# 4.21.0-okd-scos.ec.8
Created: 2025-11-17 05:00:38 +0000 UTC
Image Digest: `sha256:d034ced1e7977cac3e7943cfb59dd06268d93c30bd6eca9fa51093bf793c44f3`
Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-11-16-185150
## Changes from 4.20.0-okd-scos.8
### Components
* Kubectl upgraded from 1.33.3 to 1.34.1
* Kubernetes upgraded from 1.33.5 to 1.34.1
* Kubernetes Tests upgraded from 1.33.4 to 1.34.1
* CentOS Stream CoreOS upgraded from 10.0.20251023-0 to 10.0.20251113-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| IngressControllerLBSubnetsAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| InsightsConfigAPI
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NodeSwap
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| SetEIPForNLBIngressController
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| GCPClusterHostedDNSInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ManagedBootImagesAzure
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ManagedBootImagesvSphere
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| PreconfiguredUDNAddresses
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VolumeAttributesClass
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDC
(0 tests)| Enabled| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NewOLMWebhookProviderOpenshiftServiceCA
(0 tests)| Disabled| Enabled
(Changed)| Disabled| Enabled| Disabled| Enabled |
| BootImageSkewEnforcement
(0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| IngressControllerDynamicConfigurationManager
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| VSphereMixedNodeEnv
(0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| AWSDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| AzureDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| CBORServingAndStorage
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| CRDCompatibilityRequirementOperator
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClientsAllowCBOR
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClientsPreferCBOR
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagement
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementVSphere
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
| EventTTL
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ManagedBootImagesCPMS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MutableCSINodeAllocatableCount
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| OSStreams
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### Removed images
* ovirt-csi-driver
* ovirt-csi-driver-operator
### Rebuilt images without code change
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:56649b95f02d1307a6594cb5dc621da438e5456a659c96e8de68f29737ee6ee8`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:521e205e561c8e571f81f9a459f7237f1f1804792544175693069aac9979329c`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:f0e47a2ef77b276ce138e4beadd3526676d8d2326faacf2fb29bc5231a95bd75`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:61a2432b5bb9142345ca1875e00945b3dc286377f1161e152c8c6d022a0762e0`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/db8943a16f67b5718ad3a7b4128b8a510c0d562a)
* NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18 [#8387](https://github.com/openshift/assisted-service/pull/8387)
* [ACM-25423](https://issues.redhat.com/browse/ACM-25423): CVE-2024-45339 Bump github.com/golang/glog to v1.2.4 using replace directive (api module) [#8372](https://github.com/openshift/assisted-service/pull/8372)
* NO-ISSUE: Remove unused ISO_CACHE_DIR variable [#8361](https://github.com/openshift/assisted-service/pull/8361)
* [MGMT-22154](https://issues.redhat.com/browse/MGMT-22154): enable 400 status code in V2UploadLogs endpoint [#8355](https://github.com/openshift/assisted-service/pull/8355)
* [MGMT-22081](https://issues.redhat.com/browse/MGMT-22081): Add proxy, NTP, network config, and rendezvous IP to OVE [#8144](https://github.com/openshift/assisted-service/pull/8144)
* NO-ISSUE: [master] Bump OCP versions: 4.16 [#8354](https://github.com/openshift/assisted-service/pull/8354)
* [MGMT-19212](https://issues.redhat.com/browse/MGMT-19212): Update PreprovisioningImage status when InfraEnv not found [#8264](https://github.com/openshift/assisted-service/pull/8264)
* [MGMT-21604](https://issues.redhat.com/browse/MGMT-21604): Remove OCP 4.15 support from assisted-service [#8248](https://github.com/openshift/assisted-service/pull/8248)
* [MGMT-22184](https://issues.redhat.com/browse/MGMT-22184): Sanitize HTTP request logging to exclude authorization headers [#8293](https://github.com/openshift/assisted-service/pull/8293)
* NO-ISSUE: [master] Bump OCP versions: 4.20 [#8288](https://github.com/openshift/assisted-service/pull/8288)
* [MGMT-22052](https://issues.redhat.com/browse/MGMT-22052): Allow single API and Ingress VIPs in dual-stack with IPv6 primary [#8250](https://github.com/openshift/assisted-service/pull/8250)
* [MGMT-22153](https://issues.redhat.com/browse/MGMT-22153): increase log capacity from 100MB to 250MB [#8260](https://github.com/openshift/assisted-service/pull/8260)
* NO-ISSUE: [master] Bump OCP versions: 4.15 [#8267](https://github.com/openshift/assisted-service/pull/8267)
* [MGMT-22127](https://issues.redhat.com/browse/MGMT-22127): Stop non-existing InfraEnv reconcile [#8252](https://github.com/openshift/assisted-service/pull/8252)
* [MGMT-9154](https://issues.redhat.com/browse/MGMT-9154): agent auto approval [#8234](https://github.com/openshift/assisted-service/pull/8234)
* [MGMT-22053](https://issues.redhat.com/browse/MGMT-22053): Add Feature Support for Dual-Stack Primary IPv6 [#8258](https://github.com/openshift/assisted-service/pull/8258)
* NO-ISSUE: Add maorfr to OWNERS_ALIASES file [#8262](https://github.com/openshift/assisted-service/pull/8262)
* [AGENT-1248](https://issues.redhat.com/browse/AGENT-1248): Create configmap containing operator manifests [#7818](https://github.com/openshift/assisted-service/pull/7818)
* [ACM-2554](https://issues.redhat.com/browse/ACM-2554): inject imagePullSecrets when available under k8s-mode [#8196](https://github.com/openshift/assisted-service/pull/8196)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 [#8249](https://github.com/openshift/assisted-service/pull/8249)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 [#8247](https://github.com/openshift/assisted-service/pull/8247)
* [MGMT-22042](https://issues.redhat.com/browse/MGMT-22042): add cve-automation github app to owners_aliases [#8243](https://github.com/openshift/assisted-service/pull/8243)
* [MGMT-22066](https://issues.redhat.com/browse/MGMT-22066): Enable TNA clusters support by default [#8242](https://github.com/openshift/assisted-service/pull/8242)
* [MGMT-21904](https://issues.redhat.com/browse/MGMT-21904): Improve Duplicate certificate Detection used by the infrastructure operator [#8233](https://github.com/openshift/assisted-service/pull/8233)
* [ACM-25980](https://issues.redhat.com/browse/ACM-25980): Introduce PreprovisioningImage finalizer [#8221](https://github.com/openshift/assisted-service/pull/8221)
* [MGMT-21848](https://issues.redhat.com/browse/MGMT-21848): Allow matching host's disk using byPath [#8113](https://github.com/openshift/assisted-service/pull/8113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 [#8219](https://github.com/openshift/assisted-service/pull/8219)
* [MGMT-21230](https://issues.redhat.com/browse/MGMT-21230): Use XTS for disk encryption [#8115](https://github.com/openshift/assisted-service/pull/8115)
* [MGMT-21870](https://issues.redhat.com/browse/MGMT-21870): Add new parameters for bundle routes [#8101](https://github.com/openshift/assisted-service/pull/8101)
* [MGMT-22038](https://issues.redhat.com/browse/MGMT-22038): Only check TNF version for day-1 bound hosts [#8213](https://github.com/openshift/assisted-service/pull/8213)
* [MGMT-22025](https://issues.redhat.com/browse/MGMT-22025): Filter out irrelevant RHCOS images in operator deployment scripts [#8194](https://github.com/openshift/assisted-service/pull/8194)
* [MGMT-20681](https://issues.redhat.com/browse/MGMT-20681): Improve discovery ISO password change script [#7683](https://github.com/openshift/assisted-service/pull/7683)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Fix dual-stack primary IPv6 migrations and update [#8145](https://github.com/openshift/assisted-service/pull/8145)
* NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 [#8156](https://github.com/openshift/assisted-service/pull/8156)
* [MGMT-21958](https://issues.redhat.com/browse/MGMT-21958): Prepare 4.20 stable versions assisted-service upstream [#8142](https://github.com/openshift/assisted-service/pull/8142)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#8143](https://github.com/openshift/assisted-service/pull/8143)
* NO-ISSUE: adds example Agent resource to docs [#8120](https://github.com/openshift/assisted-service/pull/8120)
* NO-ISSUE: migrate renovate config [#8060](https://github.com/openshift/assisted-service/pull/8060)
* [MGMT-21135](https://issues.redhat.com/browse/MGMT-21135): Unexpected Additional Subnet Appears in Machine Network Selection [#7953](https://github.com/openshift/assisted-service/pull/7953)
* [MGMT-21810](https://issues.redhat.com/browse/MGMT-21810): Support TNF cluster installation using kube-api [#8085](https://github.com/openshift/assisted-service/pull/8085)
* [MGMT-21759](https://issues.redhat.com/browse/MGMT-21759): Update Assisted Service webhook away from deprecated webhook.Validator API [#8135](https://github.com/openshift/assisted-service/pull/8135)
* [MGMT-21859](https://issues.redhat.com/browse/MGMT-21859): Move osc operators to supported [#8056](https://github.com/openshift/assisted-service/pull/8056)
* [MGMT-19836](https://issues.redhat.com/browse/MGMT-19836): Add ClusterID field on HostRoleUpdatedEvent [#8111](https://github.com/openshift/assisted-service/pull/8111)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Add Dual-Stack with primary IPv6 support in Assisted [#8026](https://github.com/openshift/assisted-service/pull/8026)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 [#8134](https://github.com/openshift/assisted-service/pull/8134)
* [AGENT-1303](https://issues.redhat.com/browse/AGENT-1303): Allow InfraEnv registration to use late binding [#8059](https://github.com/openshift/assisted-service/pull/8059)
* NO-ISSUE: Update Konflux references [#8128](https://github.com/openshift/assisted-service/pull/8128)
* NO-ISSUE: bump ocp dockerfile base image to 4.21 [#8110](https://github.com/openshift/assisted-service/pull/8110)
* [MGMT-20588](https://issues.redhat.com/browse/MGMT-20588): Align kube descheduler activation CR with OVE needs [#7960](https://github.com/openshift/assisted-service/pull/7960)
* NO-ISSUE: Update Konflux references [#8050](https://github.com/openshift/assisted-service/pull/8050)
* [ACM-25137](https://issues.redhat.com/browse/ACM-25137): Remove the SERVICE_EL8_IMAGE env vars [#8108](https://github.com/openshift/assisted-service/pull/8108)
* [MGMT-21725](https://issues.redhat.com/browse/MGMT-21725): Update Renovate for legacy EL8 Dockerfiles [#8090](https://github.com/openshift/assisted-service/pull/8090)
* [OCPBUGS-62580](https://issues.redhat.com/browse/OCPBUGS-62580): Fix edge jobs to be consistent with ART for 4.21 [#8104](https://github.com/openshift/assisted-service/pull/8104)
* NO-ISSUE: [master] Bump OCP versions: 4.19 [#8095](https://github.com/openshift/assisted-service/pull/8095)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 [#8089](https://github.com/openshift/assisted-service/pull/8089)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 [#8084](https://github.com/openshift/assisted-service/pull/8084)
* [MGMT-20192](https://issues.redhat.com/browse/MGMT-20192): add possibility to disable image service [#7955](https://github.com/openshift/assisted-service/pull/7955)
* And 28 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4b116f46ca39a4933cab5647e5db44432c752b80...db8943a16f67b5718ad3a7b4128b8a510c0d562a)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/146fd6668f4e98b6cbbb03fa58975dd86629319f)
* [MGMT-22042](https://issues.redhat.com/browse/MGMT-22042): add cve-automation github app to owners_aliases [#1328](https://github.com/openshift/assisted-installer/pull/1328)
* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partiti… [#1308](https://github.com/openshift/assisted-installer/pull/1308)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#1301](https://github.com/openshift/assisted-installer/pull/1301)
* NO-ISSUE: Update Konflux references [#1299](https://github.com/openshift/assisted-installer/pull/1299)
* [MGMT-21724](https://issues.redhat.com/browse/MGMT-21724): Update Renovate for legacy EL8 Dockerfiles [#1289](https://github.com/openshift/assisted-installer/pull/1289)
* [OCPBUGS-62361](https://issues.redhat.com/browse/OCPBUGS-62361): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 [#1276](https://github.com/openshift/assisted-installer/pull/1276)
* [OCPBUGS-62398](https://issues.redhat.com/browse/OCPBUGS-62398): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 [#1277](https://github.com/openshift/assisted-installer/pull/1277)
* NO-ISSUE: Update Konflux references [#1283](https://github.com/openshift/assisted-installer/pull/1283)
* NO-ISSUE: Update Konflux references [#1265](https://github.com/openshift/assisted-installer/pull/1265)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/3accbb7bd0dd865744e0ef0808b65be5914b157e...146fd6668f4e98b6cbbb03fa58975dd86629319f)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/311d0fbe253ebb0c3a3e3c4bf5f555b6a2487f8f)
* NO-ISSUE: Fix missing serviceAccountName in tekton pipelines [#1187](https://github.com/openshift/assisted-installer-agent/pull/1187)
* NO-ISSUE: migrate renovate config [#1123](https://github.com/openshift/assisted-installer-agent/pull/1123)
* [MGMT-21724](https://issues.redhat.com/browse/MGMT-21724): Update Renovate for legacy EL8 Dockerfiles [#1148](https://github.com/openshift/assisted-installer-agent/pull/1148)
* [OCPBUGS-62390](https://issues.redhat.com/browse/OCPBUGS-62390): Bump dockerfile images to 4.21 [#1147](https://github.com/openshift/assisted-installer-agent/pull/1147)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#1118](https://github.com/openshift/assisted-installer-agent/pull/1118)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28...311d0fbe253ebb0c3a3e3c4bf5f555b6a2487f8f)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/9cefd6c9fa38a7ce070810b88a147b9b6af3e242)
* [OCPBUGS-64745](https://issues.redhat.com/browse/OCPBUGS-64745): Update mtv-operator channel name [#194](https://github.com/openshift/agent-installer-utils/pull/194)
* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302): Read template from .template path [#156](https://github.com/openshift/agent-installer-utils/pull/156)
* [OCPBUGS-63704](https://issues.redhat.com/browse/OCPBUGS-63704): Removed unneeded params from Makefile [#192](https://github.com/openshift/agent-installer-utils/pull/192)
* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302): Check for presence of registry instead of WorkflowType [#157](https://github.com/openshift/agent-installer-utils/pull/157)
* [OCPBUGS-63487](https://issues.redhat.com/browse/OCPBUGS-63487): AGENT-1203: Simplify isobuilder [#173](https://github.com/openshift/agent-installer-utils/pull/173)
* : OCPBUGS-63323: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan [#181](https://github.com/openshift/agent-installer-utils/pull/181)
* [OCPBUGS-63322](https://issues.redhat.com/browse/OCPBUGS-63322): Update Konflux references [#180](https://github.com/openshift/agent-installer-utils/pull/180)
* [OCPBUGS-62912](https://issues.redhat.com/browse/OCPBUGS-62912): Resolve violations detected by registry-standard [#175](https://github.com/openshift/agent-installer-utils/pull/175)
* [OCPBUGS-62986](https://issues.redhat.com/browse/OCPBUGS-62986): Update Konflux references [#177](https://github.com/openshift/agent-installer-utils/pull/177)
* [OCPBUGS-62958](https://issues.redhat.com/browse/OCPBUGS-62958): Update Konflux references [#168](https://github.com/openshift/agent-installer-utils/pull/168)
* [OCPBUGS-62905](https://issues.redhat.com/browse/OCPBUGS-62905): Dockerfile cleanup [#174](https://github.com/openshift/agent-installer-utils/pull/174)
* [OCPBUGS-62347](https://issues.redhat.com/browse/OCPBUGS-62347): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 [#165](https://github.com/openshift/agent-installer-utils/pull/165)
* [OCPBUGS-62704](https://issues.redhat.com/browse/OCPBUGS-62704): remove hardcoded versions from iso_builder [#171](https://github.com/openshift/agent-installer-utils/pull/171)
* [AGENT-1336](https://issues.redhat.com/browse/AGENT-1336): Add release label to build [#170](https://github.com/openshift/agent-installer-utils/pull/170)
* [OCPBUGS-62646](https://issues.redhat.com/browse/OCPBUGS-62646): Update Konflux references [#167](https://github.com/openshift/agent-installer-utils/pull/167)
* [OCPBUGS-62645](https://issues.redhat.com/browse/OCPBUGS-62645): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 [#146](https://github.com/openshift/agent-installer-utils/pull/146)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Build PipelineRun changes for Konflux [#155](https://github.com/openshift/agent-installer-utils/pull/155)
* [OCPBUGS-61946](https://issues.redhat.com/browse/OCPBUGS-61946): Include only final ISO in OVE UI container image [#162](https://github.com/openshift/agent-installer-utils/pull/162)
* [OCPBUGS-61956](https://issues.redhat.com/browse/OCPBUGS-61956): Disable Konflux go.mod PR updates [#163](https://github.com/openshift/agent-installer-utils/pull/163)
* [OCPBUGS-61875](https://issues.redhat.com/browse/OCPBUGS-61875): Add 4.21 config [#160](https://github.com/openshift/agent-installer-utils/pull/160)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso [#154](https://github.com/openshift/agent-installer-utils/pull/154)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils [#153](https://github.com/openshift/agent-installer-utils/pull/153)
* [AGENT-1286](https://issues.redhat.com/browse/AGENT-1286): Red Hat Konflux kflux-prd-rh02 update agent-installer-utils [#143](https://github.com/openshift/agent-installer-utils/pull/143)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f567fb90bcd80834d18cee39ff1d135f6d6dbc50...9cefd6c9fa38a7ce070810b88a147b9b6af3e242)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/35ba137ab96d01f0b8df729ff5ad93ac2fdad800)
* [OCPBUGS-62355](https://issues.redhat.com/browse/OCPBUGS-62355): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/apiserver-network-proxy/pull/86)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/11b24a2c7452ef683a1d989f1016e6e815f5c112...35ba137ab96d01f0b8df729ff5ad93ac2fdad800)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/70b9392fae824fd8b5531203ee37d048cd961527)
* [SPLAT-2337](https://issues.redhat.com/browse/SPLAT-2337): tests/ote: Fix platform name in the spec build [#121](https://github.com/openshift/cloud-provider-aws/pull/121)
* [SPLAT-2337](https://issues.redhat.com/browse/SPLAT-2337): tests/ote: Introduce openshift test extension binary [#117](https://github.com/openshift/cloud-provider-aws/pull/117)
* [OCPCLOUD-3092](https://issues.redhat.com/browse/OCPCLOUD-3092): Merge https://github.com/kubernetes/cloud-provider-aws:master (bea9adf) into main [#112](https://github.com/openshift/cloud-provider-aws/pull/112)
* [OCPBUGS-62354](https://issues.redhat.com/browse/OCPBUGS-62354): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 [#118](https://github.com/openshift/cloud-provider-aws/pull/118)
* NO-JIRA: Update OWNERS [#116](https://github.com/openshift/cloud-provider-aws/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/bb88da16b29d63573861351afc5ca8c4547775d6...70b9392fae824fd8b5531203ee37d048cd961527)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/53939048ef278b09552b0640beb169c20aa1bd71)
* [OCPBUGS-63046](https://issues.redhat.com/browse/OCPBUGS-63046): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main [#576](https://github.com/openshift/cluster-api-provider-aws/pull/576)
* [OCPBUGS-62540](https://issues.redhat.com/browse/OCPBUGS-62540): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 [#575](https://github.com/openshift/cluster-api-provider-aws/pull/575)
* NO-JIRA: Update OWNERS [#567](https://github.com/openshift/cluster-api-provider-aws/pull/567)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main [#569](https://github.com/openshift/cluster-api-provider-aws/pull/569)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/300439ea0736444a160c061578b3bd8956d4f7e6...53939048ef278b09552b0640beb169c20aa1bd71)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/57eebffcc8abbbbb6edcf3b536b769d97e31819c)
* [STOR-2597](https://issues.redhat.com/browse/STOR-2597), [STOR-2627](https://issues.redhat.com/browse/STOR-2627): Rebase aws-ebs-csi-driver to v1.48.0 for OCP 4.21 [#294](https://github.com/openshift/aws-ebs-csi-driver/pull/294)
* [OCPBUGS-62380](https://issues.redhat.com/browse/OCPBUGS-62380): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 [#292](https://github.com/openshift/aws-ebs-csi-driver/pull/292)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9...57eebffcc8abbbbb6edcf3b536b769d97e31819c)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b69467bd7af58c49a4b45d80afbf3f7aad07acff)
* [OCPBUGS-65606](https://issues.redhat.com/browse/OCPBUGS-65606): adds the csi-external-resizer to the image-references [#469](https://github.com/openshift/csi-operator/pull/469)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 and remove hypershift client [#468](https://github.com/openshift/csi-operator/pull/468)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#446](https://github.com/openshift/csi-operator/pull/446)
* [OCPBUGS-62802](https://issues.redhat.com/browse/OCPBUGS-62802): Add RBAC ClusterRole and Binding for driver node [#443](https://github.com/openshift/csi-operator/pull/443)
* NO-JIRA: add ai-helpers claude marketplace [#451](https://github.com/openshift/csi-operator/pull/451)
* NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar [#380](https://github.com/openshift/csi-operator/pull/380)
* [OCPBUGS-61436](https://issues.redhat.com/browse/OCPBUGS-61436), [OCPBUGS-61450](https://issues.redhat.com/browse/OCPBUGS-61450), [STOR-2600](https://issues.redhat.com/browse/STOR-2600): Bump OLM metadata to 4.21 [#430](https://github.com/openshift/csi-operator/pull/430)
* [OCPBUGS-62404](https://issues.redhat.com/browse/OCPBUGS-62404): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 [#438](https://github.com/openshift/csi-operator/pull/438)
* [STOR-1945](https://issues.redhat.com/browse/STOR-1945): STOR-2056: add Azure File NFS test manifest [#445](https://github.com/openshift/csi-operator/pull/445)
* [OCPBUGS-62374](https://issues.redhat.com/browse/OCPBUGS-62374): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 [#437](https://github.com/openshift/csi-operator/pull/437)
* [MULTIARCH-5554](https://issues.redhat.com/browse/MULTIARCH-5554): update smb-csi-driver-operator support to add ppc64le [#428](https://github.com/openshift/csi-operator/pull/428)
* [OCPBUGS-62427](https://issues.redhat.com/browse/OCPBUGS-62427): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 [#439](https://github.com/openshift/csi-operator/pull/439)
* [OCPBUGS-62348](https://issues.redhat.com/browse/OCPBUGS-62348): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 [#436](https://github.com/openshift/csi-operator/pull/436)
* [OCPBUGS-61955](https://issues.redhat.com/browse/OCPBUGS-61955): Add withCABundleDaemonSetHook() to AWS EFS operator [#433](https://github.com/openshift/csi-operator/pull/433)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): add runAsUser hook for operator deployment controller [#431](https://github.com/openshift/csi-operator/pull/431)
* NO-JIRA: Centralize injection of hosted-kubeconfig volume [#311](https://github.com/openshift/csi-operator/pull/311)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#429](https://github.com/openshift/csi-operator/pull/429)
* [OCPBUGS-54385](https://issues.redhat.com/browse/OCPBUGS-54385): Avoid informer resync [#432](https://github.com/openshift/csi-operator/pull/432)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#427](https://github.com/openshift/csi-operator/pull/427)
* NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 [#425](https://github.com/openshift/csi-operator/pull/425)
* NO-JIRA: azure-disk, azure-file sync code de-duplication [#303](https://github.com/openshift/csi-operator/pull/303)
* [Full changelog](https://github.com/openshift/csi-operator/compare/dc35256d52e1ff30cd49f3c6649b5eca370ce03c...b69467bd7af58c49a4b45d80afbf3f7aad07acff)
### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/7f0513e0305e4ea70df0bc9bd6e23d130c9f87bc)
* [AUTOSCALE-401](https://issues.redhat.com/browse/AUTOSCALE-401): Post rebase cleanup - move kubernetes-sigs-karpenter back to main, re-add payload image label [#18](https://github.com/openshift/aws-karpenter-provider-aws/pull/18)
* [AUTOSCALE-401](https://issues.redhat.com/browse/AUTOSCALE-401): Karpenter rebase 1.8.2 [#16](https://github.com/openshift/aws-karpenter-provider-aws/pull/16)
* [OCPBUGS-62388](https://issues.redhat.com/browse/OCPBUGS-62388): Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 [#15](https://github.com/openshift/aws-karpenter-provider-aws/pull/15)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4...7f0513e0305e4ea70df0bc9bd6e23d130c9f87bc)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/19e7b623429799c9c549690a1b5ab499844411f9)
* [OCPBUGS-62458](https://issues.redhat.com/browse/OCPBUGS-62458): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 [#31](https://github.com/openshift/aws-encryption-provider/pull/31)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...19e7b623429799c9c549690a1b5ab499844411f9)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/444134d4ebc8e2845686d07f9e6462d4d81cdbee)
* NO-JIRA: Update OWNERS [#138](https://github.com/openshift/machine-api-provider-aws/pull/138)
* [OCPCLOUD-3072](https://issues.redhat.com/browse/OCPCLOUD-3072): Add support for AMD SEV-SNP [#141](https://github.com/openshift/machine-api-provider-aws/pull/141)
* [OCPBUGS-62395](https://issues.redhat.com/browse/OCPBUGS-62395): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 [#139](https://github.com/openshift/machine-api-provider-aws/pull/139)
* [OCPBUGS-38759](https://issues.redhat.com/browse/OCPBUGS-38759): client: re-use a single file for building the session instead of randomly named files [#140](https://github.com/openshift/machine-api-provider-aws/pull/140)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f5c125807016b8e0187654e53762532d8c2fe923...444134d4ebc8e2845686d07f9e6462d4d81cdbee)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/0da6737b69c6676d9f9bc8b3fcc7f46fbe521096)
* [CCO-664](https://issues.redhat.com/browse/CCO-664): merge upstream changes [#205](https://github.com/openshift/aws-pod-identity-webhook/pull/205)
* [OCPBUGS-62587](https://issues.redhat.com/browse/OCPBUGS-62587): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 [#206](https://github.com/openshift/aws-pod-identity-webhook/pull/206)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a2ecb1502280feb8e82c9cf6f3f77d62797e4445...0da6737b69c6676d9f9bc8b3fcc7f46fbe521096)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/aa6480c632b84371b8030b3f3f722d3d49601b02)
* [OCPCLOUD-3093](https://issues.redhat.com/browse/OCPCLOUD-3093): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (aa50e43) into main [#148](https://github.com/openshift/cloud-provider-azure/pull/148)
* [OCPBUGS-62487](https://issues.redhat.com/browse/OCPBUGS-62487): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/cloud-provider-azure/pull/151)
* [OCPBUGS-62392](https://issues.redhat.com/browse/OCPBUGS-62392): Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/cloud-provider-azure/pull/150)
* NO-JIRA: Update OWNERS [#149](https://github.com/openshift/cloud-provider-azure/pull/149)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d469d04ed645358d942af442fe21e2c2b44b9b2c...aa6480c632b84371b8030b3f3f722d3d49601b02)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/b7682c874dc67d46a8b430f841cf9cd2faaf184f)
* [OCPBUGS-62387](https://issues.redhat.com/browse/OCPBUGS-62387): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 [#352](https://github.com/openshift/cluster-api-provider-azure/pull/352)
* NO-JIRA: Update OWNERS [#351](https://github.com/openshift/cluster-api-provider-azure/pull/351)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...b7682c874dc67d46a8b430f841cf9cd2faaf184f)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/64943e35b2621ae01f4f6b3109419edc2ec58384)
* [STOR-2585](https://issues.redhat.com/browse/STOR-2585): Rebase to upstream v1.33.5 for OCP 4.21 [#112](https://github.com/openshift/azure-disk-csi-driver/pull/112)
* NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 [#110](https://github.com/openshift/azure-disk-csi-driver/pull/110)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/0b8e4d2202b0d17942fd745a5e1948f46bdd0350...64943e35b2621ae01f4f6b3109419edc2ec58384)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/2ba72a121894db9f02558cafa5444d78e2b4795c)
* [STOR-2587](https://issues.redhat.com/browse/STOR-2587): Rebase to upstream v1.34.1 for OCP 4.21 [#109](https://github.com/openshift/azure-file-csi-driver/pull/109)
* [OCPBUGS-62547](https://issues.redhat.com/browse/OCPBUGS-62547): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 [#106](https://github.com/openshift/azure-file-csi-driver/pull/106)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45d505bc11fedadece5ae27147c9595877e39f2a...2ba72a121894db9f02558cafa5444d78e2b4795c)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/ceda5b5fa89456fd170d803c32ae2e8c203306b5)
* [OCPCLOUD-3088](https://issues.redhat.com/browse/OCPCLOUD-3088): Bump k8s 1.34 [#169](https://github.com/openshift/machine-api-provider-azure/pull/169)
* [OCPBUGS-56664](https://issues.redhat.com/browse/OCPBUGS-56664): Support DataDisks on Azure Stack Hub [#164](https://github.com/openshift/machine-api-provider-azure/pull/164)
* [OCPBUGS-62335](https://issues.redhat.com/browse/OCPBUGS-62335): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 [#163](https://github.com/openshift/machine-api-provider-azure/pull/163)
* NO-JIRA: Update OWNERS [#162](https://github.com/openshift/machine-api-provider-azure/pull/162)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b1cb6432a0ae47248e126d32fb6012eb1408e833...ceda5b5fa89456fd170d803c32ae2e8c203306b5)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8)
* [OCPBUGS-62368](https://issues.redhat.com/browse/OCPBUGS-62368): Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 [#13](https://github.com/openshift/azure-service-operator/pull/13)
* NO-JIRA: Update OWNERS [#12](https://github.com/openshift/azure-service-operator/pull/12)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/6e2f362623720f7b6d634fbc424fbc61e4b481ae...17e574628ee7ef8aa694cfc0ab5e5232b651fbf8)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/3f2a6e0d1ea68af321f9674b0b097939be7d2014)
* [OCPBUGS-62364](https://issues.redhat.com/browse/OCPBUGS-62364): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 [#39](https://github.com/openshift/azure-workload-identity/pull/39)
* [CCO-665](https://issues.redhat.com/browse/CCO-665): Merge upstream changes [#40](https://github.com/openshift/azure-workload-identity/pull/40)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/88b18175e46fe305486d172ec0b4e8471c55e30b...3f2a6e0d1ea68af321f9674b0b097939be7d2014)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/659138fef3abd4c71b0b01fa1279146745699a5a)
* [OCPBUGS-62565](https://issues.redhat.com/browse/OCPBUGS-62565): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 [#53](https://github.com/openshift/cluster-api-provider-metal3/pull/53)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/f782ba747ed353721c84ceb754ca8403f94adb6a...659138fef3abd4c71b0b01fa1279146745699a5a)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5b7289b6dba77aaf3ea5ffc788f0c7b41411eb1f)
* [OCPBUGS-65585](https://issues.redhat.com/browse/OCPBUGS-65585): Update the RHCOS 4.21 bootimage metadata to 9.6.20251113-0 [#10083](https://github.com/openshift/installer/pull/10083)
* [CORS-4262](https://issues.redhat.com/browse/CORS-4262): update openshift/api & capi v1.11 [#10060](https://github.com/openshift/installer/pull/10060)
* [CORS-4082](https://issues.redhat.com/browse/CORS-4082), [CORS-4086](https://issues.redhat.com/browse/CORS-4086): Azure UserProvisionedDNS: Update bootstrap, master and worker ignition files [#10058](https://github.com/openshift/installer/pull/10058)
* [OCPBUGS-61167](https://issues.redhat.com/browse/OCPBUGS-61167): pkg/types/valication: explain overlapping internal subnets better [#10039](https://github.com/openshift/installer/pull/10039)
* [CORS-4258](https://issues.redhat.com/browse/CORS-4258): Create a Private DNS Zone for PSC [#9992](https://github.com/openshift/installer/pull/9992)
* [CORS-4126](https://issues.redhat.com/browse/CORS-4126): add descriptions for ap-southeast-6 [#10062](https://github.com/openshift/installer/pull/10062)
* [OCPBUGS-64839](https://issues.redhat.com/browse/OCPBUGS-64839): Azure UPI ARM template: use storageAccountId [#10065](https://github.com/openshift/installer/pull/10065)
* [OCPBUGS-63584](https://issues.redhat.com/browse/OCPBUGS-63584): vSphere-don't use template,ClusterOSImage together [#10043](https://github.com/openshift/installer/pull/10043)
* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302), [OCPBUGS-61668](https://issues.redhat.com/browse/OCPBUGS-61668): Merge interactive ignition into unconfigured-ignition [#9941](https://github.com/openshift/installer/pull/9941)
* [OCPBUGS-64603](https://issues.redhat.com/browse/OCPBUGS-64603): PowerVC: Validate Manual Load Balancer [#10057](https://github.com/openshift/installer/pull/10057)
* [CORS-4087](https://issues.redhat.com/browse/CORS-4087): Azure UserProvisionedDNS: Set `PrivateDNSZone` within CAPZ's NetworkSpec [#10059](https://github.com/openshift/installer/pull/10059)
* [OCPBUGS-56451](https://issues.redhat.com/browse/OCPBUGS-56451): Provide a way to configure a fallback policy for imageDigestSources [#10050](https://github.com/openshift/installer/pull/10050)
* no-jira: cleanup old terraform configs & altinfra image [#10053](https://github.com/openshift/installer/pull/10053)
* [OCPBUGS-63386](https://issues.redhat.com/browse/OCPBUGS-63386): Increase agent-installer pre-network-manager timeout [#10029](https://github.com/openshift/installer/pull/10029)
* no-jira: Prune unused terraform packages [#10051](https://github.com/openshift/installer/pull/10051)
* [OCPBUGS-63711](https://issues.redhat.com/browse/OCPBUGS-63711): Remove pending items on gcp no-op [#10049](https://github.com/openshift/installer/pull/10049)
* [CORS-4275](https://issues.redhat.com/browse/CORS-4275): Add Windows support [#10041](https://github.com/openshift/installer/pull/10041)
* [OCPBUGS-63632](https://issues.redhat.com/browse/OCPBUGS-63632): Update RHCOS 4.21 bootimage metadata to 9.6.20251023-0 [#10036](https://github.com/openshift/installer/pull/10036)
* [OCPBUGS-57126](https://issues.redhat.com/browse/OCPBUGS-57126): Add node-image-pull to the list of services to check their logs in /etc/motd [#9962](https://github.com/openshift/installer/pull/9962)
* [OCPBUGS-62136](https://issues.redhat.com/browse/OCPBUGS-62136): Eliminate duplicate logs on bootstrap/rendezvous host [#9957](https://github.com/openshift/installer/pull/9957)
* [OCPBUGS-60873](https://issues.redhat.com/browse/OCPBUGS-60873): Prevent duplicate noProxy when adding nodes [#10024](https://github.com/openshift/installer/pull/10024)
* [OCPBUGS-36360](https://issues.redhat.com/browse/OCPBUGS-36360): Support certificate authentication with CAPZ [#10019](https://github.com/openshift/installer/pull/10019)
* [OCPBUGS-62870](https://issues.redhat.com/browse/OCPBUGS-62870): Fix firewall checks [#10017](https://github.com/openshift/installer/pull/10017)
* [OCPBUGS-62824](https://issues.redhat.com/browse/OCPBUGS-62824), [OCPBUGS-62826](https://issues.redhat.com/browse/OCPBUGS-62826): Fix console info for interactive agent installer [#10003](https://github.com/openshift/installer/pull/10003)
* [OCPBUGS-62085](https://issues.redhat.com/browse/OCPBUGS-62085): Update the RHCOS 4.21 bootimage metadata [#9998](https://github.com/openshift/installer/pull/9998)
* [OKD-237](https://issues.redhat.com/browse/OKD-237): Remove fcos references [#9970](https://github.com/openshift/installer/pull/9970)
* [OSASINFRA-3915](https://issues.redhat.com/browse/OSASINFRA-3915): openstack: Start setting CredentialsMode [#9734](https://github.com/openshift/installer/pull/9734)
* NO-JIRA: shiftstack: Update OWNERS [#9994](https://github.com/openshift/installer/pull/9994)
* [OCPBUGS-62125](https://issues.redhat.com/browse/OCPBUGS-62125): baremetal: set baremetalhost architecture [#9987](https://github.com/openshift/installer/pull/9987)
* [OCPBUGS-60752](https://issues.redhat.com/browse/OCPBUGS-60752): Add MTU validation for networkConfig [#9919](https://github.com/openshift/installer/pull/9919)
* [OCPBUGS-62907](https://issues.redhat.com/browse/OCPBUGS-62907): AGENT-1269: Use agent-installer-ui image from release [#9995](https://github.com/openshift/installer/pull/9995)
* [OCPBUGS-62430](https://issues.redhat.com/browse/OCPBUGS-62430): None: Allow IPv6 Primary DualStack installs on platforms None and External [#9983](https://github.com/openshift/installer/pull/9983)
* [OCPBUGS-41567](https://issues.redhat.com/browse/OCPBUGS-41567): Clean up baremetal bootstrap systemd dependencies [#8986](https://github.com/openshift/installer/pull/8986)
* [OCPBUGS-62452](https://issues.redhat.com/browse/OCPBUGS-62452): Updating ose-installer-container image to be consistent with ART for 4.21 [#9980](https://github.com/openshift/installer/pull/9980)
* [OCPBUGS-62471](https://issues.redhat.com/browse/OCPBUGS-62471): Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 [#9981](https://github.com/openshift/installer/pull/9981)
* [OCPBUGS-60538](https://issues.redhat.com/browse/OCPBUGS-60538): Update assisted-service dependencies [#9956](https://github.com/openshift/installer/pull/9956)
* [CORS-4256](https://issues.redhat.com/browse/CORS-4256): Add PSC Endpoint to the installconfig [#9991](https://github.com/openshift/installer/pull/9991)
* [OCPBUGS-62514](https://issues.redhat.com/browse/OCPBUGS-62514): Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 [#9984](https://github.com/openshift/installer/pull/9984)
* [SPLAT-2511](https://issues.redhat.com/browse/SPLAT-2511): vSphere - do not block on vSphere >7.0.2, allow 9 [#9963](https://github.com/openshift/installer/pull/9963)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): allow toggling AWS client logging [#9976](https://github.com/openshift/installer/pull/9976)
* [OCPBUGS-62363](https://issues.redhat.com/browse/OCPBUGS-62363): Set agent-extract-tui start timeout [#9975](https://github.com/openshift/installer/pull/9975)
* no-jira: Revert "Merge pull request #9939 from barbacbd/CORS-4058-release-4.21" [#9974](https://github.com/openshift/installer/pull/9974)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): bump AWS SDK v2 max backoff duration to 300s [#9966](https://github.com/openshift/installer/pull/9966)
* [CORS-4107](https://issues.redhat.com/browse/CORS-4107): Update default release image to 4.21 [#9954](https://github.com/openshift/installer/pull/9954)
* [OCPBUGS-61514](https://issues.redhat.com/browse/OCPBUGS-61514): Add check for gcp firewall deletion permission [#9935](https://github.com/openshift/installer/pull/9935)
* [OCPBUGS-62293](https://issues.redhat.com/browse/OCPBUGS-62293): Set default for PrivateDNSZone Project ID [#9967](https://github.com/openshift/installer/pull/9967)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): disable rate limiter for AWS SDK v2 [#9958](https://github.com/openshift/installer/pull/9958)
* [OCPBUGS-61901](https://issues.redhat.com/browse/OCPBUGS-61901): Update explain for Publish [#9950](https://github.com/openshift/installer/pull/9950)
* no-jira: OWNERS: switch to joelcapitao [#9951](https://github.com/openshift/installer/pull/9951)
* [OCPBUGS-61935](https://issues.redhat.com/browse/OCPBUGS-61935): Wildcards not reliable for copying container files [#9948](https://github.com/openshift/installer/pull/9948)
* [CORS-4058](https://issues.redhat.com/browse/CORS-4058): Migrate AWS Destroy to SDK v2 [#9939](https://github.com/openshift/installer/pull/9939)
* [OCPBUGS-61353](https://issues.redhat.com/browse/OCPBUGS-61353): Generated Redacted nutanix config for operator [#9931](https://github.com/openshift/installer/pull/9931)
* [CORS-3550](https://issues.redhat.com/browse/CORS-3550): add ability to opt out of the sigstore signing requirement [#9940](https://github.com/openshift/installer/pull/9940)
* [CORS-4162](https://issues.redhat.com/browse/CORS-4162): Remove GCPClusterHostedDNSInstall featuregate [#9944](https://github.com/openshift/installer/pull/9944)
* [OCPBUGS-61490](https://issues.redhat.com/browse/OCPBUGS-61490): Update code to retrieve ICSP instead of ICP [#9933](https://github.com/openshift/installer/pull/9933)
* [MGMT-21586](https://issues.redhat.com/browse/MGMT-21586): Add an option in image-based installation to specify architecture [#9934](https://github.com/openshift/installer/pull/9934)
* [SPLAT-2430](https://issues.redhat.com/browse/SPLAT-2430): Update vSphere version validations for 7 EOL and VCF 9 [#9914](https://github.com/openshift/installer/pull/9914)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix shellcheck issues in bootstrap [#9929](https://github.com/openshift/installer/pull/9929)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix agent shellcheck issues [#9928](https://github.com/openshift/installer/pull/9928)
* no-jira: Fix logging and error messages [#9917](https://github.com/openshift/installer/pull/9917)
* [SPLAT-2465](https://issues.redhat.com/browse/SPLAT-2465): Changed LB VM creation to not be hard coded and use from variables.ps1 [#9926](https://github.com/openshift/installer/pull/9926)
* [OCPBUGS-61111](https://issues.redhat.com/browse/OCPBUGS-61111): Allow user to BYO private zone without specifying name [#9922](https://github.com/openshift/installer/pull/9922)
* [Full changelog](https://github.com/openshift/installer/compare/200070b922dcf6bfd4819d7063f13e14ea296241...5b7289b6dba77aaf3ea5ffc788f0c7b41411eb1f)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/4e6a729c5ac8fde8859db5830def262dfdee28ea)
* [OCPBUGS-62365](https://issues.redhat.com/browse/OCPBUGS-62365): Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 [#237](https://github.com/openshift/cluster-api-provider-baremetal/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb678fec5f7e08348b281341481f33a848204e50...4e6a729c5ac8fde8859db5830def262dfdee28ea)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/eaa8c4184d7fb1f2b2009e40ca372f84717e5b53)
* [OCPBUGS-61349](https://issues.redhat.com/browse/OCPBUGS-61349), [OCPBUGS-62112](https://issues.redhat.com/browse/OCPBUGS-62112): Merge upstream [#432](https://github.com/openshift/baremetal-operator/pull/432)
* [OCPBUGS-62460](https://issues.redhat.com/browse/OCPBUGS-62460): Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 [#433](https://github.com/openshift/baremetal-operator/pull/433)
* NO-ISSUE: Merge upstream [#430](https://github.com/openshift/baremetal-operator/pull/430)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...eaa8c4184d7fb1f2b2009e40ca372f84717e5b53)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/81213da2bc0b8265d279ad3f3004fe07ca958ba7)
* [OCPBUGS-62581](https://issues.redhat.com/browse/OCPBUGS-62581): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 [#370](https://github.com/openshift/baremetal-runtimecfg/pull/370)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...81213da2bc0b8265d279ad3f3004fe07ca958ba7)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0c09391d89b24f45dc606eee749e67d9b52c9f70)
* [OCPBUGS-64743](https://issues.redhat.com/browse/OCPBUGS-64743): fix(must-gather): do not set node affinity if nodename is set [#2135](https://github.com/openshift/oc/pull/2135)
* [OCPBUGS-63354](https://issues.redhat.com/browse/OCPBUGS-63354): Increase Node ISO creation timeout from 15 to 30 minutes [#2119](https://github.com/openshift/oc/pull/2119)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): pkg/cli/admin/upgrade: Tighten force warnings [#2125](https://github.com/openshift/oc/pull/2125)
* [OCPBUGS-63683](https://issues.redhat.com/browse/OCPBUGS-63683): Replace IPv4-mapped IPv6 addresses with valid IPv6 in tests [#2123](https://github.com/openshift/oc/pull/2123)
* NO-JIRA: Add pr-review Claude command and effective-go skills [#2120](https://github.com/openshift/oc/pull/2120)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend: Drop obsolete precheckEnabled knob [#2113](https://github.com/openshift/oc/pull/2113)
* [OCPBUGS-62875](https://issues.redhat.com/browse/OCPBUGS-62875): Pass dry-run option to all create API calls [#2117](https://github.com/openshift/oc/pull/2117)
* [CNTRLPLANE-1676](https://issues.redhat.com/browse/CNTRLPLANE-1676): Update k8s dependencies to 1.34 [#2118](https://github.com/openshift/oc/pull/2118)
* NO-JIRA: Migrate to aws-sdk-go-v2 from archived aws-sdk-go [#2114](https://github.com/openshift/oc/pull/2114)
* NO-JIRA: `adm upgrade status`: capture testcase for OCPBUGS-60768 [#2081](https://github.com/openshift/oc/pull/2081)
* [OCPBUGS-62445](https://issues.redhat.com/browse/OCPBUGS-62445): prevent crash when rootDeviceHints format is invalid [#2109](https://github.com/openshift/oc/pull/2109)
* NO-JIRA: Update shellescape and sspi to newer versions [#2116](https://github.com/openshift/oc/pull/2116)
* NO-JIRA: Remove myself from update approvers, add Hongkai [#2112](https://github.com/openshift/oc/pull/2112)
* [OCPBUGS-62550](https://issues.redhat.com/browse/OCPBUGS-62550): Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 [#2111](https://github.com/openshift/oc/pull/2111)
* [OCPBUGS-61491](https://issues.redhat.com/browse/OCPBUGS-61491): Update code to retrieve ICSP instead of ICP [#2095](https://github.com/openshift/oc/pull/2095)
* [OCPBUGS-62362](https://issues.redhat.com/browse/OCPBUGS-62362): Updating ose-tools-container image to be consistent with ART for 4.21 [#2108](https://github.com/openshift/oc/pull/2108)
* [OCPBUGS-62548](https://issues.redhat.com/browse/OCPBUGS-62548): Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 [#2110](https://github.com/openshift/oc/pull/2110)
* NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 [#2107](https://github.com/openshift/oc/pull/2107)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): oc adm must-gather: Add support for context [#2105](https://github.com/openshift/oc/pull/2105)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): pkg/.../inspect: Add support for context.Context [#2100](https://github.com/openshift/oc/pull/2100)
* [WRKLDS-593](https://issues.redhat.com/browse/WRKLDS-593): oc adm must-gather: Improve cleanup order [#2080](https://github.com/openshift/oc/pull/2080)
* NO-JIRA: Add tchap as reviewer in oc [#2099](https://github.com/openshift/oc/pull/2099)
* NO-JIRA: oc adm groups sync: Use client.Unbind [#2094](https://github.com/openshift/oc/pull/2094)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2088](https://github.com/openshift/oc/pull/2088)
* [OCPBUGS-52936](https://issues.redhat.com/browse/OCPBUGS-52936): oc adm policy: Only initialize UserClient if built-in OAuth is enabled [#2090](https://github.com/openshift/oc/pull/2090)
* [OCPBUGS-61311](https://issues.redhat.com/browse/OCPBUGS-61311): Introduce auto-open-browser flag for external OIDC issuer login [#2089](https://github.com/openshift/oc/pull/2089)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example [#2093](https://github.com/openshift/oc/pull/2093)
* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): oc adm must-gather: Wrap gather in a session [#2087](https://github.com/openshift/oc/pull/2087)
* NO-JIRA: Add some warnings into excluded list [#2092](https://github.com/openshift/oc/pull/2092)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Rely on overall available disk space of the mounted volume [#2084](https://github.com/openshift/oc/pull/2084)
* [Full changelog](https://github.com/openshift/oc/compare/0581d703b56b153b941022bca4ce3c34de576f3c...0c09391d89b24f45dc606eee749e67d9b52c9f70)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/92207a87591628a25fa4f2aba3e00b5c6a8e779f)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): webhooks: Enable user namespaces [#926](https://github.com/openshift/cloud-credential-operator/pull/926)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Enable user namespace for the operator [#927](https://github.com/openshift/cloud-credential-operator/pull/927)
* [CCO-690](https://issues.redhat.com/browse/CCO-690): Integrate OpenShift Test Extension framework for CCO [#886](https://github.com/openshift/cloud-credential-operator/pull/886)
* [CCO-714](https://issues.redhat.com/browse/CCO-714): Add preserve-existing-roles flag to ccoctl auzre [#922](https://github.com/openshift/cloud-credential-operator/pull/922)
* NO-JIRA: docs: token migration to use next-bound-service-account-signing-key [#932](https://github.com/openshift/cloud-credential-operator/pull/932)
* [OCPBUGS-63541](https://issues.redhat.com/browse/OCPBUGS-63541): ccoctl: add public-key-file flag to create-all [#933](https://github.com/openshift/cloud-credential-operator/pull/933)
* [OCPBUGS-63561](https://issues.redhat.com/browse/OCPBUGS-63561): ccoctl: use pagination when listing resources in aws [#935](https://github.com/openshift/cloud-credential-operator/pull/935)
* NO-JIRA: Update output directory when extracting issuer URL [#925](https://github.com/openshift/cloud-credential-operator/pull/925)
* [CCO-661](https://issues.redhat.com/browse/CCO-661): Update go modules [#930](https://github.com/openshift/cloud-credential-operator/pull/930)
* [OCPBUGS-63238](https://issues.redhat.com/browse/OCPBUGS-63238): Ensure ccoctl aws commands use their own region option [#931](https://github.com/openshift/cloud-credential-operator/pull/931)
* [CCO-709](https://issues.redhat.com/browse/CCO-709): Upgrade Kubernetes v1.34 [#929](https://github.com/openshift/cloud-credential-operator/pull/929)
* [CCO-644](https://issues.redhat.com/browse/CCO-644): Upgrade msgraph-sdk-go v1.86.0 [#924](https://github.com/openshift/cloud-credential-operator/pull/924)
* [CCO-435](https://issues.redhat.com/browse/CCO-435): Migrate away from deprecated ioutil package. [#920](https://github.com/openshift/cloud-credential-operator/pull/920)
* [OCPBUGS-62495](https://issues.redhat.com/browse/OCPBUGS-62495): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 [#923](https://github.com/openshift/cloud-credential-operator/pull/923)
* [OCPBUGS-62184](https://issues.redhat.com/browse/OCPBUGS-62184): aws: remove endpoint overrides for s3 and cf clients [#921](https://github.com/openshift/cloud-credential-operator/pull/921)
* [CCO-692](https://issues.redhat.com/browse/CCO-692): Migrate to aws-ask-go-v2 [#905](https://github.com/openshift/cloud-credential-operator/pull/905)
* [OCPBUGS-61475](https://issues.redhat.com/browse/OCPBUGS-61475): set cloud-credential-operator as default-container [#914](https://github.com/openshift/cloud-credential-operator/pull/914)
* [OCPBUGS-60078](https://issues.redhat.com/browse/OCPBUGS-60078): ccoctl: aws to use proper issuer url on subsequent runs [#904](https://github.com/openshift/cloud-credential-operator/pull/904)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/17948f42adc4fce592908d48730f45d665bcbbba...92207a87591628a25fa4f2aba3e00b5c6a8e779f)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/dcdf24f542ab4d65c85a4d63d553cc49085567ea)
* [OCPBUGS-54805](https://issues.redhat.com/browse/OCPBUGS-54805): Handle deleted nodes [#182](https://github.com/openshift/cloud-network-config-controller/pull/182)
* [CORENET-6349](https://issues.redhat.com/browse/CORENET-6349): rebase k8s to 1.34.1 [#187](https://github.com/openshift/cloud-network-config-controller/pull/187)
* [OCPBUGS-63348](https://issues.redhat.com/browse/OCPBUGS-63348): Fix capacity calculation [#184](https://github.com/openshift/cloud-network-config-controller/pull/184)
* [OCPBUGS-60806](https://issues.redhat.com/browse/OCPBUGS-60806): Change the capacity struct from int to ptrOfInt [#183](https://github.com/openshift/cloud-network-config-controller/pull/183)
* [OCPBUGS-55625](https://issues.redhat.com/browse/OCPBUGS-55625): Retrieve subnet from vnet subnets.addressPrefixes field [#179](https://github.com/openshift/cloud-network-config-controller/pull/179)
* [OCPBUGS-62437](https://issues.redhat.com/browse/OCPBUGS-62437): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 [#181](https://github.com/openshift/cloud-network-config-controller/pull/181)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/a365cf9c9f9f4d0d7841dead5145f7cc59dfac18...dcdf24f542ab4d65c85a4d63d553cc49085567ea)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/d7f0c37e82940f543a802bf6778c3edb1faf79ee)
* [CNTRLPLANE-1789](https://issues.redhat.com/browse/CNTRLPLANE-1789): Bump kube to 1.34 [#807](https://github.com/openshift/cluster-authentication-operator/pull/807)
* [OCPBUGS-65473](https://issues.redhat.com/browse/OCPBUGS-65473): fix: remove route and oauth service from clusteroperator expected output [#808](https://github.com/openshift/cluster-authentication-operator/pull/808)
* [CNTRLPLANE-947](https://issues.redhat.com/browse/CNTRLPLANE-947): operator: set oauth-specific relatedObjects dynamically in the operator status [#800](https://github.com/openshift/cluster-authentication-operator/pull/800)
* [OCPBUGS-62941](https://issues.redhat.com/browse/OCPBUGS-62941): (bugfix): configure status controller to remove unset versions [#798](https://github.com/openshift/cluster-authentication-operator/pull/798)
* [OCPBUGS-62447](https://issues.redhat.com/browse/OCPBUGS-62447): Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 [#793](https://github.com/openshift/cluster-authentication-operator/pull/793)
* [API-1835](https://issues.redhat.com/browse/API-1835): test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController [#790](https://github.com/openshift/cluster-authentication-operator/pull/790)
* NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression [#797](https://github.com/openshift/cluster-authentication-operator/pull/797)
* [API-1835](https://issues.redhat.com/browse/API-1835): fix integration tests [#795](https://github.com/openshift/cluster-authentication-operator/pull/795)
* [OCPBUGS-57444](https://issues.redhat.com/browse/OCPBUGS-57444): set appropriate rolling update settings [#789](https://github.com/openshift/cluster-authentication-operator/pull/789)
* NO-JIRA: om: fix integration testing [#788](https://github.com/openshift/cluster-authentication-operator/pull/788)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/c9067c2a4902b0afeb3b288c4ff56fa381a1d1e0...d7f0c37e82940f543a802bf6778c3edb1faf79ee)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5522170949ac45f4d2c56c859bc3fd1005ec2bad)
* [AUTOSCALE-433](https://issues.redhat.com/browse/AUTOSCALE-433): Fixup vpa tests downstream [#394](https://github.com/openshift/kubernetes-autoscaler/pull/394)
* [OCPBUGS-60790](https://issues.redhat.com/browse/OCPBUGS-60790): refactor cloud provider options [#380](https://github.com/openshift/kubernetes-autoscaler/pull/380)
* [AUTOSCALE-335](https://issues.redhat.com/browse/AUTOSCALE-335), [AUTOSCALE-336](https://issues.redhat.com/browse/AUTOSCALE-336), [OCPBUGS-62383](https://issues.redhat.com/browse/OCPBUGS-62383), [OCPBUGS-62477](https://issues.redhat.com/browse/OCPBUGS-62477): 1.34.0 upstream rebase [#386](https://github.com/openshift/kubernetes-autoscaler/pull/386)
* [OCPBUGS-62383](https://issues.redhat.com/browse/OCPBUGS-62383): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 [#383](https://github.com/openshift/kubernetes-autoscaler/pull/383)
* [OCPBUGS-62477](https://issues.redhat.com/browse/OCPBUGS-62477): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 [#384](https://github.com/openshift/kubernetes-autoscaler/pull/384)
* NO-JIRA: Remove OWNERS automation preamble [#382](https://github.com/openshift/kubernetes-autoscaler/pull/382)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...5522170949ac45f4d2c56c859bc3fd1005ec2bad)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/eb990ea483a659b4ced825848e3c58564ce67213)
* [AUTOSCALE-336](https://issues.redhat.com/browse/AUTOSCALE-336): Prepare for 4.21 [#355](https://github.com/openshift/cluster-autoscaler-operator/pull/355)
* [OCPBUGS-62589](https://issues.redhat.com/browse/OCPBUGS-62589): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 [#354](https://github.com/openshift/cluster-autoscaler-operator/pull/354)
* [AUTOSCALE-384](https://issues.redhat.com/browse/AUTOSCALE-384): Add "cordon node before terminating" option to cluster autoscaler resource [#356](https://github.com/openshift/cluster-autoscaler-operator/pull/356)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/147e5a7ff20b46ade7dd932b47e06ca82729f5e8...eb990ea483a659b4ced825848e3c58564ce67213)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/a0a0c738016ba5bf786abf19fe48642653561a40)
* [METAL-1459](https://issues.redhat.com/browse/METAL-1459): add default PrometheusRule deployment for IPE and watch Servicemonitor [#504](https://github.com/openshift/cluster-baremetal-operator/pull/504)
* [METAL-1620](https://issues.redhat.com/browse/METAL-1620): Upgrade Go modules and dependencies [#521](https://github.com/openshift/cluster-baremetal-operator/pull/521)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Mount /etc/pki/ca-trust to machine-os-images [#517](https://github.com/openshift/cluster-baremetal-operator/pull/517)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Enable runtime extraction of aarch64 images [#508](https://github.com/openshift/cluster-baremetal-operator/pull/508)
