# 4.19.0-okd-scos.1
Created: 2025-05-20 14:12:02 +0000 UTC
Image Digest: `sha256:e18314091f6d1010b274ea99792940faf5420dc97ece6a9f294a0ca2519ed160`
Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-05-19-233900
## Changes from 4.18.0-okd-scos.ec.3
### Components
* Kubectl upgraded from 1.31.1 to 1.32.1
* Kubernetes upgraded from 1.31.4 to 1.32.4
* Kubernetes Tests upgraded from 1.31.1 to 1.32.4
* CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 9.0.20250515-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| CSIDriverSharedResource
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereControlPlaneMachineSet
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereStaticIPs
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GatewayAPI
(6 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| AdditionalRoutingCapabilities
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ConsolePluginContentSecurityPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| MetricsCollectionProfiles
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NetworkSegmentation
(56 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OnClusterBuild
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| PersistentIPsForVirtualization
(12 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteExternalCertificate
(19 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ServiceAccountTokenNodeBinding
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallIBMCloud
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| MachineAPIMigration
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| CPMSMachineNamePrefix
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GatewayAPIController
(5 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterVersionOperatorConfiguration
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| DualReplica
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| DyanmicServiceEndpointIBMCloud
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| Example2
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPCustomAPIEndpoints
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| HighlyAvailableArbiter
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| KMSEncryptionProvider
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NewOLMCatalogdAPIV1Metas
(4 tests)| | | | Enabled
(New)| | Enabled
(New) |
| NewOLMOwnSingleNamespace
(0 tests)| | | | Enabled
(New)| | Enabled
(New) |
| NewOLMPreflightPermissionChecks
(6 tests)| | | | Enabled
(New)| | Enabled
(New) |
| SELinuxChangePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| SELinuxMount
(6 tests)| | | Enabled
(New)| Enabled
(New)| | |
| ShortCertRotation
(0 tests)| | | | | | |
| SigstoreImageVerificationPKI
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| VSphereConfigurableMaxAllowedBlockVolumesPerNode
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereHostVMGroupZonal
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiDisk
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0ae129b4](https://github.com/openshift/azure-service-operator/commit/0ae129b4768d2e10e0ca215d272e207bfae963a3) `sha256:46326ed2e77b6a1147a5445d7020380c1717ce60a66035f594f7403337407b77`
### Removed images
* csi-snapshot-validation-webhook
* ovirt-machine-controllers
### Rebuilt images without code change
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:a56bb31b2982427528c5d7346efe715183f87cee872daeed01b408d01cf215bd`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:de8c1f22ca3555e552ab55d873ed016d2a96da08dbbc65eaef0f5c5c4d7e206a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:82be9a3644ece5867ba1d89a9ddfe25aaa23ce5a44ab8efa86b81ca99a53bb35`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:e1895181285f00370cb9dbf857a4cb3772100eb140f46867ed4a11030a002ba5`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:3962403813fb528ca1101113e22a0b2519b70db3dea7d9fb38537031a4b52475`
* [stream-coreos](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:3813e6608a999756931d3d621932af9662860e71a552b2670f9fe320bf0d3585`
* [stream-coreos-extensions](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:92c7e19e19650af2fe18508dfe25b923f87fc61b9b8054a2cb41a15982750bdd`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/5b1d46609e5fc58a83fdc2ea2159ae652d156a9d)
* [MGMT-20324](https://issues.redhat.com/browse/MGMT-20324): Fix day2 add hosts with P/Z CPU architectures [#7527](https://github.com/openshift/assisted-service/pull/7527)
* [MGMT-20207](https://issues.redhat.com/browse/MGMT-20207): avoid adding system CA bundle to AdditionalTrustBundle [#7448](https://github.com/openshift/assisted-service/pull/7448)
* [MGMT-20009](https://issues.redhat.com/browse/MGMT-20009): Change OCP 4.19 to the default version [#7506](https://github.com/openshift/assisted-service/pull/7506)
* NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator [#7491](https://github.com/openshift/assisted-service/pull/7491)
* NO-ISSUE: fixing late binding [#7070](https://github.com/openshift/assisted-service/pull/7070)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...5b1d46609e5fc58a83fdc2ea2159ae652d156a9d)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0de29205c8b99bdfdc12271281d5830f185d8f8c)
* [MGMT-20534](https://issues.redhat.com/browse/MGMT-20534): Move getting Node replicas into waitForNodes (#1113) [#1113](https://github.com/openshift/assisted-installer/pull/1113)
* [MGMT-20479](https://issues.redhat.com/browse/MGMT-20479): Update assisted-installer to allow TNA Clusters (#1106) [#1106](https://github.com/openshift/assisted-installer/pull/1106)
* NO-ISSUE: Update Konflux references (#1112) [#1112](https://github.com/openshift/assisted-installer/pull/1112)
* NO-ISSUE: Apply konflux migration (#1105) [#1105](https://github.com/openshift/assisted-installer/pull/1105)
* NO-ISSUE: Update Konflux references (#1103) [#1103](https://github.com/openshift/assisted-installer/pull/1103)
* NO-ISSUE: Update Konflux references (#1095) [#1095](https://github.com/openshift/assisted-installer/pull/1095)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) [#957](https://github.com/openshift/assisted-installer/pull/957)
* NO-ISSUE: Update Konflux references (#1090) [#1090](https://github.com/openshift/assisted-installer/pull/1090)
* [MGMT-20153](https://issues.redhat.com/browse/MGMT-20153): Fix ostree race between node-image-pull and installing to rootfs (#1076) [#1076](https://github.com/openshift/assisted-installer/pull/1076)
* [OCPBUGS-53720](https://issues.redhat.com/browse/OCPBUGS-53720): Bump jwt to 4.5.2 (#1080) [#1080](https://github.com/openshift/assisted-installer/pull/1080)
* NO-ISSUE: Update Konflux references (#1082) [#1082](https://github.com/openshift/assisted-installer/pull/1082)
* [MGMT-19421](https://issues.redhat.com/browse/MGMT-19421): remove all references of HighAvailabilityMode and the command line argument --high-availability-mode (#1081) [#1081](https://github.com/openshift/assisted-installer/pull/1081)
* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required SAST tasks for Konflux (#1064) [#1064](https://github.com/openshift/assisted-installer/pull/1064)
* NO-ISSUE: Remove Paul account from OWNERS (#1073) [#1073](https://github.com/openshift/assisted-installer/pull/1073)
* [MGMT-20198](https://issues.redhat.com/browse/MGMT-20198): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) [#1066](https://github.com/openshift/assisted-installer/pull/1066)
* NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) [#1057](https://github.com/openshift/assisted-installer/pull/1057)
* [OCPBUGS-52696](https://issues.redhat.com/browse/OCPBUGS-52696), [OCPBUGS-52704](https://issues.redhat.com/browse/OCPBUGS-52704): Bump crpto to v0.33.openshift.1 (#1053) [#1053](https://github.com/openshift/assisted-installer/pull/1053)
* NO-ISSUE: Update Konflux references (#1051) [#1051](https://github.com/openshift/assisted-installer/pull/1051)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) [#1049](https://github.com/openshift/assisted-installer/pull/1049)
* NO-ISSUE: Update Konflux references (#1048) [#1048](https://github.com/openshift/assisted-installer/pull/1048)
* NO-ISSUE: Update Konflux references (#1042) [#1042](https://github.com/openshift/assisted-installer/pull/1042)
* [MGMT-19421](https://issues.redhat.com/browse/MGMT-19421): phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) [#1027](https://github.com/openshift/assisted-installer/pull/1027)
* [MGMT-19950](https://issues.redhat.com/browse/MGMT-19950): Modify Konflux YAMLs to ocm-2.14 (#1034) [#1034](https://github.com/openshift/assisted-installer/pull/1034)
* NO-ISSUE: Update Konflux references (#1031) [#1031](https://github.com/openshift/assisted-installer/pull/1031)
* NO-ISSUE: Update Konflux references (#1025) [#1025](https://github.com/openshift/assisted-installer/pull/1025)
* [MGMT-19819](https://issues.redhat.com/browse/MGMT-19819): Add the commit reference from which the image is built to the image (#1024) [#1024](https://github.com/openshift/assisted-installer/pull/1024)
* [MGMT-19815](https://issues.redhat.com/browse/MGMT-19815): Update tekton pipelines to point to new components (#1023) [#1023](https://github.com/openshift/assisted-installer/pull/1023)
* [MGMT-19101](https://issues.redhat.com/browse/MGMT-19101): Respect installer args (#1018) [#1018](https://github.com/openshift/assisted-installer/pull/1018)
* NO-ISSUE: Update Konflux references (#1017) [#1017](https://github.com/openshift/assisted-installer/pull/1017)
* [MGMT-19621](https://issues.redhat.com/browse/MGMT-19621): Fix Race condition between the OLM operators monitor to the cluster installation monitor (#1014) [#1014](https://github.com/openshift/assisted-installer/pull/1014)
* [MGMT-19100](https://issues.redhat.com/browse/MGMT-19100): Install to the current boot device when CoreosImage is set (#1003) [#1003](https://github.com/openshift/assisted-installer/pull/1003)
* [COS-3013](https://issues.redhat.com/browse/COS-3013): overlay node image before bootstrapping if necessary (#899) [#899](https://github.com/openshift/assisted-installer/pull/899)
* NO-ISSUE: Update buildah image to fix a bug with SBOM (#1013) [#1013](https://github.com/openshift/assisted-installer/pull/1013)
* [MGMT-19748](https://issues.redhat.com/browse/MGMT-19748): Configure snyk ignore (#1010) [#1010](https://github.com/openshift/assisted-installer/pull/1010)
* NO-ISSUE: Update Konflux references (#991) [#991](https://github.com/openshift/assisted-installer/pull/991)
* [MGMT-19734](https://issues.redhat.com/browse/MGMT-19734): Add renovate config to limit number of PRs (#1009) [#1009](https://github.com/openshift/assisted-installer/pull/1009)
* NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#1008) [#1008](https://github.com/openshift/assisted-installer/pull/1008)
* [MGMT-19645](https://issues.redhat.com/browse/MGMT-19645): Configure the following things for releasing in konflux: (#1004) [#1004](https://github.com/openshift/assisted-installer/pull/1004)
* [MGMT-19381](https://issues.redhat.com/browse/MGMT-19381): Change downstream base images to rhel9.4 instead of ubi9 (#1002) [#1002](https://github.com/openshift/assisted-installer/pull/1002)
* [MGMT-19595](https://issues.redhat.com/browse/MGMT-19595): Push latest tag for downstream images after merge to konflux int repo (#1001) [#1001](https://github.com/openshift/assisted-installer/pull/1001)
* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) [#956](https://github.com/openshift/assisted-installer/pull/956)
* [OCPBUGS-13612](https://issues.redhat.com/browse/OCPBUGS-13612): update gin version (#997) [#997](https://github.com/openshift/assisted-installer/pull/997)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#981) [#981](https://github.com/openshift/assisted-installer/pull/981)
* [MGMT-19506](https://issues.redhat.com/browse/MGMT-19506): Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) [#976](https://github.com/openshift/assisted-installer/pull/976)
* chore(deps): update konflux references (#972) [#972](https://github.com/openshift/assisted-installer/pull/972)
* [MGMT-19507](https://issues.redhat.com/browse/MGMT-19507): Stop using multi-arch builds in konflux (#971) [#971](https://github.com/openshift/assisted-installer/pull/971)
* chore(deps): update konflux references (#958) [#958](https://github.com/openshift/assisted-installer/pull/958)
* NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) [#965](https://github.com/openshift/assisted-installer/pull/965)
* NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) [#966](https://github.com/openshift/assisted-installer/pull/966)
* [MGMT-19453](https://issues.redhat.com/browse/MGMT-19453): Add downstream dockerfile (#960) [#960](https://github.com/openshift/assisted-installer/pull/960)
* [MGMT-19408](https://issues.redhat.com/browse/MGMT-19408): Create tekton pipelines for acm 2.13 (#954) [#954](https://github.com/openshift/assisted-installer/pull/954)
* [MGMT-19390](https://issues.redhat.com/browse/MGMT-19390): Update mce's tekton pipelines to be multi-arch (#948) [#948](https://github.com/openshift/assisted-installer/pull/948)
* [OCPBUGS-45116](https://issues.redhat.com/browse/OCPBUGS-45116): Add retry to mount efi device (#947) [#947](https://github.com/openshift/assisted-installer/pull/947)
* Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) [#946](https://github.com/openshift/assisted-installer/pull/946)
* Red Hat Konflux update assisted-installer-mce-downstream-main (#945) [#945](https://github.com/openshift/assisted-installer/pull/945)
* [MGMT-19371](https://issues.redhat.com/browse/MGMT-19371): Add downstream dockerfiles for mce (#943) [#943](https://github.com/openshift/assisted-installer/pull/943)
* NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) [#944](https://github.com/openshift/assisted-installer/pull/944)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5348c85cd03dddf1852873c6bb2f08aff3b0630e...0de29205c8b99bdfdc12271281d5830f185d8f8c)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/32842e31cdfe14d8fd7058895af51c1cca1309fe)
* NO-ISSUE: Update assisted-service's version (#997) [#997](https://github.com/openshift/assisted-installer-agent/pull/997)
* [MGMT-20296](https://issues.redhat.com/browse/MGMT-20296): Modify RegisterHostConflict log (#990) [#990](https://github.com/openshift/assisted-installer-agent/pull/990)
* NO-ISSUE: Update Konflux references (#976) [#976](https://github.com/openshift/assisted-installer-agent/pull/976)
* [OCPBUGS-53712](https://issues.redhat.com/browse/OCPBUGS-53712): golang-jwt/jwt/v4 to 4.5.2 (#956) [#956](https://github.com/openshift/assisted-installer-agent/pull/956)
* NO-ISSUE: Update Konflux references (#959) [#959](https://github.com/openshift/assisted-installer-agent/pull/959)
* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#936) [#936](https://github.com/openshift/assisted-installer-agent/pull/936)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required sast tasks for Konflux (#942) [#942](https://github.com/openshift/assisted-installer-agent/pull/942)
* NO-ISSUE: Remove eran ifrach account from OWNERS (#947) [#947](https://github.com/openshift/assisted-installer-agent/pull/947)
* [MGMT-20199](https://issues.redhat.com/browse/MGMT-20199): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) [#943](https://github.com/openshift/assisted-installer-agent/pull/943)
* NO-ISSUE: Update Konflux references (#929) [#929](https://github.com/openshift/assisted-installer-agent/pull/929)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) [#926](https://github.com/openshift/assisted-installer-agent/pull/926)
* NO-ISSUE: Update Konflux references (#924) [#924](https://github.com/openshift/assisted-installer-agent/pull/924)
* [MGMT-19950](https://issues.redhat.com/browse/MGMT-19950): Modify Konflux YAMLs to ocm-2.14 (#912) (#911) [#912](https://github.com/openshift/assisted-installer-agent/pull/912)
* NO-ISSUE: Update Konflux references (#921) [#921](https://github.com/openshift/assisted-installer-agent/pull/921)
* [MGMT-19927](https://issues.redhat.com/browse/MGMT-19927): Modify MTU Check to Only MTUs != 1500 (#910) [#910](https://github.com/openshift/assisted-installer-agent/pull/910)
* [MGMT-19588](https://issues.redhat.com/browse/MGMT-19588): Also use bond interface for hostname workaround (#920) [#920](https://github.com/openshift/assisted-installer-agent/pull/920)
* [MGMT-19819](https://issues.redhat.com/browse/MGMT-19819): Add the commit reference from which the image is built to the image (#914) [#914](https://github.com/openshift/assisted-installer-agent/pull/914)
* [MGMT-19950](https://issues.redhat.com/browse/MGMT-19950): Modify Konflux YAMLs to ocm-2.14 (#912) [#912](https://github.com/openshift/assisted-installer-agent/pull/912)
* NO-ISSUE: Update Konflux references (#903) [#903](https://github.com/openshift/assisted-installer-agent/pull/903)
* NO-ISSUE: Increase image pull timeout during install (#904) [#904](https://github.com/openshift/assisted-installer-agent/pull/904)
* [MGMT-19815](https://issues.redhat.com/browse/MGMT-19815): Update tekton pipelines to point to new components (#902) [#902](https://github.com/openshift/assisted-installer-agent/pull/902)
* [MGMT-19102](https://issues.redhat.com/browse/MGMT-19102): Add boot device info to inventory (#899) [#899](https://github.com/openshift/assisted-installer-agent/pull/899)
* NO-ISSUE: Update Konflux references (#900) [#900](https://github.com/openshift/assisted-installer-agent/pull/900)
* [MGMT-19100](https://issues.redhat.com/browse/MGMT-19100): Allow install to the existing root filesystem (#897) [#897](https://github.com/openshift/assisted-installer-agent/pull/897)
* NO-ISSUE: Update docker pkg to fix cves CVE-2024-41110 and CVE-2023-2253 (#895) [#895](https://github.com/openshift/assisted-installer-agent/pull/895)
* NO-ISSUE: Update buildah image to fix a bug with SBOM (#898) [#898](https://github.com/openshift/assisted-installer-agent/pull/898)
* Update Konflux references (#875) [#875](https://github.com/openshift/assisted-installer-agent/pull/875)
* [MGMT-19734](https://issues.redhat.com/browse/MGMT-19734): Add renovate config to limit number of PRs (#896) [#896](https://github.com/openshift/assisted-installer-agent/pull/896)
* NO-ISSUE: Stop removing stuff from the downstream image that are needed for preflight-check to succeed (#893) [#893](https://github.com/openshift/assisted-installer-agent/pull/893)
* NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#892) [#892](https://github.com/openshift/assisted-installer-agent/pull/892)
* [MGMT-19645](https://issues.redhat.com/browse/MGMT-19645): Configure the following things for releasing in konflux: (#889) [#889](https://github.com/openshift/assisted-installer-agent/pull/889)
* OCPBUGS_45910: s390x: Fix cpu clockspeed and use Maschine Type for Model Name (#857) [#857](https://github.com/openshift/assisted-installer-agent/pull/857)
* [MGMT-19381](https://issues.redhat.com/browse/MGMT-19381): Change downstream base images to rhel9.4 instead of ubi9 (#883) [#883](https://github.com/openshift/assisted-installer-agent/pull/883)
* [MGMT-19595](https://issues.redhat.com/browse/MGMT-19595): Push latest tag for downstream image after merge to konflux int repo (#882) [#882](https://github.com/openshift/assisted-installer-agent/pull/882)
* [OCPBUGS-43352](https://issues.redhat.com/browse/OCPBUGS-43352): calculate outgoing interface for arping (#877) [#877](https://github.com/openshift/assisted-installer-agent/pull/877)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#868) [#868](https://github.com/openshift/assisted-installer-agent/pull/868)
* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#862) [#862](https://github.com/openshift/assisted-installer-agent/pull/862)
* [MGMT-19506](https://issues.redhat.com/browse/MGMT-19506): Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#856) [#856](https://github.com/openshift/assisted-installer-agent/pull/856)
* Update Konflux references (#852) [#852](https://github.com/openshift/assisted-installer-agent/pull/852)
* added another unkown motherboard id (#850) [#850](https://github.com/openshift/assisted-installer-agent/pull/850)
* [MGMT-19507](https://issues.redhat.com/browse/MGMT-19507): Stop using multi-arch builds in konflux (#851) [#851](https://github.com/openshift/assisted-installer-agent/pull/851)
* Update Konflux references (#839) [#839](https://github.com/openshift/assisted-installer-agent/pull/839)
* NO-ISSUE: Red Hat Konflux update assisted-installer-agent-downstream-main (#846) [#846](https://github.com/openshift/assisted-installer-agent/pull/846)
* [MGMT-19453](https://issues.redhat.com/browse/MGMT-19453): Add downstream dockerfile (#841) [#841](https://github.com/openshift/assisted-installer-agent/pull/841)
* Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.19 (#838) [#838](https://github.com/openshift/assisted-installer-agent/pull/838)
* [MGMT-19408](https://issues.redhat.com/browse/MGMT-19408): Create tekton pipelines for acm 2.13 (#835) [#835](https://github.com/openshift/assisted-installer-agent/pull/835)
* Implement MTU check as part of the connectivity check (#821) [#821](https://github.com/openshift/assisted-installer-agent/pull/821)
* [MGMT-19390](https://issues.redhat.com/browse/MGMT-19390): Update mce's tekton pipelines to be multi-arch (#828) [#828](https://github.com/openshift/assisted-installer-agent/pull/828)
* Red Hat Konflux update assisted-installer-agent-mce-downstream-main (#827) [#827](https://github.com/openshift/assisted-installer-agent/pull/827)
* [MGMT-19331](https://issues.redhat.com/browse/MGMT-19331): Add `secure_boot_state` to inventory (#822) [#822](https://github.com/openshift/assisted-installer-agent/pull/822)
* [MGMT-19371](https://issues.redhat.com/browse/MGMT-19371): Add downstream dockerfile for mce (#825) [#825](https://github.com/openshift/assisted-installer-agent/pull/825)
* NO-ISSUE: Add giladravid16 and pastequo to approvers list (#826) [#826](https://github.com/openshift/assisted-installer-agent/pull/826)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512...32842e31cdfe14d8fd7058895af51c1cca1309fe)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/766df82081a65c57df4a0a5d19cea6635a31314c)
