d37)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/3b4236d382e4593ca41ecc6f394775be467b1a0d)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#146](https://github.com/openshift/csi-external-resizer/pull/146)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-resizer` to v1.9.0 for OCP 4.15 [#145](https://github.com/openshift/csi-external-resizer/pull/145)
* [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/59a701a4c8cd3105e272b12afdb1e62e411b2772...3b4236d382e4593ca41ecc6f394775be467b1a0d)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/11bb38ff1192d6b4e7b9f5f0db0bd24a7536b1c5)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#108](https://github.com/openshift/csi-external-snapshotter/pull/108)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-snapshotter` to v6.3.0 for OCP 4.15 [#107](https://github.com/openshift/csi-external-snapshotter/pull/107)
* [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106)
* [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105)
* [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/0bf9276611e57cb87a05576c974fea1c38e3eb96...11bb38ff1192d6b4e7b9f5f0db0bd24a7536b1c5)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/csi-livenessprobe/pull/49)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `livenessprobe` to v2.11.0 for OCP 4.15 [#48](https://github.com/openshift/csi-livenessprobe/pull/48)
* [OCPBUGS-19132](https://issues.redhat.com/browse/OCPBUGS-19132): Updating csi-livenessprobe images to be consistent with ART [#47](https://github.com/openshift/csi-livenessprobe/pull/47)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/a9bcbde134a17d3335f68a49aaad4befa8d7cc08...240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ba09f2807de7bdb9607f6510c541913c53a5e011)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-node-driver-registrar/pull/51)
* [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `node-driver-registrar` to v2.9.0 for OCP 4.15 [#50](https://github.com/openshift/csi-node-driver-registrar/pull/50)
* [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9dcaa7f5b7573e7ef9dbec1439abc32171003799...ba09f2807de7bdb9607f6510c541913c53a5e011)


### [docker-builder](https://github.com/openshift/builder/tree/0c0a73b21b471a2194713fa2c19d40cdbff26fa5)

* [OCPBUGS-23128](https://issues.redhat.com/browse/OCPBUGS-23128): bump github.com/containers/buildah to fix transient mounting in chroot isolation [#358](https://github.com/openshift/builder/pull/358)
* [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369)
* [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361)
* [OCPBUGS-20407](https://issues.redhat.com/browse/OCPBUGS-20407): drop the Overlay setting from transient mounts [#359](https://github.com/openshift/builder/pull/359)
* [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357)
* [Full changelog](https://github.com/openshift/builder/compare/5cedc85c41e43cfe88a86e669ba1beb8b357fd3e...0c0a73b21b471a2194713fa2c19d40cdbff26fa5)


### [docker-registry](https://github.com/openshift/image-registry/tree/855b24b7a2c5b493fb83968a6515b1b218e96c83)

* [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378)
* [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377)
* [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379)
* [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380)
* [Full changelog](https://github.com/openshift/image-registry/compare/5e7788a16fbbf051c16f28d590905a8f69cd29ac...855b24b7a2c5b493fb83968a6515b1b218e96c83)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/39ea8ee1d8299b9052be76bd4b50c79d731c9e38)

* [OCPBUGS-18003](https://issues.redhat.com/browse/OCPBUGS-18003): Ensure that IP forwarding is enabled [#77](https://github.com/openshift/egress-router-cni/pull/77)
* [OCPBUGS-19258](https://issues.redhat.com/browse/OCPBUGS-19258): Updating egress-router-cni images to be consistent with ART [#76](https://github.com/openshift/egress-router-cni/pull/76)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/afffdd455b65a944751f9155852781f9ddce0f5d...39ea8ee1d8299b9052be76bd4b50c79d731c9e38)


### [etcd](https://github.com/openshift/etcd/tree/9651438be519d3d4f1b34b4f8d166778aaa3e5ce)

* [OCPBUGS-20560](https://issues.redhat.com/browse/OCPBUGS-20560): [4.15] Rebase openshift/etcd to 3.5.10 [#224](https://github.com/openshift/etcd/pull/224)
* [Full changelog](https://github.com/openshift/etcd/compare/ce96982907bdf2568473debfcff662793f366028...9651438be519d3d4f1b34b4f8d166778aaa3e5ce)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/edf70eda29f796e368d7c3e503f817609d27b671)

* [OCPCLOUD-2185](https://issues.redhat.com/browse/OCPCLOUD-2185): Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master [#36](https://github.com/openshift/cloud-provider-gcp/pull/36)
* Update OWNERS [#39](https://github.com/openshift/cloud-provider-gcp/pull/39)
* [OCPBUGS-19243](https://issues.redhat.com/browse/OCPBUGS-19243): Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#38](https://github.com/openshift/cloud-provider-gcp/pull/38)
* [OCPBUGS-5755](https://issues.redhat.com/browse/OCPBUGS-5755): Reuse instance-groups for internal load balancers [#35](https://github.com/openshift/cloud-provider-gcp/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/37deba9d5cc01f1d0cfe741b3996b0474d5ef84e...edf70eda29f796e368d7c3e503f817609d27b671)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/4adfdf1efbb10e2e1b3c3dfb5e4f58135e2b97a6)

* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases [#208](https://github.com/openshift/cluster-api-provider-gcp/pull/208)
* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master [#207](https://github.com/openshift/cluster-api-provider-gcp/pull/207)
* Update OWNERS [#201](https://github.com/openshift/cluster-api-provider-gcp/pull/201)
* [OCPBUGS-19116](https://issues.redhat.com/browse/OCPBUGS-19116): Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#200](https://github.com/openshift/cluster-api-provider-gcp/pull/200)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/38e337585cf606957429f7043db1a57cda34fcec...4adfdf1efbb10e2e1b3c3dfb5e4f58135e2b97a6)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/ed87996d2e96cea0e4084d59ef17e62fa4428a03)

* [MIXEDARCH-258](https://issues.redhat.com/browse/MIXEDARCH-258): Set the capacity annotation for arch-aware autoscale from zero [#60](https://github.com/openshift/machine-api-provider-gcp/pull/60)
* Update OWNERS [#63](https://github.com/openshift/machine-api-provider-gcp/pull/63)
* [OCPBUGS-21792](https://issues.redhat.com/browse/OCPBUGS-21792): Bump x/net package to v0.17.0 [#62](https://github.com/openshift/machine-api-provider-gcp/pull/62)
* [OCPCLOUD-2191](https://issues.redhat.com/browse/OCPCLOUD-2191): Update to Kube 1.28 [#59](https://github.com/openshift/machine-api-provider-gcp/pull/59)
* [OCPBUGS-20267](https://issues.redhat.com/browse/OCPBUGS-20267): update bad url endpoint termination handler test [#61](https://github.com/openshift/machine-api-provider-gcp/pull/61)
* [OCPBUGS-19228](https://issues.redhat.com/browse/OCPBUGS-19228): Updating ose-machine-api-provider-gcp images to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-gcp/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9d31a58dda48564d88faebbd53f48925c71a6cc5...ed87996d2e96cea0e4084d59ef17e62fa4428a03)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/269ed09ed82cfaa228b1c913990f3d44b637af37)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#43](https://github.com/openshift/gcp-pd-csi-driver/pull/43)
* [OCPBUGS-19134](https://issues.redhat.com/browse/OCPBUGS-19134): Updating ose-gcp-pd-csi-driver images to be consistent with ART [#42](https://github.com/openshift/gcp-pd-csi-driver/pull/42)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03...269ed09ed82cfaa228b1c913990f3d44b637af37)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d94f17ff8ff7d4b6a2a7b809758ab33c7baa44f5)

* [OCPBUGS-22600](https://issues.redhat.com/browse/OCPBUGS-22600): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#94](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/94)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#81](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/81)
* Add clone test for gcp-pd-csi-driver [#92](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/92)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#93](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/93)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/86)
* [OCPBUGS-19229](https://issues.redhat.com/browse/OCPBUGS-19229): Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART [#85](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/85)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/92376a4b846366ae3c7a61e5af895e3221d09703...d94f17ff8ff7d4b6a2a7b809758ab33c7baa44f5)


### [haproxy-router](https://github.com/openshift/router/tree/fb70ac4d547954e7f96c12b4bc329917f1695d35)

* [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527)
* [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513)
* [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512)
* [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508)
* [Full changelog](https://github.com/openshift/router/compare/80e2d999242203ad62c39ce758966531ba59dd2c...fb70ac4d547954e7f96c12b4bc329917f1695d35)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/4cbdd29250f42f7294c94d5ba60f4b168f6d58a2)

* [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790)
* Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788)
* [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771)
* Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769)
* UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685)
* [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757)
* Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735)
* [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734)
* Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732)
* Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731)
* Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703)
* UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726)
* [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724)
* [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711)
* UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714)
* [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716)
* Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646)
* [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638)
* UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698)
* <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686)
* [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665)
* [Full changelog](https://github.com/openshift/kubernetes/compare/88e9b4c0d5978a2879307be87d25c592abb6eeea...4cbdd29250f42f7294c94d5ba60f4b168f6d58a2)