* [OCPBUGS-62577](https://issues.redhat.com/browse/OCPBUGS-62577): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 [#507](https://github.com/openshift/cluster-baremetal-operator/pull/507)
* [OCPBUGS-60498](https://issues.redhat.com/browse/OCPBUGS-60498): Always have a service for ironic-api port [#510](https://github.com/openshift/cluster-baremetal-operator/pull/510)
* [METAL-1449](https://issues.redhat.com/browse/METAL-1449): optionally deploy IPE [#490](https://github.com/openshift/cluster-baremetal-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb...a0a0c738016ba5bf786abf19fe48642653561a40)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/dc0d4a5cdaf8a7477cab584208dc99352f46efe2)
* [OCPBUGS-62558](https://issues.redhat.com/browse/OCPBUGS-62558): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 [#120](https://github.com/openshift/cluster-bootstrap/pull/120)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/74abc555111bac56a67957ef517ef086e4643c50...dc0d4a5cdaf8a7477cab584208dc99352f46efe2)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/3afd7503745f097c04a2884f8e53563353b9f11e)
* [OCPBUGS-62579](https://issues.redhat.com/browse/OCPBUGS-62579): Updating ose-cluster-api-container image to be consistent with ART for 4.21 [#249](https://github.com/openshift/cluster-api/pull/249)
* NO-JIRA: Update OWNERS [#246](https://github.com/openshift/cluster-api/pull/246)
* [OCPBUGS-57605](https://issues.redhat.com/browse/OCPBUGS-57605): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#242](https://github.com/openshift/cluster-api/pull/242)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...3afd7503745f097c04a2884f8e53563353b9f11e)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5f7410a43e30f666e5d41deee487a719ea8a7d27)
* NO-JIRA: Migrates coderabbit schema to v2 [#409](https://github.com/openshift/cluster-capi-operator/pull/409)
* NO-JIRA: Fix Feedback agent [#407](https://github.com/openshift/cluster-capi-operator/pull/407)
* [OCPBUGS-62892](https://issues.redhat.com/browse/OCPBUGS-62892): openstack: Handle empty MAPO network subnets [#381](https://github.com/openshift/cluster-capi-operator/pull/381)
* [OCPCLOUD-3170](https://issues.redhat.com/browse/OCPCLOUD-3170): Adds CAPI Machine VAP [#361](https://github.com/openshift/cluster-capi-operator/pull/361)
* NO-JIRA: e2e: fix controller-runtime logging warning [#406](https://github.com/openshift/cluster-capi-operator/pull/406)
* No-JIRA: yaml was not rendering correctly [#401](https://github.com/openshift/cluster-capi-operator/pull/401)
* NO-JIRA: Make help, unbind metrics port [#328](https://github.com/openshift/cluster-capi-operator/pull/328)
* NO-JIRA: conversion: CAPI2MAPI set openshift labels for zone, region and instance-type [#393](https://github.com/openshift/cluster-capi-operator/pull/393)
* [OCPBUGS-62325](https://issues.redhat.com/browse/OCPBUGS-62325): Updates InfraMachine watch_filters for MachineSync controller [#371](https://github.com/openshift/cluster-capi-operator/pull/371)
* [OCPCLOUD-2640](https://issues.redhat.com/browse/OCPCLOUD-2640): Adds MachineSet VAP test suite [#404](https://github.com/openshift/cluster-capi-operator/pull/404)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): pkg/util/sync: fix ignoring the Cluster API conversion-data annotation [#403](https://github.com/openshift/cluster-capi-operator/pull/403)
* NO-JIRA: machinesync: improve createOrUpdateCAPIMachine and implement unit tests [#396](https://github.com/openshift/cluster-capi-operator/pull/396)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): sync: allow Cluster API v1beta2 version for ownerrefs and set Cluster v1beta2 ControlPlaneInitialized [#391](https://github.com/openshift/cluster-capi-operator/pull/391)
* [OCPCLOUD-2636](https://issues.redhat.com/browse/OCPCLOUD-2636): Warn users when attempting to change Authoritative API but Synchronized condition is false [#398](https://github.com/openshift/cluster-capi-operator/pull/398)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): machine migration round trip test [#366](https://github.com/openshift/cluster-capi-operator/pull/366)
* [OCPCLOUD-2996](https://issues.redhat.com/browse/OCPCLOUD-2996): Prevent changing .spec.authoritativeAPI on MAPI when Phase Provisioning or is being deleted [#388](https://github.com/openshift/cluster-capi-operator/pull/388)
* [OCPCLOUD-2999](https://issues.redhat.com/browse/OCPCLOUD-2999): AWSMachine status conversion and syncing [#372](https://github.com/openshift/cluster-capi-operator/pull/372)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): manifests-gen: re-enable conversion, validating and mutating webhook configurations [#389](https://github.com/openshift/cluster-capi-operator/pull/389)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): Fix v1beta2 condition setting [#385](https://github.com/openshift/cluster-capi-operator/pull/385)
* [OCPCLOUD-2709](https://issues.redhat.com/browse/OCPCLOUD-2709): Implement MAPI2CAPI conversion of loadbalancers [#348](https://github.com/openshift/cluster-capi-operator/pull/348)
* [OCPBUGS-62570](https://issues.redhat.com/browse/OCPBUGS-62570): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 [#357](https://github.com/openshift/cluster-capi-operator/pull/357)
* [OCPCLOUD-2995](https://issues.redhat.com/browse/OCPCLOUD-2995): Machine status conversion and syncing [#365](https://github.com/openshift/cluster-capi-operator/pull/365)
* NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works [#380](https://github.com/openshift/cluster-capi-operator/pull/380)
* [OCPCLOUD-2641](https://issues.redhat.com/browse/OCPCLOUD-2641): Validate creation of Machine API Machines [#368](https://github.com/openshift/cluster-capi-operator/pull/368)
* [OCPBUGS-62620](https://issues.redhat.com/browse/OCPBUGS-62620): kubeconfig controller: do not error on token secret not yet populated [#373](https://github.com/openshift/cluster-capi-operator/pull/373)
* NO-JIRA: lint: add aliases for machine api's and controller-runtime log [#367](https://github.com/openshift/cluster-capi-operator/pull/367)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): refactor: split machine migration testing into multiple files [#364](https://github.com/openshift/cluster-capi-operator/pull/364)
* NO-JIRA: machine_sync: assorted fixes [#370](https://github.com/openshift/cluster-capi-operator/pull/370)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) [#359](https://github.com/openshift/cluster-capi-operator/pull/359)
* NO-JIRA: Update OWNERS [#353](https://github.com/openshift/cluster-capi-operator/pull/353)
* [OCPCLOUD-3162](https://issues.redhat.com/browse/OCPCLOUD-3162): conversion: do not set ignition version on AWSMachine [#363](https://github.com/openshift/cluster-capi-operator/pull/363)
* NO-JIRA: use go workspaces [#358](https://github.com/openshift/cluster-capi-operator/pull/358)
* [OCPCLOUD-2714](https://issues.redhat.com/browse/OCPCLOUD-2714): Add VAPs to prevent setting of CAPI fields that are not supported by MAPI [#334](https://github.com/openshift/cluster-capi-operator/pull/334)
* No-JIRA: increased timeout [#354](https://github.com/openshift/cluster-capi-operator/pull/354)
* NO-JIRA: Adds AGENTS.md [#349](https://github.com/openshift/cluster-capi-operator/pull/349)
* [OCPBUGS-54703](https://issues.redhat.com/browse/OCPBUGS-54703): Fix conversion of Machines without MachineSet [#351](https://github.com/openshift/cluster-capi-operator/pull/351)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for deleting machine [#345](https://github.com/openshift/cluster-capi-operator/pull/345)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/acf331446369b5307b6b435af14daabdca9fafbc...5f7410a43e30f666e5d41deee487a719ea8a7d27)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/6148c0cca626bcf0bfebcc6dd0c77a41944cba87)
* [SPLAT-2253](https://issues.redhat.com/browse/SPLAT-2253): CCM-AWS config enforce to provision Service NLB with SG under gate [#391](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/391)
* [OCPCLOUD-3081](https://issues.redhat.com/browse/OCPCLOUD-3081): Update to Kube 1.34 deps [#428](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/428)
* [SPLAT-2297](https://issues.redhat.com/browse/SPLAT-2297): Added new cmd flag to launch of vSphere CCM [#394](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/394)
* [OCPBUGS-62585](https://issues.redhat.com/browse/OCPBUGS-62585): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 [#414](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/414)
* [OCPBUGS-51305](https://issues.redhat.com/browse/OCPBUGS-51305): ccm: disable unused secure-serving port and webhook [#415](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/415)
* [OCPBUGS-60385](https://issues.redhat.com/browse/OCPBUGS-60385): Add Microsoft.Network/publicIPAddresses/delete permission [#416](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/416)
* NO-JIRA: Update OWNERS [#413](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/413)
* [OCPBUGS-54490](https://issues.redhat.com/browse/OCPBUGS-54490): Add Azure permissions for Private Link Service operations [#417](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/417)
* [SPLAT-2341](https://issues.redhat.com/browse/SPLAT-2341): Add feature gate support in the cloud-config sync controller [#400](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/276696ccf679830b25df341edb7aae9bb3f4e763...6148c0cca626bcf0bfebcc6dd0c77a41944cba87)
### [cluster-config-api](https://github.com/openshift/api/tree/6711368ea523ea381dafeed164584cb78a7cd129)
* [SPLAT-2539](https://issues.redhat.com/browse/SPLAT-2539): Promoted VSphereMixedNodeEnv to TechPreview [#2582](https://github.com/openshift/api/pull/2582)
* [SPLAT-2206](https://issues.redhat.com/browse/SPLAT-2206): Added AWS dedicated host support [#2484](https://github.com/openshift/api/pull/2484)
* Add test cases for all supported format markers [#2570](https://github.com/openshift/api/pull/2570)
* [CONSOLE-4666](https://issues.redhat.com/browse/CONSOLE-4666): ConsolePlugin v1alpha1 removal: Remove deprecated CRD version [#2534](https://github.com/openshift/api/pull/2534)
* [OCPCLOUD-3173](https://issues.redhat.com/browse/OCPCLOUD-3173): Enable gcp spot instances [#2566](https://github.com/openshift/api/pull/2566)
* [STOR-2297](https://issues.redhat.com/browse/STOR-2297): remove oVirt from ClusterCSIDriver API [#2519](https://github.com/openshift/api/pull/2519)
* [OCPCLOUD-3214](https://issues.redhat.com/browse/OCPCLOUD-3214): Add ClusterAPIMachineManagement feature gate [#2563](https://github.com/openshift/api/pull/2563)
* [OCPCLOUD-3164](https://issues.redhat.com/browse/OCPCLOUD-3164): Add CRDCompatibilityRequirementOperator feature gate [#2565](https://github.com/openshift/api/pull/2565)
* Create shared global parser/universe in codegen [#2558](https://github.com/openshift/api/pull/2558)
* [MCO-1962](https://issues.redhat.com/browse/MCO-1962): Move skew enforcement feature gate to tech preview [#2561](https://github.com/openshift/api/pull/2561)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): config/v1/types_cluster_version: Fix "images that comes" typo [#2560](https://github.com/openshift/api/pull/2560)
* Bring KAL up to date and enable new linters [#2554](https://github.com/openshift/api/pull/2554)
* [OCPBUGS-62987](https://issues.redhat.com/browse/OCPBUGS-62987): Move DynamicConfigurationManager back to DevPreview [#2552](https://github.com/openshift/api/pull/2552)
* envtest-releases: add v1.34.1 to index [#2553](https://github.com/openshift/api/pull/2553)
* [MCO-1941](https://issues.redhat.com/browse/MCO-1941): Add OSStream FeatureGate [#2549](https://github.com/openshift/api/pull/2549)
* hack: switch to `/usr/bin/env bash` [#2551](https://github.com/openshift/api/pull/2551)
* [CORS-4157](https://issues.redhat.com/browse/CORS-4157): AWS, Azure: Add IPFamily to the PlatformStatus within Infra CR [#2499](https://github.com/openshift/api/pull/2499)
* codegen: Improve performance of package loading [#2543](https://github.com/openshift/api/pull/2543)
* Fix use of API_GROUP_VERSIONS running codegen [#2530](https://github.com/openshift/api/pull/2530)
* [STOR-2627](https://issues.redhat.com/browse/STOR-2627): Add MutableCSINodeAllocatableCount to Dev- and TechPreview [#2502](https://github.com/openshift/api/pull/2502)
* Switch to invoking codegen once in general updates [#2540](https://github.com/openshift/api/pull/2540)
* `route`: improve `.spec.tls.termination` doc [#2532](https://github.com/openshift/api/pull/2532)
* [OPRUN-4156](https://issues.redhat.com/browse/OPRUN-4156): Promote OLMv1 Webhook support to GA [#2491](https://github.com/openshift/api/pull/2491)
* [OCPBUGS-55192](https://issues.redhat.com/browse/OCPBUGS-55192): Add IngressController .spec.domain validation [#2308](https://github.com/openshift/api/pull/2308)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): config/v1/types_cluster_version: Tighten force and rollback warnings [#2539](https://github.com/openshift/api/pull/2539)
* [CORENET-6005](https://issues.redhat.com/browse/CORENET-6005): network, virt: graduate preconfigured UDN addresses feature gate [#2496](https://github.com/openshift/api/pull/2496)
* [MCO-1861](https://issues.redhat.com/browse/MCO-1861): Promote ManagedBootImagesvSphere feature gate to default [#2529](https://github.com/openshift/api/pull/2529)
* [MCO-1873](https://issues.redhat.com/browse/MCO-1873): promote ManagedBootImagesAzure to default [#2526](https://github.com/openshift/api/pull/2526)
* [OCPBUGS-60457](https://issues.redhat.com/browse/OCPBUGS-60457): payload-command: remove authentication CR from hypershift payload [#2523](https://github.com/openshift/api/pull/2523)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#2427](https://github.com/openshift/api/pull/2427)
* [CNTRLPLANE-1576](https://issues.redhat.com/browse/CNTRLPLANE-1576): add event-ttl configuration to kube-apiserver [#2520](https://github.com/openshift/api/pull/2520)
* [CNTRLPLANE-1614](https://issues.redhat.com/browse/CNTRLPLANE-1614): add event-ttl feature gate [#2525](https://github.com/openshift/api/pull/2525)
* : promote InsightConfigAPI and OnDemandDataGather to v1 [#2448](https://github.com/openshift/api/pull/2448)
* Switch to slices stable sort on manifest merging [#2524](https://github.com/openshift/api/pull/2524)
* Use separate serialization linting config for Machine API provider types [#2522](https://github.com/openshift/api/pull/2522)
* Add initial AI api-review configuration [#2489](https://github.com/openshift/api/pull/2489)
* Support AMD SEV-SNP on AWS [#2424](https://github.com/openshift/api/pull/2424)
* [MCO-1805](https://issues.redhat.com/browse/MCO-1805): MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API [#2396](https://github.com/openshift/api/pull/2396)
* [OCPBUGS-62482](https://issues.redhat.com/browse/OCPBUGS-62482): Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 [#2513](https://github.com/openshift/api/pull/2513)
* [OCPBUGS-55649](https://issues.redhat.com/browse/OCPBUGS-55649): Remove SetEIPForNLBIngressController feature gate [#2501](https://github.com/openshift/api/pull/2501)
* [OCPBUGS-61382](https://issues.redhat.com/browse/OCPBUGS-61382), [STOR-2533](https://issues.redhat.com/browse/STOR-2533): move VolumeAttributesClass to GA [#2471](https://github.com/openshift/api/pull/2471)
* Promote BYO OIDC features [#2454](https://github.com/openshift/api/pull/2454)
* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#2400](https://github.com/openshift/api/pull/2400)
* [OCPBUGS-62068](https://issues.redhat.com/browse/OCPBUGS-62068): NodeSwap Feature Gate usage to be removed [#2494](https://github.com/openshift/api/pull/2494)
* [OCPBUGS-59939](https://issues.redhat.com/browse/OCPBUGS-59939): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2507](https://github.com/openshift/api/pull/2507)
* [OCPBUGS-59940](https://issues.redhat.com/browse/OCPBUGS-59940): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2506](https://github.com/openshift/api/pull/2506)
* (bugfix): crdify generator returns aggregated error when validations fail [#2493](https://github.com/openshift/api/pull/2493)
* [MCO-1669](https://issues.redhat.com/browse/MCO-1669): add BootImageSkewEnforcement API [#2357](https://github.com/openshift/api/pull/2357)
* remove unused feature gate InsightsConfigAPI [#2474](https://github.com/openshift/api/pull/2474)
* [OCPBUGS-61689](https://issues.redhat.com/browse/OCPBUGS-61689): Add 'AGE' print column to `MachineConfigNode` object [#2476](https://github.com/openshift/api/pull/2476)
* NO-JIRA: tooling: add crdify generator to run crdify against CRD changes [#2472](https://github.com/openshift/api/pull/2472)
* Update controller-tools to latest on fork [#2478](https://github.com/openshift/api/pull/2478)
* Monitoring API: Add Metric server config [#2322](https://github.com/openshift/api/pull/2322)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Add CBOR feature gate [#2235](https://github.com/openshift/api/pull/2235)
* NO-JIRA: New rules about CO's conditions [#2469](https://github.com/openshift/api/pull/2469)
* apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats [#2467](https://github.com/openshift/api/pull/2467)
* [SPLAT-2482](https://issues.redhat.com/browse/SPLAT-2482): create new featuregate for ClusterAPIMachineManagementVSphere [#2466](https://github.com/openshift/api/pull/2466)
* [MCO-1675](https://issues.redhat.com/browse/MCO-1675): Update API for Status Reporting needs (REBASED) [#2442](https://github.com/openshift/api/pull/2442)
* [CORS-3993](https://issues.redhat.com/browse/CORS-3993): Promote GCPClusterHostedDNS to Default [#2300](https://github.com/openshift/api/pull/2300)
* Adjust typos [#2243](https://github.com/openshift/api/pull/2243)
* Update schema checker to avoid incorrect new required fields checks [#2470](https://github.com/openshift/api/pull/2470)
* config/v1/cluster_operator improve documentation [#2344](https://github.com/openshift/api/pull/2344)
* Update NodeSwap with owner and doc blurb. [#2053](https://github.com/openshift/api/pull/2053)
* [CORS-4136](https://issues.redhat.com/browse/CORS-4136): Add Feature gates for AWS, Azure and GCP Dual Stack support [#2430](https://github.com/openshift/api/pull/2430)
* [Full changelog](https://github.com/openshift/api/compare/41627d81e9c18fbcc3f7ff6de2ba50e0b98435c4...6711368ea523ea381dafeed164584cb78a7cd129)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/347bebcc14f9b512b343c90b0414e6ed4c2d6b9d)
* [OCPBUGS-62330](https://issues.redhat.com/browse/OCPBUGS-62330): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 [#450](https://github.com/openshift/cluster-config-operator/pull/450)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/657754e2beaed6295ff28bb0f7813cb1c9ce35b2...347bebcc14f9b512b343c90b0414e6ed4c2d6b9d)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2220a43d9352e2f57c53e348ca61acb7209b79e7)
* [OCPCLOUD-3042](https://issues.redhat.com/browse/OCPCLOUD-3042): Create cluster-control-plane-machine-set-operator-ext command [#372](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/372)
* [OCPCLOUD-3084](https://issues.redhat.com/browse/OCPCLOUD-3084): Bump k8s dependencies to 1.34 [#371](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/371)
* [OCPBUGS-62588](https://issues.redhat.com/browse/OCPBUGS-62588): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 [#369](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/369)
* NO-JIRA: Update OWNERS [#367](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/367)
* [MCO-1866](https://issues.redhat.com/browse/MCO-1866): Ignore boot image differences while reconciling Provider Configs [#368](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/0bbafe24ade564bc62554251f36de90d524abcde...2220a43d9352e2f57c53e348ca61acb7209b79e7)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/588e532f520b71a0ce995a48f38294b9c4bb1e26)
* [TRT-2419](https://issues.redhat.com/browse/TRT-2419): Revert "Merge pull request #255 from tchap/userns-operand" [#256](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/256)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): assets: Use restricted-v3 scc for the deployments [#255](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/255)
* [STOR-2534](https://issues.redhat.com/browse/STOR-2534): Update CRDs from external-snapshotter 8.4.0 [#252](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/252)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for `csi-snapshot-controller` operand [#250](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/250)
* Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 [#245](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/245)
* [OCPBUGS-62247](https://issues.redhat.com/browse/OCPBUGS-62247): add all-egress label to deployments on HCP and IBM [#243](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/019abe0c7671962829eb91269e1d76916966320e...588e532f520b71a0ce995a48f38294b9c4bb1e26)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/2ec8a3de79d73760abbccdbcbbf9951fc93097cd)
* [NE-2138](https://issues.redhat.com/browse/NE-2138): Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 [#448](https://github.com/openshift/cluster-dns-operator/pull/448)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#449](https://github.com/openshift/cluster-dns-operator/pull/449)
* NO-JIRA: Add davidesalerno to OWNERS [#447](https://github.com/openshift/cluster-dns-operator/pull/447)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/82578923164636746e0d74d594ab32d83a660c0b...2ec8a3de79d73760abbccdbcbbf9951fc93097cd)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/336e1348334fe498752ffebb8c2d9ee649697c0d)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Enable user namespace for deployment [#1512](https://github.com/openshift/cluster-etcd-operator/pull/1512)
* [OCPBUGS-63543](https://issues.redhat.com/browse/OCPBUGS-63543): fix: update redfish url validation [#1504](https://github.com/openshift/cluster-etcd-operator/pull/1504)
* [OCPBUGS-63240](https://issues.redhat.com/browse/OCPBUGS-63240): [TNF] Fix job controller startup reliability with retry and degraded status [#1500](https://github.com/openshift/cluster-etcd-operator/pull/1500)
* [OCPEDGE-1885](https://issues.redhat.com/browse/OCPEDGE-1885), [OCPEDGE-2088](https://issues.redhat.com/browse/OCPEDGE-2088): Updated state transitions & tests for TNF setup job [#1481](https://github.com/openshift/cluster-etcd-operator/pull/1481)
* [OCPBUGS-60273](https://issues.redhat.com/browse/OCPBUGS-60273): Ensure revision.json persists on ungraceful shutdown [#1494](https://github.com/openshift/cluster-etcd-operator/pull/1494)
* NO-JIRA: use scrapeClass for service monitors [#1497](https://github.com/openshift/cluster-etcd-operator/pull/1497)
* NO-JIRA: add runbook urls for alerting rules [#1496](https://github.com/openshift/cluster-etcd-operator/pull/1496)
* NO-JIRA: feat: update the ip parsing for the nodes [#1479](https://github.com/openshift/cluster-etcd-operator/pull/1479)
* [OCPEDGE-2183](https://issues.redhat.com/browse/OCPEDGE-2183): Updating Quorum detection logic to absolve TNF of quorum loss reports. [#1483](https://github.com/openshift/cluster-etcd-operator/pull/1483)
* NO-JIRA: remove etcd-backup-server from static pod lists [#1492](https://github.com/openshift/cluster-etcd-operator/pull/1492)
* [CNTRLPLANE-1315](https://issues.redhat.com/browse/CNTRLPLANE-1315): Add OpenShift Tests Extension (OTE) for cluster-etcd-operator [#1488](https://github.com/openshift/cluster-etcd-operator/pull/1488)
* [OCPBUGS-62518](https://issues.redhat.com/browse/OCPBUGS-62518): Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 [#1489](https://github.com/openshift/cluster-etcd-operator/pull/1489)
* NO-JIRA: Use secure cipher suites [#1477](https://github.com/openshift/cluster-etcd-operator/pull/1477)
* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): configure probes based on quota size [#1460](https://github.com/openshift/cluster-etcd-operator/pull/1460)
* NO-JIRA: Add priority field to prevent early shutdown [#1476](https://github.com/openshift/cluster-etcd-operator/pull/1476)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0d7067cb286ad4efad5cad9bcff17656ef9827a3...336e1348334fe498752ffebb8c2d9ee649697c0d)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/2212ae9c5d1b1dfeaf2036677428968a031335f5)
* [OCPBUGS-62573](https://issues.redhat.com/browse/OCPBUGS-62573): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 [#1256](https://github.com/openshift/cluster-image-registry-operator/pull/1256)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b04c7c121851704973a94a50e42af1425045899c...2212ae9c5d1b1dfeaf2036677428968a031335f5)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/8773f8f65be6da42fadbae9b358e082efec8fca5)
* [OCPBUGS-61508](https://issues.redhat.com/browse/OCPBUGS-61508): IngressOperator not exposing some metrics for degraded… [#1290](https://github.com/openshift/cluster-ingress-operator/pull/1290)
* [NE-1334](https://issues.redhat.com/browse/NE-1334): Enhancement to add operator channel when creating gatewayclass [#1301](https://github.com/openshift/cluster-ingress-operator/pull/1301)
* [NE-1334](https://issues.redhat.com/browse/NE-1334): Enhancement to add brew and stage secrets for pre-release image testing [#1291](https://github.com/openshift/cluster-ingress-operator/pull/1291)
* [OCPBUGS-43919](https://issues.redhat.com/browse/OCPBUGS-43919): desiredWildcardDNSRecord: Check for nil LB field [#1189](https://github.com/openshift/cluster-ingress-operator/pull/1189)
* [OCPBUGS-62400](https://issues.redhat.com/browse/OCPBUGS-62400): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 [#1286](https://github.com/openshift/cluster-ingress-operator/pull/1286)
* [NE-1334](https://issues.redhat.com/browse/NE-1334): Script to install ossm pre-release operator and run GWAPI e2e tests [#1283](https://github.com/openshift/cluster-ingress-operator/pull/1283)
* [OCPBUGS-55649](https://issues.redhat.com/browse/OCPBUGS-55649): Remove SetEIPForNLBIngressController feature gate [#1280](https://github.com/openshift/cluster-ingress-operator/pull/1280)
* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#1242](https://github.com/openshift/cluster-ingress-operator/pull/1242)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#1281](https://github.com/openshift/cluster-ingress-operator/pull/1281)
* [NE-2139](https://issues.redhat.com/browse/NE-2139): Kubernetes to 1.33.4 and controller-runtime to 0.21 [#1279](https://github.com/openshift/cluster-ingress-operator/pull/1279)
* NO-JIRA: Add davidesalerno to OWNERS [#1278](https://github.com/openshift/cluster-ingress-operator/pull/1278)
* [OCPBUGS-60859](https://issues.redhat.com/browse/OCPBUGS-60859): Fix logic on gatewayapi test cleanup [#1273](https://github.com/openshift/cluster-ingress-operator/pull/1273)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...8773f8f65be6da42fadbae9b358e082efec8fca5)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/c5e43207ec4f1efa9fa2cdd069f9b314bae61845)
* [OCPBUGS-33013](https://issues.redhat.com/browse/OCPBUGS-33013): deps: Update library-go to update staticpod pkg [#1917](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1917)
* [CNTRLPLANE-1721](https://issues.redhat.com/browse/CNTRLPLANE-1721): Create separate Go module for test extension [#1953](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1953)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): scc: Grant authenticated users use of restricted-v3 [#1944](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1944)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespace for the operator [#1934](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1934)
* [CNTRLPLANE-1616](https://issues.redhat.com/browse/CNTRLPLANE-1616): add event-ttl config observer [#1938](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1938)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): scc: restricted-v3: Fix runAsUser range [#1947](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1947)
* NO-JIRA: Update the deprecated API usage alerts for 1.34 [#1946](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1946)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#1939](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1939)
* [OCPNODE-3758](https://issues.redhat.com/browse/OCPNODE-3758): alpha/beta apis for DRA should not be enabled in 1.34 [#1932](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1932)
* [OCPBUGS-60045](https://issues.redhat.com/browse/OCPBUGS-60045): Bump library-go to latest master [#1928](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1928)
* [OCPBUGS-62450](https://issues.redhat.com/browse/OCPBUGS-62450): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 [#1931](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1931)