* [OCPBUGS-56216](https://issues.redhat.com/browse/OCPBUGS-56216): OVE builder: Remove RHEL9 image from additionalImages [#92](https://github.com/openshift/agent-installer-utils/pull/92)
* [OCPBUGS-56116](https://issues.redhat.com/browse/OCPBUGS-56116): configure the channel for each OLM operators [#90](https://github.com/openshift/agent-installer-utils/pull/90)
* [OCPBUGS-55793](https://issues.redhat.com/browse/OCPBUGS-55793): Use internal image registry [#87](https://github.com/openshift/agent-installer-utils/pull/87)
* [OCPBUGS-55761](https://issues.redhat.com/browse/OCPBUGS-55761): Include RHEL 9 guest image to support VM launches via … [#85](https://github.com/openshift/agent-installer-utils/pull/85)
* NO-ISSUE: Update ISOBuilder appliance image SHA [#83](https://github.com/openshift/agent-installer-utils/pull/83)
* NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming [#79](https://github.com/openshift/agent-installer-utils/pull/79)
* [OCPBUGS-55515](https://issues.redhat.com/browse/OCPBUGS-55515): Include cnv operator in ISO builder script [#80](https://github.com/openshift/agent-installer-utils/pull/80)
* [OCPBUGS-55623](https://issues.redhat.com/browse/OCPBUGS-55623): update to go.mod [#81](https://github.com/openshift/agent-installer-utils/pull/81)
* NO-ISSUE: ISOBuilder-Add support-tools image for oc debug [#77](https://github.com/openshift/agent-installer-utils/pull/77)
* NO-ISSUE: ISOBuilder- Update README.md [#76](https://github.com/openshift/agent-installer-utils/pull/76)
* NO-ISSUE: ISOBuilder: Add Clean targets. [#69](https://github.com/openshift/agent-installer-utils/pull/69)
* [AGENT-1161](https://issues.redhat.com/browse/AGENT-1161): Update ISOBuilder dependencies [#75](https://github.com/openshift/agent-installer-utils/pull/75)
* [AGENT-1154](https://issues.redhat.com/browse/AGENT-1154): Dev docs for ISOBuilder [#74](https://github.com/openshift/agent-installer-utils/pull/74)
* NO-ISSUE: Remove extra doneFunc() call [#73](https://github.com/openshift/agent-installer-utils/pull/73)
* [AGENT-1188](https://issues.redhat.com/browse/AGENT-1188): Add MBR to El Torito ISO to support USB boot alongside VM [#72](https://github.com/openshift/agent-installer-utils/pull/72)
* NO-ISSUE: ISOBuilder: Use libpod registry [#71](https://github.com/openshift/agent-installer-utils/pull/71)
* [AGENT-1114](https://issues.redhat.com/browse/AGENT-1114): Check connectivity to rendezvous node and improvements [#64](https://github.com/openshift/agent-installer-utils/pull/64)
* NO-ISSUE: ISOBuilder: Appliance tweaks [#70](https://github.com/openshift/agent-installer-utils/pull/70)
* [AGENT-1138](https://issues.redhat.com/browse/AGENT-1138): Skip release image checks for interactive disconnected [#52](https://github.com/openshift/agent-installer-utils/pull/52)
* NO-ISSUE: ISOBuilder: idempotency and efficiency [#66](https://github.com/openshift/agent-installer-utils/pull/66)
* NO-ISSUE: ISOBuilder: Support --dir param [#68](https://github.com/openshift/agent-installer-utils/pull/68)
* NO-ISSUE: ISOBuilder: Update operators list [#67](https://github.com/openshift/agent-installer-utils/pull/67)
* [AGENT-1155](https://issues.redhat.com/browse/AGENT-1155): Support release image url with sha digst [#65](https://github.com/openshift/agent-installer-utils/pull/65)
* NO-ISSUE: ISOBuilder: Make sudo optional [#63](https://github.com/openshift/agent-installer-utils/pull/63)
* NO-ISSUE: ISOBuilder: Restructured to resolve right image ref [#62](https://github.com/openshift/agent-installer-utils/pull/62)
* [AGENT-1150](https://issues.redhat.com/browse/AGENT-1150): Move setup-agent-tui.sh into ignition file [#59](https://github.com/openshift/agent-installer-utils/pull/59)
* NO-ISSUE: iso_builder: add ssh key file flag [#53](https://github.com/openshift/agent-installer-utils/pull/53)
* [AGENT-1151](https://issues.redhat.com/browse/AGENT-1151): Use internal appliance registry [#58](https://github.com/openshift/agent-installer-utils/pull/58)
* NO-ISSUE: iso_builder: Remove support for rendezvousIP [#61](https://github.com/openshift/agent-installer-utils/pull/61)
* NO-ISSUE: iso_builder: Revert "Merge pull request #54 from pawanpinjarkar/run-appliance-with… [#60](https://github.com/openshift/agent-installer-utils/pull/60)
* NO-ISSUE: iso_builder: Run appliance without sudo [#54](https://github.com/openshift/agent-installer-utils/pull/54)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Add logging [#50](https://github.com/openshift/agent-installer-utils/pull/50)
* [AGENT-1137](https://issues.redhat.com/browse/AGENT-1137): Support both --ocp-version and --release-image-url [#49](https://github.com/openshift/agent-installer-utils/pull/49)
* [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Ensure the correct selinux labels are applied to agent tui files [#57](https://github.com/openshift/agent-installer-utils/pull/57)
* [OCPBUGS-45505](https://issues.redhat.com/browse/OCPBUGS-45505): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 [#37](https://github.com/openshift/agent-installer-utils/pull/37)
* [AGENT-1147](https://issues.redhat.com/browse/AGENT-1147): Update operators [#51](https://github.com/openshift/agent-installer-utils/pull/51)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Support url in appliance-config.yaml [#47](https://github.com/openshift/agent-installer-utils/pull/47)
* [AGENT-1119](https://issues.redhat.com/browse/AGENT-1119): agent-setup-tui.service typo fix [#48](https://github.com/openshift/agent-installer-utils/pull/48)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Enable agent installer interactive flow [#46](https://github.com/openshift/agent-installer-utils/pull/46)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Refactor UI for Rendezvous node IP entry [#42](https://github.com/openshift/agent-installer-utils/pull/42)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): load agent tui [#44](https://github.com/openshift/agent-installer-utils/pull/44)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): OVE ISO Builder script improvements [#40](https://github.com/openshift/agent-installer-utils/pull/40)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Adds form to agent-tui to enter rendezvous IP address [#38](https://github.com/openshift/agent-installer-utils/pull/38)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087), [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Add script to generate agent-based installer OVE ISO [#39](https://github.com/openshift/agent-installer-utils/pull/39)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...766df82081a65c57df4a0a5d19cea6635a31314c)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/1e82311cc3ab84cb3481fb018981d304e075ce4e)
* [OCPBUGS-52573](https://issues.redhat.com/browse/OCPBUGS-52573): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 [#74](https://github.com/openshift/apiserver-network-proxy/pull/74)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...1e82311cc3ab84cb3481fb018981d304e075ce4e)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/425c1c5be39628421bdfb63caf25beb169307473)
* [OCPCLOUD-2843](https://issues.redhat.com/browse/OCPCLOUD-2843): Update cloud-provider-aws to K8s 1.32, attempt 3 [#104](https://github.com/openshift/cloud-provider-aws/pull/104)
* [TRT-2005](https://issues.redhat.com/browse/TRT-2005): Revert #102 "OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master" [#103](https://github.com/openshift/cloud-provider-aws/pull/103)
* [OCPCLOUD-2843](https://issues.redhat.com/browse/OCPCLOUD-2843): Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master [#102](https://github.com/openshift/cloud-provider-aws/pull/102)
* [TRT-2003](https://issues.redhat.com/browse/TRT-2003): Revert #98 "OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master" [#100](https://github.com/openshift/cloud-provider-aws/pull/100)
* [OCPCLOUD-2843](https://issues.redhat.com/browse/OCPCLOUD-2843): Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master [#98](https://github.com/openshift/cloud-provider-aws/pull/98)
* [OCPBUGS-45516](https://issues.redhat.com/browse/OCPBUGS-45516): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.19 [#99](https://github.com/openshift/cloud-provider-aws/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/c395190655cbb92689a572dcd71c4e2a6c5744b5...425c1c5be39628421bdfb63caf25beb169307473)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/802452086a937fc7ac01e26542a05c697b363933)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Update manifests to remove reliance on v1beta1 admission registration [#552](https://github.com/openshift/cluster-api-provider-aws/pull/552)
* [OCPBUGS-54567](https://issues.redhat.com/browse/OCPBUGS-54567): UPSTREAM: 5374: add marketType field validation [#548](https://github.com/openshift/cluster-api-provider-aws/pull/548)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#545](https://github.com/openshift/cluster-api-provider-aws/pull/545)
* [OCPBUGS-53728](https://issues.redhat.com/browse/OCPBUGS-53728): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master [#544](https://github.com/openshift/cluster-api-provider-aws/pull/544)
* [OCPCLOUD-2855](https://issues.redhat.com/browse/OCPCLOUD-2855): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master [#542](https://github.com/openshift/cluster-api-provider-aws/pull/542)
* NO-JIRA: Update manifests generator tooling [#538](https://github.com/openshift/cluster-api-provider-aws/pull/538)
* [OCPBUGS-49400](https://issues.redhat.com/browse/OCPBUGS-49400): UPSTREAM: 5339: Bump glog for recent fixes [#536](https://github.com/openshift/cluster-api-provider-aws/pull/536)
* [OCPBUGS-45734](https://issues.redhat.com/browse/OCPBUGS-45734): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.19 [#534](https://github.com/openshift/cluster-api-provider-aws/pull/534)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/6bd77fcce0c87571305edf5f1f28f1182ed25096...802452086a937fc7ac01e26542a05c697b363933)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/d686e7d16a00cedcc1c42165e1996a4a9255d1a0)
* [STOR-2253](https://issues.redhat.com/browse/STOR-2253): Rebase to upstream v1.39.0 for OCP 4.19 [#283](https://github.com/openshift/aws-ebs-csi-driver/pull/283)
* [OCPBUGS-51722](https://issues.redhat.com/browse/OCPBUGS-51722): bump golang.org/x/crypto to v0.35.0 [#284](https://github.com/openshift/aws-ebs-csi-driver/pull/284)
* [OCPBUGS-46994](https://issues.redhat.com/browse/OCPBUGS-46994): CVE-2024-45338: bump golang.org/x/net to v0.33.0 [#282](https://github.com/openshift/aws-ebs-csi-driver/pull/282)
* [OCPBUGS-46197](https://issues.redhat.com/browse/OCPBUGS-46197): CVE-2024-45337: bump golang.org/x/crypto from v0.30.0 to v0.31.0 [#281](https://github.com/openshift/aws-ebs-csi-driver/pull/281)
* [OCPBUGS-45562](https://issues.redhat.com/browse/OCPBUGS-45562): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.19 [#280](https://github.com/openshift/aws-ebs-csi-driver/pull/280)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b51cd6b8e54d5682cf5491a9eb5af1570261a409...d686e7d16a00cedcc1c42165e1996a4a9255d1a0)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/6bb12490780bbabc88b82bfe51197a961e4e722a)
* [OCPBUGS-50493](https://issues.redhat.com/browse/OCPBUGS-50493): Use 127.0.0.1 for healtz http-endpoints [#364](https://github.com/openshift/csi-operator/pull/364)
* NO-JIRA: build only needed cmd in container image [#329](https://github.com/openshift/csi-operator/pull/329)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382): Correct ASH driver inject env config [#376](https://github.com/openshift/csi-operator/pull/376)
* [OSASINFRA-3652](https://issues.redhat.com/browse/OSASINFRA-3652): openstack-cinder: Use new --with-topology flag [#345](https://github.com/openshift/csi-operator/pull/345)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#370](https://github.com/openshift/csi-operator/pull/370)
* [OCPBUGS-54447](https://issues.redhat.com/browse/OCPBUGS-54447): Enable required driver services [#369](https://github.com/openshift/csi-operator/pull/369)
* [OCPBUGS-54180](https://issues.redhat.com/browse/OCPBUGS-54180): Disable remove-not-ready-taint for azure disk csi driver [#371](https://github.com/openshift/csi-operator/pull/371)
* [OCPBUGS-54230](https://issues.redhat.com/browse/OCPBUGS-54230): Bump library-go [#372](https://github.com/openshift/csi-operator/pull/372)
* [STOR-1877](https://issues.redhat.com/browse/STOR-1877): Run operators without root user control [#368](https://github.com/openshift/csi-operator/pull/368)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#367](https://github.com/openshift/csi-operator/pull/367)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#357](https://github.com/openshift/csi-operator/pull/357)
* NO-JIRA: Fixed typo in README.md [#348](https://github.com/openshift/csi-operator/pull/348)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#361](https://github.com/openshift/csi-operator/pull/361)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#363](https://github.com/openshift/csi-operator/pull/363)
* [CFE-1132](https://issues.redhat.com/browse/CFE-1132): EFS Access Point Tags Update DAY2 [#313](https://github.com/openshift/csi-operator/pull/313)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): AWS Tags DAY2 Update [#297](https://github.com/openshift/csi-operator/pull/297)
* [STOR-2263](https://issues.redhat.com/browse/STOR-2263): correct smb csi driver test manifest [#360](https://github.com/openshift/csi-operator/pull/360)
* NO-JIRA: Remove `inject-proxy` annotations for aws-ebs, aws-efs node daemonsets [#308](https://github.com/openshift/csi-operator/pull/308)
* [OCPBUGS-48507](https://issues.redhat.com/browse/OCPBUGS-48507): openstack-manila: update PodDisruptionBudget name [#353](https://github.com/openshift/csi-operator/pull/353)
* [STOR-2078](https://issues.redhat.com/browse/STOR-2078): Enable VolumeAttributesClass on AWS EBS for resizer + provisioner [#314](https://github.com/openshift/csi-operator/pull/314)
* NO-JIRA: Update golang.org/x/net to v0.34.0 [#352](https://github.com/openshift/csi-operator/pull/352)
* [OCPBUGS-45073](https://issues.redhat.com/browse/OCPBUGS-45073): Support HCP labels [#332](https://github.com/openshift/csi-operator/pull/332)
* [STOR-2260](https://issues.redhat.com/browse/STOR-2260): Bump OLM metadata to 4.19 [#351](https://github.com/openshift/csi-operator/pull/351)
* [OCPBUGS-45591](https://issues.redhat.com/browse/OCPBUGS-45591): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.19 [#342](https://github.com/openshift/csi-operator/pull/342)
* [OCPBUGS-44723](https://issues.redhat.com/browse/OCPBUGS-44723): remove EFS driver metrics [#330](https://github.com/openshift/csi-operator/pull/330)
* [OCPBUGS-45374](https://issues.redhat.com/browse/OCPBUGS-45374): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.19 [#337](https://github.com/openshift/csi-operator/pull/337)
* [OCPBUGS-45622](https://issues.redhat.com/browse/OCPBUGS-45622): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.19 [#343](https://github.com/openshift/csi-operator/pull/343)
* Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.19 [#341](https://github.com/openshift/csi-operator/pull/341)
* [OCPBUGS-45508](https://issues.redhat.com/browse/OCPBUGS-45508): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.19 [#340](https://github.com/openshift/csi-operator/pull/340)
* [OCPBUGS-45395](https://issues.redhat.com/browse/OCPBUGS-45395): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.19 [#339](https://github.com/openshift/csi-operator/pull/339)
* [OCPBUGS-45352](https://issues.redhat.com/browse/OCPBUGS-45352): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.19 [#336](https://github.com/openshift/csi-operator/pull/336)
* [OCPBUGS-45267](https://issues.redhat.com/browse/OCPBUGS-45267): openstack-manila: modify assets selectors [#335](https://github.com/openshift/csi-operator/pull/335)
* [OCPBUGS-43357](https://issues.redhat.com/browse/OCPBUGS-43357): support hcp tolerations [#326](https://github.com/openshift/csi-operator/pull/326)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab...6bb12490780bbabc88b82bfe51197a961e4e722a)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/c2e0e74ee2f13e33871fb79196c69ed254f755e6)
* [OCPBUGS-55706](https://issues.redhat.com/browse/OCPBUGS-55706): Update machine-api-operator pkg with fixes [#128](https://github.com/openshift/machine-api-provider-aws/pull/128)
* [OCPBUGS-52454](https://issues.redhat.com/browse/OCPBUGS-52454): Add spotMarketRequest on marketType spot [#126](https://github.com/openshift/machine-api-provider-aws/pull/126)
* [OCPCLOUD-2780](https://issues.redhat.com/browse/OCPCLOUD-2780): select instance 'MarketType' option [#125](https://github.com/openshift/machine-api-provider-aws/pull/125)
* [OCPCLOUD-2836](https://issues.redhat.com/browse/OCPCLOUD-2836): Update dependencies to k8s 1.32 [#123](https://github.com/openshift/machine-api-provider-aws/pull/123)
* [OCPBUGS-45578](https://issues.redhat.com/browse/OCPBUGS-45578): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.19 [#119](https://github.com/openshift/machine-api-provider-aws/pull/119)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/86e25abb51acf786581767c9510deaa305a1a1a5...c2e0e74ee2f13e33871fb79196c69ed254f755e6)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/b0a16d53fbf28a55110bbb36a69f23bc772b3297)
* [OCPBUGS-52509](https://issues.redhat.com/browse/OCPBUGS-52509): github.com/go-jose/go-jose/v4 v4.0.5 [#200](https://github.com/openshift/aws-pod-identity-webhook/pull/200)
* [OCPBUGS-45443](https://issues.redhat.com/browse/OCPBUGS-45443): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.19 [#199](https://github.com/openshift/aws-pod-identity-webhook/pull/199)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...b0a16d53fbf28a55110bbb36a69f23bc772b3297)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/7109d6b4eaefda87b235c88b92c2e17fd3dd0117)
* [OCPBUGS-55162](https://issues.redhat.com/browse/OCPBUGS-55162): UPSTREAM: 8920: Fix azure stack hub volume detach failed [#142](https://github.com/openshift/cloud-provider-azure/pull/142)
* [OCPBUGS-51090](https://issues.redhat.com/browse/OCPBUGS-51090): Fix panic for GetZoneByNodeName on Azure Stack [#141](https://github.com/openshift/cloud-provider-azure/pull/141)
* [OCPBUGS-50969](https://issues.redhat.com/browse/OCPBUGS-50969): UPSTREAM: 8504: Fix GovCloud Config [#139](https://github.com/openshift/cloud-provider-azure/pull/139)
* [CNTRLPLANE-106](https://issues.redhat.com/browse/CNTRLPLANE-106): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (78638bd) into main [#136](https://github.com/openshift/cloud-provider-azure/pull/136)
* [OCPCLOUD-2844](https://issues.redhat.com/browse/OCPCLOUD-2844): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (dfca04a) into master [#127](https://github.com/openshift/cloud-provider-azure/pull/127)
* [OCPBUGS-45694](https://issues.redhat.com/browse/OCPBUGS-45694): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.19 [#129](https://github.com/openshift/cloud-provider-azure/pull/129)
* [OCPBUGS-45859](https://issues.redhat.com/browse/OCPBUGS-45859): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#130](https://github.com/openshift/cloud-provider-azure/pull/130)
* [OCPBUGS-45574](https://issues.redhat.com/browse/OCPBUGS-45574): Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.19 [#128](https://github.com/openshift/cloud-provider-azure/pull/128)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/9c24d768d8789fd677b09c9e7b3dd9118b41a558...7109d6b4eaefda87b235c88b92c2e17fd3dd0117)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2c931b4abe5a6618754e79274f7bc9df6c63e296)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#334](https://github.com/openshift/cluster-api-provider-azure/pull/334)
* [CNTRLPLANE-105](https://issues.redhat.com/browse/CNTRLPLANE-105): Add new authentication type UserAssignedIdentityCredentials [#333](https://github.com/openshift/cluster-api-provider-azure/pull/333)
* [OCPCLOUD-2854](https://issues.redhat.com/browse/OCPCLOUD-2854): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.18.0 (1957fc6) into master [#332](https://github.com/openshift/cluster-api-provider-azure/pull/332)
* NO-JIRA: Update manifests generator tooling [#331](https://github.com/openshift/cluster-api-provider-azure/pull/331)
* [OCPBUGS-45570](https://issues.redhat.com/browse/OCPBUGS-45570): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.19 [#328](https://github.com/openshift/cluster-api-provider-azure/pull/328)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/987615c80bfa65a5c70fbed3ff06e405ef6d88ed...2c931b4abe5a6618754e79274f7bc9df6c63e296)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/466334d41a33d801cef0e81bc7186b8fd42b3f30)
* [OCPBUGS-55494](https://issues.redhat.com/browse/OCPBUGS-55494): Correct max data disk count table for L family v4 [#105](https://github.com/openshift/azure-disk-csi-driver/pull/105)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382), [OCPBUGS-55162](https://issues.redhat.com/browse/OCPBUGS-55162): Fix ASH azure disk regression issues [#104](https://github.com/openshift/azure-disk-csi-driver/pull/104)
* [OCPBUGS-51376](https://issues.redhat.com/browse/OCPBUGS-51376): Rebase against v1.32.0 [#102](https://github.com/openshift/azure-disk-csi-driver/pull/102)
* [OCPBUGS-51768](https://issues.redhat.com/browse/OCPBUGS-51768): UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 [#101](https://github.com/openshift/azure-disk-csi-driver/pull/101)
* [OCPBUGS-51169](https://issues.redhat.com/browse/OCPBUGS-51169): UPSTREAM: 2900: chore: update max data disk count table for D family v6 [#100](https://github.com/openshift/azure-disk-csi-driver/pull/100)
* [STOR-2256](https://issues.redhat.com/browse/STOR-2256): Rebase v1.314 upstream [#99](https://github.com/openshift/azure-disk-csi-driver/pull/99)
* [OCPBUGS-47036](https://issues.redhat.com/browse/OCPBUGS-47036): CVE-2024-45338: bump golang.org/x/net to v0.33.0 [#91](https://github.com/openshift/azure-disk-csi-driver/pull/91)