### [hypershift](https://github.com/openshift/hypershift/tree/68990cd19aad08e7c5ce45dd6fce34c763566bc1)

* [OCPBUGS-23083](https://issues.redhat.com/browse/OCPBUGS-23083): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3172](https://github.com/openshift/hypershift/pull/3172)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): Update Dependencies [#3154](https://github.com/openshift/hypershift/pull/3154)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Fixed Azure nodes not joining [#3174](https://github.com/openshift/hypershift/pull/3174)
* [HOSTEDCP-1227](https://issues.redhat.com/browse/HOSTEDCP-1227): Retrieve CAPZ image from OCP release image [#3074](https://github.com/openshift/hypershift/pull/3074)
* NO-JIRA: fix formatting for releaseImage log [#3156](https://github.com/openshift/hypershift/pull/3156)
* [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150)
* [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088)
* [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164)
* [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148)
* [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141)
* [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149)
* [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067)
* [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157)
* [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132)
* Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147)
* Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134)
* [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081)
* Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136)
* [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113)
* [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072)
* [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135)
* [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086)
* contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140)
* [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138)
* run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137)
* [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115)
* [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097)
* Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092)
* [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108)
* Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093)
* Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062)
* [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103)
* OCPBUGS-19419 change trusted bundle volume mount for CPO [#3099](https://github.com/openshift/hypershift/pull/3099)
* Disabling unused monitoring services [#2730](https://github.com/openshift/hypershift/pull/2730)
* [OCPBUGS-18341](https://issues.redhat.com/browse/OCPBUGS-18341): change required pod anti-affinity rule to preferred rule [#3095](https://github.com/openshift/hypershift/pull/3095)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase upgrade rollout timers" [#3090](https://github.com/openshift/hypershift/pull/3090)
* [CNV-31891](https://issues.redhat.com/browse/CNV-31891): Document port 80 is not supported with default ingress for KubeVirt [#3079](https://github.com/openshift/hypershift/pull/3079)
* [MULTIARCH-3760](https://issues.redhat.com/browse/MULTIARCH-3760): Rename depricated flag for PowerVS capi deployment [#3028](https://github.com/openshift/hypershift/pull/3028)
* HOSTEDCP-1051 addition of grace period for aws infra destruction [#2967](https://github.com/openshift/hypershift/pull/2967)
* [HOSTEDCP-1232](https://issues.redhat.com/browse/HOSTEDCP-1232): Add clusterName label to CAPI kubeconfig secret [#3087](https://github.com/openshift/hypershift/pull/3087)
* [OCPBUGS-19957](https://issues.redhat.com/browse/OCPBUGS-19957): Reconcile CNCC secret to CPO namespace [#3065](https://github.com/openshift/hypershift/pull/3065)
* [OCPBUGS-20105](https://issues.redhat.com/browse/OCPBUGS-20105): OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes [#3077](https://github.com/openshift/hypershift/pull/3077)
* [OCPBUGS-16189](https://issues.redhat.com/browse/OCPBUGS-16189), [OCPBUGS-19746](https://issues.redhat.com/browse/OCPBUGS-19746): Added network validations [#3047](https://github.com/openshift/hypershift/pull/3047)
* [CNV-30697](https://issues.redhat.com/browse/CNV-30697): Dedicated CPU for KubeVirt node pool [#3048](https://github.com/openshift/hypershift/pull/3048)
* Add record rules for kas qps [#2858](https://github.com/openshift/hypershift/pull/2858)
* Fix a typo in KubeVirt troubleshooting script [#3073](https://github.com/openshift/hypershift/pull/3073)
* [HOSTEDCP-1184](https://issues.redhat.com/browse/HOSTEDCP-1184): Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal [#3008](https://github.com/openshift/hypershift/pull/3008)
* Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… [#3076](https://github.com/openshift/hypershift/pull/3076)
* Upate azure docs [#3075](https://github.com/openshift/hypershift/pull/3075)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working (part2). [#3014](https://github.com/openshift/hypershift/pull/3014)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939), [OCPBUGS-18128](https://issues.redhat.com/browse/OCPBUGS-18128), [OCPBUGS-18460](https://issues.redhat.com/browse/OCPBUGS-18460), [OCPBUGS-18602](https://issues.redhat.com/browse/OCPBUGS-18602), [OCPBUGS-18879](https://issues.redhat.com/browse/OCPBUGS-18879): Support Disconnected HCP [#2950](https://github.com/openshift/hypershift/pull/2950)
* Add private link perms to docs and clarify log message [#3063](https://github.com/openshift/hypershift/pull/3063)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): Add konnectivity-proxy container to CNO [#2974](https://github.com/openshift/hypershift/pull/2974)
* [OCPBUGS-19784](https://issues.redhat.com/browse/OCPBUGS-19784): Update capi agent version for CRD label [#3050](https://github.com/openshift/hypershift/pull/3050)
* KubeVirt platform troubleshooting documentation [#3055](https://github.com/openshift/hypershift/pull/3055)
* Remove EgressFirewall Creation in HCP namespace [#3049](https://github.com/openshift/hypershift/pull/3049)
* [HOSTEDCP-1212](https://issues.redhat.com/browse/HOSTEDCP-1212): Bump Golang to v1.20 [#3038](https://github.com/openshift/hypershift/pull/3038)
* Update RHTAP references (main) [#3054](https://github.com/openshift/hypershift/pull/3054)
* [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041)
* Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017)
* Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044)
* [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022)
* [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976)
* [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025)
* [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039)
* Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036)
* KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031)
* Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033)
* [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024)
* [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013)
* [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011)
* Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020)
* Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000)
* Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995)
* [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012)
* Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948)
* [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001)
* [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009)
* feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991)
* [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955)
* [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004)
* [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003)
* [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997)
* e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987)
* bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952)
* [Full changelog](https://github.com/openshift/hypershift/compare/e25848241d107e7f7f9b8fee08647cca012a324d...68990cd19aad08e7c5ce45dd6fce34c763566bc1)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/6195e22a9e13e980390153bad395e2a70c7d17d2)

* Update OWNERS [#54](https://github.com/openshift/cloud-provider-ibm/pull/54)
* [OCPBUGS-19180](https://issues.redhat.com/browse/OCPBUGS-19180): Updating ose-ibm-cloud-controller-manager images to be consistent with ART [#53](https://github.com/openshift/cloud-provider-ibm/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/ea5a37bbb6bf9e340ccd85ce730c6a8545eae4cd...6195e22a9e13e980390153bad395e2a70c7d17d2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/9417a246f9f95266df0e47497a353a3ddab4a0dc)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#48](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/48)
* [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#43](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/43)
* [OCPBUGS-16920](https://issues.redhat.com/browse/OCPBUGS-16920): UPSTREAM: 164: Disable UUID check on xfs (#164) [#45](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/45)
* [OCPBUGS-19188](https://issues.redhat.com/browse/OCPBUGS-19188): Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#44](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/02471d9625339b1cd6d638e358a10c88b223d30e...9417a246f9f95266df0e47497a353a3ddab4a0dc)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/be13e0241e089afc912ab8329101b8d2214cc159)

* [OCPBUGS-22924](https://issues.redhat.com/browse/OCPBUGS-22924): Removing unncessary imagePullSecrets [#87](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/87)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#77](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/77)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#86](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/86)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#80](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/80)
* [OCPBUGS-19215](https://issues.redhat.com/browse/OCPBUGS-19215): Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#78](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/78)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/faf68eda7983c9e4c6cab158b067fe73ea594173...be13e0241e089afc912ab8329101b8d2214cc159)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/862a5c8262ec99b9f8e1f3a3d829e9e172c602ea)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#26](https://github.com/openshift/ibm-vpc-node-label-updater/pull/26)
* [OCPBUGS-19217](https://issues.redhat.com/browse/OCPBUGS-19217): Updating ibm-vpc-node-label-updater images to be consistent with ART [#25](https://github.com/openshift/ibm-vpc-node-label-updater/pull/25)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/44a2b9430e38e4dc0fe6ef0c08cd759ed97fd43f...862a5c8262ec99b9f8e1f3a3d829e9e172c602ea)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/fd847cb757eb555a17095b96ac429caf1b3c1985)

* [OCPBUGS-22054](https://issues.redhat.com/browse/OCPBUGS-22054): Bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/62)
* [OCPBUGS-22107](https://issues.redhat.com/browse/OCPBUGS-22107): Bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/61)
* Update OWNERS [#60](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/60)
* [OCPCLOUD-2220](https://issues.redhat.com/browse/OCPCLOUD-2220): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.6.0 (02aa85f) into main [#59](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/59)
* [OCPBUGS-19181](https://issues.redhat.com/browse/OCPBUGS-19181): Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART [#58](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/a7e5c6a5b96a3851d1807d4c3f80113a47a4e54d...fd847cb757eb555a17095b96ac429caf1b3c1985)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/33aef566a3277848bba8468a2d6110e817913fbb)

* Update OWNERS [#26](https://github.com/openshift/machine-api-provider-ibmcloud/pull/26)
* [OCPBUGS-17293](https://issues.redhat.com/browse/OCPBUGS-17293), [OCPCLOUD-2190](https://issues.redhat.com/browse/OCPCLOUD-2190): update k8s dependencies to release 1.28 [#25](https://github.com/openshift/machine-api-provider-ibmcloud/pull/25)
* [OCPBUGS-19221](https://issues.redhat.com/browse/OCPBUGS-19221): Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#24](https://github.com/openshift/machine-api-provider-ibmcloud/pull/24)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...33aef566a3277848bba8468a2d6110e817913fbb)


### [insights-operator](https://github.com/openshift/insights-operator/tree/60fcf31e09068f0b67169c3e89712dfc86b6d927)

* DVO gatherer - do the retry request as HEAD and not stream (#861) [#861](https://github.com/openshift/insights-operator/pull/861)
* docs(openshift_apiserver_operator_logs): explicit namespace at archive path (#834) [#834](https://github.com/openshift/insights-operator/pull/834)
* [OCPBUGS-22958](https://issues.redhat.com/browse/OCPBUGS-22958): adds cluster storageclasses gather (#858) [#858](https://github.com/openshift/insights-operator/pull/858)
* extends obfuscation options in the configmap (#844) [#844](https://github.com/openshift/insights-operator/pull/844)
* Revert the previous revert and fix (#851) [#851](https://github.com/openshift/insights-operator/pull/851)
* Fix lint, pin its version and other minor fixes (#852) [#852](https://github.com/openshift/insights-operator/pull/852)
* add retry logic to the DVO metrics gatherer (#847) [#847](https://github.com/openshift/insights-operator/pull/847)
* Revert "fix the reverted configmap PR (#846)" (#849) [#846](https://github.com/openshift/insights-operator/pull/846)
* fix the reverted configmap PR (#846) [#846](https://github.com/openshift/insights-operator/pull/846)
* Revert "First minimal PoC version for moving the configuration to configmap (#827)" (#845) [#827](https://github.com/openshift/insights-operator/pull/827)
* First minimal PoC version for moving the configuration to configmap (#827) [#827](https://github.com/openshift/insights-operator/pull/827)
* [OCPBUGS-21797](https://issues.redhat.com/browse/OCPBUGS-21797): remove username & password config options (#842) [#842](https://github.com/openshift/insights-operator/pull/842)
* [OCPBUGS-21613](https://issues.redhat.com/browse/OCPBUGS-21613): update ependencies (#838) [#838](https://github.com/openshift/insights-operator/pull/838)
* [OCPBUGS-19387](https://issues.redhat.com/browse/OCPBUGS-19387): fix error message when the data processing was not successful (#833) [#833](https://github.com/openshift/insights-operator/pull/833)
* [OCPBUGS-20034](https://issues.redhat.com/browse/OCPBUGS-20034): improve on-demand data gathering timing issues (#832) [#832](https://github.com/openshift/insights-operator/pull/832)
* [OCPBUGS-19695](https://issues.redhat.com/browse/OCPBUGS-19695): gather APIServer.config.openshift.io resource (#825) [#825](https://github.com/openshift/insights-operator/pull/825)
* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#824) [#824](https://github.com/openshift/insights-operator/pull/824)
* Updating ose-insights-operator images to be consistent with ART (#821) [#821](https://github.com/openshift/insights-operator/pull/821)
* [OCPBUGS-19387](https://issues.redhat.com/browse/OCPBUGS-19387): mark datagather job as failed if the data was not processed (#822) [#822](https://github.com/openshift/insights-operator/pull/822)
* Minor fixes for the techpreview (#820) [#820](https://github.com/openshift/insights-operator/pull/820)
* update changelog (#819) [#819](https://github.com/openshift/insights-operator/pull/819)
* [Full changelog](https://github.com/openshift/insights-operator/compare/303ad017385789bf7f02812ac86e2246e2aea4a9...60fcf31e09068f0b67169c3e89712dfc86b6d927)


### [ironic](https://github.com/openshift/ironic-image/tree/dbccf56ab115a783e4a637b22ce37da1b247c44a)

* [METAL-730](https://issues.redhat.com/browse/METAL-730): Sync202310 [#407](https://github.com/openshift/ironic-image/pull/407)
* [OCPBUGS-21876](https://issues.redhat.com/browse/OCPBUGS-21876): Use bash process substitution instead of pipe [#408](https://github.com/openshift/ironic-image/pull/408)
* Revert #395 "Sync20230829" [#405](https://github.com/openshift/ironic-image/pull/405)
* Sync20230829 [#395](https://github.com/openshift/ironic-image/pull/395)
* [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): update Ironic to include secure boot fixes [#403](https://github.com/openshift/ironic-image/pull/403)
* [OCPBUGS-18963](https://issues.redhat.com/browse/OCPBUGS-18963): update ironic to include SQLite fixes [#401](https://github.com/openshift/ironic-image/pull/401)
* [OCPBUGS-18859](https://issues.redhat.com/browse/OCPBUGS-18859): Updating ironic images to be consistent with ART [#397](https://github.com/openshift/ironic-image/pull/397)
* [OCPBUGS-19019](https://issues.redhat.com/browse/OCPBUGS-19019): Switch from current-tripleo to puppet-passed-ci [#398](https://github.com/openshift/ironic-image/pull/398)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5c6d6ee69ac7c37989ab891332ed2612217e753d...dbccf56ab115a783e4a637b22ce37da1b247c44a)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/7fd2b91d0bbc321d596d63aeb9068e006e19cbe4)