* NO-JIRA: Add priority field to prevent early shutdown [#1915](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1915)
* NO-ISSUE: Use scrapeClass for service monitors [#1930](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1930)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 [#1927](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1927)
* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): move alerting rules from CMO over [#1922](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1922)
* Re-apply "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1910](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1910)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 [#1921](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1921)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/263f18b6c9eb82e4aabf586093b2cc711e674e77...c5e43207ec4f1efa9fa2cdd069f9b314bae61845)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/aec493448525ff03d0da25a4bf885fbd35214642)
* [OCPBUGS-62569](https://issues.redhat.com/browse/OCPBUGS-62569): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.21 [#63](https://github.com/openshift/cluster-api-operator/pull/63)
* [OCPBUGS-57562](https://issues.redhat.com/browse/OCPBUGS-57562): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 [#58](https://github.com/openshift/cluster-api-operator/pull/58)
* NO-JIRA: Update OWNERS [#60](https://github.com/openshift/cluster-api-operator/pull/60)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/234e218207ec963df04ec1fedad85a421eb7a1ff...aec493448525ff03d0da25a4bf885fbd35214642)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/e1cdb251d9ef7e74265bb7c8884a47cc0803068b)
* [OCPBUGS-33013](https://issues.redhat.com/browse/OCPBUGS-33013): deps: Update library-go to update staticpod pkg [#892](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/892)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#888](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/888)
* no-jira: Add priority field to prevent early shutdown [#865](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/865)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespaces for the operator [#886](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/886)
* NO-ISSUE: Use scrapeClass for service monitors [#880](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/880)
* [OCPBUGS-62408](https://issues.redhat.com/browse/OCPBUGS-62408): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 [#885](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/885)
* [OCPBUGS-62255](https://issues.redhat.com/browse/OCPBUGS-62255): Throttle resourcesynccontroller on pairs with dual writers. [#881](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/881)
* [WRKLDS-1556](https://issues.redhat.com/browse/WRKLDS-1556): Remove --cloud-provider=external from KCM [#862](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/862)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixing arch issue [#869](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/869)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixed hardcode arch issue [#866](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/866)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/438c9dba80ddadeabe9efe4a654297a7b550b2b8...e1cdb251d9ef7e74265bb7c8884a47cc0803068b)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/04cb35e0397a3261e783a311b3b8590b8839ea2d)
* [OCPNODE-3779](https://issues.redhat.com/browse/OCPNODE-3779): make config.Spec.ProfileCustomizations.DynamicResourceAllocation defunct [#587](https://github.com/openshift/cluster-kube-scheduler-operator/pull/587)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): deps: Update library-go [#589](https://github.com/openshift/cluster-kube-scheduler-operator/pull/589)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#583](https://github.com/openshift/cluster-kube-scheduler-operator/pull/583)
* no-jira: Add priority field to prevent early shutdown [#572](https://github.com/openshift/cluster-kube-scheduler-operator/pull/572)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Align user namespaces for the operator [#581](https://github.com/openshift/cluster-kube-scheduler-operator/pull/581)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespace for the operator [#580](https://github.com/openshift/cluster-kube-scheduler-operator/pull/580)
* [OCPBUGS-62609](https://issues.redhat.com/browse/OCPBUGS-62609): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 [#579](https://github.com/openshift/cluster-kube-scheduler-operator/pull/579)
* NO-ISSUE: Use scrapeClass for service monitors [#578](https://github.com/openshift/cluster-kube-scheduler-operator/pull/578)
* [OCPBUGS-61301](https://issues.redhat.com/browse/OCPBUGS-61301): Add readonlyRootFilesystem [#575](https://github.com/openshift/cluster-kube-scheduler-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/58cbd296eecc61c0871739588ae65af9c05e87a6...04cb35e0397a3261e783a311b3b8590b8839ea2d)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/194b0498b61d1774382c8bb006e59c13c93ee7cf)
* [OCPBUGS-62444](https://issues.redhat.com/browse/OCPBUGS-62444): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 [#132](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/132)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fixing arch issue [#130](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/130)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fix arch issue [#128](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/5adc14299739bc64c8812cbab0b0ff2d12863602...194b0498b61d1774382c8bb006e59c13c93ee7cf)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/d864813cd3ab01c0f975b2bf41e9046948f0afa1)
* [OCPCLOUD-3082](https://issues.redhat.com/browse/OCPCLOUD-3082): K8s 1.34 bump and update dependencies [#282](https://github.com/openshift/cluster-machine-approver/pull/282)
* [OCPBUGS-63519](https://issues.redhat.com/browse/OCPBUGS-63519): port 9193 need to be internal and port 9194 need to have a service [#279](https://github.com/openshift/cluster-machine-approver/pull/279)
* [OCPBUGS-62583](https://issues.redhat.com/browse/OCPBUGS-62583): NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 [#277](https://github.com/openshift/cluster-machine-approver/pull/277)
* NO-JIRA: Update OWNERS [#276](https://github.com/openshift/cluster-machine-approver/pull/276)
* NO-JIRA: set machine-approver-controller as default container [#278](https://github.com/openshift/cluster-machine-approver/pull/278)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/b3c82b2eec66ae3ae510df0603af1212c34be618...d864813cd3ab01c0f975b2bf41e9046948f0afa1)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/aa9190b0f33fcba5e8dbfcb52bb8ca7632b15219)
* [MON-4392](https://issues.redhat.com/browse/MON-4392): set serviceDiscoveryRole:EndpointSlice for kubelet and node-exporter servicemonitors [#2742](https://github.com/openshift/cluster-monitoring-operator/pull/2742)
* NO-ISSUE: bump jsonnet dependencies [#2741](https://github.com/openshift/cluster-monitoring-operator/pull/2741)
* [MON-4296](https://issues.redhat.com/browse/MON-4296): Bump prometheus-operator libs to v0.86.2 [#2720](https://github.com/openshift/cluster-monitoring-operator/pull/2720)
* [TRT-2395](https://issues.redhat.com/browse/TRT-2395): Revert "OCPBUGS-61088: create networkpolicy settings for in-cluster monitoring" [#2738](https://github.com/openshift/cluster-monitoring-operator/pull/2738)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2728](https://github.com/openshift/cluster-monitoring-operator/pull/2728)
* [OCPBUGS-62310](https://issues.redhat.com/browse/OCPBUGS-62310): Fix KSM deny-list typo [#2677](https://github.com/openshift/cluster-monitoring-operator/pull/2677)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2712](https://github.com/openshift/cluster-monitoring-operator/pull/2712)
* NO-JIRA: clarify ExternalLabels doc [#2691](https://github.com/openshift/cluster-monitoring-operator/pull/2691)
* [MON-4398](https://issues.redhat.com/browse/MON-4398): Enable UTF-8 by default in admission-webhook [#2704](https://github.com/openshift/cluster-monitoring-operator/pull/2704)
* [OCPBUGS-45671](https://issues.redhat.com/browse/OCPBUGS-45671): chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2717](https://github.com/openshift/cluster-monitoring-operator/pull/2717)
* [MON-4383](https://issues.redhat.com/browse/MON-4383): feat(auto_docs_examples): adjust and add more examples [#2573](https://github.com/openshift/cluster-monitoring-operator/pull/2573)
* [MON-4408](https://issues.redhat.com/browse/MON-4408): chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple [#2714](https://github.com/openshift/cluster-monitoring-operator/pull/2714)
* [OCPBUGS-62276](https://issues.redhat.com/browse/OCPBUGS-62276): add tls configuration for the monitoring plugin deployment [#2706](https://github.com/openshift/cluster-monitoring-operator/pull/2706)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2705](https://github.com/openshift/cluster-monitoring-operator/pull/2705)
* [OCPBUGS-62972](https://issues.redhat.com/browse/OCPBUGS-62972): enhance case 66736 [#2708](https://github.com/openshift/cluster-monitoring-operator/pull/2708)
* NO-ISSUE: Update jsonnet dependencies [#2696](https://github.com/openshift/cluster-monitoring-operator/pull/2696)
* [OCPBUGS-62160](https://issues.redhat.com/browse/OCPBUGS-62160): Remove AlertManager endpoints when disabled [#2684](https://github.com/openshift/cluster-monitoring-operator/pull/2684)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2703](https://github.com/openshift/cluster-monitoring-operator/pull/2703)
* [MON-4395](https://issues.redhat.com/browse/MON-4395): Bump prometheus-operator to v0.86.0 [#2698](https://github.com/openshift/cluster-monitoring-operator/pull/2698)
* NO-ISSUE: set openshift-state-metrics as default container [#2693](https://github.com/openshift/cluster-monitoring-operator/pull/2693)
* [OCPBUGS-61661](https://issues.redhat.com/browse/OCPBUGS-61661): Remove cluster from non-multicluster dashboards [#2679](https://github.com/openshift/cluster-monitoring-operator/pull/2679)
* [MON-4384](https://issues.redhat.com/browse/MON-4384): adding Blackwell GPU device to accelerators configmap [#2689](https://github.com/openshift/cluster-monitoring-operator/pull/2689)
* NO-ISSUE: chore: remove image locations in assets [#2683](https://github.com/openshift/cluster-monitoring-operator/pull/2683)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2687](https://github.com/openshift/cluster-monitoring-operator/pull/2687)
* NO-ISSUE: chore: remove mentions of prometheus Adapter [#2682](https://github.com/openshift/cluster-monitoring-operator/pull/2682)
* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): remove Kubernetes API alerting rules [#2671](https://github.com/openshift/cluster-monitoring-operator/pull/2671)
* NO-JIRA: chore: bump jsonnet dependencies [#2649](https://github.com/openshift/cluster-monitoring-operator/pull/2649)
* [OCPBUGS-62109](https://issues.redhat.com/browse/OCPBUGS-62109): test: remove image registry e2e tests [#2681](https://github.com/openshift/cluster-monitoring-operator/pull/2681)
* NO-ISSUE: update Go dependencies [#2674](https://github.com/openshift/cluster-monitoring-operator/pull/2674)
* [MON-4346](https://issues.redhat.com/browse/MON-4346): Bump Go to 1.24 [#2655](https://github.com/openshift/cluster-monitoring-operator/pull/2655)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2673](https://github.com/openshift/cluster-monitoring-operator/pull/2673)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages metric from MCO to telemetry [#2638](https://github.com/openshift/cluster-monitoring-operator/pull/2638)
* NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 [#2662](https://github.com/openshift/cluster-monitoring-operator/pull/2662)
* [MON-4344](https://issues.redhat.com/browse/MON-4344): chore: port the test suite over from openshift-tests-private [#2635](https://github.com/openshift/cluster-monitoring-operator/pull/2635)
* [MON-4371](https://issues.redhat.com/browse/MON-4371): chore(prometheus): enable use-uncached-io feature flag [#2637](https://github.com/openshift/cluster-monitoring-operator/pull/2637)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2668](https://github.com/openshift/cluster-monitoring-operator/pull/2668)
* [OCPBUGS-61113](https://issues.redhat.com/browse/OCPBUGS-61113): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2657](https://github.com/openshift/cluster-monitoring-operator/pull/2657)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2663](https://github.com/openshift/cluster-monitoring-operator/pull/2663)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2660](https://github.com/openshift/cluster-monitoring-operator/pull/2660)
* [OCPBUGS-61135](https://issues.redhat.com/browse/OCPBUGS-61135): Revert "MON-4343: Cleanup deprecate pa config" [#2658](https://github.com/openshift/cluster-monitoring-operator/pull/2658)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/870b44fc269ae4e790a3487d1795880d93ff72a9...aa9190b0f33fcba5e8dbfcb52bb8ca7632b15219)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fda7a9f07ab6f78d032d310cdd77f21d04f1289a)
* [CORENET-6465](https://issues.redhat.com/browse/CORENET-6465): Remove unneeded logging config from managed ovn-kubernetes [#2816](https://github.com/openshift/cluster-network-operator/pull/2816)
* [CORENET-6488](https://issues.redhat.com/browse/CORENET-6488): Preserve custom resource requests on ovn-control-plane pods [#2825](https://github.com/openshift/cluster-network-operator/pull/2825)
* NO-JIRA: add wiki link for using ./hack/run-locally.sh [#2824](https://github.com/openshift/cluster-network-operator/pull/2824)
* [OCPBUGS-63743](https://issues.redhat.com/browse/OCPBUGS-63743): Rename transit subnet flags [#2828](https://github.com/openshift/cluster-network-operator/pull/2828)
* [OCPBUGS-60032](https://issues.redhat.com/browse/OCPBUGS-60032): Configure CVO to delete default-account role binding [#2758](https://github.com/openshift/cluster-network-operator/pull/2758)
* [SPLAT-2503](https://issues.redhat.com/browse/SPLAT-2503): Fixed "null" value for vSphere api and ingress VIP in UPI scenario [#2795](https://github.com/openshift/cluster-network-operator/pull/2795)
* [CORENET-6423](https://issues.redhat.com/browse/CORENET-6423): api, l2udn: subnets must be masked [#2808](https://github.com/openshift/cluster-network-operator/pull/2808)
* [CORENET-6311](https://issues.redhat.com/browse/CORENET-6311): Skip running _stackmanager for libreswan 5.3+ [#2787](https://github.com/openshift/cluster-network-operator/pull/2787)
* [OCPBUGS-62457](https://issues.redhat.com/browse/OCPBUGS-62457): Updating cluster-network-operator-container image to be consistent with ART for 4.21 [#2807](https://github.com/openshift/cluster-network-operator/pull/2807)
* [OCPBUGS-54806](https://issues.redhat.com/browse/OCPBUGS-54806): Add recording rules for UDN telemetry [#2697](https://github.com/openshift/cluster-network-operator/pull/2697)
* [OCPBUGS-61215](https://issues.redhat.com/browse/OCPBUGS-61215): Tweak iptables-alerter to try to avoid crictl bug [#2802](https://github.com/openshift/cluster-network-operator/pull/2802)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Add drop flows for GARP [#2801](https://github.com/openshift/cluster-network-operator/pull/2801)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2797](https://github.com/openshift/cluster-network-operator/pull/2797)
* [OCPBUGS-61561](https://issues.redhat.com/browse/OCPBUGS-61561): Relax label req. of DPU/DPU Host/Smart NIC [#2786](https://github.com/openshift/cluster-network-operator/pull/2786)
* Revert "OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes" [#2796](https://github.com/openshift/cluster-network-operator/pull/2796)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2605](https://github.com/openshift/cluster-network-operator/pull/2605)
* [OCPBUGS-60421](https://issues.redhat.com/browse/OCPBUGS-60421): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2785](https://github.com/openshift/cluster-network-operator/pull/2785)
* [CORENET-6327](https://issues.redhat.com/browse/CORENET-6327): Update linter [#2783](https://github.com/openshift/cluster-network-operator/pull/2783)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/1666a71c205071b6d44bfa57c0ebd3f0054fa1cd...fda7a9f07ab6f78d032d310cdd77f21d04f1289a)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a3e9663933a2fc4e4d634c7bb33b4c3f8689c6ce)
* NO-JIRA: Revert "E2E: skip stalld test case checking sched_fifo" [#1429](https://github.com/openshift/cluster-node-tuning-operator/pull/1429)
* [OCPBUGS-65489](https://issues.redhat.com/browse/OCPBUGS-65489): Add more entries to relatedObjects [#1431](https://github.com/openshift/cluster-node-tuning-operator/pull/1431)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Use restricted-v3 scc for the operator [#1430](https://github.com/openshift/cluster-node-tuning-operator/pull/1430)
* [OCPNODE-3874](https://issues.redhat.com/browse/OCPNODE-3874): Remove CgroupModeV1 reference from the code [#1428](https://github.com/openshift/cluster-node-tuning-operator/pull/1428)
* [OCPBUGS-62836](https://issues.redhat.com/browse/OCPBUGS-62836): E2E: Pass pull secret path to pull cnf-tests [#1402](https://github.com/openshift/cluster-node-tuning-operator/pull/1402)
* [OCPBUGS-63190](https://issues.redhat.com/browse/OCPBUGS-63190): e2e:hugepages: changing tests to use hugepages-allocator tool [#1400](https://github.com/openshift/cluster-node-tuning-operator/pull/1400)
* [OCPBUGS-63724](https://issues.redhat.com/browse/OCPBUGS-63724): e2e:llc: skip test when no BM worker is found [#1419](https://github.com/openshift/cluster-node-tuning-operator/pull/1419)
* [OCPBUGS-60218](https://issues.redhat.com/browse/OCPBUGS-60218): PPC: ghw: filter out namespaces dir [#1403](https://github.com/openshift/cluster-node-tuning-operator/pull/1403)
* NO-ISSUE: pkg/metrics/server: Log client-CA-bundle handling [#1412](https://github.com/openshift/cluster-node-tuning-operator/pull/1412)
* NO-JIRA: Address false reports of bootcmdline conflicts [#1371](https://github.com/openshift/cluster-node-tuning-operator/pull/1371)
* NO-JIRA: Fix support for nvidia-smi [#1410](https://github.com/openshift/cluster-node-tuning-operator/pull/1410)
* [OCPBUGS-62940](https://issues.redhat.com/browse/OCPBUGS-62940): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1414](https://github.com/openshift/cluster-node-tuning-operator/pull/1414)
* NO-ISSUE: pkg/metrics/server: Log bind address [#1411](https://github.com/openshift/cluster-node-tuning-operator/pull/1411)
* [OCPBUGS-62839](https://issues.redhat.com/browse/OCPBUGS-62839): E2E: Add test cases related to schedulable control plane nodes [#1405](https://github.com/openshift/cluster-node-tuning-operator/pull/1405)
* [OCPBUGS-62835](https://issues.redhat.com/browse/OCPBUGS-62835): E2E: llc: make sure to remove any trailing newspaces [#1407](https://github.com/openshift/cluster-node-tuning-operator/pull/1407)
* [OCPBUGS-62153](https://issues.redhat.com/browse/OCPBUGS-62153): E2E: skip SMT disabled test when L3 cache spans entire NUMA node [#1397](https://github.com/openshift/cluster-node-tuning-operator/pull/1397)
* [OCPBUGS-62605](https://issues.redhat.com/browse/OCPBUGS-62605): e2e: refactor GetSMTLevel to remove Gomega assertions [#1399](https://github.com/openshift/cluster-node-tuning-operator/pull/1399)
* [OCPBUGS-62578](https://issues.redhat.com/browse/OCPBUGS-62578): Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 [#1391](https://github.com/openshift/cluster-node-tuning-operator/pull/1391)
* [OCPBUGS-62091](https://issues.redhat.com/browse/OCPBUGS-62091): E2E: Add function to check control plane nodes are schedulable. [#1396](https://github.com/openshift/cluster-node-tuning-operator/pull/1396)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2ed182ba57106a7c8cc727aa003e46be079b7dd9...a3e9663933a2fc4e4d634c7bb33b4c3f8689c6ce)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/050f9d20e026aae68001d7798aef095db2e5526d)
* NO-ISSUE: Update dependencies and go to 1.24.6 [#150](https://github.com/openshift/cluster-olm-operator/pull/150)
* [OCPBUGS-63617](https://issues.redhat.com/browse/OCPBUGS-63617): Update both disable and enable lists when enabling/disabling features [#148](https://github.com/openshift/cluster-olm-operator/pull/148)
* [OCPBUGS-62173](https://issues.redhat.com/browse/OCPBUGS-62173): Add TLS config observer to update opcon/catd [#145](https://github.com/openshift/cluster-olm-operator/pull/145)
* [OPRUN-4157](https://issues.redhat.com/browse/OPRUN-4157): Update openshift/api to latest master for WebHook GA [#146](https://github.com/openshift/cluster-olm-operator/pull/146)
* [OPRUN-4207](https://issues.redhat.com/browse/OPRUN-4207): Update feature-gate processing to support disabled features [#144](https://github.com/openshift/cluster-olm-operator/pull/144)
* NO-ISSUE: Remove conditionals for cp-manifests use [#142](https://github.com/openshift/cluster-olm-operator/pull/142)
* [OPRUN-4079](https://issues.redhat.com/browse/OPRUN-4079): Use helm to generate manifests [#140](https://github.com/openshift/cluster-olm-operator/pull/140)
* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/cluster-olm-operator/pull/138)
* [OCPBUGS-61873](https://issues.redhat.com/browse/OCPBUGS-61873): Update RBAC to update/patch/delete what we create [#139](https://github.com/openshift/cluster-olm-operator/pull/139)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...050f9d20e026aae68001d7798aef095db2e5526d)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/c2d0127291dfe824d9591d4e37ec319a739d988e)
* [OCPBUGS-62500](https://issues.redhat.com/browse/OCPBUGS-62500): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 [#626](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/626)
* NO-JIRA: Bump library go rm co dep [#625](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf...c2d0127291dfe824d9591d4e37ec319a739d988e)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/12b7668d70bdb07d5d05304a7bcaeb6a5cc5ef3b)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Use user namespace for the operator [#397](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/397)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespaces for the operands [#400](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/400)
* [OCPBUGS-62494](https://issues.redhat.com/browse/OCPBUGS-62494): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 [#399](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/399)
* [CNTRLPLANE-1307](https://issues.redhat.com/browse/CNTRLPLANE-1307): set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test [#395](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/aa455c043152123595c2b4f72e02279aad9dd48a...12b7668d70bdb07d5d05304a7bcaeb6a5cc5ef3b)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/ef703966fe6e82f5f255b06bc5c758f105bf8b28)
* [OCPBUGS-62440](https://issues.redhat.com/browse/OCPBUGS-62440): Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 [#169](https://github.com/openshift/cluster-policy-controller/pull/169)
* [OCPBUGS-57191](https://issues.redhat.com/browse/OCPBUGS-57191): fix(psalabelsyncer): return an error instead of panic when converting an unknown volume [#167](https://github.com/openshift/cluster-policy-controller/pull/167)
* NO-JIRA: scc allocation controller: Use server-side apply [#165](https://github.com/openshift/cluster-policy-controller/pull/165)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/47c783103216aa5e1242632127a5d8f98b8b7455...ef703966fe6e82f5f255b06bc5c758f105bf8b28)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/14236f82a2cd11af091ed8ec7e6c437cb6bce092)
* [OCPBUGS-63481](https://issues.redhat.com/browse/OCPBUGS-63481): references to github.com/sclorg/django-ex.git now also refer to the branch [#654](https://github.com/openshift/cluster-samples-operator/pull/654)
* [OCPBUGS-62409](https://issues.redhat.com/browse/OCPBUGS-62409): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 [#651](https://github.com/openshift/cluster-samples-operator/pull/651)
* [OCPBUGS-62061](https://issues.redhat.com/browse/OCPBUGS-62061): Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 [#650](https://github.com/openshift/cluster-samples-operator/pull/650)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/b343f70f19ffd559e1a81d3a3e65bd106e634c13...14236f82a2cd11af091ed8ec7e6c437cb6bce092)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e9d369d96f7202b179b2e12f8eec0bfb93d313bc)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#644](https://github.com/openshift/cluster-storage-operator/pull/644)
* [SPLAT-2525](https://issues.redhat.com/browse/SPLAT-2525): Removed VCF9 alert now that it has been tested. [#640](https://github.com/openshift/cluster-storage-operator/pull/640)
* NO-JIRA: Remove ibm-cloud-managed-cleanup yaml [#586](https://github.com/openshift/cluster-storage-operator/pull/586)
* [STOR-2560](https://issues.redhat.com/browse/STOR-2560): Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed [#629](https://github.com/openshift/cluster-storage-operator/pull/629)
* NO-JIRA: Update OCP documentation links to latest versions [#636](https://github.com/openshift/cluster-storage-operator/pull/636)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#627](https://github.com/openshift/cluster-storage-operator/pull/627)
* [OCPBUGS-62669](https://issues.redhat.com/browse/OCPBUGS-62669): Move metrics to vsphere driver [#625](https://github.com/openshift/cluster-storage-operator/pull/625)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): remove static value for runAsUser in securityContext [#619](https://github.com/openshift/cluster-storage-operator/pull/619)
* [OCPBUGS-62421](https://issues.redhat.com/browse/OCPBUGS-62421): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 [#624](https://github.com/openshift/cluster-storage-operator/pull/624)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add app label to Manila deployment [#628](https://github.com/openshift/cluster-storage-operator/pull/628)
* [OCPBUGS-61112](https://issues.redhat.com/browse/OCPBUGS-61112): add Azure Disk CSI driver SA name to CredentialsRequest [#618](https://github.com/openshift/cluster-storage-operator/pull/618)
* [STOR-2297](https://issues.redhat.com/browse/STOR-2297): remove oVirt code from CSO [#617](https://github.com/openshift/cluster-storage-operator/pull/617)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): HyperShift deployments should reflect user id security context [#616](https://github.com/openshift/cluster-storage-operator/pull/616)
* [OCPBUGS-62121](https://issues.redhat.com/browse/OCPBUGS-62121): add all-egress label to deployments on HCP and IBM [#621](https://github.com/openshift/cluster-storage-operator/pull/621)
* [OCPBUGS-61175](https://issues.redhat.com/browse/OCPBUGS-61175): Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy [#615](https://github.com/openshift/cluster-storage-operator/pull/615)
* [SPLAT-2467](https://issues.redhat.com/browse/SPLAT-2467): Updated VPD alerts to reflect current vSphere support [#612](https://github.com/openshift/cluster-storage-operator/pull/612)
* [OCPBUGS-61161](https://issues.redhat.com/browse/OCPBUGS-61161): Fix logging e2e also faster cleanup [#611](https://github.com/openshift/cluster-storage-operator/pull/611)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d6b7775e872264a8e53f4bfe3ba884a3888367b7...e9d369d96f7202b179b2e12f8eec0bfb93d313bc)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/f4335a376852396a21e9f5b9b40d40b9b50640ed)
* [OCPBUGS-62464](https://issues.redhat.com/browse/OCPBUGS-62464): Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/cluster-update-keys/pull/86)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c40e7b9b60c62690a25333fc54ae0d3705474afb...f4335a376852396a21e9f5b9b40d40b9b50640ed)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e3ba184ed8c832e8601b1253586c2b4fb99a8843)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Add quotation marks to the sanity test's component name [#1261](https://github.com/openshift/cluster-version-operator/pull/1261)
* NO-JIRA: Clarify test names in OTE [#1256](https://github.com/openshift/cluster-version-operator/pull/1256)
* [OCPBUGS-64732](https://issues.redhat.com/browse/OCPBUGS-64732): lib/resourcemerge: Add support for hostUsers flag [#1257](https://github.com/openshift/cluster-version-operator/pull/1257)
* NO-JIRA: Clean up unused Dockerfile and Dockerfile.rhel7 [#1254](https://github.com/openshift/cluster-version-operator/pull/1254)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): vendor: Update openshift/api to get new ClusterVersion force Godocs [#1251](https://github.com/openshift/cluster-version-operator/pull/1251)