* [OCPBUGS-46575](https://issues.redhat.com/browse/OCPBUGS-46575): Rebase to upstream v1.31.1 for OCP 4.19 [#94](https://github.com/openshift/azure-disk-csi-driver/pull/94)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6cced6667a8e896c191bd678f740d2b7e0629538...466334d41a33d801cef0e81bc7186b8fd42b3f30)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/762a2b94b237cf16b56bb5085bcaa1471537cb52)
* [OCPBUGS-55831](https://issues.redhat.com/browse/OCPBUGS-55831): UPSTREAM: 2515: allow deleting cross-subscription snapshots [#93](https://github.com/openshift/azure-file-csi-driver/pull/93)
* [OCPBUGS-52654](https://issues.redhat.com/browse/OCPBUGS-52654): Rebase to v1.32.0 [#90](https://github.com/openshift/azure-file-csi-driver/pull/90)
* [OCPBUGS-51782](https://issues.redhat.com/browse/OCPBUGS-51782): UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 [#88](https://github.com/openshift/azure-file-csi-driver/pull/88)
* [OCPBUGS-47043](https://issues.redhat.com/browse/OCPBUGS-47043): CVE-2024-45338: bump golang.org/x/net to v0.33.0 [#85](https://github.com/openshift/azure-file-csi-driver/pull/85)
* [OCPBUGS-46218](https://issues.redhat.com/browse/OCPBUGS-46218): CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 [#84](https://github.com/openshift/azure-file-csi-driver/pull/84)
* [OCPBUGS-45753](https://issues.redhat.com/browse/OCPBUGS-45753): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.19 [#83](https://github.com/openshift/azure-file-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd...762a2b94b237cf16b56bb5085bcaa1471537cb52)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/70c82be884d0b86551e6dc2ccf4f80bec0f26f55)
* NO-JIRA: Add OCP engineers to OWNERS for KMS [#15](https://github.com/openshift/azure-kubernetes-kms/pull/15)
* [CNTRLPLANE-373](https://issues.redhat.com/browse/CNTRLPLANE-373): Add Support for UserAssignedIdentityCredential for Kubernetes-KMS [#14](https://github.com/openshift/azure-kubernetes-kms/pull/14)
* [OCPBUGS-45592](https://issues.redhat.com/browse/OCPBUGS-45592): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 [#9](https://github.com/openshift/azure-kubernetes-kms/pull/9)
* [OCPBUGS-53496](https://issues.redhat.com/browse/OCPBUGS-53496): bump golang-jwt v4 [#10](https://github.com/openshift/azure-kubernetes-kms/pull/10)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...70c82be884d0b86551e6dc2ccf4f80bec0f26f55)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/dd3ca5704052ab83cc829e9be33b127d0d764a2a)
* [OCPBUGS-54617](https://issues.redhat.com/browse/OCPBUGS-54617): Update eviction policy for Spot VMs from Deallocate to Delete [#138](https://github.com/openshift/machine-api-provider-azure/pull/138)
* [OCPBUGS-31515](https://issues.redhat.com/browse/OCPBUGS-31515): Re-reconcile machine on NIC provisioning failure [#132](https://github.com/openshift/machine-api-provider-azure/pull/132)
* [CORS-3883](https://issues.redhat.com/browse/CORS-3883): Allow managed identity from other resource groups [#133](https://github.com/openshift/machine-api-provider-azure/pull/133)
* [OCPCLOUD-2839](https://issues.redhat.com/browse/OCPCLOUD-2839): Bump k8s 1.32 [#128](https://github.com/openshift/machine-api-provider-azure/pull/128)
* [OCPBUGS-38570](https://issues.redhat.com/browse/OCPBUGS-38570): Fallback to PlatformFaultDomain when Zones is otherwise unset [#126](https://github.com/openshift/machine-api-provider-azure/pull/126)
* [OCPBUGS-45663](https://issues.redhat.com/browse/OCPBUGS-45663): dynamically setting the amount of fault domains [#124](https://github.com/openshift/machine-api-provider-azure/pull/124)
* [OCPBUGS-45481](https://issues.redhat.com/browse/OCPBUGS-45481): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.19 [#123](https://github.com/openshift/machine-api-provider-azure/pull/123)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e2405dcd1e737899d1e1ba7c36b8c80262b7d65c...dd3ca5704052ab83cc829e9be33b127d0d764a2a)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/892d3c4dc50827c1069beac55a6a8141cc891b65)
* [OCPBUGS-53800](https://issues.redhat.com/browse/OCPBUGS-53800): github.com/golang-jwt/jwt/v4 v4.5.2 [#30](https://github.com/openshift/azure-workload-identity/pull/30)
* [OCPBUGS-52508](https://issues.redhat.com/browse/OCPBUGS-52508): github.com/go-jose/go-jose/v4 v4.0.5 [#26](https://github.com/openshift/azure-workload-identity/pull/26)
* [OCPBUGS-45531](https://issues.redhat.com/browse/OCPBUGS-45531): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.19 [#25](https://github.com/openshift/azure-workload-identity/pull/25)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...892d3c4dc50827c1069beac55a6a8141cc891b65)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/9e7170f249a7e61769886d81869ab577949863ab)
* Remove ipam-controller-manager deployment [#43](https://github.com/openshift/cluster-api-provider-metal3/pull/43)
* Add metal3 infra group to IPAM manager RBAC [#42](https://github.com/openshift/cluster-api-provider-metal3/pull/42)
* Remove IPAM deployment [#39](https://github.com/openshift/cluster-api-provider-metal3/pull/39)
* Find Nodes by hostname [#38](https://github.com/openshift/cluster-api-provider-metal3/pull/38)
* downstream: regenerate manifests [#37](https://github.com/openshift/cluster-api-provider-metal3/pull/37)
* Merge upstream [#36](https://github.com/openshift/cluster-api-provider-metal3/pull/36)
* [OCPBUGS-47538](https://issues.redhat.com/browse/OCPBUGS-47538): Bump x/net to 0.33.0 [#30](https://github.com/openshift/cluster-api-provider-metal3/pull/30)
* [OCPBUGS-45382](https://issues.redhat.com/browse/OCPBUGS-45382): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.19 [#29](https://github.com/openshift/cluster-api-provider-metal3/pull/29)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec...9e7170f249a7e61769886d81869ab577949863ab)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/180d12f3c63388fb71150e8ce67dfb1e8e881c70)
* [OCPBUGS-55068](https://issues.redhat.com/browse/OCPBUGS-55068): Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 [#9721](https://github.com/openshift/installer/pull/9721)
* [OCPBUGS-56006](https://issues.redhat.com/browse/OCPBUGS-56006): [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series [#9702](https://github.com/openshift/installer/pull/9702)
* [OKD-251](https://issues.redhat.com/browse/OKD-251): Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 [#9714](https://github.com/openshift/installer/pull/9714)
* [OCPBUGS-56061](https://issues.redhat.com/browse/OCPBUGS-56061): fixes to get shellcheck to pass [#9705](https://github.com/openshift/installer/pull/9705)
* [OCPBUGS-56140](https://issues.redhat.com/browse/OCPBUGS-56140): apply fixes for yaml-lint errors [#9710](https://github.com/openshift/installer/pull/9710)
* [OCPBUGS-56075](https://issues.redhat.com/browse/OCPBUGS-56075): Pre-create password files for agent installer OVE [#9707](https://github.com/openshift/installer/pull/9707)
* [OCPBUGS-55957](https://issues.redhat.com/browse/OCPBUGS-55957): Remove Terraform & Altinfra Build Artifacts [#9698](https://github.com/openshift/installer/pull/9698)
* [OCPBUGS-55909](https://issues.redhat.com/browse/OCPBUGS-55909): Apply defaults then validate confidentialCompute [#9695](https://github.com/openshift/installer/pull/9695)
* [OCPBUGS-55731](https://issues.redhat.com/browse/OCPBUGS-55731): azure stack: switch cloud provider to standard lb [#9690](https://github.com/openshift/installer/pull/9690)
* [CORS-3633](https://issues.redhat.com/browse/CORS-3633): Fail the install when there are expired certs [#9225](https://github.com/openshift/installer/pull/9225)
* [CORS-3960](https://issues.redhat.com/browse/CORS-3960): Remove Terraform from Dockerfiles [#9673](https://github.com/openshift/installer/pull/9673)
* [OCPBUGS-55492](https://issues.redhat.com/browse/OCPBUGS-55492): sort zone slices extracted from map of byo subnets [#9662](https://github.com/openshift/installer/pull/9662)
* no-jira: IBI nmstate unit test fix [#9680](https://github.com/openshift/installer/pull/9680)
* [OCPBUGS-55324](https://issues.redhat.com/browse/OCPBUGS-55324): fix nil field access when describing security groups [#9676](https://github.com/openshift/installer/pull/9676)
* [OCPBUGS-52203](https://issues.redhat.com/browse/OCPBUGS-52203): Find GCP KMS keys [#9597](https://github.com/openshift/installer/pull/9597)
* [CORS-3855](https://issues.redhat.com/browse/CORS-3855): Remove ARO build flag from installer [#9124](https://github.com/openshift/installer/pull/9124)
* [OCPBUGS-54902](https://issues.redhat.com/browse/OCPBUGS-54902): Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster [#9656](https://github.com/openshift/installer/pull/9656)
* NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 [#9657](https://github.com/openshift/installer/pull/9657)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): validate duplicate AZs if no subnet roles at all or only for subnets of the same role [#9663](https://github.com/openshift/installer/pull/9663)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI AzureStack Support, Take II [#9666](https://github.com/openshift/installer/pull/9666)
* [OCPEDGE-1749](https://issues.redhat.com/browse/OCPEDGE-1749): [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. [#9661](https://github.com/openshift/installer/pull/9661)
* Revert "Merge pull request #9645 from patrickdillon/azurestack-mark-iii" [#9665](https://github.com/openshift/installer/pull/9665)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI-based AzureStack Installs [#9645](https://github.com/openshift/installer/pull/9645)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): add validations for subnets field with AWS API [#9599](https://github.com/openshift/installer/pull/9599)
* [CORS-3871](https://issues.redhat.com/browse/CORS-3871), [CORS-3872](https://issues.redhat.com/browse/CORS-3872), [CORS-3873](https://issues.redhat.com/browse/CORS-3873): place the cluster components on the assigned byo subnets if any [#9633](https://github.com/openshift/installer/pull/9633)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Remove IBM Cloud TF provider [#9649](https://github.com/openshift/installer/pull/9649)
* [OCPBUGS-54606](https://issues.redhat.com/browse/OCPBUGS-54606): convert OVNKubernetes networkType to correct format [#9653](https://github.com/openshift/installer/pull/9653)
* [CORS-3936](https://issues.redhat.com/browse/CORS-3936): Add support for public-only networking [#9544](https://github.com/openshift/installer/pull/9544)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Add DestroyBootstrap for leftover CAPI resources [#9636](https://github.com/openshift/installer/pull/9636)
* [CORS-3854](https://issues.redhat.com/browse/CORS-3854): Enable option to set boot diagnostics [#9125](https://github.com/openshift/installer/pull/9125)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Switch IBMCloud to CAPI [#9652](https://github.com/openshift/installer/pull/9652)
* [CORS-3867](https://issues.redhat.com/browse/CORS-3867): fix CRD descriptor to mention required BootstrapNode role [#9655](https://github.com/openshift/installer/pull/9655)
* [CORS-3886](https://issues.redhat.com/browse/CORS-3886): azure: Set use managed identity to false [#9648](https://github.com/openshift/installer/pull/9648)
* [OCPBUGS-54319](https://issues.redhat.com/browse/OCPBUGS-54319): oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x [#9608](https://github.com/openshift/installer/pull/9608)
* [AGENT-1159](https://issues.redhat.com/browse/AGENT-1159): agent docs update [#9627](https://github.com/openshift/installer/pull/9627)
* [OCPBUGS-53439](https://issues.redhat.com/browse/OCPBUGS-53439): fix inconsistent subnet role name for bootstrap node [#9650](https://github.com/openshift/installer/pull/9650)
* NO-JIRA: fix the platform test assertions to check expected err message [#9639](https://github.com/openshift/installer/pull/9639)
* [OCPBUGS-43990](https://issues.redhat.com/browse/OCPBUGS-43990): Filter out excess CA certs when adding node [#9641](https://github.com/openshift/installer/pull/9641)
* NO-JIRA: add Roshan-R to CoreOS approvers and reviewers [#9642](https://github.com/openshift/installer/pull/9642)
* [OCPEDGE-1506](https://issues.redhat.com/browse/OCPEDGE-1506): Add Platform based validation to fencing credentials [#9624](https://github.com/openshift/installer/pull/9624)
* [CORS-3908](https://issues.redhat.com/browse/CORS-3908): Update gcp cloud provider config map to include new endpoints [#9600](https://github.com/openshift/installer/pull/9600)
* [SPLAT-2121](https://issues.redhat.com/browse/SPLAT-2121): vsphere - if no host group found, append not found [#9638](https://github.com/openshift/installer/pull/9638)
* [OCPBUGS-54541](https://issues.redhat.com/browse/OCPBUGS-54541): Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 [#9632](https://github.com/openshift/installer/pull/9632)
* [OCPBUGS-46601](https://issues.redhat.com/browse/OCPBUGS-46601): IBM Cloud Bump IBM Cloud CAPI [#9623](https://github.com/openshift/installer/pull/9623)
* [OCPBUGS-43724](https://issues.redhat.com/browse/OCPBUGS-43724): Fix Load balancer IP setup [#9144](https://github.com/openshift/installer/pull/9144)
* [OCPBUGS-54407](https://issues.redhat.com/browse/OCPBUGS-54407): Use correct case in path error messages [#9615](https://github.com/openshift/installer/pull/9615)
* [OCPBUGS-54232](https://issues.redhat.com/browse/OCPBUGS-54232): Azure Move BYO VNET SG creation to InfraReady [#9603](https://github.com/openshift/installer/pull/9603)
* [OCPEDGE-1701](https://issues.redhat.com/browse/OCPEDGE-1701): fix: update tnf validation to account for tna install config [#9629](https://github.com/openshift/installer/pull/9629)
* [OCPBUGS-52473](https://issues.redhat.com/browse/OCPBUGS-52473): aarch64 kernel is no longer zipped [#9617](https://github.com/openshift/installer/pull/9617)
* NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers [#9631](https://github.com/openshift/installer/pull/9631)
* [OCPBUGS-53067](https://issues.redhat.com/browse/OCPBUGS-53067): Updating the file names in generic.ins file for s390x ABI for pxe Artifacts [#9586](https://github.com/openshift/installer/pull/9586)
* NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers [#9628](https://github.com/openshift/installer/pull/9628)
* [CORS-3883](https://issues.redhat.com/browse/CORS-3883): Remove user-assigned identity from ARM template [#9625](https://github.com/openshift/installer/pull/9625)
* [OCPBUGS-53303](https://issues.redhat.com/browse/OCPBUGS-53303): Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config [#9577](https://github.com/openshift/installer/pull/9577)
* [OCPBUGS-42241](https://issues.redhat.com/browse/OCPBUGS-42241): Update to cluster-api-provider-azure release-v1.17.5 [#9596](https://github.com/openshift/installer/pull/9596)
* [OCPBUGS-53140](https://issues.redhat.com/browse/OCPBUGS-53140): Validation for API and Ingress VIPs when using user-managed load balancer [#9571](https://github.com/openshift/installer/pull/9571)
* no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers [#9556](https://github.com/openshift/installer/pull/9556)
* [CORS-3923](https://issues.redhat.com/browse/CORS-3923), [CORS-3927](https://issues.redhat.com/browse/CORS-3927): Support confidential cluster installation on SEV-SNP and TDX nodes on GCP [#9395](https://github.com/openshift/installer/pull/9395)
* [AGENT-587](https://issues.redhat.com/browse/AGENT-587): Support Nutanix in Agent-based Installer [#9537](https://github.com/openshift/installer/pull/9537)
* [SPLAT-2000](https://issues.redhat.com/browse/SPLAT-2000): Added vSphere provisioning mode support for data disks [#9439](https://github.com/openshift/installer/pull/9439)
* [OCPEDGE-1496](https://issues.redhat.com/browse/OCPEDGE-1496): [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh [#9546](https://github.com/openshift/installer/pull/9546)
* [OCPBUGS-52356](https://issues.redhat.com/browse/OCPBUGS-52356): IBMCloud: Fix CAPI endpoint overrides [#9540](https://github.com/openshift/installer/pull/9540)
* [OCPEDGE-1505](https://issues.redhat.com/browse/OCPEDGE-1505): Enhance Platform none with Fencing Credentials [#9521](https://github.com/openshift/installer/pull/9521)
* [OSASINFRA-3730](https://issues.redhat.com/browse/OSASINFRA-3730): Add support for storing OpenStack CA bundles [#9194](https://github.com/openshift/installer/pull/9194)
* [OCPBUGS-53258](https://issues.redhat.com/browse/OCPBUGS-53258): IBMCloud: Bump TF provider for CIS fix [#9589](https://github.com/openshift/installer/pull/9589)
* NO-JIRA: update OWNER_ALIASES for azure and aws [#9598](https://github.com/openshift/installer/pull/9598)
* [OCPBUGS-53106](https://issues.redhat.com/browse/OCPBUGS-53106): Create ConfigMap to reference baremetal-installer image [#9563](https://github.com/openshift/installer/pull/9563)
* NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 [#9569](https://github.com/openshift/installer/pull/9569)
* [CORS-3918](https://issues.redhat.com/browse/CORS-3918): Send service endpoint overrides to CAPG through cluster spec [#9528](https://github.com/openshift/installer/pull/9528)
* [OCPBUGS-53465](https://issues.redhat.com/browse/OCPBUGS-53465): Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 [#9593](https://github.com/openshift/installer/pull/9593)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): Fixed topology logic for 2-node installs and added unit tests [#9579](https://github.com/openshift/installer/pull/9579)
* [OCPBUGS-53379](https://issues.redhat.com/browse/OCPBUGS-53379): Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 [#9582](https://github.com/openshift/installer/pull/9582)
* [AGENT-467](https://issues.redhat.com/browse/AGENT-467): show the agent ui url when available [#9584](https://github.com/openshift/installer/pull/9584)
* [CORS-3861](https://issues.redhat.com/browse/CORS-3861), [CORS-3883](https://issues.redhat.com/browse/CORS-3883), [CORS-3937](https://issues.redhat.com/browse/CORS-3937): Azure Machine Identity API [#9538](https://github.com/openshift/installer/pull/9538)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Run agent installer command to create certificates [#9574](https://github.com/openshift/installer/pull/9574)
* [OCPBUGS-52959](https://issues.redhat.com/browse/OCPBUGS-52959): Issue short lived certificates if ShortCertRotation featuregate is enabled [#8784](https://github.com/openshift/installer/pull/8784)
* [OCPBUGS-53173](https://issues.redhat.com/browse/OCPBUGS-53173): PowerVS: remove TF code [#9568](https://github.com/openshift/installer/pull/9568)
* no-jira: add dev docs for bumping CAPI provider version [#9567](https://github.com/openshift/installer/pull/9567)
* [OCPBUGS-53183](https://issues.redhat.com/browse/OCPBUGS-53183): Avoid adding duplicate entries to NO_PROXY [#9573](https://github.com/openshift/installer/pull/9573)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#9560](https://github.com/openshift/installer/pull/9560)
* [OCPBUGS-53280](https://issues.redhat.com/browse/OCPBUGS-53280): PowerVS: Re-enable disconnected installs [#9551](https://github.com/openshift/installer/pull/9551)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Add agent command to generate certificates [#9557](https://github.com/openshift/installer/pull/9557)
* [OCPBUGS-39146](https://issues.redhat.com/browse/OCPBUGS-39146): Validate sgdisk partition start in image based installer config [#9541](https://github.com/openshift/installer/pull/9541)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): additional refinement for loading the agent UI [#9565](https://github.com/openshift/installer/pull/9565)
* [SPLAT-2072](https://issues.redhat.com/browse/SPLAT-2072): Removed VSphereMultiVCenters feature gate [#9553](https://github.com/openshift/installer/pull/9553)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): feat(topologies): add DualReplica topology mode [#9534](https://github.com/openshift/installer/pull/9534)
* [OCPBUGS-45692](https://issues.redhat.com/browse/OCPBUGS-45692): Modified ova template name to use failure domain name [#9300](https://github.com/openshift/installer/pull/9300)
* [OCPBUGS-50552](https://issues.redhat.com/browse/OCPBUGS-50552): Power VS: Disallow clusterOSImage install-configuration parameter [#9417](https://github.com/openshift/installer/pull/9417)
* NO-JIRA: OWNERS: add thuan [#9555](https://github.com/openshift/installer/pull/9555)
* [OCPBUGS-51209](https://issues.redhat.com/browse/OCPBUGS-51209): Changed kernelFileType name from kernel.img to vmlinuz for s390x [#9533](https://github.com/openshift/installer/pull/9533)
* [OCPBUGS-6271](https://issues.redhat.com/browse/OCPBUGS-6271): Adding VIPs Validation for agent based vsphere installation [#9532](https://github.com/openshift/installer/pull/9532)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): enhance the unconfigured-ignition command to support the interactive workflow [#9529](https://github.com/openshift/installer/pull/9529)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): Improve baremetal gather error message [#9120](https://github.com/openshift/installer/pull/9120)
* [OCPBUGS-36553](https://issues.redhat.com/browse/OCPBUGS-36553): VSphere: add vips to machinenetwork [#9526](https://github.com/openshift/installer/pull/9526)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): Custom-DNS: Update master and worker user data secrets [#9451](https://github.com/openshift/installer/pull/9451)
* [CORS-2508](https://issues.redhat.com/browse/CORS-2508): aws: remove unused autoscaling:DescribeAutoScalingGroups perm [#9223](https://github.com/openshift/installer/pull/9223)
* [OCPBUGS-51378](https://issues.redhat.com/browse/OCPBUGS-51378): Change vsphere conversion govmomi err to be clear [#9524](https://github.com/openshift/installer/pull/9524)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Bump IBM Cloud CAPI to v0.10.0 [#9523](https://github.com/openshift/installer/pull/9523)
* [OCPBUGS-44840](https://issues.redhat.com/browse/OCPBUGS-44840): Mount the user-ca-bundle into ICC [#9227](https://github.com/openshift/installer/pull/9227)