* [OCPBUGS-18862](https://issues.redhat.com/browse/OCPBUGS-18862): Updating ironic-agent images to be consistent with ART [#88](https://github.com/openshift/ironic-agent-image/pull/88)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ed6e12a62fc40fc450ad394034769cc734acb5e5...7fd2b91d0bbc321d596d63aeb9068e006e19cbe4)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/bcbcd95b6209afc8248b34c55294686dbd3831a3)

* [OCPBUGS-18863](https://issues.redhat.com/browse/OCPBUGS-18863): Updating ironic-rhcos-downloader images to be consistent with ART [#93](https://github.com/openshift/ironic-rhcos-downloader/pull/93)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...bcbcd95b6209afc8248b34c55294686dbd3831a3)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/472000211344be4a5e9581820e94895144cf2bfc)

* [OCPBUGS-18864](https://issues.redhat.com/browse/OCPBUGS-18864): Updating ironic-static-ip-manager images to be consistent with ART [#40](https://github.com/openshift/ironic-static-ip-manager/pull/40)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...472000211344be4a5e9581820e94895144cf2bfc)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/07b7bf748ea9d1d191be93e57a8078c8886760a6)

* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88)
* add `machine424` and `rexagod`  to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): upgrade golang.org/x/net to 0.17.0 to address CVE-2023… [#80](https://github.com/openshift/k8s-prometheus-adapter/pull/80)
* [OCPBUGS-18971](https://issues.redhat.com/browse/OCPBUGS-18971): limit number of simultaneous client requests [#76](https://github.com/openshift/k8s-prometheus-adapter/pull/76)
* [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74)
* Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/428bb46ca455d22477df7fb62e7a63d2a48fcfbc...07b7bf748ea9d1d191be93e57a8078c8886760a6)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/16dbf5ee78a8e007a17c53568a0655f7e10ec794)

* [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151)
* [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149)
* [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148)
* [Full changelog](https://github.com/openshift/images/compare/f08cee3389569256aa288c33bad701a2704ce9db...16dbf5ee78a8e007a17c53568a0655f7e10ec794)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/58379a0c9ff5a3aa8a9edd193794fd10fe4f1373)

* [OCPBUGS-16788](https://issues.redhat.com/browse/OCPBUGS-16788): Create IPAM files with 0600 permissions [#584](https://github.com/openshift/sdn/pull/584)
* [SDN-4123](https://issues.redhat.com/browse/SDN-4123): rebase sdn to kube 1.28.3 [#580](https://github.com/openshift/sdn/pull/580)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): Controller: add flag for node name [#578](https://github.com/openshift/sdn/pull/578)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-proxy images to be consistent with ART [#575](https://github.com/openshift/sdn/pull/575)
* [OCPBUGS-19103](https://issues.redhat.com/browse/OCPBUGS-19103): Updating ose-sdn images to be consistent with ART [#574](https://github.com/openshift/sdn/pull/574)
* Collect pod operation latency metrics properly [#576](https://github.com/openshift/sdn/pull/576)
* Live migration: Add flows that allow openshift-sdn to connect to ovnkube [#569](https://github.com/openshift/sdn/pull/569)
* [Full changelog](https://github.com/openshift/sdn/compare/128c28c6f6d1078627c452afc867b492894e0ac4...58379a0c9ff5a3aa8a9edd193794fd10fe4f1373)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/e8e8c84bcc6d4419970726f3028df4b178c0b1c9)

* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-rbac-proxy images to be consistent with ART [#72](https://github.com/openshift/kube-rbac-proxy/pull/72)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/86f31e2de5221ed4acd6509fa7a010a286089f1f...e8e8c84bcc6d4419970726f3028df4b178c0b1c9)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/3653218b1a73f6b5d75529b429663e9705f826d2)

* [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100)
* add `machine424` and `rexagod`  to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96)
* [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/db0c54994a6aad9155a94513eaa3480c1812f45e...3653218b1a73f6b5d75529b429663e9705f826d2)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/95ad20fc390cd34e0e5ba5135d5048bc0f008c0d)

* [OCPBUGS-19227](https://issues.redhat.com/browse/OCPBUGS-19227): Updating ose-kube-storage-version-migrator images to be consistent with ART [#199](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/199)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...95ad20fc390cd34e0e5ba5135d5048bc0f008c0d)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/e465e606e7d17c64392cdeba099f9382580e44b0)

* [OCPBUGS-19193](https://issues.redhat.com/browse/OCPBUGS-19193): Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-kubevirt/pull/25)
* Auto sync upstream 2023 09 15 20 36 [#24](https://github.com/openshift/cloud-provider-kubevirt/pull/24)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/62ca8ad354f49028ce80cb9ec5c48aab3d0f1ecd...e465e606e7d17c64392cdeba099f9382580e44b0)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/aea7be8e2213a74d1945d39eba4d1efec0369c36)

* [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23)
* Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/831ff3eb2247295c45742fea89df666ed6600d71...aea7be8e2213a74d1945d39eba4d1efec0369c36)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/43b2b82069d4752609f91049d580df2756e570b9)

* Add workaround for SLOF regression [#263](https://github.com/openshift/cluster-api-provider-libvirt/pull/263)
* client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260)
* [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...43b2b82069d4752609f91049d580df2756e570b9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/efda8d50967a00210f2147abdfc794c6bd015080)

* [OCPCLOUD-2138](https://issues.redhat.com/browse/OCPCLOUD-2138): Add module to work with scale from zero annotations for MachineSet [#1169](https://github.com/openshift/machine-api-operator/pull/1169)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Use docs URL instead of KCS article [#1172](https://github.com/openshift/machine-api-operator/pull/1172)
* [OCPBUGS-21815](https://issues.redhat.com/browse/OCPBUGS-21815): Bump golang.org/x/net to v0.17.0 [#1170](https://github.com/openshift/machine-api-operator/pull/1170)
* [OCPCLOUD-2194](https://issues.redhat.com/browse/OCPCLOUD-2194): Update k8s dependencies 1.28 [#1168](https://github.com/openshift/machine-api-operator/pull/1168)
* [MGMT-13425](https://issues.redhat.com/browse/MGMT-13425): Don't fail when workers not needed [#1165](https://github.com/openshift/machine-api-operator/pull/1165)
* [SPLAT-1172](https://issues.redhat.com/browse/SPLAT-1172): Enhance machine status relating to IPAddressClaimed [#1166](https://github.com/openshift/machine-api-operator/pull/1166)
* [OCPBUGS-19241](https://issues.redhat.com/browse/OCPBUGS-19241): Updating ose-machine-api-operator images to be consistent with ART [#1167](https://github.com/openshift/machine-api-operator/pull/1167)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/525f8e5b89947b38ce07a6a6a3d194bf780d5075...efda8d50967a00210f2147abdfc794c6bd015080)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8e2f5441df5225bcf068f60bbe07bfae5a33f437)