* [OCPBUGS-14246](https://issues.redhat.com/browse/OCPBUGS-14246): Adding runbook URL for ClusterVersionOperatorDown [#1250](https://github.com/openshift/cluster-version-operator/pull/1250)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Include the compressed tests binary in the CVO container image [#1236](https://github.com/openshift/cluster-version-operator/pull/1236)
* NO-JIRA: Clean up code to remove ReconciliationIssues [#1253](https://github.com/openshift/cluster-version-operator/pull/1253)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): Add conformance test suites to the CVO tests extension [#1238](https://github.com/openshift/cluster-version-operator/pull/1238)
* [OCPBUGS-61872](https://issues.redhat.com/browse/OCPBUGS-61872): Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters [#1232](https://github.com/openshift/cluster-version-operator/pull/1232)
* [OCPBUGS-62861](https://issues.redhat.com/browse/OCPBUGS-62861): temporarily disable metrics auth for hypershift clusters [#1243](https://github.com/openshift/cluster-version-operator/pull/1243)
* [OTA-1627](https://issues.redhat.com/browse/OTA-1627): pkg/cincinnati: Centralize release metadata parsing [#1231](https://github.com/openshift/cluster-version-operator/pull/1231)
* NO-JIRA: Move myself to emeritus [#1239](https://github.com/openshift/cluster-version-operator/pull/1239)
* [OCPBUGS-62416](https://issues.redhat.com/browse/OCPBUGS-62416): Updating cluster-version-operator-container image to be consistent with ART for 4.21 [#1237](https://github.com/openshift/cluster-version-operator/pull/1237)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Rename an existing test to comply with the OTE integration guide [#1235](https://github.com/openshift/cluster-version-operator/pull/1235)
* [OTA-1531](https://issues.redhat.com/browse/OTA-1531): Rework error handling in FeatureGate processing [#1206](https://github.com/openshift/cluster-version-operator/pull/1206)
* NO-JIRA: Extend the development documentation regarding building and publishing a payload image [#1227](https://github.com/openshift/cluster-version-operator/pull/1227)
* NO-ISSUE: Update golang version to 1.24 in go.mod [#1230](https://github.com/openshift/cluster-version-operator/pull/1230)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/77782f1a4b9648f8ade2bc1e75d10779784e341f...e3ba184ed8c832e8601b1253586c2b4fb99a8843)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/16114b8de20278b8f4b7a425ece6d35d53214773)
* [OCPBUGS-62503](https://issues.redhat.com/browse/OCPBUGS-62503): Updating configmap-reload-container image to be consistent with ART for 4.21 [#74](https://github.com/openshift/configmap-reload/pull/74)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/2438d7c8e495201361d87da205649bc38fc4822b...16114b8de20278b8f4b7a425ece6d35d53214773)
### [console](https://github.com/openshift/console/tree/a9c737906b128342c4852c33d69fd8dd1c31969b)
* [CONSOLE-4564](https://issues.redhat.com/browse/CONSOLE-4564): normalize ConsoleDataView columns and rows props [#15722](https://github.com/openshift/console/pull/15722)
* [OCPBUGS-62142](https://issues.redhat.com/browse/OCPBUGS-62142): Fix cookie size limit error with large OIDC refresh tokens [#15631](https://github.com/openshift/console/pull/15631)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Migrate GuidedTour to dynamic [#15679](https://github.com/openshift/console/pull/15679)
* NO-JIRA: add claude `/plugin-api-review` command [#15658](https://github.com/openshift/console/pull/15658)
* [OCPBUGS-64859](https://issues.redhat.com/browse/OCPBUGS-64859): add empty state to ConsoleSelect when filter returns n… [#15700](https://github.com/openshift/console/pull/15700)
* [CONSOLE-4858](https://issues.redhat.com/browse/CONSOLE-4858): Fix 27 cycles [#15723](https://github.com/openshift/console/pull/15723)
* [CONSOLE-4722](https://issues.redhat.com/browse/CONSOLE-4722): Update Builds nav section pages to use DataView [#15696](https://github.com/openshift/console/pull/15696)
* [CONSOLE-4606](https://issues.redhat.com/browse/CONSOLE-4606): Refactor bareMetal modals and actions [#15709](https://github.com/openshift/console/pull/15709)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Fix 79 cycles [#15718](https://github.com/openshift/console/pull/15718)
* NO-JIRA: Update Helm OWNERS with new team members [#15677](https://github.com/openshift/console/pull/15677)
* [CONSOLE-4834](https://issues.redhat.com/browse/CONSOLE-4834): Migrate static extensions to dynamic for Metal3-plugin [#15712](https://github.com/openshift/console/pull/15712)
* [CONSOLE-4860](https://issues.redhat.com/browse/CONSOLE-4860): Missed Enzyme to RTL migration tests [#15694](https://github.com/openshift/console/pull/15694)
* [OCPBUGS-62789](https://issues.redhat.com/browse/OCPBUGS-62789): insights to lightspeed rebranding update [#15531](https://github.com/openshift/console/pull/15531)
* [CONSOLE-4832](https://issues.redhat.com/browse/CONSOLE-4832): Migrate Enzyme OLM descriptors & OperatorHub "packages/operator-lifec… [#15676](https://github.com/openshift/console/pull/15676)
* [OCPBUGS-64939](https://issues.redhat.com/browse/OCPBUGS-64939): Fix logo max-height not respected on Safari [#15663](https://github.com/openshift/console/pull/15663)
* NO-JIRA: Add AI context documentation and configuration [#15491](https://github.com/openshift/console/pull/15491)
* [CONSOLE-4858](https://issues.redhat.com/browse/CONSOLE-4858): Fix 53 cycles [#15708](https://github.com/openshift/console/pull/15708)
* [OCPBUGS-64851](https://issues.redhat.com/browse/OCPBUGS-64851): EndpointList components Warning: Each child in a list should have a … [#15701](https://github.com/openshift/console/pull/15701)
* [CONSOLE-4850](https://issues.redhat.com/browse/CONSOLE-4850): update API Explorer to use DataView [#15681](https://github.com/openshift/console/pull/15681)
* [CONSOLE-4853](https://issues.redhat.com/browse/CONSOLE-4853): merge dynamic plugin tests [#15649](https://github.com/openshift/console/pull/15649)
* [OCPBUGS-63599](https://issues.redhat.com/browse/OCPBUGS-63599): Fix broken operator links in OperatorHub install hints [#15669](https://github.com/openshift/console/pull/15669)
* [CONSOLE-4858](https://issues.redhat.com/browse/CONSOLE-4858): Fix 61 cycles [#15689](https://github.com/openshift/console/pull/15689)
* [CONSOLE-4842](https://issues.redhat.com/browse/CONSOLE-4842): merge HCP related scenarios [#15662](https://github.com/openshift/console/pull/15662)
* [CONSOLE-4733](https://issues.redhat.com/browse/CONSOLE-4733): Add catalogd metas endpoint support and refactor client/service boundary [#15657](https://github.com/openshift/console/pull/15657)
* [CONSOLE-4772](https://issues.redhat.com/browse/CONSOLE-4772): Update list pages to use DataView in Workloads Tab [#15653](https://github.com/openshift/console/pull/15653)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Remove `Page/*` and `GlobalConfig` [#15674](https://github.com/openshift/console/pull/15674)
* [OCPBUGS-64700](https://issues.redhat.com/browse/OCPBUGS-64700), [OCPBUGS-64701](https://issues.redhat.com/browse/OCPBUGS-64701): Upgrading Helm to 3.18.5 [#15682](https://github.com/openshift/console/pull/15682)
* [OCPBUGS-63610](https://issues.redhat.com/browse/OCPBUGS-63610): Convert standalone terminal route to extension [#15672](https://github.com/openshift/console/pull/15672)
* [CONSOLE-4858](https://issues.redhat.com/browse/CONSOLE-4858): Fix min-length cycles [#15688](https://github.com/openshift/console/pull/15688)
* [OCPBUGS-63388](https://issues.redhat.com/browse/OCPBUGS-63388): fix breadcrumb link to ImageStream page [#15661](https://github.com/openshift/console/pull/15661)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Remove `FeatureFlag/Model` and `ModelDefinition` [#15671](https://github.com/openshift/console/pull/15671)
* [CONSOLE-4841](https://issues.redhat.com/browse/CONSOLE-4841): Move CSP from plugin to redux store + some sdk adoption prep work [#15633](https://github.com/openshift/console/pull/15633)
* [CONSOLE-4857](https://issues.redhat.com/browse/CONSOLE-4857): Merge image pull secret scenario [#15678](https://github.com/openshift/console/pull/15678)
* [CONSOLE-4725](https://issues.redhat.com/browse/CONSOLE-4725): follow-on fix to remove counts from Role and Binding filters [#15652](https://github.com/openshift/console/pull/15652)
* [CONSOLE-4719](https://issues.redhat.com/browse/CONSOLE-4719): Update Home nav section pages to use DataView [#15656](https://github.com/openshift/console/pull/15656)
* [CONSOLE-4721](https://issues.redhat.com/browse/CONSOLE-4721): Update Helm nav section to use ConsoleDataView [#15646](https://github.com/openshift/console/pull/15646)
* [OCPBUGS-62108](https://issues.redhat.com/browse/OCPBUGS-62108): Lack Chinese/Japanese/Korean translations for 'On/Off' switch button on editor setting modal of yaml page. [#15664](https://github.com/openshift/console/pull/15664)
* [CNV-64586](https://issues.redhat.com/browse/CNV-64586): show default storageclass for VMs info [#15405](https://github.com/openshift/console/pull/15405)
* [CONSOLE-4839](https://issues.redhat.com/browse/CONSOLE-4839): Remove/hardcode `PostFormSubmissionAction` [#15637](https://github.com/openshift/console/pull/15637)
* [OCPBUGS-44235](https://issues.redhat.com/browse/OCPBUGS-44235): Fix Helm chart installation with CA/TLS certificates [#15607](https://github.com/openshift/console/pull/15607)
* [OCPBUGS-63339](https://issues.redhat.com/browse/OCPBUGS-63339): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15626](https://github.com/openshift/console/pull/15626)
* [CONSOLE-4820](https://issues.redhat.com/browse/CONSOLE-4820): Redistribute OLMv0 CSS [#15644](https://github.com/openshift/console/pull/15644)
* [CONSOLE-4834](https://issues.redhat.com/browse/CONSOLE-4834): Clean up unused types in metal3 [#15666](https://github.com/openshift/console/pull/15666)
* [CONSOLE-4410](https://issues.redhat.com/browse/CONSOLE-4410): Use webpack 5 support for share scope init and access [#15525](https://github.com/openshift/console/pull/15525)
* [CONSOLE-4601](https://issues.redhat.com/browse/CONSOLE-4601): Migration of tests from Enzyme to React Testing Library [#15510](https://github.com/openshift/console/pull/15510)
* [OCPBUGS-63471](https://issues.redhat.com/browse/OCPBUGS-63471): Render a button if there is 1 action [#15636](https://github.com/openshift/console/pull/15636)
* [OCPBUGS-63382](https://issues.redhat.com/browse/OCPBUGS-63382): Display missing environment var values and correct styling [#15625](https://github.com/openshift/console/pull/15625)
* [CONSOLE-4835](https://issues.redhat.com/browse/CONSOLE-4835): Migrate `topology` to dynamic [#15617](https://github.com/openshift/console/pull/15617)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): Add children prop to some places [#15548](https://github.com/openshift/console/pull/15548)
* NO-JIRA: reintroduce load bearing import cycles [#15651](https://github.com/openshift/console/pull/15651)
* [OCPBUGS-63707](https://issues.redhat.com/browse/OCPBUGS-63707): Never allow OTHER_CATEGORY in categories [#15660](https://github.com/openshift/console/pull/15660)
* [OCPBUGS-60937](https://issues.redhat.com/browse/OCPBUGS-60937): Updated PromQL to include component specific namespace [#15438](https://github.com/openshift/console/pull/15438)
* [OCPBUGS-62296](https://issues.redhat.com/browse/OCPBUGS-62296): Preserve path on perspective switch [#15541](https://github.com/openshift/console/pull/15541)
* [CONSOLE-4837](https://issues.redhat.com/browse/CONSOLE-4837): Migrate `console-app` to dynamic [#15620](https://github.com/openshift/console/pull/15620)
* [OCPBUGS-62939](https://issues.redhat.com/browse/OCPBUGS-62939): "View events" and 'View all events' point to the same page on 'Overview'->'Activity' card. [#15606](https://github.com/openshift/console/pull/15606)
* [CONSOLE-4718](https://issues.redhat.com/browse/CONSOLE-4718): Update Administrator nav section to use ConsoleDataView [#15567](https://github.com/openshift/console/pull/15567)
* [CONSOLE-4838](https://issues.redhat.com/browse/CONSOLE-4838): Make DataView component work with arbitrary data objects [#15622](https://github.com/openshift/console/pull/15622)
* [CONSOLE-4604](https://issues.redhat.com/browse/CONSOLE-4604): Migrate enzyme packages/console-shared unit tests to React Testing Li… [#15581](https://github.com/openshift/console/pull/15581)
* [OCPBUGS-61509](https://issues.redhat.com/browse/OCPBUGS-61509): Fix "operator installing" hint in operator details panel [#15480](https://github.com/openshift/console/pull/15480)
* [CONSOLE-4836](https://issues.redhat.com/browse/CONSOLE-4836): Migrate `console-demo-plugin` to `dynamic-demo-plugin` [#15618](https://github.com/openshift/console/pull/15618)
* [OCPBUGS-61870](https://issues.redhat.com/browse/OCPBUGS-61870): Automatically redirect all-namespaces catalog to default namespace [#15584](https://github.com/openshift/console/pull/15584)
* [OCPBUGS-63433](https://issues.redhat.com/browse/OCPBUGS-63433): Turn on `fContentSecurityPolicyEnabled` by default [#15630](https://github.com/openshift/console/pull/15630)
* [OCPBUGS-63384](https://issues.redhat.com/browse/OCPBUGS-63384): Fix eslint warnings and prevent future ones [#15629](https://github.com/openshift/console/pull/15629)
* [OCPBUGS-62937](https://issues.redhat.com/browse/OCPBUGS-62937): Add telemetry events [#15602](https://github.com/openshift/console/pull/15602)
* [OCPBUGS-62483](https://issues.redhat.com/browse/OCPBUGS-62483): limit node log length to 1000 lines [#15597](https://github.com/openshift/console/pull/15597)
* [OCPBUGS-63429](https://issues.redhat.com/browse/OCPBUGS-63429): Expose prometheus tenancy label path as a proxy [#15621](https://github.com/openshift/console/pull/15621)
* [CONSOLE-4724](https://issues.redhat.com/browse/CONSOLE-4724): Update Compute nav section to use ResourceDataView [#15604](https://github.com/openshift/console/pull/15604)
* [OCPBUGS-60636](https://issues.redhat.com/browse/OCPBUGS-60636): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15583](https://github.com/openshift/console/pull/15583)
* [CONSOLE-4761](https://issues.redhat.com/browse/CONSOLE-4761): Add sort select field with Relevance, A-Z, Z-A options [#15580](https://github.com/openshift/console/pull/15580)
* [CONSOLE-3637](https://issues.redhat.com/browse/CONSOLE-3637): Bump rjsf to 4.x [#15551](https://github.com/openshift/console/pull/15551)
* [CONSOLE-4725](https://issues.redhat.com/browse/CONSOLE-4725): Update User Management list pages to use ResourceDataView [#15579](https://github.com/openshift/console/pull/15579)
* [OCPBUGS-63059](https://issues.redhat.com/browse/OCPBUGS-63059): DRY up RTL `configure` [#15615](https://github.com/openshift/console/pull/15615)
* [CONSOLE-4776](https://issues.redhat.com/browse/CONSOLE-4776): Migrate enzyme packages/container-security unit tests to React Testin… [#15611](https://github.com/openshift/console/pull/15611)
* [OCPBUGS-62156](https://issues.redhat.com/browse/OCPBUGS-62156): Unique "key" prop warning in the UserPreferencePage [#15534](https://github.com/openshift/console/pull/15534)
* [CONSOLE-4821](https://issues.redhat.com/browse/CONSOLE-4821): Remove gitops-plugin [#15576](https://github.com/openshift/console/pull/15576)
* [OCPBUGS-62593](https://issues.redhat.com/browse/OCPBUGS-62593): Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 [#15542](https://github.com/openshift/console/pull/15542)
* [CONSOLE-4615](https://issues.redhat.com/browse/CONSOLE-4615): Update DefaultList to use ResourceDataView [#15560](https://github.com/openshift/console/pull/15560)
* [OCPBUGS-61660](https://issues.redhat.com/browse/OCPBUGS-61660): Fix Bare Metal Hosts nav item [#15609](https://github.com/openshift/console/pull/15609)
* [CONSOLE-4603](https://issues.redhat.com/browse/CONSOLE-4603): Migrate enzyme "packages/console-dynamic-plugin-sdk" unit tests to Re… [#15540](https://github.com/openshift/console/pull/15540)
* [OCPBUGS-61767](https://issues.redhat.com/browse/OCPBUGS-61767): Duplicate CRs are shown as Operand instances in operator uninstallation modal [#15557](https://github.com/openshift/console/pull/15557)
* [CONSOLE-4820](https://issues.redhat.com/browse/CONSOLE-4820): Migrate olmv0 to dynamic [#15566](https://github.com/openshift/console/pull/15566)
* [OCPBUGS-33879](https://issues.redhat.com/browse/OCPBUGS-33879): use tenancy path for project scoped status card [#15585](https://github.com/openshift/console/pull/15585)
* [OCPBUGS-62947](https://issues.redhat.com/browse/OCPBUGS-62947): bump dompurify to latest [#15586](https://github.com/openshift/console/pull/15586)
* [CONSOLE-4819](https://issues.redhat.com/browse/CONSOLE-4819): Migrate container-security to dynamic [#15565](https://github.com/openshift/console/pull/15565)
* [CONSOLE-4602](https://issues.redhat.com/browse/CONSOLE-4602): Migrate enzyme "packages/console-app" unit tests to React Testing Library [#15514](https://github.com/openshift/console/pull/15514)
* [OCPBUGS-60603](https://issues.redhat.com/browse/OCPBUGS-60603): Add bearer token file configuration to oc-environment script [#15521](https://github.com/openshift/console/pull/15521)
* [OCPBUGS-62315](https://issues.redhat.com/browse/OCPBUGS-62315): Correct the width of the cluster config toolbar filter input [#15546](https://github.com/openshift/console/pull/15546)
* [CONSOLE-4795](https://issues.redhat.com/browse/CONSOLE-4795), [CONSOLE-4797](https://issues.redhat.com/browse/CONSOLE-4797), [CONSOLE-4801](https://issues.redhat.com/browse/CONSOLE-4801): Migrate some static extensions to dynamic [#15552](https://github.com/openshift/console/pull/15552)
* [CONSOLE-4804](https://issues.redhat.com/browse/CONSOLE-4804): Migrate `TopologyCreateConnector` to dynamic [#15549](https://github.com/openshift/console/pull/15549)
* [CONSOLE-4800](https://issues.redhat.com/browse/CONSOLE-4800): Migrate `HorizontalNavTab` to dynamic [#15553](https://github.com/openshift/console/pull/15553)
* [OCPBUGS-59529](https://issues.redhat.com/browse/OCPBUGS-59529): Prevent the topology context menu items from truncating [#15524](https://github.com/openshift/console/pull/15524)
* [CONSOLE-4798](https://issues.redhat.com/browse/CONSOLE-4798): Migrate `StorageClassProvisioner` to dynamic [#15550](https://github.com/openshift/console/pull/15550)
* [OPRUN-4086](https://issues.redhat.com/browse/OPRUN-4086): Add ClusterCatalog controller [#15466](https://github.com/openshift/console/pull/15466)
* NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS [#15559](https://github.com/openshift/console/pull/15559)
* [CONSOLE-4332](https://issues.redhat.com/browse/CONSOLE-4332): Update the secrets forms to use PF components [#15513](https://github.com/openshift/console/pull/15513)
* [OCPBUGS-62313](https://issues.redhat.com/browse/OCPBUGS-62313): Returning from any Secret Create page does not return to secret page [#15543](https://github.com/openshift/console/pull/15543)
* [CONSOLE-4684](https://issues.redhat.com/browse/CONSOLE-4684): Refactor machine-set modals [#15484](https://github.com/openshift/console/pull/15484)
* [OCPBUGS-62281](https://issues.redhat.com/browse/OCPBUGS-62281): InsecureSkipVerify to true for results proxy endpoint in off-cluster [#14888](https://github.com/openshift/console/pull/14888)
* [CONSOLE-4808](https://issues.redhat.com/browse/CONSOLE-4808): update resource-log.cy.ts [#15539](https://github.com/openshift/console/pull/15539)
* [CONSOLE-4799](https://issues.redhat.com/browse/CONSOLE-4799): update tests/app/debug-pod.cy.ts [#15530](https://github.com/openshift/console/pull/15530)
* [CONSOLE-4802](https://issues.redhat.com/browse/CONSOLE-4802): Migrate `KebabActions` to dynamic [#15535](https://github.com/openshift/console/pull/15535)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Add @openshift/dynamic-plugin-sdk to core and internal pkg deps [#15518](https://github.com/openshift/console/pull/15518)
* [OCPBUGS-61536](https://issues.redhat.com/browse/OCPBUGS-61536): Fix incorrect handling of vSphere settings [#15481](https://github.com/openshift/console/pull/15481)
* [OCPBUGS-61937](https://issues.redhat.com/browse/OCPBUGS-61937): Add Missing Periods to Error Messages and update try again button link [#15511](https://github.com/openshift/console/pull/15511)
* NO-JIRA: Remove yarn-generate from post-install script [#15373](https://github.com/openshift/console/pull/15373)
* [CONSOLE-4796](https://issues.redhat.com/browse/CONSOLE-4796): Migrate some Dashboards extensions to dynamic [#15526](https://github.com/openshift/console/pull/15526)
* [OCPBUGS-61535](https://issues.redhat.com/browse/OCPBUGS-61535): Cancel PVC creation redirect user to last visited page instead of PVC list [#15502](https://github.com/openshift/console/pull/15502)
* [CONSOLE-4764](https://issues.redhat.com/browse/CONSOLE-4764): Add tech preview feature flag support [#15477](https://github.com/openshift/console/pull/15477)
* [CONSOLE-4715](https://issues.redhat.com/browse/CONSOLE-4715): Migrate the Enzyme test __tests__ root directory and remove __tests__… [#15462](https://github.com/openshift/console/pull/15462)
* NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release [#15517](https://github.com/openshift/console/pull/15517)
* [CONSOLE-4760](https://issues.redhat.com/browse/CONSOLE-4760): update CRD list to use ResourceDataView [#15469](https://github.com/openshift/console/pull/15469)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Install `@openshift/dynamic-plugin-sdk` [#15509](https://github.com/openshift/console/pull/15509)
* [OCPBUGS-60084](https://issues.redhat.com/browse/OCPBUGS-60084): Help dropdown should be closed automatically after tour model opened [#15483](https://github.com/openshift/console/pull/15483)
* [OCPBUGS-55401](https://issues.redhat.com/browse/OCPBUGS-55401): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15315](https://github.com/openshift/console/pull/15315)
* [OCPBUGS-59634](https://issues.redhat.com/browse/OCPBUGS-59634): Fix the events search input width, and incorporate PF Toolbar component [#15501](https://github.com/openshift/console/pull/15501)
* NO-JIRA: Update README.md with instructions for logging out kube:admin in local [#15482](https://github.com/openshift/console/pull/15482)
* NO-JIRA: chore(OWNERS): remove logonoff from reviewers [#15505](https://github.com/openshift/console/pull/15505)
* [CONSOLE-4710](https://issues.redhat.com/browse/CONSOLE-4710): use useOverlay to launch ErrorModal [#15475](https://github.com/openshift/console/pull/15475)
* [OCPBUGS-61087](https://issues.redhat.com/browse/OCPBUGS-61087): Updation of label from edit label doesn't work [#15460](https://github.com/openshift/console/pull/15460)
* [OCPBUGS-61519](https://issues.redhat.com/browse/OCPBUGS-61519): Fix improper DescriptionList refactor [#15495](https://github.com/openshift/console/pull/15495)
* [OCPBUGS-59972](https://issues.redhat.com/browse/OCPBUGS-59972): Add validation and type guards on healthHandler calls to prevent errors [#15470](https://github.com/openshift/console/pull/15470)
* [CONSOLE-4756](https://issues.redhat.com/browse/CONSOLE-4756): Convert more files to TypeScript [#15472](https://github.com/openshift/console/pull/15472)
* [OCPBUGS-61458](https://issues.redhat.com/browse/OCPBUGS-61458): fix MachineSet YAML template [#15478](https://github.com/openshift/console/pull/15478)
* [OCPBUGS-58118](https://issues.redhat.com/browse/OCPBUGS-58118): fix namespace path generation for non-namespaced resources [#15467](https://github.com/openshift/console/pull/15467)
* [OCPBUGS-61183](https://issues.redhat.com/browse/OCPBUGS-61183): cluster in workload identity mode is not applied with the token-auth-… [#15459](https://github.com/openshift/console/pull/15459)
* [OCPBUGS-61133](https://issues.redhat.com/browse/OCPBUGS-61133): Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation [#15444](https://github.com/openshift/console/pull/15444)
* [OCPBUGS-61468](https://issues.redhat.com/browse/OCPBUGS-61468): i18n upload/download routine task for OCP version 4.20 [#15476](https://github.com/openshift/console/pull/15476)
* [CONSOLE-4727](https://issues.redhat.com/browse/CONSOLE-4727): Update OWNERS files across the repo [#15461](https://github.com/openshift/console/pull/15461)
* [CONSOLE-4598](https://issues.redhat.com/browse/CONSOLE-4598): Migrate enzyme __tests__/components/utils unit tests to React Testing… [#15442](https://github.com/openshift/console/pull/15442)
* [OCPBUGS-61393](https://issues.redhat.com/browse/OCPBUGS-61393): Change default tab size from 4 to 2 [#15474](https://github.com/openshift/console/pull/15474)
* [CONSOLE-4635](https://issues.redhat.com/browse/CONSOLE-4635): Refactor PDBActionFactory to hook form and cleanup. [#15285](https://github.com/openshift/console/pull/15285)
* NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish [#15463](https://github.com/openshift/console/pull/15463)
* [OCPBUGS-61139](https://issues.redhat.com/browse/OCPBUGS-61139): Correct the ordering of Catalog categories to be alphabetized [#15454](https://github.com/openshift/console/pull/15454)
* [CONSOLE-4610](https://issues.redhat.com/browse/CONSOLE-4610): Drop use of ceateModalLauncher from Topology package [#15446](https://github.com/openshift/console/pull/15446)
* [OCPBUGS-61090](https://issues.redhat.com/browse/OCPBUGS-61090): fix typo in update approval strategy label [#15452](https://github.com/openshift/console/pull/15452)
* [CONSOLE-4683](https://issues.redhat.com/browse/CONSOLE-4683): Refactor group action factory [#15404](https://github.com/openshift/console/pull/15404)
* And 10 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/d568950eaea74c15da2c3e5a89d95fcc0b5cc90a...a9c737906b128342c4852c33d69fd8dd1c31969b)
### [console-operator](https://github.com/openshift/console-operator/tree/4cb3c653864ca70464906b906fb90ffa32e7ded0)
* NO-JIRA: Add /ci-prep Claude code command [#1063](https://github.com/openshift/console-operator/pull/1063)
* [OCPBUGS-64601](https://issues.redhat.com/browse/OCPBUGS-64601): Remove SVM console instance if v1alpha1 ConsolePlugin version in present in the CRDs status [#1061](https://github.com/openshift/console-operator/pull/1061)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): Revert "#1052 fix(oidc): fix OIDCClientSecretGet condition" [#1058](https://github.com/openshift/console-operator/pull/1058)
* [OCPBUGS-59939](https://issues.redhat.com/browse/OCPBUGS-59939): Bumped to latest console-operator version [#1055](https://github.com/openshift/console-operator/pull/1055)
* [OCPBUGS-62512](https://issues.redhat.com/browse/OCPBUGS-62512): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 [#1050](https://github.com/openshift/console-operator/pull/1050)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix OIDCClientSecretGet condition [#1052](https://github.com/openshift/console-operator/pull/1052)
* [CONSOLE-4765](https://issues.redhat.com/browse/CONSOLE-4765), [CONSOLE-4767](https://issues.redhat.com/browse/CONSOLE-4767): Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs [#1043](https://github.com/openshift/console-operator/pull/1043)
* [OCPBUGS-61726](https://issues.redhat.com/browse/OCPBUGS-61726): Revert "OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition" [#1046](https://github.com/openshift/console-operator/pull/1046)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix OIDCClientSecretGet condition [#1041](https://github.com/openshift/console-operator/pull/1041)
* [OCPBUGS-61483](https://issues.redhat.com/browse/OCPBUGS-61483): Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 [#1044](https://github.com/openshift/console-operator/pull/1044)
* [OCPBUGS-61383](https://issues.redhat.com/browse/OCPBUGS-61383): Update QuickStarts typo and doc link [#1042](https://github.com/openshift/console-operator/pull/1042)
* [OCPBUGS-60863](https://issues.redhat.com/browse/OCPBUGS-60863): Rename Dockerfile to Dockerfile.ocp [#1039](https://github.com/openshift/console-operator/pull/1039)
* [OCPBUGS-60782](https://issues.redhat.com/browse/OCPBUGS-60782): pluginOrder field should only contain available plugins [#1038](https://github.com/openshift/console-operator/pull/1038)
* [Full changelog](https://github.com/openshift/console-operator/compare/cdbc995ad9906b20a6048630d5d8af285bad7cc5...4cb3c653864ca70464906b906fb90ffa32e7ded0)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/4c16c7cef37364ff890defe8ccb71776663faa82)
* no-jira: Update OWNERS [#204](https://github.com/openshift/containernetworking-plugins/pull/204)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/184a96011a8cacb72319cdccb904271a99c5928d...4c16c7cef37364ff890defe8ccb71776663faa82)
### [coredns](https://github.com/openshift/coredns/tree/91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)
* NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 [#154](https://github.com/openshift/coredns/pull/154)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#153](https://github.com/openshift/coredns/pull/153)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/e9f682c030887cb8c3fc7fd8d17251c5fc037c6f)