* [OCPBUGS-50637](https://issues.redhat.com/browse/OCPBUGS-50637): Remove error logging when determining image arch [#9531](https://github.com/openshift/installer/pull/9531)
* [OCPBUGS-51171](https://issues.redhat.com/browse/OCPBUGS-51171): aws: add ec2:ReplaceRoute permission [#9525](https://github.com/openshift/installer/pull/9525)
* [OCPBUGS-47724](https://issues.redhat.com/browse/OCPBUGS-47724): AWS: Copy static MCO resources needed for custom-dns [#9489](https://github.com/openshift/installer/pull/9489)
* [OCPBUGS-49623](https://issues.redhat.com/browse/OCPBUGS-49623): IBMCloud: Missing ca-mon region due to static region list [#9421](https://github.com/openshift/installer/pull/9421)
* [OCPBUGS-47681](https://issues.redhat.com/browse/OCPBUGS-47681): Support regions only available in v2 of the aws sdk [#9383](https://github.com/openshift/installer/pull/9383)
* [OKD-235](https://issues.redhat.com/browse/OKD-235): Add stream metadata for scos to be used by OKD [#9520](https://github.com/openshift/installer/pull/9520)
* [OCPEDGE-1635](https://issues.redhat.com/browse/OCPEDGE-1635): Set default values for arbiter [#9530](https://github.com/openshift/installer/pull/9530)
* [OCPBUGS-39583](https://issues.redhat.com/browse/OCPBUGS-39583): Remove tmp directory used for agent pxe files [#9527](https://github.com/openshift/installer/pull/9527)
* No-ISSUE: (dep) Bump openshift/api [#9522](https://github.com/openshift/installer/pull/9522)
* [CORS-3917](https://issues.redhat.com/browse/CORS-3917): Add install config validation for service endpoints [#9517](https://github.com/openshift/installer/pull/9517)
* NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer [#9515](https://github.com/openshift/installer/pull/9515)
* [OCPBUGS-51350](https://issues.redhat.com/browse/OCPBUGS-51350): PowerVS: Extra network routes for disconnected install [#9510](https://github.com/openshift/installer/pull/9510)
* NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage [#9508](https://github.com/openshift/installer/pull/9508)
* [OCPBUGS-50961](https://issues.redhat.com/browse/OCPBUGS-50961): Power VS: Log accurate error when deploying Internal with no vpcName [#9497](https://github.com/openshift/installer/pull/9497)
* [SPLAT-1995](https://issues.redhat.com/browse/SPLAT-1995): vsphere on destroy remove cns volumes [#9425](https://github.com/openshift/installer/pull/9425)
* [OCPBUGS-47459](https://issues.redhat.com/browse/OCPBUGS-47459): IBMCloud: CAPI add permitted network [#9397](https://github.com/openshift/installer/pull/9397)
* [OCPBUGS-47652](https://issues.redhat.com/browse/OCPBUGS-47652): IBMCloud: Set CAPI boot volumes [#9385](https://github.com/openshift/installer/pull/9385)
* [CORS-3869](https://issues.redhat.com/browse/CORS-3869): static validation for new vpc.subnets field [#9505](https://github.com/openshift/installer/pull/9505)
* [OSASINFRA-3695](https://issues.redhat.com/browse/OSASINFRA-3695): openstack: Create security group rules in batches [#9042](https://github.com/openshift/installer/pull/9042)
* [OCPBUGS-46051](https://issues.redhat.com/browse/OCPBUGS-46051): IBMCloud: Fix CAPI AZ handling [#9415](https://github.com/openshift/installer/pull/9415)
* [OCPBUGS-50534](https://issues.redhat.com/browse/OCPBUGS-50534): Fix error messages in available IP code [#9503](https://github.com/openshift/installer/pull/9503)
* [OCPBUGS-51204](https://issues.redhat.com/browse/OCPBUGS-51204): bootstrap/node-image-pull.sh: handle PXE boots as well [#9516](https://github.com/openshift/installer/pull/9516)
* [OCPEDGE-1310](https://issues.redhat.com/browse/OCPEDGE-1310): feat: add arbiter node support to installer [#9159](https://github.com/openshift/installer/pull/9159)
* [CORS-3919](https://issues.redhat.com/browse/CORS-3919): Add GCP service endpoints to the infrastructure manifest [#9518](https://github.com/openshift/installer/pull/9518)
* [OCPBUGS-51084](https://issues.redhat.com/browse/OCPBUGS-51084): PowerVS: Specify chrony config for Disconnected deploy [#9500](https://github.com/openshift/installer/pull/9500)
* no-jira: Bump cluster-api to v1.9.4 [#9411](https://github.com/openshift/installer/pull/9411)
* [OCPBUGS-49351](https://issues.redhat.com/browse/OCPBUGS-49351): Add vSphere logic to check for max network count [#9419](https://github.com/openshift/installer/pull/9419)
* [CORS-3843](https://issues.redhat.com/browse/CORS-3843): Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints [#9501](https://github.com/openshift/installer/pull/9501)
* [OCPBUGS-50919](https://issues.redhat.com/browse/OCPBUGS-50919): Fixes panic during GCP tags fetch due to unstable network [#9495](https://github.com/openshift/installer/pull/9495)
* [OCPBUGS-49940](https://issues.redhat.com/browse/OCPBUGS-49940): PowerVS: datacenter supported systems [#9442](https://github.com/openshift/installer/pull/9442)
* [OCPBUGS-49953](https://issues.redhat.com/browse/OCPBUGS-49953): PowerVS: support destroy tag 1 [#9403](https://github.com/openshift/installer/pull/9403)
* [OCPBUGS-50574](https://issues.redhat.com/browse/OCPBUGS-50574): Check for vmgroup when create capv machine fd name [#9453](https://github.com/openshift/installer/pull/9453)
* [CNTRLPLANE-194](https://issues.redhat.com/browse/CNTRLPLANE-194): add auth-api-bootstrap stage to bootkube.sh template [#9424](https://github.com/openshift/installer/pull/9424)
* [CORS-3867](https://issues.redhat.com/browse/CORS-3867), [CORS-3868](https://issues.redhat.com/browse/CORS-3868): deprecate platform.subnets and introduce platform.vpc.subnets field in install-config [#9443](https://github.com/openshift/installer/pull/9443)
* [OCPBUGS-50899](https://issues.redhat.com/browse/OCPBUGS-50899): PowerVS: COS eu-es hack [#9490](https://github.com/openshift/installer/pull/9490)
* [OCPBUGS-50920](https://issues.redhat.com/browse/OCPBUGS-50920): Rely on path declaration of base image [#9491](https://github.com/openshift/installer/pull/9491)
* [OCPBUGS-45429](https://issues.redhat.com/browse/OCPBUGS-45429): Set the right resource group in bootstrap destroy [#9487](https://github.com/openshift/installer/pull/9487)
* [CORS-3835](https://issues.redhat.com/browse/CORS-3835): Add gcp endpoints to the installer config [#9363](https://github.com/openshift/installer/pull/9363)
* [OCPBUGS-46488](https://issues.redhat.com/browse/OCPBUGS-46488): Validate Encryption Keys for GCP [#9328](https://github.com/openshift/installer/pull/9328)
* [OCPBUGS-44507](https://issues.redhat.com/browse/OCPBUGS-44507): Check public zone for stray record set [#9365](https://github.com/openshift/installer/pull/9365)
* [OCPBUGS-50839](https://issues.redhat.com/browse/OCPBUGS-50839): correct typo [#9480](https://github.com/openshift/installer/pull/9480)
* [OCPBUGS-50657](https://issues.redhat.com/browse/OCPBUGS-50657): PowerVS: destroy dhcp hack [#9458](https://github.com/openshift/installer/pull/9458)
* [OCPBUGS-50534](https://issues.redhat.com/browse/OCPBUGS-50534): Fix panic when there are no available IPs [#9444](https://github.com/openshift/installer/pull/9444)
* [OCPBUGS-50649](https://issues.redhat.com/browse/OCPBUGS-50649): vsphere - check if host is powered down or on standby before uploading template [#9456](https://github.com/openshift/installer/pull/9456)
* no-jira: Switch to go.uber.org/mock/gomock [#9422](https://github.com/openshift/installer/pull/9422)
* [OCPBUGS-49319](https://issues.redhat.com/browse/OCPBUGS-49319): IBMCloud: Drop CAPI metrics-bind-addr [#9401](https://github.com/openshift/installer/pull/9401)
* no-jira: Relax serviceEndpoint URL validation for IBMCloud platform [#9416](https://github.com/openshift/installer/pull/9416)
* [OCPBUGS-50004](https://issues.redhat.com/browse/OCPBUGS-50004): Add cluster:master_nodes metric retrieval in docs [#9447](https://github.com/openshift/installer/pull/9447)
* [CORS-3825](https://issues.redhat.com/browse/CORS-3825): pkg/infrastructure/azure: support nvme [#9232](https://github.com/openshift/installer/pull/9232)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): Custom-DNS: GCP, AWS: Update worker pointer Ignition [#9431](https://github.com/openshift/installer/pull/9431)
* [OCPBUGS-46656](https://issues.redhat.com/browse/OCPBUGS-46656): validate configured networks to not overlap with OVNKubernetes default subnets [#9428](https://github.com/openshift/installer/pull/9428)
* [MGMT-19545](https://issues.redhat.com/browse/MGMT-19545): add optional release registry field to the IBI installation config [#9394](https://github.com/openshift/installer/pull/9394)
* [OCPBUGS-48044](https://issues.redhat.com/browse/OCPBUGS-48044): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9376](https://github.com/openshift/installer/pull/9376)
* [OCPBUGS-49784](https://issues.redhat.com/browse/OCPBUGS-49784): handle runtime panic when validating ovnKubernetesConfig [#9432](https://github.com/openshift/installer/pull/9432)
* [OCPBUGS-48827](https://issues.redhat.com/browse/OCPBUGS-48827): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9413](https://github.com/openshift/installer/pull/9413)
* [OCPBUGS-49594](https://issues.redhat.com/browse/OCPBUGS-49594): aws/byo-ip added required permission ec2:ReleaseAddress [#9420](https://github.com/openshift/installer/pull/9420)
* [OCPBUGS-46549](https://issues.redhat.com/browse/OCPBUGS-46549): Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 [#9392](https://github.com/openshift/installer/pull/9392)
* [OCPBUGS-48089](https://issues.redhat.com/browse/OCPBUGS-48089): validate hostPrefix to be the same when multiple clusternetwork CIDRs are present [#9398](https://github.com/openshift/installer/pull/9398)
* [SPLAT-1809](https://issues.redhat.com/browse/SPLAT-1809): Added vSphere multi disk support [#9035](https://github.com/openshift/installer/pull/9035)
* [OSASINFRA-2571](https://issues.redhat.com/browse/OSASINFRA-2571): Add quota validation for server group [#9326](https://github.com/openshift/installer/pull/9326)
* [OCPBUGS-48228](https://issues.redhat.com/browse/OCPBUGS-48228): Envtest: Configure IPv6 service network for API Service [#9361](https://github.com/openshift/installer/pull/9361)
* [CORS-3724](https://issues.redhat.com/browse/CORS-3724): bump go v1.23 and k8s dependencies [#9396](https://github.com/openshift/installer/pull/9396)
* [CORS-3637](https://issues.redhat.com/browse/CORS-3637): OWNERS files for platform provider subdirectories [#9407](https://github.com/openshift/installer/pull/9407)
* [OCPBUGS-47489](https://issues.redhat.com/browse/OCPBUGS-47489): pkg/gcp/destroy: add waits to prevent leaks during heavy load [#9384](https://github.com/openshift/installer/pull/9384)
* [MGMT-19771](https://issues.redhat.com/browse/MGMT-19771): Convert IDS to proper IDMS manifest [#9391](https://github.com/openshift/installer/pull/9391)
* [OCPBUGS-47477](https://issues.redhat.com/browse/OCPBUGS-47477): aws: skip dead zones on us-east-1 when discovering AZs [#9333](https://github.com/openshift/installer/pull/9333)
* [OCPBUGS-48570](https://issues.redhat.com/browse/OCPBUGS-48570): [Nutanix] Installation failed with timeout when uploading images to PC [#9377](https://github.com/openshift/installer/pull/9377)
* [OCPBUGS-45551](https://issues.redhat.com/browse/OCPBUGS-45551): Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 [#9275](https://github.com/openshift/installer/pull/9275)
* no-jira: docs(user): fix grammer in upi install step [#9292](https://github.com/openshift/installer/pull/9292)
* [OCPBUGS-48719](https://issues.redhat.com/browse/OCPBUGS-48719): Add new tested azure arm instance type to doc [#9387](https://github.com/openshift/installer/pull/9387)
* [OCPBUGS-46596](https://issues.redhat.com/browse/OCPBUGS-46596): aws/permissions - defaults ec2:DescribeInstanceTypeOfferings [#9341](https://github.com/openshift/installer/pull/9341)
* [COS-3013](https://issues.redhat.com/browse/COS-3013): overlay node image before bootstrapping if necessary [#8742](https://github.com/openshift/installer/pull/8742)
* [OCPBUGS-48256](https://issues.redhat.com/browse/OCPBUGS-48256): Run iscsiadm for agent-based iSCSI installations [#9356](https://github.com/openshift/installer/pull/9356)
* [SPLAT-1742](https://issues.redhat.com/browse/SPLAT-1742): vSphere - enable host group based zonal [#8873](https://github.com/openshift/installer/pull/8873)
* [CORS-3722](https://issues.redhat.com/browse/CORS-3722): bump default channel to stable-4.19 [#9375](https://github.com/openshift/installer/pull/9375)
* [CORS-3721](https://issues.redhat.com/browse/CORS-3721): bump default release image to 4.19 [#9374](https://github.com/openshift/installer/pull/9374)
* [OCPBUGS-48437](https://issues.redhat.com/browse/OCPBUGS-48437): PowerVS: limit by resourceGroupID [#9359](https://github.com/openshift/installer/pull/9359)
* [OCPBUGS-46010](https://issues.redhat.com/browse/OCPBUGS-46010): wait for at least 3 kube-apiserver instances [#9302](https://github.com/openshift/installer/pull/9302)
* no-jira: Remove myself from reviewers list [#9358](https://github.com/openshift/installer/pull/9358)
* no-jira: images: UPI: use ART repo dir [#9360](https://github.com/openshift/installer/pull/9360)
* [OCPBUGS-47156](https://issues.redhat.com/browse/OCPBUGS-47156): Bump golang.org/x/net to 0.33.0 [#9343](https://github.com/openshift/installer/pull/9343)
* NO-ISSUE: Fix owning component name in machine config templates [#9353](https://github.com/openshift/installer/pull/9353)
* NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type [#9337](https://github.com/openshift/installer/pull/9337)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS [#9238](https://github.com/openshift/installer/pull/9238)
* NO-ISSUE: Deprecate node-joiner scripts [#9304](https://github.com/openshift/installer/pull/9304)
* [MCO-1457](https://issues.redhat.com/browse/MCO-1457): Clean up MCS CA & TLS cert objects for management [#9309](https://github.com/openshift/installer/pull/9309)
* [OCPBUGS-45995](https://issues.redhat.com/browse/OCPBUGS-45995): Always set AllowCrossTenantReplication parameter to false [#9322](https://github.com/openshift/installer/pull/9322)
* [OCPBUGS-46571](https://issues.redhat.com/browse/OCPBUGS-46571): Disable IP Forwarding for CAPG Machines [#9332](https://github.com/openshift/installer/pull/9332)
* [OCPBUGS-46260](https://issues.redhat.com/browse/OCPBUGS-46260): CVE-2024-45337 bump crypto pkg to v0.31.0 [#9314](https://github.com/openshift/installer/pull/9314)
* [OCPBUGS-46605](https://issues.redhat.com/browse/OCPBUGS-46605): Find instances by label GCP [#9336](https://github.com/openshift/installer/pull/9336)
* [OCPBUGS-47504](https://issues.redhat.com/browse/OCPBUGS-47504): Power VS: Private DNS service endpoint URL must end with /v1 [#9335](https://github.com/openshift/installer/pull/9335)
* [METAL-1137](https://issues.redhat.com/browse/METAL-1137): Enable TLS for ironic API in the bootstrap VM [#9189](https://github.com/openshift/installer/pull/9189)
* [OCPBUGS-46144](https://issues.redhat.com/browse/OCPBUGS-46144): azure: use separate /var to avoid growfs timeouts [#9310](https://github.com/openshift/installer/pull/9310)
* [OCPBUGS-45218](https://issues.redhat.com/browse/OCPBUGS-45218): aws: fix perm requirement for edge nodes [#9256](https://github.com/openshift/installer/pull/9256)
* [OCPBUGS-46470](https://issues.redhat.com/browse/OCPBUGS-46470): Power VS: ResourceManager also to override for Internal deploy [#9317](https://github.com/openshift/installer/pull/9317)
* [OCPBUGS-46035](https://issues.redhat.com/browse/OCPBUGS-46035): fix skew support for node-joiner [#9307](https://github.com/openshift/installer/pull/9307)
* [OCPBUGS-44560](https://issues.redhat.com/browse/OCPBUGS-44560): Add note about additional networks using IPv6 [#9323](https://github.com/openshift/installer/pull/9323)
* [OCPBUGS-45280](https://issues.redhat.com/browse/OCPBUGS-45280): Allow more time for Service Account Creation [#9299](https://github.com/openshift/installer/pull/9299)
* [OCPBUGS-46363](https://issues.redhat.com/browse/OCPBUGS-46363): Remove narrow timeout from etcd bootstrap member removal gate. [#9295](https://github.com/openshift/installer/pull/9295)
* [OCPBUGS-44834](https://issues.redhat.com/browse/OCPBUGS-44834): aws: include permissions for edge compute [#9230](https://github.com/openshift/installer/pull/9230)
* [OCPBUGS-45984](https://issues.redhat.com/browse/OCPBUGS-45984): IBMCloud Fix VPC-COS IAM Auth [#9301](https://github.com/openshift/installer/pull/9301)
* [OCPBUGS-45317](https://issues.redhat.com/browse/OCPBUGS-45317): node-joiner PXE artifacts should be prefixed "node" [#9280](https://github.com/openshift/installer/pull/9280)
* [OCPBUGS-45727](https://issues.redhat.com/browse/OCPBUGS-45727): Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 [#9284](https://github.com/openshift/installer/pull/9284)
* [OCPBUGS-44641](https://issues.redhat.com/browse/OCPBUGS-44641): GCP placing *.apps record in wrong managed zone [#9216](https://github.com/openshift/installer/pull/9216)
* [OCPBUGS-45855](https://issues.redhat.com/browse/OCPBUGS-45855): If vCenter cluster has no esxi hosts fail with sane msg [#9291](https://github.com/openshift/installer/pull/9291)
* [OCPBUGS-45807](https://issues.redhat.com/browse/OCPBUGS-45807): aws: fix sts:AssumeRole perm requirement [#9287](https://github.com/openshift/installer/pull/9287)
* [OCPBUGS-43779](https://issues.redhat.com/browse/OCPBUGS-43779): Destroy all private cluster backend service resources [#9270](https://github.com/openshift/installer/pull/9270)
* [OCPBUGS-45162](https://issues.redhat.com/browse/OCPBUGS-45162): Delete tagged disks [#9274](https://github.com/openshift/installer/pull/9274)
* [OCPBUGS-45482](https://issues.redhat.com/browse/OCPBUGS-45482): Wait for etcd bootstrap member removal [#9261](https://github.com/openshift/installer/pull/9261)
* [OCPBUGS-45685](https://issues.redhat.com/browse/OCPBUGS-45685): Power VS: Create region-zone-sysType hierarchy [#9245](https://github.com/openshift/installer/pull/9245)
* [OCPBUGS-45289](https://issues.redhat.com/browse/OCPBUGS-45289): capi/aws: use LB name when finding Hosted Zone ID [#9263](https://github.com/openshift/installer/pull/9263)
* [OCPBUGS-45678](https://issues.redhat.com/browse/OCPBUGS-45678): Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 [#9282](https://github.com/openshift/installer/pull/9282)
* [OCPBUGS-45656](https://issues.redhat.com/browse/OCPBUGS-45656): Updating ose-installer-container image to be consistent with ART for 4.19 [#9279](https://github.com/openshift/installer/pull/9279)
* [OCPBUGS-44925](https://issues.redhat.com/browse/OCPBUGS-44925): aws: add ec2:AllocateAddress perm requirement. [#9234](https://github.com/openshift/installer/pull/9234)
* [OCPBUGS-44523](https://issues.redhat.com/browse/OCPBUGS-44523): Remove unused variable from ASH arm template 06_workers.json [#9204](https://github.com/openshift/installer/pull/9204)
* [OCPBUGS-45491](https://issues.redhat.com/browse/OCPBUGS-45491): Align vSphere UPI haproxy config with IPI [#9273](https://github.com/openshift/installer/pull/9273)
* [OCPBUGS-44938](https://issues.redhat.com/browse/OCPBUGS-44938): Handle multiple mirror entries for source [#9266](https://github.com/openshift/installer/pull/9266)
* [OCPBUGS-45286](https://issues.redhat.com/browse/OCPBUGS-45286): PowerVS: Listen to machineNetwork [#9254](https://github.com/openshift/installer/pull/9254)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9248](https://github.com/openshift/installer/pull/9248)
* [OCPBUGS-45175](https://issues.redhat.com/browse/OCPBUGS-45175): Ironic external url port should change based on protocol [#9249](https://github.com/openshift/installer/pull/9249)
* NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory [#9136](https://github.com/openshift/installer/pull/9136)
* [OCPBUGS-44924](https://issues.redhat.com/browse/OCPBUGS-44924): aws: add missing ec2:GetConsoleOutput perm requirement [#9233](https://github.com/openshift/installer/pull/9233)
* [OCPBUGS-44193](https://issues.redhat.com/browse/OCPBUGS-44193): move GCP zone filtering client-side [#9169](https://github.com/openshift/installer/pull/9169)
* [OCPBUGS-43561](https://issues.redhat.com/browse/OCPBUGS-43561): add zsh completion [#9116](https://github.com/openshift/installer/pull/9116)
* [Full changelog](https://github.com/openshift/installer/compare/f1621a112f46ebdad3d2dc429464d6e075573679...180d12f3c63388fb71150e8ce67dfb1e8e881c70)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/f7a789548f76d3117f3400ac597c0db615778d57)
* [METAL-1300](https://issues.redhat.com/browse/METAL-1300): Update CAPB to support disablePowerOff [#235](https://github.com/openshift/cluster-api-provider-baremetal/pull/235)
* NO-ISSUE: Update OWNERS [#233](https://github.com/openshift/cluster-api-provider-baremetal/pull/233)
* NO-ISSUE: Update BMO and MAO [#232](https://github.com/openshift/cluster-api-provider-baremetal/pull/232)
* [OCPBUGS-47536](https://issues.redhat.com/browse/OCPBUGS-47536): Bump x/net to 0.33.0 [#223](https://github.com/openshift/cluster-api-provider-baremetal/pull/223)
* [OCPBUGS-45534](https://issues.redhat.com/browse/OCPBUGS-45534): Updating baremetal-machine-controller-container image to be consistent with ART for 4.19 [#222](https://github.com/openshift/cluster-api-provider-baremetal/pull/222)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7...f7a789548f76d3117f3400ac597c0db615778d57)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/aa46a5a6144b865dbcdb8af35d13a790377542d4)
* [OCPBUGS-56026](https://issues.redhat.com/browse/OCPBUGS-56026): Redfish: correctly handle missing system ID [#415](https://github.com/openshift/baremetal-operator/pull/415)
* [METAL-998](https://issues.redhat.com/browse/METAL-998): Merge upstream [#413](https://github.com/openshift/baremetal-operator/pull/413)
* [OCPBUGS-54582](https://issues.redhat.com/browse/OCPBUGS-54582): Sync apr 2 [#410](https://github.com/openshift/baremetal-operator/pull/410)
* [OCPBUGS-53233](https://issues.redhat.com/browse/OCPBUGS-53233): Sync mar 18 [#403](https://github.com/openshift/baremetal-operator/pull/403)