* [OCPBUGS-22200](https://issues.redhat.com/browse/OCPBUGS-22200): Retry fetching OpenStack hostname if it fails [#3990](https://github.com/openshift/machine-config-operator/pull/3990)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721): Don't retry node-ip show in resolv-prepender [#4017](https://github.com/openshift/machine-config-operator/pull/4017)
* [MCO-772](https://issues.redhat.com/browse/MCO-772): controller: allow custom pool configs to take priority [#4015](https://github.com/openshift/machine-config-operator/pull/4015)
* [OCPBUGS-18414](https://issues.redhat.com/browse/OCPBUGS-18414), [OCPBUGS-18456](https://issues.redhat.com/browse/OCPBUGS-18456), [OCPBUGS-18458](https://issues.redhat.com/browse/OCPBUGS-18458): Configures SSH Keys and Password for core, fixes config drift degradation [#3946](https://github.com/openshift/machine-config-operator/pull/3946)
* Use the bridge interface name for ofport request [#3998](https://github.com/openshift/machine-config-operator/pull/3998)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): typo s/iface_default_hint_file/default_bridge_file/ [#4004](https://github.com/openshift/machine-config-operator/pull/4004)
* [OCPBUGS-16871](https://issues.redhat.com/browse/OCPBUGS-16871): MCO - currentConfig missing on the filesystem [#3963](https://github.com/openshift/machine-config-operator/pull/3963)
* [OCPBUGS-20369](https://issues.redhat.com/browse/OCPBUGS-20369): Require a hostname override for AWS [#3979](https://github.com/openshift/machine-config-operator/pull/3979)
* [OCPBUGS-21814](https://issues.redhat.com/browse/OCPBUGS-21814): bump library-go and k8s dependencies to most recent version [#3988](https://github.com/openshift/machine-config-operator/pull/3988)
* [OCPBUGS-19736](https://issues.redhat.com/browse/OCPBUGS-19736): configure-ovs: handle SIGINT and SIGTERM [#3982](https://github.com/openshift/machine-config-operator/pull/3982)
* Add kernel-64k kernelType [#3903](https://github.com/openshift/machine-config-operator/pull/3903)
* [MCO-593](https://issues.redhat.com/browse/MCO-593): Consume MCO API and CRDs from openshift/api [#3747](https://github.com/openshift/machine-config-operator/pull/3747)
* Get the nmstate pinned package from kojihub when building on top of a CentOS base image [#3954](https://github.com/openshift/machine-config-operator/pull/3954)
* CRI-O: Use `127.0.0.1` for stream server with random port [#3853](https://github.com/openshift/machine-config-operator/pull/3853)
* [OCPBUGS-20499](https://issues.redhat.com/browse/OCPBUGS-20499): gcp-routes: don't exit on crictl failures [#3977](https://github.com/openshift/machine-config-operator/pull/3977)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): Allow specifying the interface for br-ex [#3696](https://github.com/openshift/machine-config-operator/pull/3696)
* [OCPBUGS-20338](https://issues.redhat.com/browse/OCPBUGS-20338): dashboard should detect unknown and not ready for not ready dashboard [#3964](https://github.com/openshift/machine-config-operator/pull/3964)
* [OCPBUGS-19722](https://issues.redhat.com/browse/OCPBUGS-19722): Informers are setup with incorrect namespace [#3955](https://github.com/openshift/machine-config-operator/pull/3955)
* [OCPBUGS-15087](https://issues.redhat.com/browse/OCPBUGS-15087): templates: Introduce kubelet-dependencies.target [#3865](https://github.com/openshift/machine-config-operator/pull/3865)
* [OCPBUGS-17841](https://issues.redhat.com/browse/OCPBUGS-17841): Ensure gcp-routes hack for internalLB hairpin traffic works for SGW [#3953](https://github.com/openshift/machine-config-operator/pull/3953)
* [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Set guestinfo.hostname for CAPI VMs on vSphere [#3949](https://github.com/openshift/machine-config-operator/pull/3949)
* [OCPBUGS-19708](https://issues.redhat.com/browse/OCPBUGS-19708): Support to append the duplicate kernel arguments to the rendered MC [#3947](https://github.com/openshift/machine-config-operator/pull/3947)
* [OCPBUGS-18771](https://issues.redhat.com/browse/OCPBUGS-18771): Consider ingress VIPs when selecting node IP [#3943](https://github.com/openshift/machine-config-operator/pull/3943)
* [MCO-424](https://issues.redhat.com/browse/MCO-424): Drop `machine-os-content` references [#3364](https://github.com/openshift/machine-config-operator/pull/3364)
* [OCPBUGS-19992](https://issues.redhat.com/browse/OCPBUGS-19992): Add v6-primary dual stack support to VSphere UPI [#3670](https://github.com/openshift/machine-config-operator/pull/3670)
* [OCPNODE-1799](https://issues.redhat.com/browse/OCPNODE-1799): support icsp and idms objects [#3898](https://github.com/openshift/machine-config-operator/pull/3898)
* Improve kubelet error log [#3914](https://github.com/openshift/machine-config-operator/pull/3914)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): Use image exists in resolv-prepender instead of wc -l [#3910](https://github.com/openshift/machine-config-operator/pull/3910)
* [MCO-707](https://issues.redhat.com/browse/MCO-707): Strip registry transport from os image URL for comparison [#3857](https://github.com/openshift/machine-config-operator/pull/3857)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): Revert "Revert "fix nodeStatusUpdateFrequency"" [#3890](https://github.com/openshift/machine-config-operator/pull/3890)
* [OCPBUGS-17811](https://issues.redhat.com/browse/OCPBUGS-17811): add certificate input to bootstrap mcs [#3876](https://github.com/openshift/machine-config-operator/pull/3876)
* [MCO-746](https://issues.redhat.com/browse/MCO-746): make buildcontroller tests less flaky [#3905](https://github.com/openshift/machine-config-operator/pull/3905)
* [OCPBUGS-18902](https://issues.redhat.com/browse/OCPBUGS-18902): Internal Registry Secrets merge causing excessive API calls [#3912](https://github.com/openshift/machine-config-operator/pull/3912)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds e2e for on-cluster build dev preview [#3807](https://github.com/openshift/machine-config-operator/pull/3807)
* Dockerfile: update local copy to OCP 4.15 image [#3922](https://github.com/openshift/machine-config-operator/pull/3922)
* [OCPBUGS-19365](https://issues.redhat.com/browse/OCPBUGS-19365): Ignore invoking nbctl calls if its SDN [#3926](https://github.com/openshift/machine-config-operator/pull/3926)
* [OCPBUGS-15910](https://issues.redhat.com/browse/OCPBUGS-15910): After dual-stack conversion reconcile IPFamilies [#3909](https://github.com/openshift/machine-config-operator/pull/3909)
* [OCPBUGS-18800](https://issues.redhat.com/browse/OCPBUGS-18800): fix merged image registry CA behavior [#3851](https://github.com/openshift/machine-config-operator/pull/3851)
* mod: Update rpmostree-client-go [#3916](https://github.com/openshift/machine-config-operator/pull/3916)
* [OCPBUGS-13044](https://issues.redhat.com/browse/OCPBUGS-13044): daemon: always use `podman cp` to copy extensions container content [#3921](https://github.com/openshift/machine-config-operator/pull/3921)
* [OCPBUGS-18906](https://issues.redhat.com/browse/OCPBUGS-18906): Remove dependency on k8s.io/kubernetes packages [#3913](https://github.com/openshift/machine-config-operator/pull/3913)
* [OCPBUGS-19097](https://issues.redhat.com/browse/OCPBUGS-19097): Updating openshift-proxy-pull-test images to be consistent with ART [#3918](https://github.com/openshift/machine-config-operator/pull/3918)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again [#3907](https://github.com/openshift/machine-config-operator/pull/3907)
* [OCPBUGS-19179](https://issues.redhat.com/browse/OCPBUGS-19179): Updating ose-machine-config-operator images to be consistent with ART [#3919](https://github.com/openshift/machine-config-operator/pull/3919)
* [OCPBUGS-16905](https://issues.redhat.com/browse/OCPBUGS-16905): install: Recreate and delayed default ServiceAccount deletion [#3895](https://github.com/openshift/machine-config-operator/pull/3895)
* [MCO-765](https://issues.redhat.com/browse/MCO-765): Examine/Remove memory limits on MCO pods [#3915](https://github.com/openshift/machine-config-operator/pull/3915)
* [MCO-731](https://issues.redhat.com/browse/MCO-731): Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service [#3858](https://github.com/openshift/machine-config-operator/pull/3858)
* [MCO-708](https://issues.redhat.com/browse/MCO-708): Extract and merge kernel arguments from /proc/cmdline [#3856](https://github.com/openshift/machine-config-operator/pull/3856)
* configure-ovs-network: Add tun device support [#3618](https://github.com/openshift/machine-config-operator/pull/3618)
* [OCPBUGS-11437](https://issues.redhat.com/browse/OCPBUGS-11437): MCO keeps the pull secret to .orig file once it replaced [#3759](https://github.com/openshift/machine-config-operator/pull/3759)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5ac7b4ae0bca76358e4d40f546306775a8e0ea2c...8e2f5441df5225bcf068f60bbe07bfae5a33f437)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/4677f060c4bfd0c8f6d2ab5cfb0098e6e4d74c12)

* [OCPBUGS-21789](https://issues.redhat.com/browse/OCPBUGS-21789): Uplift x/net to v0.17.0 [#103](https://github.com/openshift/image-customization-controller/pull/103)
* [OCPBUGS-19186](https://issues.redhat.com/browse/OCPBUGS-19186): Updating ose-image-customization-controller images to be consistent with ART [#99](https://github.com/openshift/image-customization-controller/pull/99)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/9dd02305b4cbaf521dd73fa1a95e4b4a9e8a01c2...4677f060c4bfd0c8f6d2ab5cfb0098e6e4d74c12)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/31d988609409410aa491e47e1676c929854286ff)

* NO-ISSUE: Force updating 4.15 CI images [#32](https://github.com/openshift/machine-os-images/pull/32)
* [OCPBUGS-19133](https://issues.redhat.com/browse/OCPBUGS-19133): Updating ose-machine-os-images images to be consistent with ART [#30](https://github.com/openshift/machine-os-images/pull/30)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...31d988609409410aa491e47e1676c929854286ff)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/86d23df14c72a829f4a95fc7b14e6d049547b52d)

* Upgrade Node.js from v16 to v18 in images [#79](https://github.com/openshift/monitoring-plugin/pull/79)
* [OU-261](https://issues.redhat.com/browse/OU-261): Fix "Overwriting current silence" info alert to have padding [#74](https://github.com/openshift/monitoring-plugin/pull/74)
* [OU-179](https://issues.redhat.com/browse/OU-179): Fix the root cause of externalLabels not present on alerts [#53](https://github.com/openshift/monitoring-plugin/pull/53)
* Revert "Fix i18n namespace for navigation menu entries" [#77](https://github.com/openshift/monitoring-plugin/pull/77)
* Fix i18n namespace for navigation menu entries [#73](https://github.com/openshift/monitoring-plugin/pull/73)
* add ipv6 nginx configuration [#76](https://github.com/openshift/monitoring-plugin/pull/76)
* [OCPBUGS-19233](https://issues.redhat.com/browse/OCPBUGS-19233): Updating monitoring-plugin images to be consistent with ART [#75](https://github.com/openshift/monitoring-plugin/pull/75)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/87571978825e63392a56f6920e068af3a71cda6e...86d23df14c72a829f4a95fc7b14e6d049547b52d)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0cc54f701ae2dce684180798d43b0f882d9c7e93)

* [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76)
* [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70)
* [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1a9985bd714c8a8be934082945ec76f083feeba4...0cc54f701ae2dce684180798d43b0f882d9c7e93)


### [multus-cni](https://github.com/openshift/multus-cni/tree/2121697f1a12b943e21206c1f22991b5d8ef6d75)

* [OCPBUGS-21915](https://issues.redhat.com/browse/OCPBUGS-21915): Upstream sync with go.mod update [#193](https://github.com/openshift/multus-cni/pull/193)
* [OCPBUGS-19859](https://issues.redhat.com/browse/OCPBUGS-19859): Multus annotation permissions: Certificate duration should be configurable [#191](https://github.com/openshift/multus-cni/pull/191)
* [OCPBUGS-18995](https://issues.redhat.com/browse/OCPBUGS-18995): Move chroot from multus main process to its child processes (#1161) [#186](https://github.com/openshift/multus-cni/pull/186)
* [OCPBUGS-19364](https://issues.redhat.com/browse/OCPBUGS-19364): Updating multus-cni images to be consistent with ART [#183](https://github.com/openshift/multus-cni/pull/183)
* Per node cert [#184](https://github.com/openshift/multus-cni/pull/184)
* [OCPBUGS-18307](https://issues.redhat.com/browse/OCPBUGS-18307): Performance and efficiency improvements in daemon/server mode [#180](https://github.com/openshift/multus-cni/pull/180)
* [Full changelog](https://github.com/openshift/multus-cni/compare/cc707f694e99a1a82890612e29a1679d6907bdd6...2121697f1a12b943e21206c1f22991b5d8ef6d75)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/dc64637063de1bb1a338ff7165184dd813c68268)

* [OCPBUGS-22833](https://issues.redhat.com/browse/OCPBUGS-22833): Vendor package update (#39) [#39](https://github.com/openshift/multus-networkpolicy/pull/39)
* [OCPBUGS-21779](https://issues.redhat.com/browse/OCPBUGS-21779): Sync upstream + Fix CVE (#32) [#32](https://github.com/openshift/multus-networkpolicy/pull/32)
* Updating multus-networkpolicy images to be consistent with ART (#31) [#31](https://github.com/openshift/multus-networkpolicy/pull/31)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/0d76ba791dc3432c51c9a9fa6b95e41034af7988...dc64637063de1bb1a338ff7165184dd813c68268)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5)

* [OCPBUGS-18848](https://issues.redhat.com/browse/OCPBUGS-18848): Updating ose-multus-route-override-cni images to be consistent with ART [#48](https://github.com/openshift/route-override-cni/pull/48)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/078aee5c466ffc79126a34b85953534c6674f28c...a5b755b513f39e6e06ae3eca8daa6f965e96e6c5)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7478bebe4c037fda4c1a95a42009fca36b730e30)

* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Rechecking pending Pods (conflict resolved) [#196](https://github.com/openshift/whereabouts-cni/pull/196)
* [OCPBUGS-18847](https://issues.redhat.com/browse/OCPBUGS-18847): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#192](https://github.com/openshift/whereabouts-cni/pull/192)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7e454367b5994241feb5dc713065508c5534f8f3...7478bebe4c037fda4c1a95a42009fca36b730e30)