* [OCPBUGS-64810](https://issues.redhat.com/browse/OCPBUGS-64810): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.34 into main [#346](https://github.com/openshift/cloud-provider-openstack/pull/346)
* [OSASINFRA-3954](https://issues.redhat.com/browse/OSASINFRA-3954): Rebase main onto release-1.34 [#354](https://github.com/openshift/cloud-provider-openstack/pull/354)
* [OCPBUGS-62582](https://issues.redhat.com/browse/OCPBUGS-62582): Updating csi-driver-manila-container image to be consistent with ART for 4.21 [#351](https://github.com/openshift/cloud-provider-openstack/pull/351)
* [OCPBUGS-62544](https://issues.redhat.com/browse/OCPBUGS-62544): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 [#352](https://github.com/openshift/cloud-provider-openstack/pull/352)
* [OCPBUGS-62575](https://issues.redhat.com/browse/OCPBUGS-62575): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 [#350](https://github.com/openshift/cloud-provider-openstack/pull/350)
* NO-JIRA: shiftstack: Update OWNERS [#353](https://github.com/openshift/cloud-provider-openstack/pull/353)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c4fe3e8ad29e58f081f3883de0893c2025a097b2...e9f682c030887cb8c3fc7fd8d17251c5fc037c6f)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/87e2700a9249f3ac9a35cb3aed589c918c56cb94)
* NO-JIRA:shiftstack: Update OWNERS [#162](https://github.com/openshift/csi-driver-nfs/pull/162)
* [OCPBUGS-62509](https://issues.redhat.com/browse/OCPBUGS-62509): Updating csi-driver-nfs-container image to be consistent with ART for 4.21 [#161](https://github.com/openshift/csi-driver-nfs/pull/161)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/1abaf84447384a486a9f9da7cd7b9e53784c8a55...87e2700a9249f3ac9a35cb3aed589c918c56cb94)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/344669a2189fecdf5471fdc9a1246dd751cb1afb)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v4.10.0 for OCP 4.21 [#89](https://github.com/openshift/csi-external-attacher/pull/89)
* [OCPBUGS-61394](https://issues.redhat.com/browse/OCPBUGS-61394): UPSTREAM: 682: Skip VolumeAttachments of other drivers [#88](https://github.com/openshift/csi-external-attacher/pull/88)
* NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 [#87](https://github.com/openshift/csi-external-attacher/pull/87)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...344669a2189fecdf5471fdc9a1246dd751cb1afb)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v6.0.0 for OCP 4.21 [#117](https://github.com/openshift/csi-external-provisioner/pull/117)
* [OCPBUGS-62541](https://issues.redhat.com/browse/OCPBUGS-62541): Updating csi-provisioner-container image to be consistent with ART for 4.21 [#116](https://github.com/openshift/csi-external-provisioner/pull/116)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/81fca03694bca1bae8606d8970472330e1e4fcad...f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/d880a1ec6da02dbf61600ec7999266185ca9f784)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.0.0 for OCP 4.21 [#179](https://github.com/openshift/csi-external-resizer/pull/179)
* [OCPBUGS-62504](https://issues.redhat.com/browse/OCPBUGS-62504): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 [#178](https://github.com/openshift/csi-external-resizer/pull/178)
* [OCPBUGS-61547](https://issues.redhat.com/browse/OCPBUGS-61547): Requeue PVC over PV creation [#173](https://github.com/openshift/csi-external-resizer/pull/173)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/c674bea9bb6a81e463c7fefa974e2109d829daef...d880a1ec6da02dbf61600ec7999266185ca9f784)
### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/24faebef64fac7975f6556996c3c2a1388a479ff)
* NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/csi-external-snapshot-metadata/pull/5)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/693a826455777eaafc677bb2195dc071d184243b...24faebef64fac7975f6556996c3c2a1388a479ff)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/9098db0e434e0d986eeadd2ebe69119540a550d1)
* [STOR-2534](https://issues.redhat.com/browse/STOR-2534), [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v8.4.0 for OCP 4.21 [#189](https://github.com/openshift/csi-external-snapshotter/pull/189)
* [OCPBUGS-62423](https://issues.redhat.com/browse/OCPBUGS-62423): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 [#188](https://github.com/openshift/csi-external-snapshotter/pull/188)
* NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 [#187](https://github.com/openshift/csi-external-snapshotter/pull/187)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...9098db0e434e0d986eeadd2ebe69119540a550d1)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/78dacb7c661a62c78036c2737401afd3eb6fd04d)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.17.0 for OCP 4.21 [#76](https://github.com/openshift/csi-livenessprobe/pull/76)
* [OCPBUGS-62403](https://issues.redhat.com/browse/OCPBUGS-62403): Updating csi-livenessprobe-container image to be consistent with ART for 4.21 [#77](https://github.com/openshift/csi-livenessprobe/pull/77)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/1d6d6b27460e58f24110c72ec9c96afe2c1d891d...78dacb7c661a62c78036c2737401afd3eb6fd04d)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c)
* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.15.0 for OCP 4.21 [#84](https://github.com/openshift/csi-node-driver-registrar/pull/84)
* [OCPBUGS-60108](https://issues.redhat.com/browse/OCPBUGS-60108): update log level verbosity to not clutter logs [#86](https://github.com/openshift/csi-node-driver-registrar/pull/86)
* [OCPBUGS-62506](https://issues.redhat.com/browse/OCPBUGS-62506): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 [#85](https://github.com/openshift/csi-node-driver-registrar/pull/85)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/6ce4713c87b735e2546a65a871bd2c7cfe383c31...d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c)
### [docker-builder](https://github.com/openshift/builder/tree/c0ef8399e6c3d8731b47502e7ed9d8563a481cdc)
* [OCPBUGS-62210](https://issues.redhat.com/browse/OCPBUGS-62210): BuildConfig inline Dockerfile fails with heredoc syntax [#469](https://github.com/openshift/builder/pull/469)
* [OCPBUGS-62340](https://issues.redhat.com/browse/OCPBUGS-62340): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 [#481](https://github.com/openshift/builder/pull/481)
* [Full changelog](https://github.com/openshift/builder/compare/ff595e4bbf5301039fc62f0cdd7b5610605f633e...c0ef8399e6c3d8731b47502e7ed9d8563a481cdc)
### [docker-registry](https://github.com/openshift/image-registry/tree/de5c64151fdfab6980919c7f9fc269e65bb259e6)
* [OCPBUGS-62576](https://issues.redhat.com/browse/OCPBUGS-62576): Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 [#448](https://github.com/openshift/image-registry/pull/448)
* [OCPBUGS-60845](https://issues.redhat.com/browse/OCPBUGS-60845): update OWNERS [#447](https://github.com/openshift/image-registry/pull/447)
* [Full changelog](https://github.com/openshift/image-registry/compare/0c09647aa2db93a8584dfe8079ed919145c662fb...de5c64151fdfab6980919c7f9fc269e65bb259e6)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/5c53d757ae380994b89701a98d8b61912154aca7)
* Updating the OWNERS file. (#175) [#175](https://github.com/openshift/driver-toolkit/pull/175)
* Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) [#172](https://github.com/openshift/driver-toolkit/pull/172)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...5c53d757ae380994b89701a98d8b61912154aca7)
### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/806f690e1f140e0aea2eb05ef5f288b756b62895)
* [CNTRLPLANE-1414](https://issues.redhat.com/browse/CNTRLPLANE-1414): Openshift 4.21 etcd 3.6 [#343](https://github.com/openshift/etcd/pull/343)
* Bump go to 1.24.7 [#20664](https://github.com/openshift/etcd/pull/20664)
* [fix #20271] protect backend usage from concurrent `applySnapshot` and `defrag` [#20650](https://github.com/openshift/etcd/pull/20650)
* Re-check that the lease still exists during the renew process [#20615](https://github.com/openshift/etcd/pull/20615)
* Bump go to 1.24.6 [#20527](https://github.com/openshift/etcd/pull/20527)
* back port tests: skip TestCorruptedBackupFileCheck test on big endian platforms [#20534](https://github.com/openshift/etcd/pull/20534)
* Bump bbolt to v1.4.3 [#20513](https://github.com/openshift/etcd/pull/20513)
* Remove checking `confState` during schema migration [#20496](https://github.com/openshift/etcd/pull/20496)
* Bump go to 1.23.12 [#20461](https://github.com/openshift/etcd/pull/20461)
* Remove the --experimental-snapshot-catch-up-entries from help [#20422](https://github.com/openshift/etcd/pull/20422)
* Check promotion against v2store when updating v2store [#20387](https://github.com/openshift/etcd/pull/20387)
* Fix v2store check returning wrong result even there isn't any auth data [#20370](https://github.com/openshift/etcd/pull/20370)
* Updated help for --quota-backend-bytes [#20352](https://github.com/openshift/etcd/pull/20352)
* Prevent flakes with TestWatchRestore [#20330](https://github.com/openshift/etcd/pull/20330)
* Bump go to 1.23.11 [#20314](https://github.com/openshift/etcd/pull/20314)
* Avoid lowering revision of watchers in the future after restore [#20286](https://github.com/openshift/etcd/pull/20286)
* Add verification to verify the watch response have a bigger revision than startRev [#20277](https://github.com/openshift/etcd/pull/20277)
* Bump bbolt to v1.4.2 [#20267](https://github.com/openshift/etcd/pull/20267)
* Disable progress notify validation until we can guarantee response [#20246](https://github.com/openshift/etcd/pull/20246)
* Skip sending progress notification for watch with starting revision in the future [#20241](https://github.com/openshift/etcd/pull/20241)
* Bump bbolt to v1.4.1 [#20154](https://github.com/openshift/etcd/pull/20154)
* Bump Go to 1.23.9 [#20128](https://github.com/openshift/etcd/pull/20128)
* Update 'endpoint health' command to avoid calling `flags.SetPflagsFromEnv` multiple times [#20121](https://github.com/openshift/etcd/pull/20121)
* Add validation to ensure that there is NO empty discovery endpoint [#20113](https://github.com/openshift/etcd/pull/20113)
* Fix the issue that `--force-new-cluster` can't remove all other members in a corner case [#20071](https://github.com/openshift/etcd/pull/20071)
* mvcc: avoid double decrement of watcher gauge on close/cancel race (3.6 backport) [#20067](https://github.com/openshift/etcd/pull/20067)
* Add protection on `PromoteMember` and `UpdateRaftAttributes` [#20051](https://github.com/openshift/etcd/pull/20051)
* Semi-Automated cherry pick of #20017 upstream release 3.6 ( was Update go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to work with v0.61.0 ) [#20043](https://github.com/openshift/etcd/pull/20043)
* [Integration Test]: Add test for panic-free removal of non-existent members [#19948](https://github.com/openshift/etcd/pull/19948)
* Update release script to exactly match the target tag [#19951](https://github.com/openshift/etcd/pull/19951)
* release: Fix the tar unzip command, avoid permissions issues [#19890](https://github.com/openshift/etcd/pull/19890)
* Bump Go to 1.23.9 [#19867](https://github.com/openshift/etcd/pull/19867)
* fix: test-release checks [#19853](https://github.com/openshift/etcd/pull/19853)
* remove DistributedTracing from feature gate list. [#19851](https://github.com/openshift/etcd/pull/19851)
* chore(client/v3/naming): deprecate Metadata field in Endpoint struct [#19842](https://github.com/openshift/etcd/pull/19842)
* make: upload partial coverage reports [#19844](https://github.com/openshift/etcd/pull/19844)
* Add test-release-tests Makefile target [#19845](https://github.com/openshift/etcd/pull/19845)
* pkg/featuregate: Return MutableFeatureGate interface in New function [#19816](https://github.com/openshift/etcd/pull/19816)
* Replace `resolver.State.Addresses` with `resolver.State.Endpoint.Addresses` [#19782](https://github.com/openshift/etcd/pull/19782)
* emit compaction pause duration metric in every compaction batch [#19770](https://github.com/openshift/etcd/pull/19770)
* add verification to check whether membership data is in sync between … [#19730](https://github.com/openshift/etcd/pull/19730)
* Bump Go to 1.23.8 [#19724](https://github.com/openshift/etcd/pull/19724)
* Switch to validating v3 when v2 and v3 are synchronized [#19703](https://github.com/openshift/etcd/pull/19703)
* remove CHANGELOG directory [#19690](https://github.com/openshift/etcd/pull/19690)
* dependency: bump golang.org/x/net from v0.37.0 to v0.38.0 [#19687](https://github.com/openshift/etcd/pull/19687)
* bump golang.org/x/net to v0.37.0 to address CVE-2025-22870 [#19683](https://github.com/openshift/etcd/pull/19683)
* Move client/internal/v2 into server/internal/clientv2 [#19673](https://github.com/openshift/etcd/pull/19673)
* e2e: add upgrade test for clusters set up by promoted members [#19662](https://github.com/openshift/etcd/pull/19662)
* dependency: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 [#19647](https://github.com/openshift/etcd/pull/19647)
* github/workflows: remove coverage workflow [#19648](https://github.com/openshift/etcd/pull/19648)
* Auto sync members in v3store is IsLearner differs between v2 and v3 store [#19636](https://github.com/openshift/etcd/pull/19636)
* Returns the string representation of the `ClusterVersion` [#19641](https://github.com/openshift/etcd/pull/19641)
* minor refactor DowngradeUpgradeMembersByID to not block on waiting fo… [#19638](https://github.com/openshift/etcd/pull/19638)
* fix: grpcproxy can get stuck in and endless loop causing high cpu usage [#19561](https://github.com/openshift/etcd/pull/19561)
* server: remove ExperimentalMaxLearners [#19560](https://github.com/openshift/etcd/pull/19560)
* github/workflows: delete grpcproxy workflow [#19551](https://github.com/openshift/etcd/pull/19551)
* github/workflows: remove fuzzing workflow. [#19550](https://github.com/openshift/etcd/pull/19550)
* github/workflows: remove contrib workflow [#19549](https://github.com/openshift/etcd/pull/19549)
* github workflows: remove release tests [#19547](https://github.com/openshift/etcd/pull/19547)
* deflakey: TestCompactionHash in integration [#19541](https://github.com/openshift/etcd/pull/19541)
* Add verify release assets GitHub workflow [#19539](https://github.com/openshift/etcd/pull/19539)
* dependency: bump golang.org/x/net from v0.34.0 to v0.36.0 [#19531](https://github.com/openshift/etcd/pull/19531)
* Bump go toolchain to 1.23.7 [#19527](https://github.com/openshift/etcd/pull/19527)
* Fix the issue of etcdserver crashing on receiving REST watch stream requests [#19522](https://github.com/openshift/etcd/pull/19522)
* tests: deflakey TestLeaseGrantKeepAliveOnce [#19507](https://github.com/openshift/etcd/pull/19507)
* etcdserver: Fixing minor typos in v3election.proto and rpc.proto [#19501](https://github.com/openshift/etcd/pull/19501)
* Add prometheus metric for server feature gate [#19495](https://github.com/openshift/etcd/pull/19495)
* Fix flaky `TestLeaseKeepAliveOneSecond` [#19483](https://github.com/openshift/etcd/pull/19483)
* Fix TestLeaseGrantTimeToLiveExpired flaky due to leader change [#19481](https://github.com/openshift/etcd/pull/19481)
* depedency: bump golang.org/x/crypto from v0.32.0 to v0.35.0 [#19480](https://github.com/openshift/etcd/pull/19480)
* Use RLock in Demoted method for read-only access to expiry [#19443](https://github.com/openshift/etcd/pull/19443)
* etcdserver: Update description for count field in the RangeResponse message [#19468](https://github.com/openshift/etcd/pull/19468)
* Backport DowngradeInfo proto change [#19471](https://github.com/openshift/etcd/pull/19471)
* Move interface `AlarmBackend` from `server/etcdserver/api/v3alarm` to `server/storage/schema` to fix the `unexported-return` lint error [#19455](https://github.com/openshift/etcd/pull/19455)
* codecov: improve coverage upload [#19447](https://github.com/openshift/etcd/pull/19447)
* Fix release script prerelease GitHub template release [#19420](https://github.com/openshift/etcd/pull/19420)
* Migrate --experimental-set-member-localaddr to using feature flag [#19414](https://github.com/openshift/etcd/pull/19414)
* Fix a performance regression due to uncertain compaction sleep interval [#19411](https://github.com/openshift/etcd/pull/19411)
* Fix more v3.6 deprecation comments [#19409](https://github.com/openshift/etcd/pull/19409)
* server: Remove deprecated NewZapCoreLoggerBuilder [#19404](https://github.com/openshift/etcd/pull/19404)
* Fix v3.6 deprecation notices [#19402](https://github.com/openshift/etcd/pull/19402)
* Correct the expected version in downgrade test case [#19400](https://github.com/openshift/etcd/pull/19400)
* Minor refacotr on the e2e test framework [#19392](https://github.com/openshift/etcd/pull/19392)
* Fix a log formatting bug in the e2e downgrade tests [#19390](https://github.com/openshift/etcd/pull/19390)
* migrate experimental-snapshot-catchup-entries flag to snapshot-catchup-entries [#19389](https://github.com/openshift/etcd/pull/19389)
* Migrate experimental distributed tracing flags to non-experimental flags [#19387](https://github.com/openshift/etcd/pull/19387)
* Migrate WALVersion to fix unexported-return of walVersion [#19382](https://github.com/openshift/etcd/pull/19382)
* migrate experimental-peer-skip-client-san-verification flag to peer-skip-client-san-verification [#19362](https://github.com/openshift/etcd/pull/19362)
* Update 3.6 changelog to cover the etcdutl status command change [#19361](https://github.com/openshift/etcd/pull/19361)
* Add more debug info into waitTillSnapshot [#19359](https://github.com/openshift/etcd/pull/19359)
* etcdutl: use map to count unique user keys in snapshot status [#19344](https://github.com/openshift/etcd/pull/19344)
* migrate experimental-enable-lease-checkpoint and experimental-enable-lease-checkpoint-persist flag to feature gate. [#19356](https://github.com/openshift/etcd/pull/19356)
* server: fix unexported-return lint issue [#19052](https://github.com/openshift/etcd/pull/19052)
* migrate experimental-compaction-sleep-interval flag to compaction-sleep interval [#19351](https://github.com/openshift/etcd/pull/19351)
* test: update robustness doc and new case to reproduce 19179 [#19353](https://github.com/openshift/etcd/pull/19353)
* migrate experimental-downgrade-checktime to downgrade-checktime [#19328](https://github.com/openshift/etcd/pull/19328)
* increase timeout for MemberDowngradeUpgrade test [#19348](https://github.com/openshift/etcd/pull/19348)
* changelog: update GO entry to reflect 1.22.12 update [#19338](https://github.com/openshift/etcd/pull/19338)
* Bump bbolt to v1.4.0 and raft to v3.6.0 [#19349](https://github.com/openshift/etcd/pull/19349)
* Bump dependency updates identified by dependabot [#19346](https://github.com/openshift/etcd/pull/19346)
* Update golang toolchain to 1.23.6 [#19335](https://github.com/openshift/etcd/pull/19335)
* chore: use testify instead of testing in tests/integration [#19332](https://github.com/openshift/etcd/pull/19332)
* Align NewConfig with AddFlags defaults [#19254](https://github.com/openshift/etcd/pull/19254)
* Add downgrade cancellation e2e tests [#19252](https://github.com/openshift/etcd/pull/19252)
* CHANGELOG(3.5): Add entry for #19280 [#19331](https://github.com/openshift/etcd/pull/19331)
* Add learner id into log when being promoted [#19329](https://github.com/openshift/etcd/pull/19329)
* fileutil: removes redundant continue statement in RemoveMatchFile [#19326](https://github.com/openshift/etcd/pull/19326)
* build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 [#19323](https://github.com/openshift/etcd/pull/19323)
* fix test.sh to download correct binary for mac os [#19325](https://github.com/openshift/etcd/pull/19325)
* migrate experimental-memory-mlock flag to memory-mlock [#19282](https://github.com/openshift/etcd/pull/19282)
* fix: use testify instead of t.Fatal or t.Error in pkg package [#19315](https://github.com/openshift/etcd/pull/19315)
* fix: use testify instead of t.Fatal or t.Error in server package (part 1) [#18971](https://github.com/openshift/etcd/pull/18971)
* fix: use require instead of t.Fatal(err) in tests/integration package [#18820](https://github.com/openshift/etcd/pull/18820)
* fix: use testify instead of t.Fatal in tests/common package (part 2) [#18860](https://github.com/openshift/etcd/pull/18860)
* Remove some HealthInterval to reduce the time to run DowngradeUpgradeMembers [#19317](https://github.com/openshift/etcd/pull/19317)
* *: introduce (*Op) Limit() interface for robustness [#19319](https://github.com/openshift/etcd/pull/19319)
* deflaky: TestSnapshotStatus [#19313](https://github.com/openshift/etcd/pull/19313)
* Correct compaction period comments [#19192](https://github.com/openshift/etcd/pull/19192)
* scripts/test_images.sh: refactor to import job into the prow infrastructure [#19305](https://github.com/openshift/etcd/pull/19305)
* Update 3.6 changelog to cover the go-grpc-middleware/providers/promet… [#19311](https://github.com/openshift/etcd/pull/19311)
* Switch from grpc-ecosystem/go-grpc-prometheus to grpc-ecosystem/go-grpc-middleware/providers/prometheus [#19195](https://github.com/openshift/etcd/pull/19195)
* Mark etcd-local-tester as deprecated so we can remove it in future [#19297](https://github.com/openshift/etcd/pull/19297)
* Fix goword errors [#19310](https://github.com/openshift/etcd/pull/19310)
* fix(alerts): set severity of 'ectdMembersDown' from 'critical' to 'wa… [#19300](https://github.com/openshift/etcd/pull/19300)
* Close the http response body [#19308](https://github.com/openshift/etcd/pull/19308)
* Add e2e metrics test case to ensure no any metrics missing in future PRs [#19302](https://github.com/openshift/etcd/pull/19302)
* changelog: add entries regarding 3.5.18 dependency updates [#19294](https://github.com/openshift/etcd/pull/19294)
* migrate to use max-learners flag [#19298](https://github.com/openshift/etcd/pull/19298)
* changelog: add mixed rw performance evaluation backport [#19291](https://github.com/openshift/etcd/pull/19291)
* Bump dependency updates identified by dependabot [#19293](https://github.com/openshift/etcd/pull/19293)
* Format all prometheus metrics to ensure nice indent [#19301](https://github.com/openshift/etcd/pull/19301)
* Add downgrade cancellation e2e tests [#19244](https://github.com/openshift/etcd/pull/19244)
* Fix documentation of List method of Kubernetes interface [#19281](https://github.com/openshift/etcd/pull/19281)
* build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 [#19289](https://github.com/openshift/etcd/pull/19289)
* build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 [#19290](https://github.com/openshift/etcd/pull/19290)
* [Solution 2] Add `DowngradeVersionTestRequest` for Downgrade or migration test only [#19276](https://github.com/openshift/etcd/pull/19276)
* tests/robustness: continue should ignore last key [#19269](https://github.com/openshift/etcd/pull/19269)
* Add Version field to the robustness model [#19255](https://github.com/openshift/etcd/pull/19255)
* Fix addMemberAsLearnerAndPromote to avoid error 'etcdserver: can only… [#19279](https://github.com/openshift/etcd/pull/19279)
* tests: Add retry if promote member fails. [#19272](https://github.com/openshift/etcd/pull/19272)
* migrate to use bootstrap-defrag-threshold-megabytes flag [#19267](https://github.com/openshift/etcd/pull/19267)
* docs(CHANGELOG): add release date of etcd v3.5.18 [#19266](https://github.com/openshift/etcd/pull/19266)
* migrate to use warning-apply-duration flag [#19264](https://github.com/openshift/etcd/pull/19264)
* Remove the code of checking ClusterVersionSet in MinimalEtcdVersion [#19263](https://github.com/openshift/etcd/pull/19263)
* Remove explicit random seed in robustness tests [#19265](https://github.com/openshift/etcd/pull/19265)
* build(deps): bump github.com/golang-jwt/jwt from v4 to v5 [#19232](https://github.com/openshift/etcd/pull/19232)
* Refactoring the error handlers concurrent control implementation [#19257](https://github.com/openshift/etcd/pull/19257)
* Test for etcd metrics [#19242](https://github.com/openshift/etcd/pull/19242)
* CHANGELOG: update backport info for #19179 [#19260](https://github.com/openshift/etcd/pull/19260)
* Update 3.5 changelog to cover the race condition fix [#19259](https://github.com/openshift/etcd/pull/19259)
* Add tests for hardcoded flags in TestEtcdServerProcessConfig [#19245](https://github.com/openshift/etcd/pull/19245)
* Fix race condition (also a regression of the PR 19139) [#19221](https://github.com/openshift/etcd/pull/19221)
* etcdserver: add learner check to readyz [#19086](https://github.com/openshift/etcd/pull/19086)
* Add tests for NewConfig matching AddFlags defaults [#19247](https://github.com/openshift/etcd/pull/19247)
* Bump dependency updates identified by dependabot [#19246](https://github.com/openshift/etcd/pull/19246)
* tests: address bridge unexported return issue [#19105](https://github.com/openshift/etcd/pull/19105)
* Add compaction to kubernetes robustness tests [#19233](https://github.com/openshift/etcd/pull/19233)
* build(deps): bump github/codeql-action from 3.28.0 to 3.28.1 [#19239](https://github.com/openshift/etcd/pull/19239)
* build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0 [#19240](https://github.com/openshift/etcd/pull/19240)
* Fix passing compaction-batch-limit to etcd v3.4 and v3.5 [#19218](https://github.com/openshift/etcd/pull/19218)
* mvcc: restore tombstone index if it's first revision [#19188](https://github.com/openshift/etcd/pull/19188)
* wait for the member to get started [#19230](https://github.com/openshift/etcd/pull/19230)
* chore: enable early-return and superfluous-else from revive [#19152](https://github.com/openshift/etcd/pull/19152)
* flags: optimise memory allocation [#19201](https://github.com/openshift/etcd/pull/19201)
* server/proxy/tcpproxy: reuse addr in TCPProxy.Run [#19198](https://github.com/openshift/etcd/pull/19198)
* Update golang toolchain to 1.23.5 [#19214](https://github.com/openshift/etcd/pull/19214)
* robustness: do not panic when parsing unknown versions. [#19226](https://github.com/openshift/etcd/pull/19226)
* changelog: update Go entry to reflect 1.22.11 update [#19224](https://github.com/openshift/etcd/pull/19224)
* Bump dependency updates identified by dependabot [#19209](https://github.com/openshift/etcd/pull/19209)
* Prevent leaking file descriptor during snapshotting and provide better logging of errors [#19093](https://github.com/openshift/etcd/pull/19093)
* migrate flag experimental-compaction-batch-limit to use compaction-batch-limit [#19196](https://github.com/openshift/etcd/pull/19196)
* Minor refactor on the etcdutl migrate command [#19207](https://github.com/openshift/etcd/pull/19207)
* Add Robustness test to reproduce issue 18089 [#19169](https://github.com/openshift/etcd/pull/19169)
* Minor refactor on RaftCluster.Recover() [#19200](https://github.com/openshift/etcd/pull/19200)
* chore: enable use-any rule from revive [#19120](https://github.com/openshift/etcd/pull/19120)
* Rename migrate_command_test.go to common_test.go [#19199](https://github.com/openshift/etcd/pull/19199)
* add MemberDowngradeUpgrade failpoint [#19125](https://github.com/openshift/etcd/pull/19125)
* tests/robustness/traffic: should use rev=0 for create [#19194](https://github.com/openshift/etcd/pull/19194)
* build(deps): bump distroless/static-debian12 from `5c7e2b4` to `3f2b64e` [#19187](https://github.com/openshift/etcd/pull/19187)
* client/pkg/logutil: simplify MergeOutputPaths function [#19170](https://github.com/openshift/etcd/pull/19170)
* migrate flag experimental-corrupt-check-time to use corrupt-check-time [#19156](https://github.com/openshift/etcd/pull/19156)
* Update 3.4/3.5 CHANGELOG with fix for deadlock in etcd.Close [#19171](https://github.com/openshift/etcd/pull/19171)
* client/pkg/logutil: add test for MergeOutputPaths [#19181](https://github.com/openshift/etcd/pull/19181)
* fix for #19066 Print warnings when deprecated options are configured in config file [#19148](https://github.com/openshift/etcd/pull/19148)
* Enhance test case TestEtctlutlMigrate to support multiple member cluster [#19174](https://github.com/openshift/etcd/pull/19174)
* Bump dependency updates identified by dependabot [#19165](https://github.com/openshift/etcd/pull/19165)
* tests: use high burst value in limiter. [#19176](https://github.com/openshift/etcd/pull/19176)
* tests: fix wrong number in comment. [#19175](https://github.com/openshift/etcd/pull/19175)
* Move getLatestWALSnap into etcdutl/common.go [#19173](https://github.com/openshift/etcd/pull/19173)
* rafthttp: Improve warn message in checkClusterCompatibilityFromHeader [#19112](https://github.com/openshift/etcd/pull/19112)
* robustness: only run MemberDowngrade test for high SnapshotCatchUpEntries [#19160](https://github.com/openshift/etcd/pull/19160)
* Fix release_notes.tpl.txt by adding a space between Docker image name and version [#19153](https://github.com/openshift/etcd/pull/19153)