* NO-ISSUE: Upstream Sync Mar 10 [#401](https://github.com/openshift/baremetal-operator/pull/401)
* [OCPBUGS-52215](https://issues.redhat.com/browse/OCPBUGS-52215): Bump x/oauth2 to 0.27.0 [#400](https://github.com/openshift/baremetal-operator/pull/400)
* [OCPBUGS-51294](https://issues.redhat.com/browse/OCPBUGS-51294): Merge upstream [#398](https://github.com/openshift/baremetal-operator/pull/398)
* [OCPBUGS-45252](https://issues.redhat.com/browse/OCPBUGS-45252): Merge upstream [#397](https://github.com/openshift/baremetal-operator/pull/397)
* [OCPBUGS-44949](https://issues.redhat.com/browse/OCPBUGS-44949): Merge upstream [#394](https://github.com/openshift/baremetal-operator/pull/394)
* NO-ISSUE: Merge upstream [#392](https://github.com/openshift/baremetal-operator/pull/392)
* NO-ISSUE: Sync dec 16 [#391](https://github.com/openshift/baremetal-operator/pull/391)
* [OCPBUGS-45668](https://issues.redhat.com/browse/OCPBUGS-45668): Updating ose-baremetal-operator-container image to be consistent with ART for 4.19 [#387](https://github.com/openshift/baremetal-operator/pull/387)
* [OCPBUGS-45252](https://issues.redhat.com/browse/OCPBUGS-45252): Merge upstream [#386](https://github.com/openshift/baremetal-operator/pull/386)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/044448aafa024c114b2ddba7afd4db9de845c82a...aa46a5a6144b865dbcdb8af35d13a790377542d4)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/b94d92874ab36d9d3ee26dda59f172611fca18fb)
* [OPNET-629](https://issues.redhat.com/browse/OPNET-629): Use HAProxy monitor endpoint instead of API [#343](https://github.com/openshift/baremetal-runtimecfg/pull/343)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Pass in platform as a optional parameter to runtimecfg cmds [#345](https://github.com/openshift/baremetal-runtimecfg/pull/345)
* [OCPEDGE-1689](https://issues.redhat.com/browse/OCPEDGE-1689): Include Arbiter nodes in the API backends if there is only one master [#344](https://github.com/openshift/baremetal-runtimecfg/pull/344)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Include cloud platform specific parameters to argument list for corednsmonitor [#341](https://github.com/openshift/baremetal-runtimecfg/pull/341)
* Revert "OPNET-629: Use HAProxy monitor endpoint instead of API" [#342](https://github.com/openshift/baremetal-runtimecfg/pull/342)
* [OPNET-629](https://issues.redhat.com/browse/OPNET-629): Use HAProxy monitor endpoint instead of API [#336](https://github.com/openshift/baremetal-runtimecfg/pull/336)
* [OCPBUGS-48194](https://issues.redhat.com/browse/OCPBUGS-48194): Bump logrus version [#338](https://github.com/openshift/baremetal-runtimecfg/pull/338)
* [OCPBUGS-45431](https://issues.redhat.com/browse/OCPBUGS-45431): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.19 [#335](https://github.com/openshift/baremetal-runtimecfg/pull/335)
* [OCPBUGS-44694](https://issues.redhat.com/browse/OCPBUGS-44694): Extend haproxy-monitor fall time [#334](https://github.com/openshift/baremetal-runtimecfg/pull/334)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9e2015c30f48013e895eb8dfc43695780e0d9162...b94d92874ab36d9d3ee26dda59f172611fca18fb)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c88fd60ed9c4a349d52770884b3aad828432d01d)
* [OCPBUGS-56203](https://issues.redhat.com/browse/OCPBUGS-56203): Adding sos.conf file for default sos config into the tools image [#2020](https://github.com/openshift/oc/pull/2020)
* [OCPBUGS-53106](https://issues.redhat.com/browse/OCPBUGS-53106): Get installer image from configMap for node-image command [#2005](https://github.com/openshift/oc/pull/2005)
* [OCPBUGS-52164](https://issues.redhat.com/browse/OCPBUGS-52164): Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts [#2007](https://github.com/openshift/oc/pull/2007)
* NO-JIRA: `adm release new`: simplify `writePayload` [#2008](https://github.com/openshift/oc/pull/2008)
* [COS-3023](https://issues.redhat.com/browse/COS-3023): Fixing rpmdiff permissions when running in container [#2006](https://github.com/openshift/oc/pull/2006)
* [COS-3023](https://issues.redhat.com/browse/COS-3023): pkg/cli/admin/release/info: support generating RPM diffs [#1966](https://github.com/openshift/oc/pull/1966)
* NO-JIRA: `adm release new`: simplify `writePayload` [#1997](https://github.com/openshift/oc/pull/1997)
* NO-JIRA: `adm release new`: simplify no operator error condition [#1999](https://github.com/openshift/oc/pull/1999)
* [OCPBUGS-54168](https://issues.redhat.com/browse/OCPBUGS-54168): Use ProxyFromEnvironment when creating HTTP transport [#1995](https://github.com/openshift/oc/pull/1995)
* NO-JIRA: debug: suggest nsenter instead of chroot [#1991](https://github.com/openshift/oc/pull/1991)
* [OCPBUGS-53389](https://issues.redhat.com/browse/OCPBUGS-53389): Use fedora image in unit tests instead of centos [#1992](https://github.com/openshift/oc/pull/1992)
* [OCPBUGS-23514](https://issues.redhat.com/browse/OCPBUGS-23514): status: Adjust impact summary for Failing=Unknown [#1989](https://github.com/openshift/oc/pull/1989)
* [OCPBUGS-52504](https://issues.redhat.com/browse/OCPBUGS-52504): pkg/cli/admin/upgrade/recommend: Populate RESTConfig [#1987](https://github.com/openshift/oc/pull/1987)
* NO-JIRA: Bump x/oauth2 and x/crypto [#1984](https://github.com/openshift/oc/pull/1984)
* [OCPBUGS-51254](https://issues.redhat.com/browse/OCPBUGS-51254): Bump indirect dependency go-jose to 4.0.5 version [#1983](https://github.com/openshift/oc/pull/1983)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures [#1981](https://github.com/openshift/oc/pull/1981)
* NO-ISSUE: Test case for lowercase Jira ticket names [#1964](https://github.com/openshift/oc/pull/1964)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend: "Upstream" -> "Upstream update service" [#1980](https://github.com/openshift/oc/pull/1980)
* trt-1995: Update Unconditional Feature Gate Notation [#1979](https://github.com/openshift/oc/pull/1979)
* [OCPBUGS-50682](https://issues.redhat.com/browse/OCPBUGS-50682): OCPBUGS-50683: Correct oc adm top pvc messages [#1974](https://github.com/openshift/oc/pull/1974)
* [WRKLDS-1653](https://issues.redhat.com/browse/WRKLDS-1653): Update k8s dependencies to 1.32 [#1971](https://github.com/openshift/oc/pull/1971)
* [OTA-1426](https://issues.redhat.com/browse/OTA-1426): pkg/cli/admin/upgrade: Check and display interesting alerts [#1970](https://github.com/openshift/oc/pull/1970)
* NO-JIRA: Sanitize tar header name as it is used in path [#1969](https://github.com/openshift/oc/pull/1969)
* [OCPBUGS-49450](https://issues.redhat.com/browse/OCPBUGS-49450): Address `github.com/docker/docker` CVE [#1960](https://github.com/openshift/oc/pull/1960)
* NO-ISSUE: admin/upgrade/status/examples/README: Document *-alerts.json [#1959](https://github.com/openshift/oc/pull/1959)
* [OCPBUGS-38975](https://issues.redhat.com/browse/OCPBUGS-38975): monitor should not exit for temp api disconnect [#1949](https://github.com/openshift/oc/pull/1949)
* NO-ISSUE: Remove experimental tag for --report and --pxe [#1956](https://github.com/openshift/oc/pull/1956)
* [OCPBUGS-46361](https://issues.redhat.com/browse/OCPBUGS-46361): Mark adm pod-network command as hidden and depcated [#1955](https://github.com/openshift/oc/pull/1955)
* [OTA-1393](https://issues.redhat.com/browse/OTA-1393): status: recognize multi-arch in node phase (2) [#1933](https://github.com/openshift/oc/pull/1933)
* [OCPBUGS-19824](https://issues.redhat.com/browse/OCPBUGS-19824): release new: replace 0.0.1-snapshot in all manifests [#1945](https://github.com/openshift/oc/pull/1945)
* [OCPBUGS-18961](https://issues.redhat.com/browse/OCPBUGS-18961): pkg/cli/admin/release/extract_tools: Enable ImageRegistry, etc. on 4.13-to-4.14 [#1539](https://github.com/openshift/oc/pull/1539)
* [OCPBUGS-45991](https://issues.redhat.com/browse/OCPBUGS-45991): Mark --report and --pxe flags as experimental [#1951](https://github.com/openshift/oc/pull/1951)
* [OCPBUGS-45311](https://issues.redhat.com/browse/OCPBUGS-45311): fix oc adm node-image create --pxe command to copy the correct artifacts [#1931](https://github.com/openshift/oc/pull/1931)
* [OCPBUGS-45754](https://issues.redhat.com/browse/OCPBUGS-45754): Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.19 [#1946](https://github.com/openshift/oc/pull/1946)
* NO-JIRA: adm release: simplify safe manifests mappers [#1942](https://github.com/openshift/oc/pull/1942)
* [OCPBUGS-45454](https://issues.redhat.com/browse/OCPBUGS-45454): Update to 4.19 and Go 1.23.0 [#1938](https://github.com/openshift/oc/pull/1938)
* NO-JIRA: adm release: clarify manifest processing [#1936](https://github.com/openshift/oc/pull/1936)
* [OCPBUGS-45363](https://issues.redhat.com/browse/OCPBUGS-45363): adm node-logs: Also parse logs when encountered with standard html header [#1934](https://github.com/openshift/oc/pull/1934)
* NO-JIRA: adm release: simplify `image-references` check [#1930](https://github.com/openshift/oc/pull/1930)
* [OTA-1393](https://issues.redhat.com/browse/OTA-1393): status: recognize multi-arch in node phase [#1928](https://github.com/openshift/oc/pull/1928)
* [OCPBUGS-45022](https://issues.redhat.com/browse/OCPBUGS-45022): Obfuscate sensitive data in Proxy resource while inspection [#1929](https://github.com/openshift/oc/pull/1929)
* [OTA-1393](https://issues.redhat.com/browse/OTA-1393): status: recognize multi-arch in target version [#1926](https://github.com/openshift/oc/pull/1926)
* no-jira: Documentation fix: add missing whitespace character [#1911](https://github.com/openshift/oc/pull/1911)
* NO-JIRA: adm release: simplify manifest iteration [#1917](https://github.com/openshift/oc/pull/1917)
* [OTA-1393](https://issues.redhat.com/browse/OTA-1393): status: compute mcoImagePullSpec only once [#1924](https://github.com/openshift/oc/pull/1924)
* [Full changelog](https://github.com/openshift/oc/compare/36c93092776f8d964b4d09fa4c4f299d1ab55a08...c88fd60ed9c4a349d52770884b3aad828432d01d)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/409aa6893af94d8de67d07b03293676b5523412a)
* [OCPBUGS-56054](https://issues.redhat.com/browse/OCPBUGS-56054): golang.org/x/net v0.38.0 [#858](https://github.com/openshift/cloud-credential-operator/pull/858)
* [OCPBUGS-55204](https://issues.redhat.com/browse/OCPBUGS-55204): Revert "Merge pull request #848 from jstuever/OCPBUGS-53429" [#854](https://github.com/openshift/cloud-credential-operator/pull/854)
* [OCPBUGS-53429](https://issues.redhat.com/browse/OCPBUGS-53429): Render: configure proxy on bootstrap static pod [#848](https://github.com/openshift/cloud-credential-operator/pull/848)
* [OCPBUGS-53824](https://issues.redhat.com/browse/OCPBUGS-53824): update github.com/golang-jwt/jwt [#836](https://github.com/openshift/cloud-credential-operator/pull/836)
* NO-JIRA: Report the error when syncing STS secrets [#827](https://github.com/openshift/cloud-credential-operator/pull/827)
* [OSASINFRA-3657](https://issues.redhat.com/browse/OSASINFRA-3657): Add support for storing OpenStack CA bundles [#780](https://github.com/openshift/cloud-credential-operator/pull/780)
* [OCPBUGS-52505](https://issues.redhat.com/browse/OCPBUGS-52505): golang.org/x/oauth2 v0.28.0 [#821](https://github.com/openshift/cloud-credential-operator/pull/821)
* [CCO-647](https://issues.redhat.com/browse/CCO-647): Enable readOnlyRootFilesystem on all containers [#819](https://github.com/openshift/cloud-credential-operator/pull/819)
* [OCPBUGS-52507](https://issues.redhat.com/browse/OCPBUGS-52507): github.com/go-jose/go-jose/v4 v4.0.5 [#823](https://github.com/openshift/cloud-credential-operator/pull/823)
* NO-JIRA: Add dry-run on aws create-all command [#818](https://github.com/openshift/cloud-credential-operator/pull/818)
* NO-JIRA: add example of how to build from source [#820](https://github.com/openshift/cloud-credential-operator/pull/820)
* [CCO-629](https://issues.redhat.com/browse/CCO-629): Update modules to latest [#817](https://github.com/openshift/cloud-credential-operator/pull/817)
* NO-JIRA: docs: rotate oidc key to use less opinionated CLUSTER_NAME [#816](https://github.com/openshift/cloud-credential-operator/pull/816)
* [CCO-631](https://issues.redhat.com/browse/CCO-631): Upgrade to k8s v0.32.0 [#814](https://github.com/openshift/cloud-credential-operator/pull/814)
* [CCO-626](https://issues.redhat.com/browse/CCO-626): pkg/operator/utils: Log diff on CredentialsRequest status change [#811](https://github.com/openshift/cloud-credential-operator/pull/811)
* [OCPBUGS-47466](https://issues.redhat.com/browse/OCPBUGS-47466): golang.org/x/net v0.33.0 [#803](https://github.com/openshift/cloud-credential-operator/pull/803)
* [OCPBUGS-45699](https://issues.redhat.com/browse/OCPBUGS-45699): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.19 [#796](https://github.com/openshift/cloud-credential-operator/pull/796)
* [OCPBUGS-41727](https://issues.redhat.com/browse/OCPBUGS-41727): Add AWS region to aws-pod-identity-webhook [#789](https://github.com/openshift/cloud-credential-operator/pull/789)
* NO-JIRA: docs: rotate azure key to use more accurate variable commands [#797](https://github.com/openshift/cloud-credential-operator/pull/797)
* NO-JIRA: Fix JSON for 07-block-public-access-to-oidc-bucket.json [#762](https://github.com/openshift/cloud-credential-operator/pull/762)
* [OCPBUGS-44933](https://issues.redhat.com/browse/OCPBUGS-44933): Add retry to ccoctl gcp create functions [#781](https://github.com/openshift/cloud-credential-operator/pull/781)
* NO-JIRA: docs: rotate oidc key to specify azure storage account variables [#790](https://github.com/openshift/cloud-credential-operator/pull/790)
* [OCPBUGS-44999](https://issues.redhat.com/browse/OCPBUGS-44999): github.com/golang-jwt/jwt/v4 v4.5.1 [#782](https://github.com/openshift/cloud-credential-operator/pull/782)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...409aa6893af94d8de67d07b03293676b5523412a)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/98ae311b854223a99e258d3c3369455d983de239)
* [OCPBUGS-45891](https://issues.redhat.com/browse/OCPBUGS-45891): Increase API call timeout to 30 second [#168](https://github.com/openshift/cloud-network-config-controller/pull/168)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 authentication from CNCC [#169](https://github.com/openshift/cloud-network-config-controller/pull/169)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#166](https://github.com/openshift/cloud-network-config-controller/pull/166)
* [OSASINFRA-3755](https://issues.redhat.com/browse/OSASINFRA-3755): Prefer CA cert from credentials secret [#167](https://github.com/openshift/cloud-network-config-controller/pull/167)
* [OCPBUGS-53201](https://issues.redhat.com/browse/OCPBUGS-53201): Revert "CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller" [#164](https://github.com/openshift/cloud-network-config-controller/pull/164)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#161](https://github.com/openshift/cloud-network-config-controller/pull/161)
* [SDN-5690](https://issues.redhat.com/browse/SDN-5690): Rebase k8s to 1.32 [#163](https://github.com/openshift/cloud-network-config-controller/pull/163)
* [OCPBUGS-45631](https://issues.redhat.com/browse/OCPBUGS-45631): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 [#160](https://github.com/openshift/cloud-network-config-controller/pull/160)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...98ae311b854223a99e258d3c3369455d983de239)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ceeb021d7562cf3d669ed7293f46b2a50e848c73)
* [OCPBUGS-51203](https://issues.redhat.com/browse/OCPBUGS-51203): fix logo not being correctly aligned in Webkit [#758](https://github.com/openshift/cluster-authentication-operator/pull/758)
* [OCPBUGS-48176](https://issues.redhat.com/browse/OCPBUGS-48176): Avoid duplicate OAuth client creation [#757](https://github.com/openshift/cluster-authentication-operator/pull/757)
* [OCPEDGE-1510](https://issues.redhat.com/browse/OCPEDGE-1510): feat: add minimum count for DualReplica [#761](https://github.com/openshift/cluster-authentication-operator/pull/761)
* [OCPEDGE-1610](https://issues.redhat.com/browse/OCPEDGE-1610): bump(kube,library-go,ocp/api): [#759](https://github.com/openshift/cluster-authentication-operator/pull/759)
* NO-JIRA: Keycloak e2e test improvements [#714](https://github.com/openshift/cluster-authentication-operator/pull/714)
* [OCPBUGS-51981](https://issues.redhat.com/browse/OCPBUGS-51981): fix: update starter path to account for mom integration [#760](https://github.com/openshift/cluster-authentication-operator/pull/760)
* [CNTRLPLANE-71](https://issues.redhat.com/browse/CNTRLPLANE-71): update cao to manage rolebindingrestriction crd [#748](https://github.com/openshift/cluster-authentication-operator/pull/748)
* [AUTH-541](https://issues.redhat.com/browse/AUTH-541): OIDC structured auth config [#713](https://github.com/openshift/cluster-authentication-operator/pull/713)
* [CONSOLE-4434](https://issues.redhat.com/browse/CONSOLE-4434), [OCPBUGS-43610](https://issues.redhat.com/browse/OCPBUGS-43610): update login templates to use PF6 and add validation [#751](https://github.com/openshift/cluster-authentication-operator/pull/751)
* NO-JIRA: OWNERS: update approvers [#756](https://github.com/openshift/cluster-authentication-operator/pull/756)
* [MON-4129](https://issues.redhat.com/browse/MON-4129): adjust Prometheus classic histograms 'le' related selectors in relabel config to accommodate the update to Prometheus v3 [#752](https://github.com/openshift/cluster-authentication-operator/pull/752)
* [OCPBUGS-48177](https://issues.redhat.com/browse/OCPBUGS-48177): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#753](https://github.com/openshift/cluster-authentication-operator/pull/753)
* [OCPEDGE-1306](https://issues.redhat.com/browse/OCPEDGE-1306): feat: change minimum for arbiter ha deployments [#734](https://github.com/openshift/cluster-authentication-operator/pull/734)
* NO-JIRA: fix: resolve some integration tests [#750](https://github.com/openshift/cluster-authentication-operator/pull/750)
* [API-1835](https://issues.redhat.com/browse/API-1835): bring MOM up to date for testing and the like [#744](https://github.com/openshift/cluster-authentication-operator/pull/744)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/75c7842973cbeccaf98ec4f8102093f688278eca...ceeb021d7562cf3d669ed7293f46b2a50e848c73)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f746d442e69be1cf82cef1c473ddc0ab8a15d22f)
* [OCPBUGS-54231](https://issues.redhat.com/browse/OCPBUGS-54231): Fix cool down status condition to trigger scale down [#355](https://github.com/openshift/kubernetes-autoscaler/pull/355)
* [OCPCLOUD-2835](https://issues.redhat.com/browse/OCPCLOUD-2835): rebase on upstream 1.32.0 release [#340](https://github.com/openshift/kubernetes-autoscaler/pull/340)
* NO-JIRA: improve nodes listing in ClusterAPI provider [#354](https://github.com/openshift/kubernetes-autoscaler/pull/354)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): refactor findScalableResourceProviderIDs [#349](https://github.com/openshift/kubernetes-autoscaler/pull/349)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve failed machine detection in clusterapi [#347](https://github.com/openshift/kubernetes-autoscaler/pull/347)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): make DecreaseTargetSize more accurate [#343](https://github.com/openshift/kubernetes-autoscaler/pull/343)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve replica counting on openshift [#278](https://github.com/openshift/kubernetes-autoscaler/pull/278)
* [OCPCLOUD-2500](https://issues.redhat.com/browse/OCPCLOUD-2500): Update to recognize both upstream and openshift ScaleFromZero annotations [#335](https://github.com/openshift/kubernetes-autoscaler/pull/335)
* [PODAUTO-266](https://issues.redhat.com/browse/PODAUTO-266): Update VPA dockerfile to 4.19 [#334](https://github.com/openshift/kubernetes-autoscaler/pull/334)
* [OCPBUGS-25852](https://issues.redhat.com/browse/OCPBUGS-25852): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#332](https://github.com/openshift/kubernetes-autoscaler/pull/332)
* [OCPBUGS-45686](https://issues.redhat.com/browse/OCPBUGS-45686): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.19 [#331](https://github.com/openshift/kubernetes-autoscaler/pull/331)
* [OCPBUGS-45565](https://issues.redhat.com/browse/OCPBUGS-45565): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.19 [#330](https://github.com/openshift/kubernetes-autoscaler/pull/330)
* [OCPBUGS-45075](https://issues.redhat.com/browse/OCPBUGS-45075): VPA OWNERS: Remove John Kyros, et al., add Max Cao [#322](https://github.com/openshift/kubernetes-autoscaler/pull/322)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...f746d442e69be1cf82cef1c473ddc0ab8a15d22f)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/227f7537c3b459d4940522809df60b2dfca738ed)
* [OCPCLOUD-2829](https://issues.redhat.com/browse/OCPCLOUD-2829): Bump k8s 1.32 [#339](https://github.com/openshift/cluster-autoscaler-operator/pull/339)
* [OCPBUGS-45451](https://issues.redhat.com/browse/OCPBUGS-45451): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.19 [#336](https://github.com/openshift/cluster-autoscaler-operator/pull/336)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/474ad65cde3d965a565d41cac5bfd96a92f880fa...227f7537c3b459d4940522809df60b2dfca738ed)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f64a5c1d1e3a7d34d89582874ac63d70ef9c556e)
* [OCPBUGS-53330](https://issues.redhat.com/browse/OCPBUGS-53330): Update BMO to latest [#468](https://github.com/openshift/cluster-baremetal-operator/pull/468)
* [OCPBUGS-52216](https://issues.redhat.com/browse/OCPBUGS-52216): Bump x/oauth2 to 0.27.0 [#463](https://github.com/openshift/cluster-baremetal-operator/pull/463)
* [OCPBUGS-51275](https://issues.redhat.com/browse/OCPBUGS-51275): Add new resources to controller relatedObjects [#465](https://github.com/openshift/cluster-baremetal-operator/pull/465)
* [OCPBUGS-44839](https://issues.redhat.com/browse/OCPBUGS-44839): Mount the user-ca-bundle into ICC [#455](https://github.com/openshift/cluster-baremetal-operator/pull/455)