### [must-gather](https://github.com/openshift/must-gather/tree/c7f5e3f4ecd86e018f8a60c455ac95442344262b)

* machineconfig: always gather MCS-served config [#380](https://github.com/openshift/must-gather/pull/380)
* [OCPBUGS-20391](https://issues.redhat.com/browse/OCPBUGS-20391): Revert "Add must gather script for network observability" [#390](https://github.com/openshift/must-gather/pull/390)
* gather_sriov: Fix typos and collect SRIOV cache at /var/lib/cni/sriov [#369](https://github.com/openshift/must-gather/pull/369)
* sriov: Clean up `ip netns` output [#387](https://github.com/openshift/must-gather/pull/387)
* [OCPBUGS-19280](https://issues.redhat.com/browse/OCPBUGS-19280): Updating ose-must-gather images to be consistent with ART [#381](https://github.com/openshift/must-gather/pull/381)
* ppc: explicitly add RuntimeClass to gathered resources [#386](https://github.com/openshift/must-gather/pull/386)
* [OCPBUGS-19761](https://issues.redhat.com/browse/OCPBUGS-19761): Removed workload partitioning annotation from ppc script [#385](https://github.com/openshift/must-gather/pull/385)
* [Full changelog](https://github.com/openshift/must-gather/compare/833e1de991e2319439fb48550c86d2d44d412501...c7f5e3f4ecd86e018f8a60c455ac95442344262b)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/f91decaa10cfa233c9e680c96ec7ae642e30a03c)

* [OCPBUGS-19192](https://issues.redhat.com/browse/OCPBUGS-19192): Updating ose-network-interface-bond-cni images to be consistent with ART [#59](https://github.com/openshift/bond-cni/pull/59)
* [Full changelog](https://github.com/openshift/bond-cni/compare/29f61f6b05d958c40e7213937064f26a63a8e6d9...f91decaa10cfa233c9e680c96ec7ae642e30a03c)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/561753e45714485e1056bd2f6a09a5b77e1b97b2)

* Update the k8s dependencies to 1.28.3 (#81) [#81](https://github.com/openshift/network-metrics-daemon/pull/81)
* Updating ose-network-metrics-daemon images to be consistent with ART (#80) [#80](https://github.com/openshift/network-metrics-daemon/pull/80)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5fd1f2dd60022b33fcd989ba80b8a23d19b890b0...561753e45714485e1056bd2f6a09a5b77e1b97b2)


### [network-tools](https://github.com/openshift/network-tools/tree/e222bde150213e729ece93749aec1f175b4d54e8)

* [OCPBUGS-22166](https://issues.redhat.com/browse/OCPBUGS-22166): Move commands to the function to avoid them being executed on -h. [#93](https://github.com/openshift/network-tools/pull/93)
* Update docs to use image-streams instead of quay image [#91](https://github.com/openshift/network-tools/pull/91)
* jira-scripts: Add Zenghui, remove Vic [#90](https://github.com/openshift/network-tools/pull/90)
* Add Flavio as approver [#89](https://github.com/openshift/network-tools/pull/89)
* [SDN-3904](https://issues.redhat.com/browse/SDN-3904): Update scripts in network-tools to reflect the changes in IC model [#86](https://github.com/openshift/network-tools/pull/86)
* [SDN-4047](https://issues.redhat.com/browse/SDN-4047): Migrate bug-dispath query scripts [#88](https://github.com/openshift/network-tools/pull/88)
* [OCPBUGS-19292](https://issues.redhat.com/browse/OCPBUGS-19292): Updating ose-network-tools images to be consistent with ART [#87](https://github.com/openshift/network-tools/pull/87)
* [Full changelog](https://github.com/openshift/network-tools/compare/5ef9f0ea3e403af7702c5b17e15f75940fa22ac4...e222bde150213e729ece93749aec1f175b4d54e8)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/f70b793a6b51984f0f09548cc15a48c0f316f84a)

* Update OWNERS [#22](https://github.com/openshift/cloud-provider-nutanix/pull/22)
* [OCPCLOUD-2182](https://issues.redhat.com/browse/OCPCLOUD-2182): Update to match K8s v1.28 dependencies [#20](https://github.com/openshift/cloud-provider-nutanix/pull/20)
* [OCPBUGS-19165](https://issues.redhat.com/browse/OCPBUGS-19165): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#19](https://github.com/openshift/cloud-provider-nutanix/pull/19)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...f70b793a6b51984f0f09548cc15a48c0f316f84a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/4494c646865fe490d8d4169c80bb11dcf857c3b7)

* Update OWNERS [#55](https://github.com/openshift/machine-api-provider-nutanix/pull/55)
* [OCPCLOUD-2189](https://issues.redhat.com/browse/OCPCLOUD-2189): Update to match K8s v1.28 dependencies [#54](https://github.com/openshift/machine-api-provider-nutanix/pull/54)
* [OCPBUGS-19208](https://issues.redhat.com/browse/OCPBUGS-19208): Updating ose-nutanix-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-nutanix/pull/51)
* [OCPBUGS-5969](https://issues.redhat.com/browse/OCPBUGS-5969): machine stuck in Provisioning and machineset scale/delete not work [#52](https://github.com/openshift/machine-api-provider-nutanix/pull/52)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6f50b1ac83fa493cdaa38fb0a05804882333172b...4494c646865fe490d8d4169c80bb11dcf857c3b7)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/a87bd939d5c94392745fd52a784633476f5ddd13)

* [OCPBUGS-19214](https://issues.redhat.com/browse/OCPBUGS-19214): Updating ose-oauth-apiserver images to be consistent with ART [#90](https://github.com/openshift/oauth-apiserver/pull/90)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/a18cb3e10639b5789f7c291707064743feb105e2...a87bd939d5c94392745fd52a784633476f5ddd13)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/6d3658dbfc901facc657054a436a02eeef22669b)

* [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266)
* [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/55e0cd172625b3419c698014fa233e54021af9a3...6d3658dbfc901facc657054a436a02eeef22669b)


### [oauth-server](https://github.com/openshift/oauth-server/tree/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5)

* [OCPBUGS-21671](https://issues.redhat.com/browse/OCPBUGS-21671): go.mod: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/oauth-server/pull/137)
* [Full changelog](https://github.com/openshift/oauth-server/compare/37df9ffc9d961eb5e2eaae5ca45cc7cadce34e75...8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/1c8f538897c88011c51ab53ea5073547521f0676)

* refactorings (#728) [#728](https://github.com/openshift/oc-mirror/pull/728)
* Fix --from being set to default value in mirrorToDisk workflow (#727) [#727](https://github.com/openshift/oc-mirror/pull/727)
* [OCPBUGS-22947](https://issues.redhat.com/browse/OCPBUGS-22947): Should not generate graph with prepare subcommand (#725) [#725](https://github.com/openshift/oc-mirror/pull/725)
* Cancel community office hours: none for the moment (#726) [#726](https://github.com/openshift/oc-mirror/pull/726)
* [CFE-965](https://issues.redhat.com/browse/CFE-965): [V2] Enable signature verification (#709) [#709](https://github.com/openshift/oc-mirror/pull/709)
* [CFE-971](https://issues.redhat.com/browse/CFE-971): Generate OSUS graph image - uses go-containerregistry implementation (#722) [#722](https://github.com/openshift/oc-mirror/pull/722)
* Pr template change (#719) [#719](https://github.com/openshift/oc-mirror/pull/719)
* [CFE-899](https://issues.redhat.com/browse/CFE-899), [CFE-958](https://issues.redhat.com/browse/CFE-958): feat: removes the registry dns (#718) [#718](https://github.com/openshift/oc-mirror/pull/718)
* Remove Dockerfile.integration - not used - reduce confusion (#716) [#716](https://github.com/openshift/oc-mirror/pull/716)
* [OCPBUGS-21864](https://issues.redhat.com/browse/OCPBUGS-21864): fix: CVE-2023-39325 and CVE-2023-44487 (#712) [#712](https://github.com/openshift/oc-mirror/pull/712)
* Introduce subcommand `prepare` (#702) [#702](https://github.com/openshift/oc-mirror/pull/702)
* Initial implementation of IDMS generation (#707) [#707](https://github.com/openshift/oc-mirror/pull/707)
* Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) [#704](https://github.com/openshift/oc-mirror/pull/704)
* [CFE-935](https://issues.redhat.com/browse/CFE-935): [V2] Implement a release collector relying on local registry as storage (#690) [#690](https://github.com/openshift/oc-mirror/pull/690)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) [#697](https://github.com/openshift/oc-mirror/pull/697)
* [CFE-956](https://issues.redhat.com/browse/CFE-956): feat: adds tags on the related images (#695) [#695](https://github.com/openshift/oc-mirror/pull/695)
* Updating oc-mirror-plugin images to be consistent with ART (#698) [#698](https://github.com/openshift/oc-mirror/pull/698)
* Update list updates CLI documentation (#687) [#687](https://github.com/openshift/oc-mirror/pull/687)
* [CFE-906](https://issues.redhat.com/browse/CFE-906): [V2]Enclave support - Separate log file for local storage (#686) [#686](https://github.com/openshift/oc-mirror/pull/686)
* [CFE-955](https://issues.redhat.com/browse/CFE-955): changes owner file (#694) [#694](https://github.com/openshift/oc-mirror/pull/694)
* [CFE-897](https://issues.redhat.com/browse/CFE-897), [CFE-907](https://issues.redhat.com/browse/CFE-907): feat: add code to call v2 from v1 (#692) [#692](https://github.com/openshift/oc-mirror/pull/692)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/68cf97ec715ad2d78fb2bac411a118709c191719...1c8f538897c88011c51ab53ea5073547521f0676)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/d9fa05d7a2881e7cd93d2f13630dfdcec8f65afd)

* [OPRUN-3079](https://issues.redhat.com/browse/OPRUN-3079): UPSTREAM: <carry>: Drop commitchecker [#32](https://github.com/openshift/operator-framework-catalogd/pull/32)
* Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-catalogd/pull/31)
* [OCPBUGS-20517](https://issues.redhat.com/browse/OCPBUGS-20517): UPSTREAM: <drop>: Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197) [#29](https://github.com/openshift/operator-framework-catalogd/pull/29)
* [OCPBUGS-19117](https://issues.redhat.com/browse/OCPBUGS-19117): UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART [#28](https://github.com/openshift/operator-framework-catalogd/pull/28)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/aa44c0262f1de5d888dc11abe6d730b0c84a8df3...d9fa05d7a2881e7cd93d2f13630dfdcec8f65afd)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/7c403f822c670e4b31dee1aef6d1a55a1f2ae458)

* [OPRUN-3081](https://issues.redhat.com/browse/OPRUN-3081): UPSTREAM: <carry>: Drop commitchecker [#37](https://github.com/openshift/operator-framework-operator-controller/pull/37)
* [OPRUN-3075](https://issues.redhat.com/browse/OPRUN-3075): Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-operator-controller/pull/31)
* [OCPBUGS-20505](https://issues.redhat.com/browse/OCPBUGS-20505): Bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/operator-framework-operator-controller/pull/28)
* [OCPBUGS-19096](https://issues.redhat.com/browse/OCPBUGS-19096): UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART [#27](https://github.com/openshift/operator-framework-operator-controller/pull/27)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/17343293267cad10f074fbe155c7fa31ed6b9336...7c403f822c670e4b31dee1aef6d1a55a1f2ae458)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/9129b242eedce8ddf07a1849212edb8967a7c171)