* CHANGELOG: update CHANGELOG-3.5.md [#19151](https://github.com/openshift/etcd/pull/19151)
* Update etcdutl migrate command: load wal records from the latest snapshot [#19128](https://github.com/openshift/etcd/pull/19128)
* all: simplify and clean up [#19126](https://github.com/openshift/etcd/pull/19126)
* Avoid deadlock in etcd.Close when stopping during bootstrapping [#19139](https://github.com/openshift/etcd/pull/19139)
* Use new interface in robustness tests [#19137](https://github.com/openshift/etcd/pull/19137)
* Revert "Update the allowedErrors" to reduce e2e test flakiness [#19146](https://github.com/openshift/etcd/pull/19146)
* Still return continuous WAL entries when running into ErrSliceOutOfRange [#19095](https://github.com/openshift/etcd/pull/19095)
* Fix mixVersion test case: ensure a snapshot to be sent out [#19140](https://github.com/openshift/etcd/pull/19140)
* Fix the inconsistent between listen peerURL and advertise peerURL [#19136](https://github.com/openshift/etcd/pull/19136)
* Manual Dependency Bump [#19121](https://github.com/openshift/etcd/pull/19121)
* Add MemberDowngrade failpoint [#19038](https://github.com/openshift/etcd/pull/19038)
* Manual Dependency Bump [#19108](https://github.com/openshift/etcd/pull/19108)
* docs(contributing): fix links and build tool list [#19111](https://github.com/openshift/etcd/pull/19111)
* build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 [#19102](https://github.com/openshift/etcd/pull/19102)
* build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 [#19103](https://github.com/openshift/etcd/pull/19103)
* migrate `--experimental-txn-mode-write-with-shared-buffer` flag to feature gate. [#19078](https://github.com/openshift/etcd/pull/19078)
* fix: use testify instead of t.Fatal or t.Error in client package (part 1) [#18967](https://github.com/openshift/etcd/pull/18967)
* Manual Dependency Bump [#19080](https://github.com/openshift/etcd/pull/19080)
* Add more info in the error message in downgrade detection [#19081](https://github.com/openshift/etcd/pull/19081)
* backend: Remove logger nil checks [#19077](https://github.com/openshift/etcd/pull/19077)
* scripts: remove receiver name check [#19085](https://github.com/openshift/etcd/pull/19085)
* [tools/etcd-dump-logs] Fix the usage of --start-index in etcd-dump-logs [#19082](https://github.com/openshift/etcd/pull/19082)
* fix: use testify instead of t.Fatal or t.Error in pkg package (part 1) [#18970](https://github.com/openshift/etcd/pull/18970)
* scripts: remove duplicate bom fix in fix make target [#19079](https://github.com/openshift/etcd/pull/19079)
* migrate experimental-compact-hash-check-enabled to feature gate. [#19053](https://github.com/openshift/etcd/pull/19053)
* build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 [#19076](https://github.com/openshift/etcd/pull/19076)
* build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 [#19075](https://github.com/openshift/etcd/pull/19075)
* Update the allowedErrors in TestNoErrorLogsDuringNormalOperations [#19069](https://github.com/openshift/etcd/pull/19069)
* Add more debug info when running into ErrSliceOutOfRange when reading WAL [#19067](https://github.com/openshift/etcd/pull/19067)
* Wait for cluster version to non-default value to remove errors when cluster is bootstrapping. [#19068](https://github.com/openshift/etcd/pull/19068)
* fix: use testify instead of t.Fatal or t.Error in etcdctl packages [#18969](https://github.com/openshift/etcd/pull/18969)
* fix(e2e): ignore error log about failed storage update [#19060](https://github.com/openshift/etcd/pull/19060)
* Manual Dependency Bump [#19065](https://github.com/openshift/etcd/pull/19065)
* scripts: fix shellws pass [#19045](https://github.com/openshift/etcd/pull/19045)
* Remove duplicated <-s.ReadyNotify() [#19057](https://github.com/openshift/etcd/pull/19057)
* Manual Dependency Bump [#19048](https://github.com/openshift/etcd/pull/19048)
* Do not wait for ready notify if the server is stopping [#19041](https://github.com/openshift/etcd/pull/19041)
* Set a 80% threshold for the codecov status.patch [#19046](https://github.com/openshift/etcd/pull/19046)
* Add a TODO comment for UnsafeDetectSchemaVersion on how to simplify t… [#19047](https://github.com/openshift/etcd/pull/19047)
* scripts: simplify mod tidy pass [#19042](https://github.com/openshift/etcd/pull/19042)
* Documentation: consistent way to manage go version [#19034](https://github.com/openshift/etcd/pull/19034)
* Mark --max-snapshots as deprecated in 3.6 and will be decommissioned … [#19036](https://github.com/openshift/etcd/pull/19036)
* fix: use testify instead of t.Fatal or t.Error in contrib package [#18968](https://github.com/openshift/etcd/pull/18968)
* Update TestMemberAdd's context timeout by adding 5 more seconds [#19032](https://github.com/openshift/etcd/pull/19032)
* build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 [#19019](https://github.com/openshift/etcd/pull/19019)
* Deprecate `--v2-deprecation` and schedule to remove it in 3.8 [#19006](https://github.com/openshift/etcd/pull/19006)
* docs: Add note on releasing a pre-release [#19016](https://github.com/openshift/etcd/pull/19016)
* release: Allow "v" prefix when specifying release version [#19011](https://github.com/openshift/etcd/pull/19011)
* chore: group tools/mod updates and update only direct dependencies [#18992](https://github.com/openshift/etcd/pull/18992)
* fix: golangci-lint yamllint [#19013](https://github.com/openshift/etcd/pull/19013)
* fix: enable gosimple linter [#18973](https://github.com/openshift/etcd/pull/18973)
* Update 3.5 changelog to cover the warning message for the deprecated v2 flags if set [#19008](https://github.com/openshift/etcd/pull/19008)
* Bump go toolchain to 1.23.4 [#19003](https://github.com/openshift/etcd/pull/19003)
* GRPC Proxy TLS version Changelog updates [#18897](https://github.com/openshift/etcd/pull/18897)
* Manual Dependency Bump [#19002](https://github.com/openshift/etcd/pull/19002)
* fix: use testify instead of t.Fatal or t.Error in api package [#18966](https://github.com/openshift/etcd/pull/18966)
* Mark --snapshot-count as deprecated in v3.6 and will be decommissioned in 3.7 [#18998](https://github.com/openshift/etcd/pull/18998)
* build(deps): bump distroless/static-debian12 from `f4a57e8` to `5c7e2b4` [#18982](https://github.com/openshift/etcd/pull/18982)
* Reuse grpcOverheadBytes calculation by creating a function for that [#18991](https://github.com/openshift/etcd/pull/18991)
* Reuse events used for syncing watchers [#17563](https://github.com/openshift/etcd/pull/17563)
* Handle non-linearized MemberList in v3.4 for robustness tests [#18977](https://github.com/openshift/etcd/pull/18977)
* Watch sync refactor [#18976](https://github.com/openshift/etcd/pull/18976)
* fix: use require instead of t.Fatal(err) in tests/e2e package [#18821](https://github.com/openshift/etcd/pull/18821)
* Fix gofump error due to merge race [#18979](https://github.com/openshift/etcd/pull/18979)
* Add a threshold for codecov failure [#18964](https://github.com/openshift/etcd/pull/18964)
* fix: enable gofumpt instead of gofmt linter globally [#18956](https://github.com/openshift/etcd/pull/18956)
* Manual Dependency Bump [#18961](https://github.com/openshift/etcd/pull/18961)
* Run a separate in memory snapshot to reduce number of entries stored in raft memory storage [#18825](https://github.com/openshift/etcd/pull/18825)
* Fix benchmark indexing [#18962](https://github.com/openshift/etcd/pull/18962)
* fix: enable gofumpt instead of gofmt linter in server [#18954](https://github.com/openshift/etcd/pull/18954)
* fix: enable gofumpt instead of gofmt linter in tests [#18953](https://github.com/openshift/etcd/pull/18953)
* Translate v2 requests into v3 ClusterMemberAttrSetRequest and ClusterVersionSetRequest [#17008](https://github.com/openshift/etcd/pull/17008)
* CHANGELOG: Fix runtime panic that occurs when KeepAlive is called with a Context implemented by an uncomparable type #18893 [#18951](https://github.com/openshift/etcd/pull/18951)
* fix runtime error: comparing uncomparable type [#18893](https://github.com/openshift/etcd/pull/18893)
* build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 [#18941](https://github.com/openshift/etcd/pull/18941)
* build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 [#18942](https://github.com/openshift/etcd/pull/18942)
* Reduce QPS requirement to 100 [#18928](https://github.com/openshift/etcd/pull/18928)
* Robustness duplicated puts 3 [#18905](https://github.com/openshift/etcd/pull/18905)
* dependency: bump go.etcd.io/raft/v3 v3.6.0-beta.0 [#18939](https://github.com/openshift/etcd/pull/18939)
* storage/backend: fatal if there is panic during defrag [#17757](https://github.com/openshift/etcd/pull/17757)
* Manual Dependency Bump [#18932](https://github.com/openshift/etcd/pull/18932)
* Add jitter to failpoint injection to cover periodily executed compaction [#18930](https://github.com/openshift/etcd/pull/18930)
* Multiply return time by 100 in tests to detect off by one differences [#18908](https://github.com/openshift/etcd/pull/18908)
* build(deps): bump github/codeql-action from 3.27.1 to 3.27.4 [#18923](https://github.com/openshift/etcd/pull/18923)
* build(deps): bump distroless/static-debian12 from `cc226ca` to `f4a57e8` [#18918](https://github.com/openshift/etcd/pull/18918)
* Robustness duplicated puts 2 [#18904](https://github.com/openshift/etcd/pull/18904)
* changelog: add GO-2024-3250 remediation entry [#18901](https://github.com/openshift/etcd/pull/18901)
* Robustness refactor patch operations [#18903](https://github.com/openshift/etcd/pull/18903)
* Fix displaying etcd logo in README on a dark theme [#18891](https://github.com/openshift/etcd/pull/18891)
* Add robustness track record section to make tracking easier [#18900](https://github.com/openshift/etcd/pull/18900)
* Manual Dependency Bump [#18889](https://github.com/openshift/etcd/pull/18889)
* Add ivanvc as approver for .github, scripts and tools/rw-heatmaps [#18894](https://github.com/openshift/etcd/pull/18894)
* add tls min/max version to grpc proxy [#18816](https://github.com/openshift/etcd/pull/18816)
* docs(release): update GitHub release related instructions [#18887](https://github.com/openshift/etcd/pull/18887)
* tests: add robustness test for issue 17780 [#18099](https://github.com/openshift/etcd/pull/18099)
* CHANGELOG: Add release date of etcd v3.4.35 [#18884](https://github.com/openshift/etcd/pull/18884)
* CHANGELOG: Add release date of etcd v3.5.17 [#18883](https://github.com/openshift/etcd/pull/18883)
* build(deps): bump github/codeql-action from 3.27.0 to 3.27.1 [#18874](https://github.com/openshift/etcd/pull/18874)
* Remove actuated badge from README.md [#18875](https://github.com/openshift/etcd/pull/18875)
* Fix a format error in dependency_management.md [#18862](https://github.com/openshift/etcd/pull/18862)
* fix: enable gofumpt instead of gofmt linter in tools [#18858](https://github.com/openshift/etcd/pull/18858)
* fix: enable gofumpt instead of gofmt linter in contrib, etcdctl and etcdutl [#18754](https://github.com/openshift/etcd/pull/18754)
* docs(CHANGELOG): update 3.4/3.5 changelog with defrag close fix [#18856](https://github.com/openshift/etcd/pull/18856)
* build: fix govet shadow err [#18857](https://github.com/openshift/etcd/pull/18857)
* changelog: update go version for 3.4.35 and 3.5.17 [#18852](https://github.com/openshift/etcd/pull/18852)
* fix(defrag): close temp file in case of error [#18851](https://github.com/openshift/etcd/pull/18851)
* fix: enable usestdlibvars linter [#18826](https://github.com/openshift/etcd/pull/18826)
* docs(CHANGELOG): update 3.4/3.5 changelogs with defrag fixes [#18844](https://github.com/openshift/etcd/pull/18844)
* Bump go toolchain to 1.23.3 [#18848](https://github.com/openshift/etcd/pull/18848)
* Manual Dependency Bump [#18840](https://github.com/openshift/etcd/pull/18840)
* fix(defrag): handle no space left error [#18822](https://github.com/openshift/etcd/pull/18822)
* release: properly change working dir if tmp location already exists [#18812](https://github.com/openshift/etcd/pull/18812)
* fix: enable go-require rule from testifylint [#18827](https://github.com/openshift/etcd/pull/18827)
* fix: use require instead of t.Fatal(err) in tests/common package [#18823](https://github.com/openshift/etcd/pull/18823)
* fix: enable errorlint linter [#18818](https://github.com/openshift/etcd/pull/18818)
* fix: enable require-error rule from testifylint [#18814](https://github.com/openshift/etcd/pull/18814)
* Update 3.4 changelog to cover the goroutine leakage issue [#18824](https://github.com/openshift/etcd/pull/18824)
* chore(e2e): extend TestNoErrorLogsDuringNormalOperations with different TLS configs [#18819](https://github.com/openshift/etcd/pull/18819)
* Bump dependency updates identified by dependabot [#18817](https://github.com/openshift/etcd/pull/18817)
* fix: enable errorlint in etcdctl and etcdutl directories [#18813](https://github.com/openshift/etcd/pull/18813)
* fix: enable require-error rule from testifylint in client, pkg and server packages [#18800](https://github.com/openshift/etcd/pull/18800)
* fix: use require instead of t.Fatal(err) in tests/robustness package [#18782](https://github.com/openshift/etcd/pull/18782)
* fix: enable errorlint in server directory [#18780](https://github.com/openshift/etcd/pull/18780)
* Refactor Etcdserver.snapshot to extract compaction into a separate method [#18808](https://github.com/openshift/etcd/pull/18808)
* chore(e2e): extend logging test to 3 node cluster [#18806](https://github.com/openshift/etcd/pull/18806)
* Update 3.5 changelog to cover two major fixes [#18804](https://github.com/openshift/etcd/pull/18804)
* build(deps): bump actions/checkout from 4.2.1 to 4.2.2 [#18795](https://github.com/openshift/etcd/pull/18795)
* build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 [#18794](https://github.com/openshift/etcd/pull/18794)
* build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 [#18793](https://github.com/openshift/etcd/pull/18793)
* build(deps): bump distroless/static-debian12 from `69830f2` to `cc226ca` [#18798](https://github.com/openshift/etcd/pull/18798)
* Bump dependency updates identified by dependabot #18755 [#18786](https://github.com/openshift/etcd/pull/18786)
* fix: enable gofumpt instead of gofmt linter in client [#18748](https://github.com/openshift/etcd/pull/18748)
* release: use GitHub's gh to create GitHub release [#18649](https://github.com/openshift/etcd/pull/18649)
* Fix e2e/ctl_v3_auth_test.go:123:5: declaration of err shadows declara… [#18781](https://github.com/openshift/etcd/pull/18781)
* Ensure compaction is executed at even intervals to avoid overload [#18771](https://github.com/openshift/etcd/pull/18771)
* fix: use require.NoError instead of t.Fatal(err) in tests package (part 1) [#18753](https://github.com/openshift/etcd/pull/18753)
* etcdserver: terminate recvLoop on serverWatchStream.close() [#18739](https://github.com/openshift/etcd/pull/18739)
* Fix risk of a partial write txn being applied [#18749](https://github.com/openshift/etcd/pull/18749)
* fix: enable float-compare rule from testifylint [#18776](https://github.com/openshift/etcd/pull/18776)
* fix: enable tenv linter [#18774](https://github.com/openshift/etcd/pull/18774)
* tests: remaining errors.Is conversions [#18634](https://github.com/openshift/etcd/pull/18634)
* Remove brackets from failpoint name [#18770](https://github.com/openshift/etcd/pull/18770)
* Improve documentation of robustness test adding key concepts used in the test [#18708](https://github.com/openshift/etcd/pull/18708)
* fix: enable thelper linter in client directory [#18746](https://github.com/openshift/etcd/pull/18746)
* Add comment to clarify non-f-functions on golang standard lib [#18766](https://github.com/openshift/etcd/pull/18766)
* build(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 [#18760](https://github.com/openshift/etcd/pull/18760)
* fix: enable formatter rule from testifylint [#18741](https://github.com/openshift/etcd/pull/18741)
* fix: enable errorlint in api, client and pkg [#18722](https://github.com/openshift/etcd/pull/18722)
* Bump dependency updates identified by dependabot [#18755](https://github.com/openshift/etcd/pull/18755)
* fix: use require.NoError instead of t.Fatal(err) in contrib and tools packages [#18752](https://github.com/openshift/etcd/pull/18752)
* Update changelog-3.6 to cover the new flags for etcdctl [#18747](https://github.com/openshift/etcd/pull/18747)
* embed: fix typo client-listen-x to listen-client-x [#18750](https://github.com/openshift/etcd/pull/18750)
* fix: enable expected-actual rule from testifylint [#18720](https://github.com/openshift/etcd/pull/18720)
* feat(etcdctl): add --max-send-bytes and --max-recv-bytes options [#18718](https://github.com/openshift/etcd/pull/18718)
* fix: enable error-nil rule from testifylint [#18716](https://github.com/openshift/etcd/pull/18716)
* fix: enable error-is-as rule from testifylint [#18740](https://github.com/openshift/etcd/pull/18740)
* Update `endpointsFromCluster` to reuse `clientConfigFromCmd` [#18742](https://github.com/openshift/etcd/pull/18742)
* CHANGELOG: add go 1.22.8 entry for 3.4 and 3.5 [#18743](https://github.com/openshift/etcd/pull/18743)
* Update `epHealthCommandFunc` to reuse `clientConfigFromCmd` [#18723](https://github.com/openshift/etcd/pull/18723)
* build(deps): bump actions/upload-artifact from 4.4.1 to 4.4.3 [#18733](https://github.com/openshift/etcd/pull/18733)
* build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 [#18731](https://github.com/openshift/etcd/pull/18731)
* build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 [#18734](https://github.com/openshift/etcd/pull/18734)
* Robustness dir cleanup [#18684](https://github.com/openshift/etcd/pull/18684)
* deprecate testutil/assert.go [#18717](https://github.com/openshift/etcd/pull/18717)
* fix: enable errorlint in module `go.etcd.io/etcd/client/v2` [#18721](https://github.com/openshift/etcd/pull/18721)
* fix: enable compares and negative-positive rules from testifylint [#18715](https://github.com/openshift/etcd/pull/18715)
* fix: enable nil-compare rule from testifylint [#18689](https://github.com/openshift/etcd/pull/18689)
* fix: enable gofmt and whitespace linters [#18713](https://github.com/openshift/etcd/pull/18713)
* github/workflows: remove ARM integration jobs [#18714](https://github.com/openshift/etcd/pull/18714)
* fix: enable empty and len rules from testifylint [#18712](https://github.com/openshift/etcd/pull/18712)
* fix: use require.NoError instead of t.Fatal(err) in client package [#18705](https://github.com/openshift/etcd/pull/18705)
* Update release steps on how to share quay.io password [#18710](https://github.com/openshift/etcd/pull/18710)
* Bump dependency updates identified by dependabot [#18706](https://github.com/openshift/etcd/pull/18706)
* build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1 [#18697](https://github.com/openshift/etcd/pull/18697)
* build(deps): bump actions/checkout from 4.2.0 to 4.2.1 [#18695](https://github.com/openshift/etcd/pull/18695)
* build(deps): bump github/codeql-action from 3.26.10 to 3.26.12 [#18696](https://github.com/openshift/etcd/pull/18696)
* fix: enable bool-compare rule from testifylint [#18686](https://github.com/openshift/etcd/pull/18686)
* github/workflows: use ECR mirror for Trivy's DB [#18672](https://github.com/openshift/etcd/pull/18672)
* Remove context from appliers [#18677](https://github.com/openshift/etcd/pull/18677)
* Remove context from dispatch [#18676](https://github.com/openshift/etcd/pull/18676)
* Remove context from top level apply [#18675](https://github.com/openshift/etcd/pull/18675)
* build(deps): bump distroless/static-debian12 from `b033683` to `69830f2` [#18660](https://github.com/openshift/etcd/pull/18660)
* Bump dependency updates identified by dependabot [#18673](https://github.com/openshift/etcd/pull/18673)
* etcdserver: fix panic when checking IsLearner of removed member [#18606](https://github.com/openshift/etcd/pull/18606)
* api: address revive unexported-return issues [#18645](https://github.com/openshift/etcd/pull/18645)
* server: remaining errors.Is conversions [#18617](https://github.com/openshift/etcd/pull/18617)
* fix(v3compactor): flaky TestPeriodicSkipRevNotChange test by increasing timeout [#18668](https://github.com/openshift/etcd/pull/18668)
* fix(tests/common): increase token ttl to fix flaky TestAuthLeaseTimeToLive test [#18663](https://github.com/openshift/etcd/pull/18663)
* docs(contributing): document how to install stress tool [#18651](https://github.com/openshift/etcd/pull/18651)
* fix(tests/e2e): ensure spawned cmds are closed [#18664](https://github.com/openshift/etcd/pull/18664)
* Bump go version to 1.23.2 [#18666](https://github.com/openshift/etcd/pull/18666)
* build(deps): bump actions/checkout from 4.1.7 to 4.2.0 [#18658](https://github.com/openshift/etcd/pull/18658)
* build(deps): bump github/codeql-action from 3.26.8 to 3.26.10 [#18659](https://github.com/openshift/etcd/pull/18659)
* Bump go toolchain to 1.23.1 [#18644](https://github.com/openshift/etcd/pull/18644)
* Bump dependency updates identified by dependabot [#18636](https://github.com/openshift/etcd/pull/18636)
* client: remaining errors.Is conversions [#18614](https://github.com/openshift/etcd/pull/18614)
* Add function to create WAL files [#18605](https://github.com/openshift/etcd/pull/18605)
* update: `cobra.ExactValidArgs` method is deprecated [#18612](https://github.com/openshift/etcd/pull/18612)
* github: remove build job [#18633](https://github.com/openshift/etcd/pull/18633)
* docs: fix description of WatchResponse.canceled [#18580](https://github.com/openshift/etcd/pull/18580)
* command: Use errors.Is for error equality check in ep_command.go [#18625](https://github.com/openshift/etcd/pull/18625)
* build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 [#18624](https://github.com/openshift/etcd/pull/18624)
* build(deps): bump distroless/static-debian12 from `95eb83a` to `b033683` [#18623](https://github.com/openshift/etcd/pull/18623)
* Bump dependency updates identified by dependabot [#18610](https://github.com/openshift/etcd/pull/18610)
* etcdctl: remaining errors.Is conversions [#18615](https://github.com/openshift/etcd/pull/18615)
* contrib: remaining errors.Is conversions [#18616](https://github.com/openshift/etcd/pull/18616)
* ioutil: remaining errors.Is conversions [#18619](https://github.com/openshift/etcd/pull/18619)
* Fixed periodic compaction tests [#18608](https://github.com/openshift/etcd/pull/18608)
* docs: update release.md with improvements from v3.4.34 release [#18600](https://github.com/openshift/etcd/pull/18600)
* Use errors.Is for error equality checks [#18510](https://github.com/openshift/etcd/pull/18510)
* Add tools/mod to module_dirs [#18590](https://github.com/openshift/etcd/pull/18590)
* Rename modules_exp to modules_for_bom to improve code and clarity [#18603](https://github.com/openshift/etcd/pull/18603)
* Ensure consistent file permissions on broken WAL files [#18574](https://github.com/openshift/etcd/pull/18574)
* build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 [#18598](https://github.com/openshift/etcd/pull/18598)
* Ensure commits are signed in `scripts/release.sh` [#18592](https://github.com/openshift/etcd/pull/18592)
* Bump dependency updates identified by dependabot [#18575](https://github.com/openshift/etcd/pull/18575)
* CHANGELOG: set release 3.4.34 date [#18577](https://github.com/openshift/etcd/pull/18577)
* Bump go toolchain to 1.22.7 [#18444](https://github.com/openshift/etcd/pull/18444)
* Improve release documentation [#18572](https://github.com/openshift/etcd/pull/18572)
* CHANGELOG: Update release date for v3.5.16 [#18573](https://github.com/openshift/etcd/pull/18573)
* build(deps): bump distroless/static-debian12 from `ce46866` to `95eb83a` [#18568](https://github.com/openshift/etcd/pull/18568)
* CHANGELOG: add note for the CompactionSleepInterval flag(PR 18514) [#18556](https://github.com/openshift/etcd/pull/18556)
* Fix races in TestLessorRenewExtendPileup [#18555](https://github.com/openshift/etcd/pull/18555)
* Support scan-keys command to scan the key space starting a specific revision [#18539](https://github.com/openshift/etcd/pull/18539)
* benchmark: support InsecureSkipVerify [#18545](https://github.com/openshift/etcd/pull/18545)
* CHANGELOG: add note regarding updating to go 1.22.7 [#18553](https://github.com/openshift/etcd/pull/18553)
* Bump dependency updates identified by dependabot [#18536](https://github.com/openshift/etcd/pull/18536)
* build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 [#18531](https://github.com/openshift/etcd/pull/18531)
* build(deps): bump github/codeql-action from 3.26.5 to 3.26.6 [#18532](https://github.com/openshift/etcd/pull/18532)
* Bump dependency updates identified by dependabot [#18515](https://github.com/openshift/etcd/pull/18515)
* Fix passing default grpc call options in Kubernetes client [#18360](https://github.com/openshift/etcd/pull/18360)
* CHANGELOG: Add entries for bbolt dependency bump [#18512](https://github.com/openshift/etcd/pull/18512)
* build(deps): bump github/codeql-action from 3.26.3 to 3.26.5 [#18506](https://github.com/openshift/etcd/pull/18506)
* Bump dependency updates identified by dependabot [#18490](https://github.com/openshift/etcd/pull/18490)
* [KEP-4578](https://issues.redhat.com/browse/KEP-4578): migrate experimental-initial-corrupt-check flag to feature gate. [#18478](https://github.com/openshift/etcd/pull/18478)
* CHANGELOG: update changes for issue 18089 [#18482](https://github.com/openshift/etcd/pull/18482)
* Revert "Disable robustness test detection of #18089 to allow detecting other issues [#18453](https://github.com/openshift/etcd/pull/18453)
* build(deps): bump github/codeql-action from 3.26.0 to 3.26.3 [#18468](https://github.com/openshift/etcd/pull/18468)
* github/workflows: remove e2e jobs [#18454](https://github.com/openshift/etcd/pull/18454)
* CHANGELOG: Add entry for etcdutl hashkv command. [#18460](https://github.com/openshift/etcd/pull/18460)
* test: extend leaseRevoke and leaseRenew test to support 5 members cluster [#18450](https://github.com/openshift/etcd/pull/18450)
* deleted infra-guide [#18449](https://github.com/openshift/etcd/pull/18449)
* *: keep tombstone if revision == compactAtRev [#18274](https://github.com/openshift/etcd/pull/18274)
* Reduce number of concurrent clients to 8 and compactions to avoid flakes [#18442](https://github.com/openshift/etcd/pull/18442)
* Update changelog for the performance regression caused by ensureLeadership in leaseRenew [#18441](https://github.com/openshift/etcd/pull/18441)
* Skip leadership check if the etcd instance is active processing heartbeats [#18428](https://github.com/openshift/etcd/pull/18428)
* build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 [#18434](https://github.com/openshift/etcd/pull/18434)
* build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 [#18435](https://github.com/openshift/etcd/pull/18435)
* Add `genproto` error troubleshoot step for manual bumps [#18431](https://github.com/openshift/etcd/pull/18431)
* Keep release process documentation up to date [#18399](https://github.com/openshift/etcd/pull/18399)
* Bump dependency updates identified by dependabot [#18427](https://github.com/openshift/etcd/pull/18427)
* Update release-3.4 and release-3.5 CHANGELOG with go version bump [#18423](https://github.com/openshift/etcd/pull/18423)
* go version bump from 1.22.5 to 1.22.6 [#18420](https://github.com/openshift/etcd/pull/18420)
* Bump dependency updates identified by dependabot [#18418](https://github.com/openshift/etcd/pull/18418)
* Remove arm64 robustness github actions workflows [#18417](https://github.com/openshift/etcd/pull/18417)
* migrate experimental-stop-grpc-service-on-defrag flag to feature gate. [#18359](https://github.com/openshift/etcd/pull/18359)
* build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 [#18408](https://github.com/openshift/etcd/pull/18408)
* Add examples to `etcdctl snapshot` command's help [#18183](https://github.com/openshift/etcd/pull/18183)
* Ensure proper gofail package version in robustness tests [#18397](https://github.com/openshift/etcd/pull/18397)
* Remove flake caused failpoint in watch disrupting progress notifies [#18392](https://github.com/openshift/etcd/pull/18392)
* Update release.md to reflect notes taken during 3.5.15 release [#18383](https://github.com/openshift/etcd/pull/18383)
* tests/e2e: check compactOnRev > tombstoneRevs[0] [#18387](https://github.com/openshift/etcd/pull/18387)
* Reduce client concurrency for high traffic robustness tests [#18252](https://github.com/openshift/etcd/pull/18252)
* Manual Dependency Bump [#18384](https://github.com/openshift/etcd/pull/18384)
* tests/e2e: add test cases related to HashKV [#18369](https://github.com/openshift/etcd/pull/18369)
* Fix wait time docs, tests to indicate trigger deadline geq to wait deadline. [#18373](https://github.com/openshift/etcd/pull/18373)