* [OCPBUGS-51275](https://issues.redhat.com/browse/OCPBUGS-51275): add missing relatedObjects [#461](https://github.com/openshift/cluster-baremetal-operator/pull/461)
* [METAL-1286](https://issues.redhat.com/browse/METAL-1286): Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted [#462](https://github.com/openshift/cluster-baremetal-operator/pull/462)
* [OCPEDGE-1607](https://issues.redhat.com/browse/OCPEDGE-1607): feat: add arbiter node selector [#460](https://github.com/openshift/cluster-baremetal-operator/pull/460)
* [OCPBUGS-36357](https://issues.redhat.com/browse/OCPBUGS-36357): Replace watches with actual Watches [#452](https://github.com/openshift/cluster-baremetal-operator/pull/452)
* [OCPBUGS-45418](https://issues.redhat.com/browse/OCPBUGS-45418): Use go version 1.23 and OCP 4.19 base image [#457](https://github.com/openshift/cluster-baremetal-operator/pull/457)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...f64a5c1d1e3a7d34d89582874ac63d70ef9c556e)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/8fde9c52fbb6b6044785ebae0751000b049fd0ed)
* [OCPEDGE-1683](https://issues.redhat.com/browse/OCPEDGE-1683): feat: add support for arbiter and dual replica: [#116](https://github.com/openshift/cluster-bootstrap/pull/116)
* [OCPBUGS-48821](https://issues.redhat.com/browse/OCPBUGS-48821): bootstrap API server should terminate only after API is HA [#111](https://github.com/openshift/cluster-bootstrap/pull/111)
* [OCPBUGS-45351](https://issues.redhat.com/browse/OCPBUGS-45351): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.19 [#110](https://github.com/openshift/cluster-bootstrap/pull/110)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/c6db451da03b8883063e88d28d7962b605f65153...8fde9c52fbb6b6044785ebae0751000b049fd0ed)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/479f0c4edcfc5bc5706600070e8b8c142e59a5d4)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Regenerate manifests to drop usage of v1beta1 admissionregistration [#237](https://github.com/openshift/cluster-api/pull/237)
* [OCPCLOUD-2860](https://issues.redhat.com/browse/OCPCLOUD-2860): Enable propagation of Machine annotations to Nodes [#233](https://github.com/openshift/cluster-api/pull/233)
* [OCPCLOUD-2680](https://issues.redhat.com/browse/OCPCLOUD-2680): Enable machine to node propagation [#229](https://github.com/openshift/cluster-api/pull/229)
* NO-JIRA: Update manifests generator tooling [#232](https://github.com/openshift/cluster-api/pull/232)
* [OCPCLOUD-2680](https://issues.redhat.com/browse/OCPCLOUD-2680): Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master [#231](https://github.com/openshift/cluster-api/pull/231)
* [OCPCLOUD-2857](https://issues.redhat.com/browse/OCPCLOUD-2857): Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master [#230](https://github.com/openshift/cluster-api/pull/230)
* [OCPBUGS-45428](https://issues.redhat.com/browse/OCPBUGS-45428): Updating ose-cluster-api-container image to be consistent with ART for 4.19 [#228](https://github.com/openshift/cluster-api/pull/228)
* [Full changelog](https://github.com/openshift/cluster-api/compare/d05a6defdc3602918de8db0f93744ca8f6b2b820...479f0c4edcfc5bc5706600070e8b8c142e59a5d4)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/321712b12b7a71240a49efa83e0bb5a1d6ada3d7)
* [OCPBUGS-56105](https://issues.redhat.com/browse/OCPBUGS-56105), [OCPCLOUD-2893](https://issues.redhat.com/browse/OCPCLOUD-2893): Add related objects to must-gather config [#296](https://github.com/openshift/cluster-capi-operator/pull/296)
* [OCPBUGS-56055](https://issues.redhat.com/browse/OCPBUGS-56055): fix: machine: propagate non-authoritative deletion [#294](https://github.com/openshift/cluster-capi-operator/pull/294)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Should not use v1beta1 of the AdmissionRegistration API group [#291](https://github.com/openshift/cluster-capi-operator/pull/291)
* [OCPBUGS-54970](https://issues.redhat.com/browse/OCPBUGS-54970), [OCPBUGS-55349](https://issues.redhat.com/browse/OCPBUGS-55349): Ensure CAPI machine when machine authority is CAPI [#288](https://github.com/openshift/cluster-capi-operator/pull/288)
* NO-JIRA: Prevent caching CAPI objects across namespaces [#285](https://github.com/openshift/cluster-capi-operator/pull/285)
* [METAL-966](https://issues.redhat.com/browse/METAL-966): Reapply "Merge pull request #175 from honza/add-metal3" [#284](https://github.com/openshift/cluster-capi-operator/pull/284)
* [OCPCLOUD-2648](https://issues.redhat.com/browse/OCPCLOUD-2648): Machine sync controller deletion logic [#278](https://github.com/openshift/cluster-capi-operator/pull/278)
* [OCPCLOUD-2713](https://issues.redhat.com/browse/OCPCLOUD-2713): Handle credential fields in both mapi2capi and capi2mapi [#282](https://github.com/openshift/cluster-capi-operator/pull/282)
* [OCPCLOUD-2564](https://issues.redhat.com/browse/OCPCLOUD-2564): add migration controllers [#268](https://github.com/openshift/cluster-capi-operator/pull/268)
* [OCPBUGS-54972](https://issues.redhat.com/browse/OCPBUGS-54972): Revert #175 "METAL-966: Add metal3 provider" [#283](https://github.com/openshift/cluster-capi-operator/pull/283)
* [OCPCLOUD-2880](https://issues.redhat.com/browse/OCPCLOUD-2880): label selector and labels conversion, fixes to sync controllers and conversions [#281](https://github.com/openshift/cluster-capi-operator/pull/281)
* [METAL-966](https://issues.redhat.com/browse/METAL-966): Add metal3 provider [#175](https://github.com/openshift/cluster-capi-operator/pull/175)
* [OCPCLOUD-2895](https://issues.redhat.com/browse/OCPCLOUD-2895): Add AWS networkInterfaceType to conversion [#280](https://github.com/openshift/cluster-capi-operator/pull/280)
* [OCPCLOUD-2712](https://issues.redhat.com/browse/OCPCLOUD-2712): Update comments based on Security Group Investigation [#279](https://github.com/openshift/cluster-capi-operator/pull/279)
* [OCPCLOUD-2716](https://issues.redhat.com/browse/OCPCLOUD-2716): Handle Machine owner references translation between MAPI and CAPI [#271](https://github.com/openshift/cluster-capi-operator/pull/271)
* NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 [#275](https://github.com/openshift/cluster-capi-operator/pull/275)
* [OCPCLOUD-2647](https://issues.redhat.com/browse/OCPCLOUD-2647): CAPI to MAPI Machine Synchronisation [#265](https://github.com/openshift/cluster-capi-operator/pull/265)
* NO-JIRA: Update version variable in generate-ocp-manifests hook script [#277](https://github.com/openshift/cluster-capi-operator/pull/277)
* NO-JIRA: fix: e2e: azure conditionally set identity [#276](https://github.com/openshift/cluster-capi-operator/pull/276)
* [TRT-2048](https://issues.redhat.com/browse/TRT-2048): Revert "OCPCLOUD-2792: corecluster: set controller level conditions + tests" [#273](https://github.com/openshift/cluster-capi-operator/pull/273)
* [OCPBUGS-53057](https://issues.redhat.com/browse/OCPBUGS-53057): Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic [#266](https://github.com/openshift/cluster-capi-operator/pull/266)
* [OCPCLOUD-2858](https://issues.redhat.com/browse/OCPCLOUD-2858): Bump dependencies to CAPI v1.9.z [#270](https://github.com/openshift/cluster-capi-operator/pull/270)
* NO-JIRA: Update TODOs with new Jira issues [#269](https://github.com/openshift/cluster-capi-operator/pull/269)
* [OCPCLOUD-2718](https://issues.redhat.com/browse/OCPCLOUD-2718): Add default VolumeSize for MAPI to CAPI conversion [#260](https://github.com/openshift/cluster-capi-operator/pull/260)
* [OCPCLOUD-2792](https://issues.redhat.com/browse/OCPCLOUD-2792): corecluster: set controller level conditions + tests [#256](https://github.com/openshift/cluster-capi-operator/pull/256)
* [OCPCLOUD-2645](https://issues.redhat.com/browse/OCPCLOUD-2645): MAPI to CAPI Machine synchronization [#258](https://github.com/openshift/cluster-capi-operator/pull/258)
* NO-JIRA: Add lifecyclehook script that updates manifests-gen [#264](https://github.com/openshift/cluster-capi-operator/pull/264)
* NO-JIRA: Remove unused Dockerfile [#255](https://github.com/openshift/cluster-capi-operator/pull/255)
* [OCPCLOUD-2824](https://issues.redhat.com/browse/OCPCLOUD-2824): Add manifest generation script for rebasebot [#257](https://github.com/openshift/cluster-capi-operator/pull/257)
* [OCPCLOUD-2792](https://issues.redhat.com/browse/OCPCLOUD-2792): Repurpose unsupported controller to a broader clusteroperator one [#254](https://github.com/openshift/cluster-capi-operator/pull/254)
* [MULTIARCH-5043](https://issues.redhat.com/browse/MULTIARCH-5043): Add Powervs support for CAPI-MAPI conversion [#216](https://github.com/openshift/cluster-capi-operator/pull/216)
* [OCPBUGS-29815](https://issues.redhat.com/browse/OCPBUGS-29815): fix: always update clusteroperator status versions when differing [#248](https://github.com/openshift/cluster-capi-operator/pull/248)
* [OCPCLOUD-2642](https://issues.redhat.com/browse/OCPCLOUD-2642): Reference ASO image for installation [#235](https://github.com/openshift/cluster-capi-operator/pull/235)
* [OCPBUGS-45392](https://issues.redhat.com/browse/OCPBUGS-45392): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.19 [#241](https://github.com/openshift/cluster-capi-operator/pull/241)
* [OCPCLOUD-2202](https://issues.redhat.com/browse/OCPCLOUD-2202): Create and manage core cluster object [#236](https://github.com/openshift/cluster-capi-operator/pull/236)
* [OCPCLOUD-2787](https://issues.redhat.com/browse/OCPCLOUD-2787): Add missing CustomNoUpgrade to manifests [#244](https://github.com/openshift/cluster-capi-operator/pull/244)
* [OCPCLOUD-2644](https://issues.redhat.com/browse/OCPCLOUD-2644): MAPI to CAPI MachineSet synchronization [#237](https://github.com/openshift/cluster-capi-operator/pull/237)
* [OCPCLOUD-2787](https://issues.redhat.com/browse/OCPCLOUD-2787): Updates migration controller cmd [#243](https://github.com/openshift/cluster-capi-operator/pull/243)
* [OCPCLOUD-2787](https://issues.redhat.com/browse/OCPCLOUD-2787): Updates migration cmd to change metrics port [#242](https://github.com/openshift/cluster-capi-operator/pull/242)
* [OCPCLOUD-2787](https://issues.redhat.com/browse/OCPCLOUD-2787): Deploy manifests for CustomNoUpgrade feature-set [#238](https://github.com/openshift/cluster-capi-operator/pull/238)
* [OCPCLOUD-2647](https://issues.redhat.com/browse/OCPCLOUD-2647): Updates machine-api-migration cmd [#239](https://github.com/openshift/cluster-capi-operator/pull/239)
* [MULTIARCH-5151](https://issues.redhat.com/browse/MULTIARCH-5151), [MULTIARCH-5152](https://issues.redhat.com/browse/MULTIARCH-5152): Generate IBMPowerVSCluster resource for CAPI clusters [#233](https://github.com/openshift/cluster-capi-operator/pull/233)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4e26a69d2740029b37469c5677a5ed0f129eed8f...321712b12b7a71240a49efa83e0bb5a1d6ada3d7)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/7ddcbe3dd3a7b836ec0c882032944dcded78f866)
* [OCPBUGS-54427](https://issues.redhat.com/browse/OCPBUGS-54427): Add rbac leases rbac for cloud-provider on Azure stack hub [#387](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/387)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#380](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/380)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to support secret as well [#385](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/385)
* [OCPBUGS-48481](https://issues.redhat.com/browse/OCPBUGS-48481): annotation validation policy [#379](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/379)
* [OCPCLOUD-2843](https://issues.redhat.com/browse/OCPCLOUD-2843): AWS CCM should be configured with the AWS cloud provider config [#384](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/384)
* [OCPCLOUD-2831](https://issues.redhat.com/browse/OCPCLOUD-2831): Bump k8s 1.32 [#382](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/382)
* [OCPCLOUD-2843](https://issues.redhat.com/browse/OCPCLOUD-2843): Add AWS Cloud Config Transformer to set Shared config for AWS LB health probes [#383](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/383)
* [OCPCLOUD-2844](https://issues.redhat.com/browse/OCPCLOUD-2844): Add role/binding for new Azure AKS lease [#381](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/381)
* [OCPBUGS-44126](https://issues.redhat.com/browse/OCPBUGS-44126): update azure permissions [#376](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/376)
* [OCPBUGS-45439](https://issues.redhat.com/browse/OCPBUGS-45439): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.19 [#377](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/377)
* [OCPBUGS-45439](https://issues.redhat.com/browse/OCPBUGS-45439): Update golangci-lint to v1.62.2 [#378](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/378)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33856906970a98ac05a042a8058902458d623e0f...7ddcbe3dd3a7b836ec0c882032944dcded78f866)
### [cluster-config-api](https://github.com/openshift/api/tree/d22fca85e3b9f77f0cf2b43759a5ff927e605f57)
* Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter [#2297](https://github.com/openshift/api/pull/2297)
* [OCPBUGS-48286](https://issues.redhat.com/browse/OCPBUGS-48286): feature-gates - enable ServiceAccountTokenNodeBinding [#2139](https://github.com/openshift/api/pull/2139)
* [OPRUN-3766](https://issues.redhat.com/browse/OPRUN-3766): Add FeatureFlag for OLMv1 Single/OwnNamespace [#2264](https://github.com/openshift/api/pull/2264)
* [MCO-1518](https://issues.redhat.com/browse/MCO-1518): Create V1 MachineConfigNodes API & deploy V1 MCN CRDs [#2255](https://github.com/openshift/api/pull/2255)
* Fix broken ControlPlaneMachineSet integration tests [#2296](https://github.com/openshift/api/pull/2296)
* [OAPE-148](https://issues.redhat.com/browse/OAPE-148): Promote CPMSMachineNamePrefix feature gate to default feature set [#2254](https://github.com/openshift/api/pull/2254)
* features: remove ShortCertRotation from DevPreviewNoUpgrade [#2270](https://github.com/openshift/api/pull/2270)
* [NE-2017](https://issues.redhat.com/browse/NE-2017): Enable GatewayAPIController featuregate in Default featureset [#2284](https://github.com/openshift/api/pull/2284)
* [OCPCLOUD-2914](https://issues.redhat.com/browse/OCPCLOUD-2914): Add MAPI to CAPI migration to TechPreview [#2279](https://github.com/openshift/api/pull/2279)
* [OCPEDGE-1775](https://issues.redhat.com/browse/OCPEDGE-1775): Enable separation of conflicting enum values, and drop DualReplica to DevPreview [#2283](https://github.com/openshift/api/pull/2283)
* [OAPE-92](https://issues.redhat.com/browse/OAPE-92): Promote RouteExternalCertificate feature gate to default feature set [#2268](https://github.com/openshift/api/pull/2268)
* [CONSOLE-4523](https://issues.redhat.com/browse/CONSOLE-4523): Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API [#2275](https://github.com/openshift/api/pull/2275)
* [MON-4071](https://issues.redhat.com/browse/MON-4071): GA `MetricsCollectionProfiles` [#2286](https://github.com/openshift/api/pull/2286)
* [CNTRLPLANE-332](https://issues.redhat.com/browse/CNTRLPLANE-332): Add uid and extra claim mappings for external OIDC configuration [#2234](https://github.com/openshift/api/pull/2234)
* Promote OnClusterBuild featuregate to default [#2192](https://github.com/openshift/api/pull/2192)
* trt-2080: check devlopment start date for latest release [#2285](https://github.com/openshift/api/pull/2285)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Re-enable GatewayAPI featuregate in Default featureset [#2281](https://github.com/openshift/api/pull/2281)
* [TRT-2081](https://issues.redhat.com/browse/TRT-2081): Revert #2261 "NE-2009: Enable GatewayAPI featuregate in Default featureset" [#2277](https://github.com/openshift/api/pull/2277)
* Temporarily pin feature-gate-analyzer to 4.19 [#2276](https://github.com/openshift/api/pull/2276)
* image/v1/types: improve documentation [#2240](https://github.com/openshift/api/pull/2240)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Enable GatewayAPI featuregate in Default featureset [#2261](https://github.com/openshift/api/pull/2261)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#2232](https://github.com/openshift/api/pull/2232)
* [OPRUN-3780](https://issues.redhat.com/browse/OPRUN-3780): Add feature flag for NewOLMPreflightPermissionCheck [#2242](https://github.com/openshift/api/pull/2242)
* [SPLAT-2079](https://issues.redhat.com/browse/SPLAT-2079): Removed VSphereControlPlaneMachineSet feature gate [#2236](https://github.com/openshift/api/pull/2236)
* [MCO-1630](https://issues.redhat.com/browse/MCO-1630): Generate v1 crds for PIS [#2257](https://github.com/openshift/api/pull/2257)
* IBMCloud: Add IBM Cloud CAPI install TechPreview FG [#2104](https://github.com/openshift/api/pull/2104)
* NO-ISSUE: tools: bump openshift controller-tools to latest commit [#2260](https://github.com/openshift/api/pull/2260)
* NO ISSUE: Tombstone `Spec.PinnedImageSets` in MCN v1alpha1 API [#2256](https://github.com/openshift/api/pull/2256)
* [OCPNODE-2877](https://issues.redhat.com/browse/OCPNODE-2877): Remove support to configure cgroupsv1 in OCP [#2181](https://github.com/openshift/api/pull/2181)
* Ignore partial manifests when running schemacheck [#2251](https://github.com/openshift/api/pull/2251)
* [MCO-1543](https://issues.redhat.com/browse/MCO-1543): Update v1alpha1 MCN API [#2201](https://github.com/openshift/api/pull/2201)
* Migrate DeepCopy and Compatibility gen to Gengo v2 [#1776](https://github.com/openshift/api/pull/1776)
* [CCXDEV-10455](https://issues.redhat.com/browse/CCXDEV-10455): update insightsDataGather to v1alpha2 with GathererConfig [#2195](https://github.com/openshift/api/pull/2195)
* [API-1843](https://issues.redhat.com/browse/API-1843): FeatureGate(d) KMS encryption [#2035](https://github.com/openshift/api/pull/2035)
* [CONSOLE-4448](https://issues.redhat.com/browse/CONSOLE-4448), [OCPBUGS-53412](https://issues.redhat.com/browse/OCPBUGS-53412): Add the ability to specify a second custom logo for PatternFly 6 [#2177](https://github.com/openshift/api/pull/2177)
* [MCO-1521](https://issues.redhat.com/browse/MCO-1521): Promote PinnedImageSet to GA [#2198](https://github.com/openshift/api/pull/2198)
* Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven [#2238](https://github.com/openshift/api/pull/2238)
* Update KAL and remove patch strategy tags [#2241](https://github.com/openshift/api/pull/2241)
* [STOR-2141](https://issues.redhat.com/browse/STOR-2141): add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec [#2190](https://github.com/openshift/api/pull/2190)
* [MCO-1590](https://issues.redhat.com/browse/MCO-1590): Add explicit opt-out & status field for boot image update configuration [#2223](https://github.com/openshift/api/pull/2223)
* [API-1689](https://issues.redhat.com/browse/API-1689): features: add ShortCertRotation [#1977](https://github.com/openshift/api/pull/1977)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Introduce GatewayAPIController feature gate [#2219](https://github.com/openshift/api/pull/2219)
* [CCXDEV-14850](https://issues.redhat.com/browse/CCXDEV-14850): insights add storage spec [#2200](https://github.com/openshift/api/pull/2200)
* Support SEV_SNP and TDX confidential instance type selection on GCP [#2165](https://github.com/openshift/api/pull/2165)
* [OCPBUGS-48641](https://issues.redhat.com/browse/OCPBUGS-48641): config/v1/types_cluster_version: Explain image and version both set [#2158](https://github.com/openshift/api/pull/2158)
* [OCPEDGE-1512](https://issues.redhat.com/browse/OCPEDGE-1512): feat: add dualreplica featuregate [#2196](https://github.com/openshift/api/pull/2196)
* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Add SELinuxMount and SELinuxChangePolicy to DevPreview [#2212](https://github.com/openshift/api/pull/2212)
* Add changes to infrastructure object to contain service endpoints and feature flag added [#2078](https://github.com/openshift/api/pull/2078)
* security: add annotation for validated SCC type [#2211](https://github.com/openshift/api/pull/2211)
* NO-JIRA: Add example of excluding subnets pattern [#2213](https://github.com/openshift/api/pull/2213)
* [OCPNODE-2339](https://issues.redhat.com/browse/OCPNODE-2339): Add PKI field to (cluster)imagepolicy [#2088](https://github.com/openshift/api/pull/2088)
* [OCPBUGS-50587](https://issues.redhat.com/browse/OCPBUGS-50587), [OCPBUGS-51272](https://issues.redhat.com/browse/OCPBUGS-51272): Reject new NodeStatus with revision set [#2208](https://github.com/openshift/api/pull/2208)
* Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error [#2214](https://github.com/openshift/api/pull/2214)
* [OCPBUGS-32158](https://issues.redhat.com/browse/OCPBUGS-32158): Add CEL validation for RegistrySources in Image API [#1859](https://github.com/openshift/api/pull/1859)
* no-jira: correct default CIDR for ipv6 join subnet in API descriptors [#2184](https://github.com/openshift/api/pull/2184)
* featuregate for catalogd metas web api [#2202](https://github.com/openshift/api/pull/2202)
* [CORS-3842](https://issues.redhat.com/browse/CORS-3842): Add API Updates for GCP Custom API Endpoints [#2150](https://github.com/openshift/api/pull/2150)
* NO-JIRA: bump controller-tools dependency to latest downstream commit [#2207](https://github.com/openshift/api/pull/2207)
* [SPLAT-2000](https://issues.redhat.com/browse/SPLAT-2000): Add configuration for vSphere multi disk thinProvisioned [#2154](https://github.com/openshift/api/pull/2154)
* [NE-1871](https://issues.redhat.com/browse/NE-1871): Promote GatewayAPI to Tech Preview [#2081](https://github.com/openshift/api/pull/2081)
* [OCPBUGS-44199](https://issues.redhat.com/browse/OCPBUGS-44199): Allow spaces in AWS tags [#2124](https://github.com/openshift/api/pull/2124)
* [OCPBUGS-48542](https://issues.redhat.com/browse/OCPBUGS-48542): Remove Never option from IPsec Encapsulation [#2199](https://github.com/openshift/api/pull/2199)
* [OCPBUGS-42701](https://issues.redhat.com/browse/OCPBUGS-42701): api: Updated the disableMultiNetwork parameter description [#2143](https://github.com/openshift/api/pull/2143)