* [OPRUN-3080](https://issues.redhat.com/browse/OPRUN-3080): UPSTREAM: <carry>: Drop commitchecker [#51](https://github.com/openshift/operator-framework-rukpak/pull/51)
* [OPRUN-3078](https://issues.redhat.com/browse/OPRUN-3078): Update to Upstream v0.15.0 [#50](https://github.com/openshift/operator-framework-rukpak/pull/50)
* Update to Upstream v0.14.0 [#44](https://github.com/openshift/operator-framework-rukpak/pull/44)
* [OCPBUGS-20506](https://issues.redhat.com/browse/OCPBUGS-20506): Bump golang.org/x/net from 0.15.0 to 0.17.0 [#36](https://github.com/openshift/operator-framework-rukpak/pull/36)
* [OCPBUGS-19167](https://issues.redhat.com/browse/OCPBUGS-19167): UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART [#35](https://github.com/openshift/operator-framework-rukpak/pull/35)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/daa50736076ed6c207c57ef29d94cde6c7cdbdbd...9129b242eedce8ddf07a1849212edb8967a7c171)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6026659fa4d754180c949b4a6fa7cd08cdc91e86)

* [OCPBUGS-19145](https://issues.redhat.com/browse/OCPBUGS-19145): Updating ose-openshift-apiserver images to be consistent with ART [#390](https://github.com/openshift/openshift-apiserver/pull/390)
* [API-1644](https://issues.redhat.com/browse/API-1644): add TokenRequest to pull-secret controller's cluster role [#403](https://github.com/openshift/openshift-apiserver/pull/403)
* Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled [#395](https://github.com/openshift/openshift-apiserver/pull/395)
* [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): remove image pruner cluster role creation [#391](https://github.com/openshift/openshift-apiserver/pull/391)
* [OCPBUGS-16514](https://issues.redhat.com/browse/OCPBUGS-16514): use import mode to manifest cache key [#386](https://github.com/openshift/openshift-apiserver/pull/386)
* [OCPBUGS-17674](https://issues.redhat.com/browse/OCPBUGS-17674): pkg/image: avoid unnecessary service lookups when registry is removed [#387](https://github.com/openshift/openshift-apiserver/pull/387)
* [OCPBUGS-5823](https://issues.redhat.com/browse/OCPBUGS-5823): remove unused service-ca roles [#388](https://github.com/openshift/openshift-apiserver/pull/388)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/064c2d0ef0ecaeda2bcc4387eaaa7258cee5adcf...6026659fa4d754180c949b4a6fa7cd08cdc91e86)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1d4fb5b041da1728a0ce499088abc339579b302f)

* [API-1651](https://issues.redhat.com/browse/API-1651): Create separate controllers for default service accounts [#272](https://github.com/openshift/openshift-controller-manager/pull/272)
* [API-1652](https://issues.redhat.com/browse/API-1652): bump go.mod go to 1.20 [#267](https://github.com/openshift/openshift-controller-manager/pull/267)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-openshift-controller-manager images to be consistent with ART [#273](https://github.com/openshift/openshift-controller-manager/pull/273)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable Build and DeploymentConfig Informers if their caps are disabled [#270](https://github.com/openshift/openshift-controller-manager/pull/270)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/69bd018865f9a729001244d0ae2ad0a444f59eb0...1d4fb5b041da1728a0ce499088abc339579b302f)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/899188df28b0e495026833c606e16f8fc6b239cf)

* [OCPBUGS-21754](https://issues.redhat.com/browse/OCPBUGS-21754): bump `x/net` to v0.17.0 [#103](https://github.com/openshift/openshift-state-metrics/pull/103)
* Update Dockerfile to remove the maintainer tag [#98](https://github.com/openshift/openshift-state-metrics/pull/98)
* [OCPBUGS-19120](https://issues.redhat.com/browse/OCPBUGS-19120): Updating openshift-state-metrics images to be consistent with ART [#102](https://github.com/openshift/openshift-state-metrics/pull/102)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...899188df28b0e495026833c606e16f8fc6b239cf)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/9d12badbfebf3c87e84c0af4b7be97a8c33c3a42)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129)
* [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133)
* [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/5e20bfccc6b33ec84b9733ceeb22f932dbeac8d2...9d12badbfebf3c87e84c0af4b7be97a8c33c3a42)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c471bb17e4e7f155cea8429b4fa0af086a52a018)

* [OCPBUGS-16597](https://issues.redhat.com/browse/OCPBUGS-16597): Don't build InstanceSpec during delete operations [#90](https://github.com/openshift/machine-api-provider-openstack/pull/90)
* NO-JIRA: Misc linter fixes [#94](https://github.com/openshift/machine-api-provider-openstack/pull/94)
* [OSASINFRA-3283](https://issues.redhat.com/browse/OSASINFRA-3283): convert: add missing port profile [#93](https://github.com/openshift/machine-api-provider-openstack/pull/93)
* [OSASINFRA-3243](https://issues.redhat.com/browse/OSASINFRA-3243): add ephemeral storage support [#88](https://github.com/openshift/machine-api-provider-openstack/pull/88)
* [OCPBUGS-22319](https://issues.redhat.com/browse/OCPBUGS-22319): fix MachineToInstanceSpec when SG are nil [#91](https://github.com/openshift/machine-api-provider-openstack/pull/91)
* [OSASINFRA-3272](https://issues.redhat.com/browse/OSASINFRA-3272): Move to CAPO v1alpha7 [#87](https://github.com/openshift/machine-api-provider-openstack/pull/87)
* [OCPBUGS-22069](https://issues.redhat.com/browse/OCPBUGS-22069): Update dependencies [#89](https://github.com/openshift/machine-api-provider-openstack/pull/89)
* [OCPBUGS-19156](https://issues.redhat.com/browse/OCPBUGS-19156): Updating ose-machine-api-provider-openstack images to be consistent with ART [#84](https://github.com/openshift/machine-api-provider-openstack/pull/84)
* Remove unnecessary print [#79](https://github.com/openshift/machine-api-provider-openstack/pull/79)
* Update OWNERS [#83](https://github.com/openshift/machine-api-provider-openstack/pull/83)
* make: Remove irrelevant/broken targets [#82](https://github.com/openshift/machine-api-provider-openstack/pull/82)
* Bug OCPBUGS-4629: Set controller's SyncPeriod to 1 hour [#59](https://github.com/openshift/machine-api-provider-openstack/pull/59)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/47ad2845b2477e1bce01eca4ffc016c2a2af9bf8...c471bb17e4e7f155cea8429b4fa0af086a52a018)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/dc49d8ff1b5bca53c0968e35b9621682e8255512)

* [OCPBUGS-17041](https://issues.redhat.com/browse/OCPBUGS-17041): Release Leader Election on Manager Exit [#556](https://github.com/openshift/operator-framework-olm/pull/556)
* [OPRUN-3106](https://issues.redhat.com/browse/OPRUN-3106): skuznets/bump vendor ii [#600](https://github.com/openshift/operator-framework-olm/pull/600)
* NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602)
* Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581)
* scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599)
* Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597)
* [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596)
* [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595)
* [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592)
* [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565)
* Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588)
* [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585)
* scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593)
* scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580)
* Sync script: handle multi commit merges [#578](https://github.com/openshift/operator-framework-olm/pull/578)
* Sync 2023 10 05 no steve [#579](https://github.com/openshift/operator-framework-olm/pull/579)
* scripts/bumper: exit when there's nothing to do [#569](https://github.com/openshift/operator-framework-olm/pull/569)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551)
* [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563)
* Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567)
* [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564)
* [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6799db7a86240d442faf87bd5c78dbe554f8a64b...dc49d8ff1b5bca53c0968e35b9621682e8255512)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/8304276818bad0b184495db68a8e44defd5d8e57)

* [OCPBUGS-19710](https://issues.redhat.com/browse/OCPBUGS-19710): Update image tag to 4.15 for all but community operators [#541](https://github.com/operator-framework/operator-marketplace/pull/541)
* [OCPBUGS-21592](https://issues.redhat.com/browse/OCPBUGS-21592): [release-4.15] bump golang.org/x/net to 0.17.0 [#546](https://github.com/operator-framework/operator-marketplace/pull/546)
* Update image tag to 4.15 for community operators [#534](https://github.com/operator-framework/operator-marketplace/pull/534)
* [OCPBUGS-19230](https://issues.redhat.com/browse/OCPBUGS-19230): Updating marketplace-operator images to be consistent with ART [#539](https://github.com/operator-framework/operator-marketplace/pull/539)
* Dockerfile: Align OKD and OCP [#531](https://github.com/operator-framework/operator-marketplace/pull/531)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a367cea6e2371a0db2957403de40958852f817b3...8304276818bad0b184495db68a8e44defd5d8e57)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/b8d25ad6d140a198e96527b46a9dbde65aae41ce)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...b8d25ad6d140a198e96527b46a9dbde65aae41ce)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e9b0fa233d75a97e6d29106265938b42bc16d677)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/ovirt-csi-driver-operator/pull/125)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/2fa33aa7f05da8640a8695372364f2367febd12a...e9b0fa233d75a97e6d29106265938b42bc16d677)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/814535a6dbae0124d34a6461355055108aa4e54d)

* [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702)
* [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884)
* [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931)
* [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923)
* [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919)
* [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917)
* [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911)
* [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907)
* [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887)
* [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895)
* Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897)
* [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883)
* [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7a232386623498f099ccdedfc58bc1c134c61ddd...814535a6dbae0124d34a6461355055108aa4e54d)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/348fbd87d8de80d417fdbd65673d63d071bc9c7c)

* [MULTIARCH-3987](https://issues.redhat.com/browse/MULTIARCH-3987): synk: ignore vendor dir [#57](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/57)
* Rebase with upstream: v0.5.0 changes [#56](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/56)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/49)
* Updating ose-powervs-block-csi-driver images to be consistent with ART [#47](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/47)
* cherry-pick: Improve delete device failure logs in driver node [#46](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/46)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e9694cefd775cd6313acdd8d6382fe60cec8559c...348fbd87d8de80d417fdbd65673d63d071bc9c7c)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/8cf20bc1293c2bb2f7c9679e05afe0233ac334d0)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#47](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/47)
* Update OWNERS add yussufsh [#43](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/43)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/39)
* Updating ose-powervs-block-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/38)
* Update the powervs-csi-node to use nodeSelector for ppc64le [#37](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/37)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/48b56bbfa3557eb528b20d7d34a99bbd0d542355...8cf20bc1293c2bb2f7c9679e05afe0233ac334d0)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/edcc4dc8e5ea04c4e4da309d88d0618b22ec4e79)

* [MULTIARCH-3989](https://issues.redhat.com/browse/MULTIARCH-3989): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#50](https://github.com/openshift/cloud-provider-powervs/pull/50)
* [MULTIARCH-3997](https://issues.redhat.com/browse/MULTIARCH-3997): Support to use service instance name in config [#49](https://github.com/openshift/cloud-provider-powervs/pull/49)
* [OCPBUGS-21763](https://issues.redhat.com/browse/OCPBUGS-21763): CVE-2023-39325 - Update net dependencies - 4.15 [#44](https://github.com/openshift/cloud-provider-powervs/pull/44)
* [OCPBUGS-19272](https://issues.redhat.com/browse/OCPBUGS-19272): Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-powervs/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/0a89a6ef29a15f2fa51a0735c200e54f5af122c6...edcc4dc8e5ea04c4e4da309d88d0618b22ec4e79)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/c2e42239fbbdd27b5271edffc5bb5f414cb02b9a)