* ClusterOperator Conditions should be a listType=map [#2194](https://github.com/openshift/api/pull/2194)
* Add the field "MarketType" to "AwsMachineProviderConfig" [#2172](https://github.com/openshift/api/pull/2172)
* [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Graduate `UserDefinedNetworks` to GA [#1997](https://github.com/openshift/api/pull/1997)
* [OCPBUGS-49779](https://issues.redhat.com/browse/OCPBUGS-49779): Use BASE_REF env var to pull the release version for sippy data [#2187](https://github.com/openshift/api/pull/2187)
* [OCPBUGS-48078](https://issues.redhat.com/browse/OCPBUGS-48078): Add ratcheting tests for PowerVS service endpoints [#2142](https://github.com/openshift/api/pull/2142)
* NO-JIRA: upkeep: update component name for arbiter feature [#2182](https://github.com/openshift/api/pull/2182)
* NO-JIRA: Add envtest archives for K8s 1.32.1 [#2185](https://github.com/openshift/api/pull/2185)
* [OTA-209](https://issues.redhat.com/browse/OTA-209): operator/v1alpha1: Add the `ClusterVersionOperator` to scheme [#2162](https://github.com/openshift/api/pull/2162)
* [OCPBUGS-45689](https://issues.redhat.com/browse/OCPBUGS-45689): Updating ose-cluster-config-api-container image to be consistent with ART for 4.19 [#2118](https://github.com/openshift/api/pull/2118)
* [OCPBUGS-48740](https://issues.redhat.com/browse/OCPBUGS-48740): Remove unnecessary object-src directive [#2176](https://github.com/openshift/api/pull/2176)
* [OSASINFRA-3690](https://issues.redhat.com/browse/OSASINFRA-3690): Fix typo [#2168](https://github.com/openshift/api/pull/2168)
* [OAPE-94](https://issues.redhat.com/browse/OAPE-94): Update API doc for route externalCertificate [#2159](https://github.com/openshift/api/pull/2159)
* Fix race in tests using CRD patches for ratcheting [#2175](https://github.com/openshift/api/pull/2175)
* [OCPBUGS-39148](https://issues.redhat.com/browse/OCPBUGS-39148): Add Feature Gate AND on NetworkLoadBalancer CEL [#2131](https://github.com/openshift/api/pull/2131)
* Drop feature promotion from main verify check [#2174](https://github.com/openshift/api/pull/2174)
* Add separate Make target for feature promotion [#2173](https://github.com/openshift/api/pull/2173)
* Change OCL CRD deployment to v1 from v1alpha1 [#2134](https://github.com/openshift/api/pull/2134)
* [OCPBUGS-48260](https://issues.redhat.com/browse/OCPBUGS-48260): Update dns1123Subdomain validation message for machineNamePrefix [#2147](https://github.com/openshift/api/pull/2147)
* [CNTRLPLANE-2](https://issues.redhat.com/browse/CNTRLPLANE-2): Update kubernetes to 1.32 [#2096](https://github.com/openshift/api/pull/2096)
* Fix handling of validations that require multiple feature gates [#2133](https://github.com/openshift/api/pull/2133)
* Update KAL to introduce statussubresource and maxlength linters [#2160](https://github.com/openshift/api/pull/2160)
* [OCPBUGS-48740](https://issues.redhat.com/browse/OCPBUGS-48740): Add missing CSP directives [#2163](https://github.com/openshift/api/pull/2163)
* [SPLAT-2008](https://issues.redhat.com/browse/SPLAT-2008): Update vSphere multi disk api size limit doc [#2161](https://github.com/openshift/api/pull/2161)
* Monitoring Config should start life as v1alpha1 [#2155](https://github.com/openshift/api/pull/2155)
* [OSASINFRA-3689](https://issues.redhat.com/browse/OSASINFRA-3689): Deprecate unused MAPO fields [#1963](https://github.com/openshift/api/pull/1963)
* Update linter fixing to use golangci-lint [#2141](https://github.com/openshift/api/pull/2141)
* [CNV-47438](https://issues.redhat.com/browse/CNV-47438): ipam, virt: graduate persistent ips feature gate to GA [#2058](https://github.com/openshift/api/pull/2058)
* [SPLAT-1808](https://issues.redhat.com/browse/SPLAT-1808): Add vSphere multi disk support [#2028](https://github.com/openshift/api/pull/2028)
* Add the option to test ratcheting validations within integration tests [#2132](https://github.com/openshift/api/pull/2132)
* [MCO-1443](https://issues.redhat.com/browse/MCO-1443): Promote onclusterbuild to GA [#2090](https://github.com/openshift/api/pull/2090)
* [MON-3902](https://issues.redhat.com/browse/MON-3902): add initial Monitoring CRD api [#1929](https://github.com/openshift/api/pull/1929)
* Add section about why we start APIs as v1alpha1 [#2130](https://github.com/openshift/api/pull/2130)
* Add verify-lint-fix make target [#2126](https://github.com/openshift/api/pull/2126)
* Add path warning for protobuf updates [#2129](https://github.com/openshift/api/pull/2129)
* Update KAL with bug fixes for embedded fields [#2128](https://github.com/openshift/api/pull/2128)
* [OCPBUGS-40906](https://issues.redhat.com/browse/OCPBUGS-40906): Add encapsulation flag to IPsecConfig struct [#1472](https://github.com/openshift/api/pull/1472)
* [OCPBUGS-43745](https://issues.redhat.com/browse/OCPBUGS-43745): Add IdleCloseOnResponse field to IngressControllerSpec [#2102](https://github.com/openshift/api/pull/2102)
* Update KAL to introduce new linters [#2125](https://github.com/openshift/api/pull/2125)
* [OTA-1029](https://issues.redhat.com/browse/OTA-1029): Add ClusterVersionOperator API [#2044](https://github.com/openshift/api/pull/2044)
* [OCPBUGS-46380](https://issues.redhat.com/browse/OCPBUGS-46380): StaticPodOperatorStatus validation should reject downgrades and concurrent node rollouts [#2123](https://github.com/openshift/api/pull/2123)
* alert-relabel list should not be a pointer [#2122](https://github.com/openshift/api/pull/2122)
* [OCPBUGS-35196](https://issues.redhat.com/browse/OCPBUGS-35196): Insights types - fix duration validation [#1918](https://github.com/openshift/api/pull/1918)
* [OCPEDGE-1307](https://issues.redhat.com/browse/OCPEDGE-1307): feat: add HighlyAvailableArbiter control plane topology as feature for techpreview [#2082](https://github.com/openshift/api/pull/2082)
* [API-1843](https://issues.redhat.com/browse/API-1843): KMSEncryptionProvider Feature Gate [#2071](https://github.com/openshift/api/pull/2071)
* ClusterNetworkOperator API: promote the additionalRoutingCapabilities gate [#2087](https://github.com/openshift/api/pull/2087)
* For the love of consistency... Apply linter auto-fixes [#2116](https://github.com/openshift/api/pull/2116)
* Introduce KAL (Kube-API-Linter) to API repo [#2114](https://github.com/openshift/api/pull/2114)
* Revert "OCPBUGS-44693: Disable ResilientWatchCacheInitialization" [#2113](https://github.com/openshift/api/pull/2113)
* [SPLAT-1743](https://issues.redhat.com/browse/SPLAT-1743): vSphere - add host and vm based zonal [#1999](https://github.com/openshift/api/pull/1999)
* [CFE-1167](https://issues.redhat.com/browse/CFE-1167): Feature-gated MachineNamePrefix field for CPMS [#2086](https://github.com/openshift/api/pull/2086)
* [OCPBUGS-44693](https://issues.redhat.com/browse/OCPBUGS-44693): Disable ResilientWatchCacheInitialization [#2111](https://github.com/openshift/api/pull/2111)
* Add example format validation [#2110](https://github.com/openshift/api/pull/2110)
* [SPLAT-1743](https://issues.redhat.com/browse/SPLAT-1743): Add VMGroup to VSphere Provider workspace [#2074](https://github.com/openshift/api/pull/2074)
* Update kubebuilder assets to include format library [#2109](https://github.com/openshift/api/pull/2109)
* [CFE-1168](https://issues.redhat.com/browse/CFE-1168): Add CMPSMachineNamePrefix feature-gate [#2094](https://github.com/openshift/api/pull/2094)
* [STOR-1823](https://issues.redhat.com/browse/STOR-1823): Remove CSIDriverSharedResource feature gate [#2052](https://github.com/openshift/api/pull/2052)
* [Full changelog](https://github.com/openshift/api/compare/d15841be6bdeeb556cac490a084cb3ffb2aee215...d22fca85e3b9f77f0cf2b43759a5ff927e605f57)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/96607b590ba35a8f008073e105e01e72a5bfba2e)
* [OCPEDGE-1833](https://issues.redhat.com/browse/OCPEDGE-1833): feat: bump api dep to pull in change in DualReplica [#439](https://github.com/openshift/cluster-config-operator/pull/439)
* [OCPBUGS-52744](https://issues.redhat.com/browse/OCPBUGS-52744): Bump golang.org/x/crypto [#433](https://github.com/openshift/cluster-config-operator/pull/433)
* [OCPEDGE-1643](https://issues.redhat.com/browse/OCPEDGE-1643): bump: ocp/api ocp/library-go k8s [#431](https://github.com/openshift/cluster-config-operator/pull/431)
* [OCPBUGS-45477](https://issues.redhat.com/browse/OCPBUGS-45477): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.19 [#430](https://github.com/openshift/cluster-config-operator/pull/430)
* [OCPEDGE-1308](https://issues.redhat.com/browse/OCPEDGE-1308): bump(api,k8s) [#428](https://github.com/openshift/cluster-config-operator/pull/428)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/85cb40728227fac13a2983fb6e3170d67cf62075...96607b590ba35a8f008073e105e01e72a5bfba2e)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)
* [OCPBUGS-55017](https://issues.redhat.com/browse/OCPBUGS-55017): Wait for operators to be stable for 2 minutes before accepting cluster is stable [#358](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/358)
* [OAPE-163](https://issues.redhat.com/browse/OAPE-163): Extend E2E tests for MachineNamePrefix when the field is reset [#355](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/355)
* [SPLAT-2079](https://issues.redhat.com/browse/SPLAT-2079): Removed VSphereControlPlaneMachineset feature gate [#354](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/354)
* [OAPE-147](https://issues.redhat.com/browse/OAPE-147): Add E2E tests for MachineNamePrefix with OnDelete update strategy [#353](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/353)
* [OCPBUGS-52224](https://issues.redhat.com/browse/OCPBUGS-52224): Bump to golang.org/x/oauth2@v0.27.0 [#352](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/352)
* [OAPE-126](https://issues.redhat.com/browse/OAPE-126): Include CPMSMachineNamePrefix feature-gate name in e2e tests [#351](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/351)
* [OCPBUGS-50580](https://issues.redhat.com/browse/OCPBUGS-50580): Fix MachineNamePrefix periodic on OpenStack [#349](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/349)
* [OCPCLOUD-2834](https://issues.redhat.com/browse/OCPCLOUD-2834): Update dependencies to K8s 1.32 [#345](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/345)
* [SPLAT-1817](https://issues.redhat.com/browse/SPLAT-1817): Bump openshift/api to get vSphere multi disk support [#335](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/335)
* [SPLAT-1799](https://issues.redhat.com/browse/SPLAT-1799): Add support for vSphere host and vm group based zonal [#325](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/325)
* NO-JIRA: Update support matrix [#339](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/339)
* [OAPE-78](https://issues.redhat.com/browse/OAPE-78): Add e2e periodic job for machine name prefix [#338](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/338)
* [OAPE-19](https://issues.redhat.com/browse/OAPE-19): Support customized control plane machine names with prefix [#332](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/332)
* [OCPBUGS-45449](https://issues.redhat.com/browse/OCPBUGS-45449): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.19 [#334](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/334)
* [OAPE-18](https://issues.redhat.com/browse/OAPE-18): Bump openshift/api to vendor machineNamePrefix field [#333](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/333)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/d17bf3a1b14e5bc6a8dff6569bfb02d523320990...1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/cf99de974354133f853928cff9e19ad19c5347d9)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#229](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/229)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#235](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/235)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#234](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/234)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook references [#231](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/231)
* [OCPBUGS-24588](https://issues.redhat.com/browse/OCPBUGS-24588): bump library-go [#233](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/233)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#228](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/228)
* [OCPBUGS-45073](https://issues.redhat.com/browse/OCPBUGS-45073): Support HCP labels [#223](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/223)
* [STOR-2136](https://issues.redhat.com/browse/STOR-2136): Enable volume groupsnapshots APIs v1beta1 version [#219](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/219)
* [OCPBUGS-45471](https://issues.redhat.com/browse/OCPBUGS-45471): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.19 [#220](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/220)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/46902b494ed0a608a48d2a04faf6e4ed2f9a6a5b...cf99de974354133f853928cff9e19ad19c5347d9)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/659813065170f4e52f80b7a29bbab64bfa9aa172)
* [OCPBUGS-51193](https://issues.redhat.com/browse/OCPBUGS-51193): Add runbook_url for CoreDNSErrorsHigh [#426](https://github.com/openshift/cluster-dns-operator/pull/426)
* [OCPBUGS-45558](https://issues.redhat.com/browse/OCPBUGS-45558): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.19 [#425](https://github.com/openshift/cluster-dns-operator/pull/425)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...659813065170f4e52f80b7a29bbab64bfa9aa172)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/fdefa0ae9d888d5a76d23508de8e1a58a1872d54)
* [OCPBUGS-56109](https://issues.redhat.com/browse/OCPBUGS-56109): adjust alerts according to platform [#1423](https://github.com/openshift/cluster-etcd-operator/pull/1423)
* [OCPBUGS-55691](https://issues.redhat.com/browse/OCPBUGS-55691): Remove 'meta' keyword from pcs resource create command [#1420](https://github.com/openshift/cluster-etcd-operator/pull/1420)
* [OCPEDGE-1773](https://issues.redhat.com/browse/OCPEDGE-1773): Fix arbiter field in install-config [#1409](https://github.com/openshift/cluster-etcd-operator/pull/1409)
* [OCPBUGS-53512](https://issues.redhat.com/browse/OCPBUGS-53512): fix CVE-2025-30204 [#1412](https://github.com/openshift/cluster-etcd-operator/pull/1412)
* [OCPBUGS-54222](https://issues.redhat.com/browse/OCPBUGS-54222): increase etcdGRPCRequestsSlow duration [#1402](https://github.com/openshift/cluster-etcd-operator/pull/1402)
* [OCPEDGE-1498](https://issues.redhat.com/browse/OCPEDGE-1498): support updates to external etcd [#1399](https://github.com/openshift/cluster-etcd-operator/pull/1399)
* [OCPEDGE-1500](https://issues.redhat.com/browse/OCPEDGE-1500): Added scaling strategies for TNF [#1396](https://github.com/openshift/cluster-etcd-operator/pull/1396)
* [OCPBUGS-48523](https://issues.redhat.com/browse/OCPBUGS-48523): Bump to Kubernetes 1.32 and latest library-go. [#1392](https://github.com/openshift/cluster-etcd-operator/pull/1392)
* [OCPBUGS-48400](https://issues.redhat.com/browse/OCPBUGS-48400): generate event upon successfull bootstrap member removal [#1391](https://github.com/openshift/cluster-etcd-operator/pull/1391)
* NO-JIRA: fix schedule backup test [#1393](https://github.com/openshift/cluster-etcd-operator/pull/1393)
* [OCPBUGS-48523](https://issues.redhat.com/browse/OCPBUGS-48523): Bump library-go for static pod controller apply migration fixes. [#1387](https://github.com/openshift/cluster-etcd-operator/pull/1387)
* [OCPEDGE-1195](https://issues.redhat.com/browse/OCPEDGE-1195): Arbiter node support [#1366](https://github.com/openshift/cluster-etcd-operator/pull/1366)
* [OCPEDGE-1435](https://issues.redhat.com/browse/OCPEDGE-1435): bump(library-go,ocp/api,ocp/client-go) [#1378](https://github.com/openshift/cluster-etcd-operator/pull/1378)
* [OCPBUGS-42809](https://issues.redhat.com/browse/OCPBUGS-42809): always ensure quorum during bootstrap [#1372](https://github.com/openshift/cluster-etcd-operator/pull/1372)
* [ETCD-677](https://issues.redhat.com/browse/ETCD-677): add unsupported config override for etcd container removal [#1352](https://github.com/openshift/cluster-etcd-operator/pull/1352)
* [OCPBUGS-43748](https://issues.redhat.com/browse/OCPBUGS-43748): etcd pod containers do not start when tls min version is 1.3 [#1364](https://github.com/openshift/cluster-etcd-operator/pull/1364)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b9f78653cf1435be9f4e208813f0e2e8c3ca54a6...fdefa0ae9d888d5a76d23508de8e1a58a1872d54)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/85ac017f7c393b18696bf77a6e6415d05418dd0b)
* [OSASINFRA-3747](https://issues.redhat.com/browse/OSASINFRA-3747): Prefer CA cert from credentials secret [#1190](https://github.com/openshift/cluster-image-registry-operator/pull/1190)
* [OCPBUGS-45409](https://issues.redhat.com/browse/OCPBUGS-45409): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 [#1196](https://github.com/openshift/cluster-image-registry-operator/pull/1196)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Authenticate to Azure only once in CPO [#1194](https://github.com/openshift/cluster-image-registry-operator/pull/1194)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Bump msi-dataplane dependency [#1187](https://github.com/openshift/cluster-image-registry-operator/pull/1187)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication [#1186](https://github.com/openshift/cluster-image-registry-operator/pull/1186)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cluster-image-registry [#1174](https://github.com/openshift/cluster-image-registry-operator/pull/1174)
* NO-JIRA: update owners [#1178](https://github.com/openshift/cluster-image-registry-operator/pull/1178)
* [OCPBUGS-50950](https://issues.redhat.com/browse/OCPBUGS-50950): ensure that storage names don't end in dashes [#1177](https://github.com/openshift/cluster-image-registry-operator/pull/1177)
* [OCPBUGS-47503](https://issues.redhat.com/browse/OCPBUGS-47503): Power VS: Revert #1076 to match new API validation [#1168](https://github.com/openshift/cluster-image-registry-operator/pull/1168)
* [MULTIARCH-4971](https://issues.redhat.com/browse/MULTIARCH-4971): Set import mode in image config based on ClusterVersion desired Architecture [#1164](https://github.com/openshift/cluster-image-registry-operator/pull/1164)
* [OCPBUGS-44491](https://issues.redhat.com/browse/OCPBUGS-44491): add runbook url on prometheus alert rules [#1159](https://github.com/openshift/cluster-image-registry-operator/pull/1159)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): operator/status: clear azure path fix job conditions on operator removal [#1142](https://github.com/openshift/cluster-image-registry-operator/pull/1142)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00882ba691a356151e29a9052ab0f82c24a7f9fb...85ac017f7c393b18696bf77a6e6415d05418dd0b)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6d54169d4c6643ae9b6ff81b3a21b929934062fa)
* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Check capabilities before watching OLM resource [#1233](https://github.com/openshift/cluster-ingress-operator/pull/1233)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication for Ingress Operator [#1222](https://github.com/openshift/cluster-ingress-operator/pull/1222)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cluster-ingress [#1191](https://github.com/openshift/cluster-ingress-operator/pull/1191)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Relax pod bound validating admission rule for HyperShift [#1221](https://github.com/openshift/cluster-ingress-operator/pull/1221)
* [NE-1969](https://issues.redhat.com/browse/NE-1969): Set Degraded=True if unmanaged Gateway API CRDs exist [#1205](https://github.com/openshift/cluster-ingress-operator/pull/1205)
* [NE-1957](https://issues.redhat.com/browse/NE-1957): Add Gateway API DNS Feature e2e tests [#1213](https://github.com/openshift/cluster-ingress-operator/pull/1213)
* [OCPBUGS-54650](https://issues.redhat.com/browse/OCPBUGS-54650), [OCPBUGS-54651](https://issues.redhat.com/browse/OCPBUGS-54651), [OCPBUGS-54652](https://issues.redhat.com/browse/OCPBUGS-54652): desiredSubscription: Specify annotations and SCC [#1214](https://github.com/openshift/cluster-ingress-operator/pull/1214)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Move VAP to Default featureset [#1216](https://github.com/openshift/cluster-ingress-operator/pull/1216)
* [OCPBUGS-54568](https://issues.redhat.com/browse/OCPBUGS-54568): desiredIstio: Specify priorityClassName [#1211](https://github.com/openshift/cluster-ingress-operator/pull/1211)
* [OCPBUGS-53424](https://issues.redhat.com/browse/OCPBUGS-53424): Wait for install plans to enter the "Requires Approval" phase before approving them [#1203](https://github.com/openshift/cluster-ingress-operator/pull/1203)
* [NE-2008](https://issues.redhat.com/browse/NE-2008): Add GRPC conformance tests [#1208](https://github.com/openshift/cluster-ingress-operator/pull/1208)
* [NE-1277](https://issues.redhat.com/browse/NE-1277): status: Add Gateway API objects to relatedObjects [#933](https://github.com/openshift/cluster-ingress-operator/pull/933)
* [NE-1994](https://issues.redhat.com/browse/NE-1994): Add E2E test for Istio manual deployment [#1204](https://github.com/openshift/cluster-ingress-operator/pull/1204)
* [NE-1969](https://issues.redhat.com/browse/NE-1969): Add "v1" version to OpenShift GatewayClass controller name [#1202](https://github.com/openshift/cluster-ingress-operator/pull/1202)
* [NE-1934](https://issues.redhat.com/browse/NE-1934): Bump to OSSM 3.0 for Gateway API support [#1152](https://github.com/openshift/cluster-ingress-operator/pull/1152)
* [CORS-3907](https://issues.redhat.com/browse/CORS-3907): Update ingress operator to with custom endpoints [#1197](https://github.com/openshift/cluster-ingress-operator/pull/1197)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add experimental Gateway API group to Validating Admission Policy [#1200](https://github.com/openshift/cluster-ingress-operator/pull/1200)
* [NE-1907](https://issues.redhat.com/browse/NE-1907): Manage OSSM operator subscription manually to ensure a compatible version is installed [#1112](https://github.com/openshift/cluster-ingress-operator/pull/1112)
* [NE-1981](https://issues.redhat.com/browse/NE-1981): Move controller test helpers to dedicated package [#1199](https://github.com/openshift/cluster-ingress-operator/pull/1199)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add Validating Admission Policy for Gateway API CRDs [#1192](https://github.com/openshift/cluster-ingress-operator/pull/1192)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Implement GatewayAPIController feature gate [#1198](https://github.com/openshift/cluster-ingress-operator/pull/1198)
* [NE-1936](https://issues.redhat.com/browse/NE-1936): Bump k8s.io dependencies to v0.32.1 [#1184](https://github.com/openshift/cluster-ingress-operator/pull/1184)
* [OCPBUGS-31550](https://issues.redhat.com/browse/OCPBUGS-31550): Gateway API - recreating SMCP which breaks Gateway API [#1115](https://github.com/openshift/cluster-ingress-operator/pull/1115)
* [OCPBUGS-32776](https://issues.redhat.com/browse/OCPBUGS-32776): Fix IBM Public Cloud DNS Provider Update Logic [#1133](https://github.com/openshift/cluster-ingress-operator/pull/1133)
* [OCPBUGS-48780](https://issues.redhat.com/browse/OCPBUGS-48780): Fix IBMCloud DNS Propagation Issues in E2E [#1164](https://github.com/openshift/cluster-ingress-operator/pull/1164)
* [OCPBUGS-43745](https://issues.redhat.com/browse/OCPBUGS-43745): Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled [#1186](https://github.com/openshift/cluster-ingress-operator/pull/1186)
* [NE-1260](https://issues.redhat.com/browse/NE-1260): Add Makefile target to run Gateway API conformance tests [#1176](https://github.com/openshift/cluster-ingress-operator/pull/1176)
* [OCPBUGS-43745](https://issues.redhat.com/browse/OCPBUGS-43745): Add support for IdleCloseTerminationPolicy (Go http.Client) [#1182](https://github.com/openshift/cluster-ingress-operator/pull/1182)
* [OCPBUGS-45585](https://issues.redhat.com/browse/OCPBUGS-45585): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 [#1173](https://github.com/openshift/cluster-ingress-operator/pull/1173)
* [OCPBUGS-41892](https://issues.redhat.com/browse/OCPBUGS-41892): Single Watch on GWAPI CRD [#1165](https://github.com/openshift/cluster-ingress-operator/pull/1165)
* [NE-1790](https://issues.redhat.com/browse/NE-1790): Follow up to enable Dynamic Configuration Manager feature gate [#1174](https://github.com/openshift/cluster-ingress-operator/pull/1174)
* [SPLAT-1722](https://issues.redhat.com/browse/SPLAT-1722): Remove alibaba [#1111](https://github.com/openshift/cluster-ingress-operator/pull/1111)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...6d54169d4c6643ae9b6ff81b3a21b929934062fa)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/34bd8a7860802d310b4b0c124dc7975b6fa52773)
* [OCPBUGS-56160](https://issues.redhat.com/browse/OCPBUGS-56160): Change validity / refresh for some certs which should not be affected by dev cycle rotation change [#1841](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1841)
* [OCPBUGS-56266](https://issues.redhat.com/browse/OCPBUGS-56266): SCC: add hostmount-anyuid-v2 [#1844](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1844)
* [OCPBUGS-55709](https://issues.redhat.com/browse/OCPBUGS-55709): bump library-go to bring in updated audit policies [#1840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1840)
* [OCPBUGS-45911](https://issues.redhat.com/browse/OCPBUGS-45911): revert dev cert rotation [#1835](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1835)
* Revert "OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects" [#1830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1830)
* [OCPBUGS-43777](https://issues.redhat.com/browse/OCPBUGS-43777): certrotationcontroller: run tests which runs deployment and creates projects [#1759](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1759)
* [CNTRLPLANE-347](https://issues.redhat.com/browse/CNTRLPLANE-347): Issue short lived certificates if ShortCertRotation featuregate is enabled [#1823](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1823)
* [MON-4161](https://issues.redhat.com/browse/MON-4161): add `cluster:controlplane_topology:sum` recording rule [#1829](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1829)
* [MON-4160](https://issues.redhat.com/browse/MON-4160): operator: add topology metrics [#1827](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1827)
* [OCPBUGS-35102](https://issues.redhat.com/browse/OCPBUGS-35102): Bump library-go [#1824](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1824)
* NO-JIRA: readme: describe mapping between operatorLogLevel and log level [#1820](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1820)
* [AUTH-541](https://issues.redhat.com/browse/AUTH-541): OIDC structured auth config [#1760](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1760)
* [OCPNODE-2940](https://issues.redhat.com/browse/OCPNODE-2940): add support for minimumKubeletVersion [#1754](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1754)
* [MON-4129](https://issues.redhat.com/browse/MON-4129): slos: accomodate for Prometheus v3 "le" normalization [#1815](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1815)
* [MON-4129](https://issues.redhat.com/browse/MON-4129): revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 [#1817](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1817)
* NO-ISSUE: Bump TraceAll log level to v=10 [#1814](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1814)
* [OCPBUGS-48673](https://issues.redhat.com/browse/OCPBUGS-48673): targetconfigcontroller: check live etcd endpoints [#1792](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1792)
* [API-1689](https://issues.redhat.com/browse/API-1689): TLS registry: add description [#1763](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1763)
* [OCPBUGS-49980](https://issues.redhat.com/browse/OCPBUGS-49980): change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h [#1804](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1804)
* [OCPBUGS-49763](https://issues.redhat.com/browse/OCPBUGS-49763): Disregard health endpoints in the burn rate alerts [#1742](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1742)
* [OCPQE-28167](https://issues.redhat.com/browse/OCPQE-28167): Increase waitForFallbackDegradedConditionTimeout [#1789](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1789)
* [OCPBUGS-49764](https://issues.redhat.com/browse/OCPBUGS-49764): bindata/alerts/slo: improve burnrate calculation [#1744](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1744)
* [OCPBUGS-48686](https://issues.redhat.com/browse/OCPBUGS-48686): bump(library-go) [#1795](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1795)
* [MON-4129](https://issues.redhat.com/browse/MON-4129): adjust Prometheus classic histograms 'le' related selectors in rules defs and relabel config to accommodate the update to Prometheus v3 [#1784](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784)
* NO-JIRA: alerts: update APIRemovedInNextEUSReleaseInUse for 1.32 [#1794](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1794)
* [CNTRLPLANE-20](https://issues.redhat.com/browse/CNTRLPLANE-20): Update to Kubernetes 1.32.1 [#1791](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1791)
* [OCPBUGS-45654](https://issues.redhat.com/browse/OCPBUGS-45654): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.19 [#1786](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1786)
* [OCPBUGS-48686](https://issues.redhat.com/browse/OCPBUGS-48686): Bump library-go for static pod controller apply fixes. [#1787](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1787)
* NO-JIRA: bump library-go [#1779](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1779)
* [OCPBUGS-45943](https://issues.redhat.com/browse/OCPBUGS-45943): skip generating certs when networkConfig.status.ServiceNetwork is nil [#1776](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1776)
* [CNTRLPLANE-1](https://issues.redhat.com/browse/CNTRLPLANE-1): Add resource.k8s.io/v1beta1 API for Kubernetes 1.32 [#1777](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1777)
* NO-JIRA: Revert Disable ResilientWatchCacheInitialization [#1771](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1771)
* [OCPBUGS-44693](https://issues.redhat.com/browse/OCPBUGS-44693): Disable ResilientWatchCacheInitialization [#1769](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1769)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4babb3f18c19d2bef584a8389f34b8428cf52b9c...34bd8a7860802d310b4b0c124dc7975b6fa52773)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/3ec30377ffff951dc9c0fc2257d290e4b4958465)
* [OCPBUGS-45390](https://issues.redhat.com/browse/OCPBUGS-45390): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 [#56](https://github.com/openshift/cluster-api-operator/pull/56)
* [ACM-14968](https://issues.redhat.com/browse/ACM-14968): Modified readme for cert-manager changes. [#55](https://github.com/openshift/cluster-api-operator/pull/55)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd...3ec30377ffff951dc9c0fc2257d290e4b4958465)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/cec410b7f877a6eef57968889a644b848bdb540a)
* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#838](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/838)
* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Run SELinux warning controller [#834](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/834)
* NO-JIRA: readme: describe mapping between operatorLogLevel and log level [#835](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/835)
* NO-JIRA: readme: describe mapping between logLevel and log level [#833](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/833)
* NO-ISSUE: Bump TraceAll log level to v=10 [#828](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/828)
* [OCPBUGS-48701](https://issues.redhat.com/browse/OCPBUGS-48701): Bump to latest library-go [#831](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/831)
* [CNTRLPLANE-21](https://issues.redhat.com/browse/CNTRLPLANE-21): Update to Kubernetes 1.32.1 [#830](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/830)
* [OCPBUGS-48701](https://issues.redhat.com/browse/OCPBUGS-48701): Bump library-go for static pod controller apply fixes. [#829](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/829)
* [OCPBUGS-45825](https://issues.redhat.com/browse/OCPBUGS-45825): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.19 ++ [#826](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/826)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ce2c021f23f5d178da6ea35d98a229137e5a81c4...cec410b7f877a6eef57968889a644b848bdb540a)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/8740a60de76690a17d5081db078eb93dfdb7a066)
* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#560](https://github.com/openshift/cluster-kube-scheduler-operator/pull/560)
* [OCPBUGS-48700](https://issues.redhat.com/browse/OCPBUGS-48700): Bump to latest library-go [#558](https://github.com/openshift/cluster-kube-scheduler-operator/pull/558)
* [CNTRLPLANE-22](https://issues.redhat.com/browse/CNTRLPLANE-22): Update to Kubernetes 1.32.1 [#557](https://github.com/openshift/cluster-kube-scheduler-operator/pull/557)
* [OCPBUGS-48700](https://issues.redhat.com/browse/OCPBUGS-48700): Bump library-go for static pod controller apply fixes. [#556](https://github.com/openshift/cluster-kube-scheduler-operator/pull/556)
* [OCPBUGS-45724](https://issues.redhat.com/browse/OCPBUGS-45724): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.19 [#554](https://github.com/openshift/cluster-kube-scheduler-operator/pull/554)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e4c772cd344e538342a4e1cd91635b387e1c18ba...8740a60de76690a17d5081db078eb93dfdb7a066)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/4e51404906f0648304e81414e0d299c52214f7a8)
* [OCPBUGS-45640](https://issues.redhat.com/browse/OCPBUGS-45640): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 [#122](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/122)
* [API-1835](https://issues.redhat.com/browse/API-1835): bump library-go [#120](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/120)
* [OCPBUGS-20062](https://issues.redhat.com/browse/OCPBUGS-20062): "gracefully" shutdown KSVM pod. [#118](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/118)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/59ba356f50ea3128905ffdb7137f868aa0588bab...4e51404906f0648304e81414e0d299c52214f7a8)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404)
* [OCPCLOUD-2832](https://issues.redhat.com/browse/OCPCLOUD-2832): Bump k8s 1.32 [#268](https://github.com/openshift/cluster-machine-approver/pull/268)
* [OCPBUGS-48056](https://issues.redhat.com/browse/OCPBUGS-48056): Fix race condition in CO status controller test [#264](https://github.com/openshift/cluster-machine-approver/pull/264)
* [OCPCLOUD-2787](https://issues.redhat.com/browse/OCPCLOUD-2787): Deploy CAPI manifests in CustomNoUpgrade [#262](https://github.com/openshift/cluster-machine-approver/pull/262)
* [OCPBUGS-36404](https://issues.redhat.com/browse/OCPBUGS-36404): Filter CSRs by signerName [#243](https://github.com/openshift/cluster-machine-approver/pull/243)
* [OCPBUGS-45434](https://issues.redhat.com/browse/OCPBUGS-45434): Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.19 [#247](https://github.com/openshift/cluster-machine-approver/pull/247)
* [OCPBUGS-45306](https://issues.redhat.com/browse/OCPBUGS-45306): Ensure trailing dots on DNS names do not block serving cert auth [#253](https://github.com/openshift/cluster-machine-approver/pull/253)
* [OCPBUGS-45306](https://issues.redhat.com/browse/OCPBUGS-45306): Client internal DNS checks should ignore trailing dot [#248](https://github.com/openshift/cluster-machine-approver/pull/248)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/01d5fbbe0bb798db32e5168dde46e6ed0c873b36...a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e4a04ee55a933a45a3b9b8e65ab994223c71196b)
* [OCPBUGS-55737](https://issues.redhat.com/browse/OCPBUGS-55737): [release-4.19] MON-4200: disable --auto-gomemlimit for Prometheus on SNO until we can ensure it won't result in excessive CPU usage [#2597](https://github.com/openshift/cluster-monitoring-operator/pull/2597)
* NO-JIRA: Synchronize versions of the downstream components [#2594](https://github.com/openshift/cluster-monitoring-operator/pull/2594)
* [MON-4207](https://issues.redhat.com/browse/MON-4207): Bump prometheus-operator to v0.81.0 [#2593](https://github.com/openshift/cluster-monitoring-operator/pull/2593)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2589](https://github.com/openshift/cluster-monitoring-operator/pull/2589)
* [MON-4161](https://issues.redhat.com/browse/MON-4161): add topology telemetry signals [#2588](https://github.com/openshift/cluster-monitoring-operator/pull/2588)
* [MON-4126](https://issues.redhat.com/browse/MON-4126): set fallbackScrapeProtocol: 'PrometheusText1.0.0' as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available [#2590](https://github.com/openshift/cluster-monitoring-operator/pull/2590)
* [MON-4150](https://issues.redhat.com/browse/MON-4150): chore: update prometheus-operator go dep [#2586](https://github.com/openshift/cluster-monitoring-operator/pull/2586)
* [OCPBUGS-54516](https://issues.redhat.com/browse/OCPBUGS-54516): provide context-rich and case-sensitive config validation [#2584](https://github.com/openshift/cluster-monitoring-operator/pull/2584)
* [MON-4149](https://issues.redhat.com/browse/MON-4149): chore: update library-go [#2587](https://github.com/openshift/cluster-monitoring-operator/pull/2587)
* [OCPBUGS-54223](https://issues.redhat.com/browse/OCPBUGS-54223): Fix opentelemetry processor/receiver/exporter/extensions labels [#2583](https://github.com/openshift/cluster-monitoring-operator/pull/2583)
* [MON-4188](https://issues.redhat.com/browse/MON-4188): Add docs for proxy_url alertmanager [#2582](https://github.com/openshift/cluster-monitoring-operator/pull/2582)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2577](https://github.com/openshift/cluster-monitoring-operator/pull/2577)
* [MON-4189](https://issues.redhat.com/browse/MON-4189): Updating node-exporter accelerators configmap [#2558](https://github.com/openshift/cluster-monitoring-operator/pull/2558)
* [MON-4043](https://issues.redhat.com/browse/MON-4043): Configuring external Alertmangers with proxy_url [#2580](https://github.com/openshift/cluster-monitoring-operator/pull/2580)
* [MON-4136](https://issues.redhat.com/browse/MON-4136): set up the PrometheusPossibleNarrowSelectors alert [#2554](https://github.com/openshift/cluster-monitoring-operator/pull/2554)
* [MON-3960](https://issues.redhat.com/browse/MON-3960): test: enable back TestTLSSecurityProfileConfiguration and m… [#2545](https://github.com/openshift/cluster-monitoring-operator/pull/2545)
* NO-JIRA: chore: versions: kubeRbacProxy's primary branch isn't main yet [#2574](https://github.com/openshift/cluster-monitoring-operator/pull/2574)
* [OU-515](https://issues.redhat.com/browse/OU-515): remove old nginx configmap deletion [#2575](https://github.com/openshift/cluster-monitoring-operator/pull/2575)
* NO-JIRA: Bump prometheus-operator to 0.80.1 [#2572](https://github.com/openshift/cluster-monitoring-operator/pull/2572)
* [MON-4147](https://issues.redhat.com/browse/MON-4147): test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX [#2567](https://github.com/openshift/cluster-monitoring-operator/pull/2567)
* [OCPBUGS-50837](https://issues.redhat.com/browse/OCPBUGS-50837): Fix opentelemetry metrics to use regexp on label match [#2568](https://github.com/openshift/cluster-monitoring-operator/pull/2568)
* [OCPBUGS-50703](https://issues.redhat.com/browse/OCPBUGS-50703): Add incidents metric to telemetry [#2569](https://github.com/openshift/cluster-monitoring-operator/pull/2569)
* NO-JIRA: Bump prometheus-operator to v0.80.0 [#2565](https://github.com/openshift/cluster-monitoring-operator/pull/2565)
* [MON-3866](https://issues.redhat.com/browse/MON-3866): create separate metrics client cert for metrics server [#2536](https://github.com/openshift/cluster-monitoring-operator/pull/2536)
* NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs [#2563](https://github.com/openshift/cluster-monitoring-operator/pull/2563)
* [OCPBUGS-48381](https://issues.redhat.com/browse/OCPBUGS-48381): jsonnet: switch telemeter to main [#2560](https://github.com/openshift/cluster-monitoring-operator/pull/2560)
* [OCPBUGS-48376](https://issues.redhat.com/browse/OCPBUGS-48376): jsonnet: switch openshift-state-metrics to main branch [#2559](https://github.com/openshift/cluster-monitoring-operator/pull/2559)
* [OCPBUGS-48370](https://issues.redhat.com/browse/OCPBUGS-48370): chore: rename default branch in various places [#2561](https://github.com/openshift/cluster-monitoring-operator/pull/2561)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2531](https://github.com/openshift/cluster-monitoring-operator/pull/2531)
* [OCPBUGS-48074](https://issues.redhat.com/browse/OCPBUGS-48074): Fixing telemetry rule for accelerators [#2551](https://github.com/openshift/cluster-monitoring-operator/pull/2551)
* [MON-4107](https://issues.redhat.com/browse/MON-4107): chore: add logs (at v=3 level) regarding the deactivation of components [#2546](https://github.com/openshift/cluster-monitoring-operator/pull/2546)
* [OCPBUGS-31356](https://issues.redhat.com/browse/OCPBUGS-31356): chore(client): DeleteXXX short-circuit if the resource doesn't exist as a GET is less expensive than a no-op DELETE [#2547](https://github.com/openshift/cluster-monitoring-operator/pull/2547)
* [MON-4118](https://issues.redhat.com/browse/MON-4118): chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 [#2544](https://github.com/openshift/cluster-monitoring-operator/pull/2544)
* NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… [#2543](https://github.com/openshift/cluster-monitoring-operator/pull/2543)
* NO-JIRA: Bump prometheus-operator to 0.79.2 [#2542](https://github.com/openshift/cluster-monitoring-operator/pull/2542)
* [MGMT-19498](https://issues.redhat.com/browse/MGMT-19498): Fixing the configmap data fields [#2540](https://github.com/openshift/cluster-monitoring-operator/pull/2540)
* NO-JIRA: Bump prometheus-operator to v0.79.1 [#2538](https://github.com/openshift/cluster-monitoring-operator/pull/2538)
* [MGMT-19498](https://issues.redhat.com/browse/MGMT-19498): Adding accelerators configuration file to the node-exporter [#2530](https://github.com/openshift/cluster-monitoring-operator/pull/2530)
* [OCPBUGS-35095](https://issues.redhat.com/browse/OCPBUGS-35095): unpin `kubernetes-mixin` [#2422](https://github.com/openshift/cluster-monitoring-operator/pull/2422)
* [OCPBUGS-45389](https://issues.redhat.com/browse/OCPBUGS-45389): update image to be consistent with ART for 4.19 [#2533](https://github.com/openshift/cluster-monitoring-operator/pull/2533)
* [OCPBUGS-35726](https://issues.redhat.com/browse/OCPBUGS-35726): remove certificate hash annotation for monitoring-plugin [#2524](https://github.com/openshift/cluster-monitoring-operator/pull/2524)
* [OCPBUGS-45179](https://issues.redhat.com/browse/OCPBUGS-45179): Use explicit name label for logging telemetry metrics [#2529](https://github.com/openshift/cluster-monitoring-operator/pull/2529)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2527](https://github.com/openshift/cluster-monitoring-operator/pull/2527)
* [OCPBUGS-44831](https://issues.redhat.com/browse/OCPBUGS-44831): disable token automount for alertmanager-user-workload SA [#2522](https://github.com/openshift/cluster-monitoring-operator/pull/2522)
* NO-JIRA: use scrape class to avoid TLS config repetitions [#2492](https://github.com/openshift/cluster-monitoring-operator/pull/2492)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...e4a04ee55a933a45a3b9b8e65ab994223c71196b)