* NO-ISSUE: snyk code scan exclude vendor directory [#60](https://github.com/openshift/machine-api-provider-powervs/pull/60)
* Fix nil nextURL [#59](https://github.com/openshift/machine-api-provider-powervs/pull/59)
* [OCPBUGS-21878](https://issues.redhat.com/browse/OCPBUGS-21878): CVE-2023-44487 - Bump golang.org/x/net to v0.17.0 - 4.15 [#53](https://github.com/openshift/machine-api-provider-powervs/pull/53)
* Update dependencies and use k8 1.28 [#52](https://github.com/openshift/machine-api-provider-powervs/pull/52)
* [OCPBUGS-19144](https://issues.redhat.com/browse/OCPBUGS-19144): Updating ose-powervs-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-powervs/pull/51)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/02379e59576940766549f8d5c0ccec245a2682e3...c2e42239fbbdd27b5271edffc5bb5f414cb02b9a)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)

* [OCPBUGS-18854](https://issues.redhat.com/browse/OCPBUGS-18854): Updating prom-label-proxy images to be consistent with ART [#357](https://github.com/openshift/prom-label-proxy/pull/357)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)


### [prometheus](https://github.com/openshift/prometheus/tree/9cb8c56136e1da5541eeb6a89ab3f735cb1e4bd7)

* Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181)
* Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180)
* Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179)
* [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173)
* update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172)
* Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169)
* [Full changelog](https://github.com/openshift/prometheus/compare/bcb475d970214c3f48308426014b1ffb05758e34...9cb8c56136e1da5541eeb6a89ab3f735cb1e4bd7)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/870ade52a6097bc55cec29c1a9cc028967c5d23c)

* [OCPBUGS-21771](https://issues.redhat.com/browse/OCPBUGS-21771): Bump golang.org/x/net to v0.17.0 [#79](https://github.com/openshift/prometheus-alertmanager/pull/79)
* Bump openshift/prometheus-alertmanager to v0.26.0 [#78](https://github.com/openshift/prometheus-alertmanager/pull/78)
* update OWNERS file [#77](https://github.com/openshift/prometheus-alertmanager/pull/77)
* Bump v0.26.0 [#76](https://github.com/openshift/prometheus-alertmanager/pull/76)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-alertmanager images to be consistent with ART [#75](https://github.com/openshift/prometheus-alertmanager/pull/75)
* [OCPBUGS-18250](https://issues.redhat.com/browse/OCPBUGS-18250): Update alertmanager to 0.25.1 [#74](https://github.com/openshift/prometheus-alertmanager/pull/74)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...870ade52a6097bc55cec29c1a9cc028967c5d23c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/1f5839130826c69b622f994f5b706fa6602ad791)

* [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256)
* [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255)
* [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246)
* update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245)
* [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242)
* [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244)
* [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243)
* : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3de5e6d28b10142179eda77d218fb5c3e9f04667...1f5839130826c69b622f994f5b706fa6602ad791)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c236fffeb5f61a3c9baa1ae96268759682b70d6c)

* [OCPBUGS-21635](https://issues.redhat.com/browse/OCPBUGS-21635): upgrade golang.org/x/net v0.17.0 [#133](https://github.com/openshift/node_exporter/pull/133)
* update OWNERS file [#132](https://github.com/openshift/node_exporter/pull/132)
* [OCPBUGS-18850](https://issues.redhat.com/browse/OCPBUGS-18850): Updating golang-github-prometheus-node_exporter images to be consistent with ART [#131](https://github.com/openshift/node_exporter/pull/131)
* [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...c236fffeb5f61a3c9baa1ae96268759682b70d6c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c5cc7a73705e4086759e2a36811b055b7716def4)

* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include ingress's namespace in ingress without class metric [#35](https://github.com/openshift/route-controller-manager/pull/35)
* go.mod: remove replaces [#33](https://github.com/openshift/route-controller-manager/pull/33)
* [OCPBUGS-21823](https://issues.redhat.com/browse/OCPBUGS-21823): bump(k8s,openshift) to address CVE-2023-44487 [#32](https://github.com/openshift/route-controller-manager/pull/32)
* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#31](https://github.com/openshift/route-controller-manager/pull/31)
* [OCPBUGS-19202](https://issues.redhat.com/browse/OCPBUGS-19202): Updating ose-route-controller-manager images to be consistent with ART [#30](https://github.com/openshift/route-controller-manager/pull/30)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/0a976ea8bb9f7bf1d0b22730dc0825f976b27ccc...c5cc7a73705e4086759e2a36811b055b7716def4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/fe887613d031435fb0c76eb397764ba68fe09014)

* add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220)
* [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223)
* [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221)
* [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/030a429b314d772b7cc7a1dd9af2073988a5b0a5...fe887613d031435fb0c76eb397764ba68fe09014)


### [telemeter](https://github.com/openshift/telemeter/tree/8f091e8e7ecd3052566bd9dd20eb6991abf762c5)

* [OCPBUGS-22744](https://issues.redhat.com/browse/OCPBUGS-22744): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#493](https://github.com/openshift/telemeter/pull/493)
* rhelemeter: Parse org and cn with regex [#492](https://github.com/openshift/telemeter/pull/492)
* rhelemeter: Validation of incoming metrics [#491](https://github.com/openshift/telemeter/pull/491)
* add `machine424` and `rexagod`  to OWNERS [#478](https://github.com/openshift/telemeter/pull/478)
* Bump golang 1.20 [#490](https://github.com/openshift/telemeter/pull/490)
* [OCPBUGS-21636](https://issues.redhat.com/browse/OCPBUGS-21636): Bump golang.org/x/net to v0.17.0 [#483](https://github.com/openshift/telemeter/pull/483)
* Server: Add support for shipping traces to an otel collector [#482](https://github.com/openshift/telemeter/pull/482)
* rhelemeter: support client info file in jsonnet [#481](https://github.com/openshift/telemeter/pull/481)
* [OCPBUGS-19248](https://issues.redhat.com/browse/OCPBUGS-19248): Updating telemeter images to be consistent with ART [#480](https://github.com/openshift/telemeter/pull/480)
* Fix: handle authorization server 403 responses [#479](https://github.com/openshift/telemeter/pull/479)
* [RHOBS-870](https://issues.redhat.com/browse/RHOBS-870): Improve logging [#477](https://github.com/openshift/telemeter/pull/477)
* [RHOBS-855](https://issues.redhat.com/browse/RHOBS-855): rhelemeter: Read client info/data from request [#476](https://github.com/openshift/telemeter/pull/476)
* [Full changelog](https://github.com/openshift/telemeter/compare/c8b876a2ba2965c90a57ca543d4f55d7bf9a8702...8f091e8e7ecd3052566bd9dd20eb6991abf762c5)


### [tests](https://github.com/openshift/origin/tree/9aa824db8ea8a353b00456ee1d3d665693266e84)

* [OCPBUGS-23079](https://issues.redhat.com/browse/OCPBUGS-23079): fix: increase watch count for KubeControllerManagerOperator [#28388](https://github.com/openshift/origin/pull/28388)
* [OCPBUGS-23102](https://issues.redhat.com/browse/OCPBUGS-23102): Revert "[sig-instrumentation] tests fail due to JSON parsing error." [#28389](https://github.com/openshift/origin/pull/28389)
* [OCPBUGS-23084](https://issues.redhat.com/browse/OCPBUGS-23084): expect to not see "git clone" and not just "clone" during a test [#28352](https://github.com/openshift/origin/pull/28352)
* [TRT-1354](https://issues.redhat.com/browse/TRT-1354): Add support for intervals to have row differentiators [#28376](https://github.com/openshift/origin/pull/28376)
* [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): [sig-instrumentation] tests fail due to JSON parsing error. [#28320](https://github.com/openshift/origin/pull/28320)
* "TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest" [#28372](https://github.com/openshift/origin/pull/28372)
* trt-1340: update run-upgrade to use ginkgorunsuiteoptions [#28380](https://github.com/openshift/origin/pull/28380)
* [TRT-1339](https://issues.redhat.com/browse/TRT-1339): Revert #28233 "ignore repeated TopologyAwareHintsDisabled events" [#28381](https://github.com/openshift/origin/pull/28381)
* trt-1344: remove msg assertion [#28379](https://github.com/openshift/origin/pull/28379)
* Add test which verifies every certificate has necessary annotations [#28305](https://github.com/openshift/origin/pull/28305)
* [OCPBUGS-19527](https://issues.redhat.com/browse/OCPBUGS-19527): retry Prometheus client creation [#28323](https://github.com/openshift/origin/pull/28323)
* [OCPBUGS-20479](https://issues.redhat.com/browse/OCPBUGS-20479): Add pod sandbox failures to e2e charts [#28366](https://github.com/openshift/origin/pull/28366)
* skip revisioned certificates in raw info [#28370](https://github.com/openshift/origin/pull/28370)
* [TRT-1340](https://issues.redhat.com/browse/TRT-1340): Increase cmd support for ExactMonitorTests and DisableMonitorTests [#28371](https://github.com/openshift/origin/pull/28371)
* [OCPBUGS-22703](https://issues.redhat.com/browse/OCPBUGS-22703): tolerate AWS edge nodes on monitor tests [#28363](https://github.com/openshift/origin/pull/28363)
* Revert "OCPBUGS-22413: Use Centos 8 Stream mysql image in tests" [#28367](https://github.com/openshift/origin/pull/28367)
* Skip FailedScheduling intervals when masters are in NodeUpdate [#28358](https://github.com/openshift/origin/pull/28358)
* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Use Centos 8 Stream mysql image in tests [#28357](https://github.com/openshift/origin/pull/28357)
* Allow the unknown alerts test to fail as it looks stable [#28345](https://github.com/openshift/origin/pull/28345)
* add hack/update-tls-ownership.sh [#28359](https://github.com/openshift/origin/pull/28359)
* Drop not-used pulledInvalidImages method [#28330](https://github.com/openshift/origin/pull/28330)
* start adding raw tls info [#28334](https://github.com/openshift/origin/pull/28334)
* Restore APIServer graceful shutdown windows [#28354](https://github.com/openshift/origin/pull/28354)
* Fix intervals mistakenly showing mass node NotReady [#28351](https://github.com/openshift/origin/pull/28351)
* Remove timelines command reprocessing intervals [#28348](https://github.com/openshift/origin/pull/28348)
* [OCPBUGS-22358](https://issues.redhat.com/browse/OCPBUGS-22358): fix: increase upper bounds for samples operator [#28353](https://github.com/openshift/origin/pull/28353)
* put back previous Interval Slice algorithm [#28344](https://github.com/openshift/origin/pull/28344)
* [OCPBUGS-22276](https://issues.redhat.com/browse/OCPBUGS-22276): Remove all docker.io images due to access denied [#28347](https://github.com/openshift/origin/pull/28347)
* Restore Node NotReady intervals [#28349](https://github.com/openshift/origin/pull/28349)
* trt-1320: update trt approvers [#28343](https://github.com/openshift/origin/pull/28343)
* Port remaining clusteroperator monitor intervals to structured [#28341](https://github.com/openshift/origin/pull/28341)
* Improvements and Additions to Alert Testing Stack [#28332](https://github.com/openshift/origin/pull/28332)
* Automated - Update synthetic test data [#28237](https://github.com/openshift/origin/pull/28237)
* prune the system CAs from proxy-ca in rawTLSInfo json [#28336](https://github.com/openshift/origin/pull/28336)
* add test tracking raw cert data [#28321](https://github.com/openshift/origin/pull/28321)
* [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Require http 1.1 or earlier when using curl [#28301](https://github.com/openshift/origin/pull/28301)
* Port Node and Pod State to Structured Intervals [#28299](https://github.com/openshift/origin/pull/28299)
* Extract the cluster operator name from Down/Degraded Alerts [#28331](https://github.com/openshift/origin/pull/28331)
* fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities [#28329](https://github.com/openshift/origin/pull/28329)
* Remove some redundant monitor tests [#28326](https://github.com/openshift/origin/pull/28326)
* [OCPVE-723](https://issues.redhat.com/browse/OCPVE-723): Add optional olm fixes [#28302](https://github.com/openshift/origin/pull/28302)
* Add debug info for interval counts and times [#28311](https://github.com/openshift/origin/pull/28311)
* [OCPBUGS-20205](https://issues.redhat.com/browse/OCPBUGS-20205): feat: added support for ImageRegistry capability [#28307](https://github.com/openshift/origin/pull/28307)
* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "OCPBUGS-13366: ignore repeated TopologyAwareHintsDisabled events" [#28233](https://github.com/openshift/origin/pull/28233)
* pkg/monitortests/clusterversionoperator/legacycvomonitortests: Structured condition types [#28306](https://github.com/openshift/origin/pull/28306)
* Bump watch requests for cluster-baremetal-operator [#28324](https://github.com/openshift/origin/pull/28324)
* test/extended/images: update OWNERS [#28322](https://github.com/openshift/origin/pull/28322)
* hs, kubevirt: Wait node readiness before migration [#28312](https://github.com/openshift/origin/pull/28312)
* fix for OCP-11594 to skipped on disconnected env [#28316](https://github.com/openshift/origin/pull/28316)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase total upgrade time on OVN platforms" [#28315](https://github.com/openshift/origin/pull/28315)
* trt-1271: add risk analysis for monitor junit suites [#28309](https://github.com/openshift/origin/pull/28309)
* Revert #28295 "Automating test \"check the quota after import-image with --all option\" in upstrem" [#28313](https://github.com/openshift/origin/pull/28313)
* test/extended: Consolidate hard-coded local image registry dependencies [#28308](https://github.com/openshift/origin/pull/28308)
* Limit intervals to the current phase (addresses loki upload problems) [#28294](https://github.com/openshift/origin/pull/28294)
* Fix bug with disable-monitor [#28293](https://github.com/openshift/origin/pull/28293)
* Remove bug-related annotations [#28298](https://github.com/openshift/origin/pull/28298)
* [OPNET-330](https://issues.redhat.com/browse/OPNET-330): fix DualStackIPv6Primary [#28292](https://github.com/openshift/origin/pull/28292)
* Automating test "check the quota after import-image with --all option" in upstrem [#28295](https://github.com/openshift/origin/pull/28295)
* Properly default --from-repository in run-monitor [#28285](https://github.com/openshift/origin/pull/28285)
* [OCPBUGS-19909](https://issues.redhat.com/browse/OCPBUGS-19909): Updating parameters for build timing PushImage test [#28288](https://github.com/openshift/origin/pull/28288)
* make it possible to select which monitor tests to run [#28215](https://github.com/openshift/origin/pull/28215)
* Revert "Disable EgressIP test temporarily due to OVN-K bug" [#28283](https://github.com/openshift/origin/pull/28283)
* Port the clusteroperator intervals to new structured format [#28262](https://github.com/openshift/origin/pull/28262)
* Revert "Force using mirrored images in disruption tests" [#28286](https://github.com/openshift/origin/pull/28286)
* Bump openshift/kubernetes to get vSphere fix [#28278](https://github.com/openshift/origin/pull/28278)
* Force using mirrored images in disruption tests [#28258](https://github.com/openshift/origin/pull/28258)
* kubevirt: Add live migration tests [#27980](https://github.com/openshift/origin/pull/27980)
* some monitor tests only function on disruptive tests [#28251](https://github.com/openshift/origin/pull/28251)
* wait for the service to have endpoints before starting pollers [#28242](https://github.com/openshift/origin/pull/28242)
* fix PR 28224 [#28238](https://github.com/openshift/origin/pull/28238)
* [OCPBUGS-18141](https://issues.redhat.com/browse/OCPBUGS-18141): retry query on MetricsAvailableAfterUpgradeTest setup [#28228](https://github.com/openshift/origin/pull/28228)
* Revert "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28274](https://github.com/openshift/origin/pull/28274)
* [OCPBUGS-19293](https://issues.redhat.com/browse/OCPBUGS-19293): Updating openshift-enterprise-tests images to be consistent with ART [#28264](https://github.com/openshift/origin/pull/28264)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): rteval [#28261](https://github.com/openshift/origin/pull/28261)
* add pod log streaming to monitor for etcd so we see all intervals [#28243](https://github.com/openshift/origin/pull/28243)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28231](https://github.com/openshift/origin/pull/28231)
* [AUTH-365](https://issues.redhat.com/browse/AUTH-365): add PodSecurityViolation to watched alerts [#28226](https://github.com/openshift/origin/pull/28226)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): remove exception for MultipleDefaultStorageClasses [#28042](https://github.com/openshift/origin/pull/28042)
* remove unnecessary file from cmd folder [#27979](https://github.com/openshift/origin/pull/27979)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28 [#28097](https://github.com/openshift/origin/pull/28097)
* Revert "Improvements and fixes for Loki intervals uploader" [#28268](https://github.com/openshift/origin/pull/28268)
* Adding leader election information to timeline [#28225](https://github.com/openshift/origin/pull/28225)
* Improvements and fixes for Loki intervals uploader [#28053](https://github.com/openshift/origin/pull/28053)
* Bring in updates k8s to disable networking test [#28256](https://github.com/openshift/origin/pull/28256)
* When --from-repository use built-in tests only [#28253](https://github.com/openshift/origin/pull/28253)
* [HyperShift/KubeVirt] Raise wait time between pod exec attempts [#28249](https://github.com/openshift/origin/pull/28249)
* Revert fake image injections for k8s 1.28 [#28250](https://github.com/openshift/origin/pull/28250)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28248](https://github.com/openshift/origin/pull/28248)
* [OCP-66086](https://issues.redhat.com/browse/OCP-66086): Automate PSAP NTO Prevent from stalld continually restarting [#28157](https://github.com/openshift/origin/pull/28157)
* Bug OCPBUGS-18718 Remove duplicate connection type from disruption name [#28245](https://github.com/openshift/origin/pull/28245)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): fix: add rteval to the test image [#28220](https://github.com/openshift/origin/pull/28220)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28200](https://github.com/openshift/origin/pull/28200)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Disable NetworkPolicyStatus tests [#28177](https://github.com/openshift/origin/pull/28177)
* [Full changelog](https://github.com/openshift/origin/compare/8e07c9b9fb1938719bfe7b17590df08415be08df...9aa824db8ea8a353b00456ee1d3d665693266e84)


### [thanos](https://github.com/openshift/thanos/tree/66161ad4e03e5593f5a3a33aaaffbcd41555d62a)

* [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131)
* Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129)
* [OCPBUGS-21630](https://issues.redhat.com/browse/OCPBUGS-21630): Bump golang.org/x/net to v0.17.0 [#123](https://github.com/openshift/thanos/pull/123)
* Bump openshift/thanos to v0.32.4 [#121](https://github.com/openshift/thanos/pull/121)
* [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120)
* [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117)
* Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118)
* update OWNERS file [#119](https://github.com/openshift/thanos/pull/119)
* Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115)
* [Full changelog](https://github.com/openshift/thanos/compare/175a63002855e7a3f4f5cd49c90680c41be181d8...66161ad4e03e5593f5a3a33aaaffbcd41555d62a)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/3d5cdbd80410f00adfc34118de321e561a937c34)

* [OCPCLOUD-2184](https://issues.redhat.com/browse/OCPCLOUD-2184): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master [#42](https://github.com/openshift/cloud-provider-vsphere/pull/42)
* Update OWNERS [#51](https://github.com/openshift/cloud-provider-vsphere/pull/51)
* [OCPBUGS-19255](https://issues.redhat.com/browse/OCPBUGS-19255): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-vsphere/pull/48)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/a24e1713cb61b7a56482fb0a23eb94b642fbeb78...3d5cdbd80410f00adfc34118de321e561a937c34)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/44c20f377f7463f4596163c5b555b7c5e60f4c71)

* [OCPBUGS-22152](https://issues.redhat.com/browse/OCPBUGS-22152): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.3 (ef8d014) into master [#22](https://github.com/openshift/cluster-api-provider-vsphere/pull/22)
* Update OWNERS [#21](https://github.com/openshift/cluster-api-provider-vsphere/pull/21)
* [OCPCLOUD-2219](https://issues.redhat.com/browse/OCPCLOUD-2219): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.1 (2b22dd7) into master [#18](https://github.com/openshift/cluster-api-provider-vsphere/pull/18)
* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-vsphere-cluster-api-controllers images to be consistent with ART [#17](https://github.com/openshift/cluster-api-provider-vsphere/pull/17)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/9f1d564131eae50d9d490a4518a699b8786ad346...44c20f377f7463f4596163c5b555b7c5e60f4c71)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ac7f4d3ce3507e820b825a7385fa7c85bc90da91)

* [OCPBUGS-16550](https://issues.redhat.com/browse/OCPBUGS-16550): UPSTREAM: 2511: Bump github.com/elazarl/goproxy to fix CVE-2023-37788 [#95](https://github.com/openshift/vmware-vsphere-csi-driver/pull/95)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/vmware-vsphere-csi-driver/pull/89)
* [OCPBUGS-19220](https://issues.redhat.com/browse/OCPBUGS-19220): Updating vmware-vsphere-syncer images to be consistent with ART [#86](https://github.com/openshift/vmware-vsphere-csi-driver/pull/86)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver images to be consistent with ART [#87](https://github.com/openshift/vmware-vsphere-csi-driver/pull/87)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/a5ed57f5120136bf08e134bf478186c82bfb81da...ac7f4d3ce3507e820b825a7385fa7c85bc90da91)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c7ab8b38bac972e64311154e301e07b234802a37)

* [OCPBUGS-22639](https://issues.redhat.com/browse/OCPBUGS-22639): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#185](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/185)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#165](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/165)
* [OCPBUGS-22385](https://issues.redhat.com/browse/OCPBUGS-22385): disable http/2 server support in webhook [#179](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/179)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#181](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/181)
* [OCPBUGS-21826](https://issues.redhat.com/browse/OCPBUGS-21826): Warn when managment state is set to values other than Managed [#178](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/178)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#172](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/172)
* [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART [#170](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/170)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/f7afb6462c79317cc53c621084640860a4351788...c7ab8b38bac972e64311154e301e07b234802a37)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/6dfd53027e44944799100aab71ca0c347602c77c)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#136](https://github.com/openshift/vsphere-problem-detector/pull/136)
* [OCPBUGS-7413](https://issues.redhat.com/browse/OCPBUGS-7413): Use collector for ephemeral metrics [#125](https://github.com/openshift/vsphere-problem-detector/pull/125)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/vsphere-problem-detector/pull/128)
* [OCPBUGS-19270](https://issues.redhat.com/browse/OCPBUGS-19270): Updating vsphere-problem-detector images to be consistent with ART [#126](https://github.com/openshift/vsphere-problem-detector/pull/126)
* [OCPBUGS-14829](https://issues.redhat.com/browse/OCPBUGS-14829): Warn usernames without domain name [#121](https://github.com/openshift/vsphere-problem-detector/pull/121)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/6b359ea5b69636a00cfd5c4f81f0279cfd41401a...6dfd53027e44944799100aab71ca0c347602c77c)