* build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 [#18379](https://github.com/openshift/etcd/pull/18379)
* build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 [#18380](https://github.com/openshift/etcd/pull/18380)
* tests: remove Dockerfile [#18371](https://github.com/openshift/etcd/pull/18371)
* github/workflows: set read-only default permissions to approve workflow [#18368](https://github.com/openshift/etcd/pull/18368)
* Add config file field for feature-gates flag. [#18365](https://github.com/openshift/etcd/pull/18365)
* github/workflows: pin robutness tests dependencies [#18367](https://github.com/openshift/etcd/pull/18367)
* dependency: Bumps golang.org/x/image from 0.11.0 to 0.18.0 [#18366](https://github.com/openshift/etcd/pull/18366)
* Manual Dependency Bump [#18361](https://github.com/openshift/etcd/pull/18361)
* etcdserver: change the snapshot + compact into sync operation [#18283](https://github.com/openshift/etcd/pull/18283)
* Introduce Kubernetes interface to etcd client [#16333](https://github.com/openshift/etcd/pull/16333)
* Add "server-feature-gates" flag. [#18279](https://github.com/openshift/etcd/pull/18279)
* CHANGELOG: Update release date for v3.5.15 [#18355](https://github.com/openshift/etcd/pull/18355)
* build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 [#18354](https://github.com/openshift/etcd/pull/18354)
* mvcc/*_test.go: should not use duplicate revision.Main for one key [#18321](https://github.com/openshift/etcd/pull/18321)
* Manual Dependency Bump [#18342](https://github.com/openshift/etcd/pull/18342)
* marker(markdown linter): use released binary when running markdown lint [#18318](https://github.com/openshift/etcd/pull/18318)
* build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 [#18333](https://github.com/openshift/etcd/pull/18333)
* build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 [#18332](https://github.com/openshift/etcd/pull/18332)
* build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 [#18331](https://github.com/openshift/etcd/pull/18331)
* fileutil: improve control flow readability of purgeFile function [#17564](https://github.com/openshift/etcd/pull/17564)
* CHANGELOG/CHANGELOG-3.4.md: update changelog for gRPC metadata printing [#18316](https://github.com/openshift/etcd/pull/18316)
* CHANGELOG/CHANGELOG-3.5.md: update changelog for gRPC metadata printing [#18317](https://github.com/openshift/etcd/pull/18317)
* CHANGELOG Differentiate the warning message for rejected client and peer connections for release-3.5 [#18320](https://github.com/openshift/etcd/pull/18320)
* Differentiate the warning message for rejected client and peer connections [#18313](https://github.com/openshift/etcd/pull/18313)
* github: remove amd64 test actions [#18314](https://github.com/openshift/etcd/pull/18314)
* Manual Dependency Bump [#18310](https://github.com/openshift/etcd/pull/18310)
* client/v3/watch.go: use `fmt` go pkg for metadata map printing [#18308](https://github.com/openshift/etcd/pull/18308)
* build(deps): bump distroless/static-debian12 from `4197211` to `ce46866` [#18304](https://github.com/openshift/etcd/pull/18304)
* build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8 [#18302](https://github.com/openshift/etcd/pull/18302)
* build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 [#18301](https://github.com/openshift/etcd/pull/18301)
* client/pkg/testutil: update interestingGoroutines [#18287](https://github.com/openshift/etcd/pull/18287)
* robustness: remove head rev match in validateGotAtLeastOneProgressNotify [#18277](https://github.com/openshift/etcd/pull/18277)
* CHANGELOG: Update to reflect go version 1.21.12 bump [#18282](https://github.com/openshift/etcd/pull/18282)
* Update CHANGELOG-3.5 with backported commit [#18278](https://github.com/openshift/etcd/pull/18278)
* changed the scorecard badge link to the standard format [#18281](https://github.com/openshift/etcd/pull/18281)
* Remove gsutil acl command for bucket permissions from release.sh [#18250](https://github.com/openshift/etcd/pull/18250)
* make: Include tools/mod when checking dependency versions [#18280](https://github.com/openshift/etcd/pull/18280)
* Follow up manual Dependency Bump [#18273](https://github.com/openshift/etcd/pull/18273)
* Manual Dependency Bump [#18266](https://github.com/openshift/etcd/pull/18266)
* Bump Go version to 1.22.5: GO-2024-2963 fix. [#18270](https://github.com/openshift/etcd/pull/18270)
* etcdctl: add support for filtering by {min,max} x {create,mod} x {revision} [#18233](https://github.com/openshift/etcd/pull/18233)
* Suppress noisy basic auth token deletion log [#18245](https://github.com/openshift/etcd/pull/18245)
* build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 [#18256](https://github.com/openshift/etcd/pull/18256)
* github: remove govulncheck action [#18249](https://github.com/openshift/etcd/pull/18249)
* changelog/3.4: set 3.4.33 release date [#18246](https://github.com/openshift/etcd/pull/18246)
* etcd-client: Clean up unnecessary nil Logger check [#18243](https://github.com/openshift/etcd/pull/18243)
* tests/e2e: add e2e test to reproduce issue 18089 [#18201](https://github.com/openshift/etcd/pull/18201)
* Add failpoint name to test name allowing us to track a per failpoint failures in testgrid [#18241](https://github.com/openshift/etcd/pull/18241)
* CHANGELOG: support multiple values for allowed client and peer … [#18219](https://github.com/openshift/etcd/pull/18219)
* Bump dependency updates identified by dependabot [#18228](https://github.com/openshift/etcd/pull/18228)
* Separate persisted responses without knowing their revision to prevent duplicating state during linearization [#18214](https://github.com/openshift/etcd/pull/18214)
* Update release-3.6 changelog [#18210](https://github.com/openshift/etcd/pull/18210)
* build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 [#18226](https://github.com/openshift/etcd/pull/18226)
* Add tests for patching history to check output and return values [#18227](https://github.com/openshift/etcd/pull/18227)
* Bump shellcheck to latest v0.10.0 release [#18217](https://github.com/openshift/etcd/pull/18217)
* Add verification on `client.Sync` to ensure the returned endpoints never empty [#18220](https://github.com/openshift/etcd/pull/18220)
* Disable robustness test detection of #18089 to allow detecting other issues [#18213](https://github.com/openshift/etcd/pull/18213)
* add changelog for bugfix 18164 prometheus metric register of walWriteSec [#18218](https://github.com/openshift/etcd/pull/18218)
* mvcc: fix typo [#18212](https://github.com/openshift/etcd/pull/18212)
* embed: add `GRPCAdditionalServerOptions` config [#14066](https://github.com/openshift/etcd/pull/14066)
* Bump dependency update [#18206](https://github.com/openshift/etcd/pull/18206)
* make: fix `verify-dep` target [#18205](https://github.com/openshift/etcd/pull/18205)
* featuregate: adds EtcdServer.FeatureEnabled interface. [#18062](https://github.com/openshift/etcd/pull/18062)
* Use $(MAKE) instead of make [#18204](https://github.com/openshift/etcd/pull/18204)
* Update the error message when client certificate isn't provided for secure metrics url [#18203](https://github.com/openshift/etcd/pull/18203)
* fix(server): enforce listen-metrics-urls client TLS info when its scheme is https/unixs [#18186](https://github.com/openshift/etcd/pull/18186)
* tests/robustness: fix access of ChoiceWeight [#18202](https://github.com/openshift/etcd/pull/18202)
* Avoid sending Compact request when LazyFS is enabled [#18181](https://github.com/openshift/etcd/pull/18181)
* robustness: change mixedVersionOption to use ChoiceWeight. [#18060](https://github.com/openshift/etcd/pull/18060)
* Reproduce #17529 in robustness tests [#17680](https://github.com/openshift/etcd/pull/17680)
* Add run-govulncheck Makefile target [#18182](https://github.com/openshift/etcd/pull/18182)
* Bump dependency updates identified by dependabot [#18199](https://github.com/openshift/etcd/pull/18199)
* build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 [#18198](https://github.com/openshift/etcd/pull/18198)
* build(deps): bump actions/checkout from 4.1.6 to 4.1.7 [#18197](https://github.com/openshift/etcd/pull/18197)
* Improve snapshot status [#15979](https://github.com/openshift/etcd/pull/15979)
* robustness: Separate compaction and LazyFS test scenario for cluster size 1 [#18179](https://github.com/openshift/etcd/pull/18179)
* Remove robustness presubmits for `amd64` arch [#18177](https://github.com/openshift/etcd/pull/18177)
* Update release-3.5 changelog [#18178](https://github.com/openshift/etcd/pull/18178)
* bugfix: register of walWriteSec [#18164](https://github.com/openshift/etcd/pull/18164)
* Fix govulncheck CI check on main branch [#18171](https://github.com/openshift/etcd/pull/18171)
* tests/robustness: update documentation to reflect Prow migration [#18167](https://github.com/openshift/etcd/pull/18167)
* Fix typo in mvcc comment [#18166](https://github.com/openshift/etcd/pull/18166)
* Update codecov config to support commenting in PR [#18143](https://github.com/openshift/etcd/pull/18143)
* Bump dependency updates identified by dependabot [#18161](https://github.com/openshift/etcd/pull/18161)
* build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 [#18152](https://github.com/openshift/etcd/pull/18152)
* build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 [#18151](https://github.com/openshift/etcd/pull/18151)
* CHANGELOG: support multiple values for allowed client and peer TLS identities [#18140](https://github.com/openshift/etcd/pull/18140)
* Improve e2e error reporting [#18107](https://github.com/openshift/etcd/pull/18107)
* Implement compaction support in robustness test [#17833](https://github.com/openshift/etcd/pull/17833)
* Ignore connection reset error when triggering a failpoint [#18133](https://github.com/openshift/etcd/pull/18133)
* tests/robustness: unlock Delete/LeaseRevoke ops [#18135](https://github.com/openshift/etcd/pull/18135)
* fix ts with no trailing zeros [#18108](https://github.com/openshift/etcd/pull/18108)
* Support multiple values for allowed client and peer TLS identities [#18015](https://github.com/openshift/etcd/pull/18015)
* Bump Go version to 1.22.4: CVE 2024-24790 fix [#18128](https://github.com/openshift/etcd/pull/18128)
* test: update CouldSetSnapshotCatchupEntries to use 3.5.14. [#18126](https://github.com/openshift/etcd/pull/18126)
* build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 [#18116](https://github.com/openshift/etcd/pull/18116)
* Bump dependency updates identified by dependabot [#18120](https://github.com/openshift/etcd/pull/18120)
* cli: Add etcdutl snapshot hashkv command [#15965](https://github.com/openshift/etcd/pull/15965)
* Use Go 1.20 error joining instead of multierr [#18098](https://github.com/openshift/etcd/pull/18098)
* Bump dependency updates identified by dependabot [#18102](https://github.com/openshift/etcd/pull/18102)
* scripts/release: shallow clone repository [#18095](https://github.com/openshift/etcd/pull/18095)
* Update release date for v3.5.14 [#18093](https://github.com/openshift/etcd/pull/18093)
* Add build subtargets based on ARCH [#18083](https://github.com/openshift/etcd/pull/18083)
* build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 [#18081](https://github.com/openshift/etcd/pull/18081)
* CHANGELOG: add support AllowedCN and AllowedHostname [#18068](https://github.com/openshift/etcd/pull/18068)
* Support setting LocalAddr in peer communication - with e2e tests [#17661](https://github.com/openshift/etcd/pull/17661)
* Complete migration of verify workflow to prow [#18058](https://github.com/openshift/etcd/pull/18058)
* workflow: change the target of make test-robustness to test-robustness-main [#18054](https://github.com/openshift/etcd/pull/18054)
* Increase robustness test request timeout to 200ms [#18057](https://github.com/openshift/etcd/pull/18057)
* Add randomness in robustness cluster process version to test mixed version scenarios. [#17923](https://github.com/openshift/etcd/pull/17923)
* Allow gofail trigger to fail as long as the member stops running [#18046](https://github.com/openshift/etcd/pull/18046)
* Update printer.go for used/not-used ETCD storage percentage [#17871](https://github.com/openshift/etcd/pull/17871)
* Bump dependency updates identified by dependabot [#18045](https://github.com/openshift/etcd/pull/18045)
* Add siyuanfoundation to reviewers. [#18033](https://github.com/openshift/etcd/pull/18033)
* build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 [#18043](https://github.com/openshift/etcd/pull/18043)
* build(deps): bump actions/checkout from 4.1.5 to 4.1.6 [#18044](https://github.com/openshift/etcd/pull/18044)
* Add ivanvc to reviewers [#18029](https://github.com/openshift/etcd/pull/18029)
* embed: fix typo in comment [#18028](https://github.com/openshift/etcd/pull/18028)
* etcdserver: add server range duration metrics [#17983](https://github.com/openshift/etcd/pull/17983)
* Bump dependency updates identified by dependabot [#18026](https://github.com/openshift/etcd/pull/18026)
* Bump dependency updates identified by dependabot [#18024](https://github.com/openshift/etcd/pull/18024)
* changelog: add 3.4 and 3.5 note about go 1.21.10 [#18019](https://github.com/openshift/etcd/pull/18019)
* add error constants in validate pkg [#18008](https://github.com/openshift/etcd/pull/18008)
* split out subroutine from fix.sh to makefile target [#18007](https://github.com/openshift/etcd/pull/18007)
* dependency(gh_actions): Manually bump codeql action from 3.25.3 to 3.25.5 [#18005](https://github.com/openshift/etcd/pull/18005)
* build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 [#18002](https://github.com/openshift/etcd/pull/18002)
* build(deps): bump actions/checkout from 4.1.4 to 4.1.5 [#18003](https://github.com/openshift/etcd/pull/18003)
* build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 [#18000](https://github.com/openshift/etcd/pull/18000)
* Prevent picking a failpoint that waiting till snapshot that doesn't support lower snapshot catchup entries but allow reproducing issue #15271 [#17989](https://github.com/openshift/etcd/pull/17989)
* Add nested owners files to automate labeling pull requests [#17979](https://github.com/openshift/etcd/pull/17979)
* github workflow: fix all apt-install error return code [#17984](https://github.com/openshift/etcd/pull/17984)
* changelog: add note from #17977 backport [#17978](https://github.com/openshift/etcd/pull/17978)
* dependency: upgrade go to 1.22.3 [#17975](https://github.com/openshift/etcd/pull/17975)
* Relax assumptions about all client request persisted in WAL to only require first and last request to be persisted [#17966](https://github.com/openshift/etcd/pull/17966)
* Bump dependency updates identified by dependabot [#17973](https://github.com/openshift/etcd/pull/17973)
* Add tests to serializable operations validation [#17918](https://github.com/openshift/etcd/pull/17918)
* tools/benchmark/cmd: eliminate custom max function [#17971](https://github.com/openshift/etcd/pull/17971)
* Update the robustness README and fix the #14370 reproduction case [#17967](https://github.com/openshift/etcd/pull/17967)
* Fix caching by not depending on PHONY target in non-PHONY target [#17965](https://github.com/openshift/etcd/pull/17965)
* Robustness operations failpoints [#17889](https://github.com/openshift/etcd/pull/17889)
* Setup a way to consistently manage go versions across scripts and go.mods [#17876](https://github.com/openshift/etcd/pull/17876)
* pkg/report: make use of builtin min/max function [#17963](https://github.com/openshift/etcd/pull/17963)
* config: support AllowedCN and AllowedHostname through config file [#17861](https://github.com/openshift/etcd/pull/17861)
* update changelog for experimental-stop-grpc-service-on-defrag [#17962](https://github.com/openshift/etcd/pull/17962)
* robustness: add 2 more log lines when persistClientReports [#17933](https://github.com/openshift/etcd/pull/17933)
* build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 [#17949](https://github.com/openshift/etcd/pull/17949)
* dependency: bump go.etcd.io/bbolt from v1.4.0-alpha.0 to v1.4.0-alpha.1 [#17947](https://github.com/openshift/etcd/pull/17947)
* Update changelog with bbolt bumps [#17948](https://github.com/openshift/etcd/pull/17948)
* Update changelog with quota to endpoint status response [#17942](https://github.com/openshift/etcd/pull/17942)
* github/workflows: remove golangci-lint-action step from static-analysis [#17941](https://github.com/openshift/etcd/pull/17941)
* make: fix running fix target after verify [#17937](https://github.com/openshift/etcd/pull/17937)
* Manually bump dependencies [#17932](https://github.com/openshift/etcd/pull/17932)
* Enable var-naming linter rule [#17921](https://github.com/openshift/etcd/pull/17921)
* Fix typo bootstrapedCluster [#17930](https://github.com/openshift/etcd/pull/17930)
* Add etcd cloud project name [#17927](https://github.com/openshift/etcd/pull/17927)
* add quota to endpoint status response [#17877](https://github.com/openshift/etcd/pull/17877)
* Update jmhbnz project role in owners [#17926](https://github.com/openshift/etcd/pull/17926)
* Chore: Use chain interceptors from grpc package [#17922](https://github.com/openshift/etcd/pull/17922)
* pkg/netutil: avoid conversion between uint8 and int for GetDefaultHost [#17895](https://github.com/openshift/etcd/pull/17895)
* changelog/3.4: add fix for member list not updated when node goes down [#17916](https://github.com/openshift/etcd/pull/17916)
* Fix remove member failed. [#17793](https://github.com/openshift/etcd/pull/17793)
* Fix deprecation comments from addressing var-naming work [#17875](https://github.com/openshift/etcd/pull/17875)
* build(deps): bump github/codeql-action from 3.25.2 to 3.25.3 [#17902](https://github.com/openshift/etcd/pull/17902)
* github/workflows: skip robustness tests in forks [#17913](https://github.com/openshift/etcd/pull/17913)
* build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.1.0 [#17903](https://github.com/openshift/etcd/pull/17903)
* build(deps): bump actions/download-artifact from 4.1.6 to 4.1.7 [#17905](https://github.com/openshift/etcd/pull/17905)
* build(deps): bump actions/checkout from 4.1.3 to 4.1.4 [#17904](https://github.com/openshift/etcd/pull/17904)
* Test: add tools/rw-heatmaps & tools/testgrid-analysis to module_dirs [#17770](https://github.com/openshift/etcd/pull/17770)
* github workflow: drop measure test flakiness [#17893](https://github.com/openshift/etcd/pull/17893)
* Add LeaseRevoke request to WAL parsing [#17890](https://github.com/openshift/etcd/pull/17890)
* gofail: show error messages returned by gofail HTTP endpoints [#17842](https://github.com/openshift/etcd/pull/17842)
* all: don't convert byte slice to string when using verb %s [#17878](https://github.com/openshift/etcd/pull/17878)
* Robustness wal validate watch [#17731](https://github.com/openshift/etcd/pull/17731)
* Update Changelog for v3.4.32 [#17885](https://github.com/openshift/etcd/pull/17885)
* github workflow: remove failfast in robustness nightly. [#17880](https://github.com/openshift/etcd/pull/17880)
* CHANGELOG: update 3.4 and 3.5 with fix [#17868](https://github.com/openshift/etcd/pull/17868)
* server/proxy/tcpproxy: use net.JoinHostPort rather than formatAddr [#17834](https://github.com/openshift/etcd/pull/17834)
* robustness: Add option to not overwrite results dir. [#17827](https://github.com/openshift/etcd/pull/17827)
* build(deps): bump actions/download-artifact from 4.1.4 to 4.1.6 [#17850](https://github.com/openshift/etcd/pull/17850)
* build(deps): bump github/codeql-action from 3.25.0 to 3.25.2 [#17866](https://github.com/openshift/etcd/pull/17866)
* fix version order when calling IsValidClusterVersionChange in UpdateCapability [#17860](https://github.com/openshift/etcd/pull/17860)
* server/storage/mvcc: should update currentRev in revMu [#17862](https://github.com/openshift/etcd/pull/17862)
* build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 [#17849](https://github.com/openshift/etcd/pull/17849)
* Address remaining var naming linter warnings [#17863](https://github.com/openshift/etcd/pull/17863)
* Update CHANGELOG - 3.4, 3.5 - fix PRISMA-2023-0056 [#17826](https://github.com/openshift/etcd/pull/17826)
* build(deps): bump actions/checkout from 4.1.1 to 4.1.3 [#17852](https://github.com/openshift/etcd/pull/17852)
* tests: set GOTOOLCHAIN var for report validation [#17734](https://github.com/openshift/etcd/pull/17734)
* Bump dependency updates identified by dependabot [#17841](https://github.com/openshift/etcd/pull/17841)
* Update 3.4 changelog for 2 new downgrade cases. [#17859](https://github.com/openshift/etcd/pull/17859)
* Persist member data with lazyfs enabled [#17856](https://github.com/openshift/etcd/pull/17856)
* server/config: address golangci var-naming issues [#17854](https://github.com/openshift/etcd/pull/17854)
* Update the changelog for the change on compaction log on boostrap [#17832](https://github.com/openshift/etcd/pull/17832)
* refactor IsValidVersionChange. [#17847](https://github.com/openshift/etcd/pull/17847)
* fix revision loss issue caused by compaction - 17780 [#17815](https://github.com/openshift/etcd/pull/17815)
* Don't require minimal for failpoint injection period [#17825](https://github.com/openshift/etcd/pull/17825)
* Handle watch responses with error [#17835](https://github.com/openshift/etcd/pull/17835)
* Manually bump dependencies [#17836](https://github.com/openshift/etcd/pull/17836)
* Add verification that the revision shouldn't decrease on bootstrap [#17791](https://github.com/openshift/etcd/pull/17791)
* Validate revisions between progress notify [#17810](https://github.com/openshift/etcd/pull/17810)
* Update the compaction log when bootstrap and update compact's signature [#17792](https://github.com/openshift/etcd/pull/17792)
* server/embed: address golangci var-naming issues [#17820](https://github.com/openshift/etcd/pull/17820)
* server/auth: simplify code for isValidPermissionRange [#17816](https://github.com/openshift/etcd/pull/17816)
* Update CHANGELOG 3.4 and 3.5 - ignore raft messages if member id mismatch [#17819](https://github.com/openshift/etcd/pull/17819)
* server/embed: address golangci var-naming issues [#17674](https://github.com/openshift/etcd/pull/17674)
* server/etcdmain: eliminate deprecated tlsConfig.BuildNameToCertificate() [#17787](https://github.com/openshift/etcd/pull/17787)
* Resumable handles watch with revision zero [#17807](https://github.com/openshift/etcd/pull/17807)
* Validate bookmarkable checks the last event before progress notify [#17771](https://github.com/openshift/etcd/pull/17771)
* Add filter validation to ensure watch only includes events within selector [#17806](https://github.com/openshift/etcd/pull/17806)
* tests: fix some typos in comments [#17809](https://github.com/openshift/etcd/pull/17809)
* build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 [#17805](https://github.com/openshift/etcd/pull/17805)
* Add tests to watch validation [#17786](https://github.com/openshift/etcd/pull/17786)
* Robustness wal [#16761](https://github.com/openshift/etcd/pull/16761)
* Remove limit from read requests after a failed write [#17781](https://github.com/openshift/etcd/pull/17781)
* Enhance the etcd-dump-db: reuse revision in package mvcc [#17788](https://github.com/openshift/etcd/pull/17788)
* testgrid: print out all failed tests for visibility. [#17785](https://github.com/openshift/etcd/pull/17785)
* etcdserver: updated pre-vote flag description [#17762](https://github.com/openshift/etcd/pull/17762)
* Add explicit checks for assumptions in robustness test validation [#17759](https://github.com/openshift/etcd/pull/17759)
* Improve description for Kubernetes CAS operations [#17783](https://github.com/openshift/etcd/pull/17783)
* Collect failed read operations to calculate request success rate [#17768](https://github.com/openshift/etcd/pull/17768)
* test: refactor mix_version_test. [#17776](https://github.com/openshift/etcd/pull/17776)
* fix: close profile in the mvccPutFunc func [#17729](https://github.com/openshift/etcd/pull/17729)
* Don't cache test-robustness-reports [#17756](https://github.com/openshift/etcd/pull/17756)
* Bump dependency updates identified by dependabot [#17767](https://github.com/openshift/etcd/pull/17767)
* build(deps): bump distroless/static-debian12 from `8cbe18a` to `4197211` [#17735](https://github.com/openshift/etcd/pull/17735)
* tools/rw-heatmaps: allow overriding running parameters [#17755](https://github.com/openshift/etcd/pull/17755)
* Bump dependency updates identified by dependabot [#17751](https://github.com/openshift/etcd/pull/17751)
* Improve documentation [#17758](https://github.com/openshift/etcd/pull/17758)
* dependency(gh_action): bump upload and download artifact from 3 to 4 [#17761](https://github.com/openshift/etcd/pull/17761)
* Document re-evaluating existing robustness test reports [#17733](https://github.com/openshift/etcd/pull/17733)
* build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 [#17745](https://github.com/openshift/etcd/pull/17745)
* CHANGELOG:add wal write system call metrics observation [#17728](https://github.com/openshift/etcd/pull/17728)
* Make no failpoint error more readable [#17730](https://github.com/openshift/etcd/pull/17730)
* Bump dependency updates identified by dependabot [#17724](https://github.com/openshift/etcd/pull/17724)
* Limit a timeout in testing robustness validation [#16764](https://github.com/openshift/etcd/pull/16764)
* Add script and workflow to detect flaky tests in testgrid. [#17662](https://github.com/openshift/etcd/pull/17662)
* Revert "tests: temporary disable coverage redesign Go experiment" [#17713](https://github.com/openshift/etcd/pull/17713)
* tools/benchmark/cmd: don't panic with nil values in hashKV function [#17710](https://github.com/openshift/etcd/pull/17710)
* CHANGELOG: update for LeaseTimeToLive returns error if leader changed [#17718](https://github.com/openshift/etcd/pull/17718)
* Increase timeout for deactivating failpoint [#17719](https://github.com/openshift/etcd/pull/17719)
* Update CHANGELOG 3.4 and 3.5 - initialization for epMu/mu in client context [#17706](https://github.com/openshift/etcd/pull/17706)
* Bump go-version to 1.22.2 for release-3.6 due to CVE-2023-45288 [#17707](https://github.com/openshift/etcd/pull/17707)
* Add trivy scan action for current branch HEAD [#17679](https://github.com/openshift/etcd/pull/17679)
* server/storage: change deprecated bolt error to new error package [#17701](https://github.com/openshift/etcd/pull/17701)
* changelog: add requests retry when receiving ErrGPRCNotSupportedForLearner [#17698](https://github.com/openshift/etcd/pull/17698)
* Makefile: perfect .PHONY [#17700](https://github.com/openshift/etcd/pull/17700)
* Replace run.skip-files with issues.exclude-files in golangci config [#17694](https://github.com/openshift/etcd/pull/17694)
* Fix release git url & document lessons learned [#17677](https://github.com/openshift/etcd/pull/17677)
* *: LeaseTimeToLive returns error if leader changed [#17642](https://github.com/openshift/etcd/pull/17642)
* tests/e2e: ignore discovery tests when cluster_proxy tag is set [#17691](https://github.com/openshift/etcd/pull/17691)
* client/pkg/testutil: eliminate copyToInterface function [#17675](https://github.com/openshift/etcd/pull/17675)
* nit: Fix trailing whitespace in etcdmain/help.go [#17690](https://github.com/openshift/etcd/pull/17690)
* build(deps): bump distroless/static-debian12 from `6dcc833` to `8cbe18a` [#17682](https://github.com/openshift/etcd/pull/17682)
* changelog: change livez/readyz HTTP endpoints to v3.5.11 [#17678](https://github.com/openshift/etcd/pull/17678)
* client/pkg/testutil: add shouldSkip func for interestingGoroutines [#17676](https://github.com/openshift/etcd/pull/17676)
* feat: add wal write system call metrics observation (main) [#17618](https://github.com/openshift/etcd/pull/17618)
* Update release date for v3.5.13. [#17672](https://github.com/openshift/etcd/pull/17672)
* server/storage: address golangci var-naming issues [#17660](https://github.com/openshift/etcd/pull/17660)
* add 3.4 changelog of adding downgrade support. [#17664](https://github.com/openshift/etcd/pull/17664)
* Fix tx buffer inconsistency if there are unordered key writes in one tx. [#17263](https://github.com/openshift/etcd/pull/17263)
* tools/mod: remove reference to github.com/mikefarah/yq/v4 [#17659](https://github.com/openshift/etcd/pull/17659)
* all: make regexp.Regexp variables global when not using configuration… [#17652](https://github.com/openshift/etcd/pull/17652)
* Bump dependencies identified by dependabot [#17650](https://github.com/openshift/etcd/pull/17650)
* tests/framework: address golangci var-naming issues [remove (*Member) GRPCURL()] [#17655](https://github.com/openshift/etcd/pull/17655)
* tests/robustness: address golangci var-naming issues [#17654](https://github.com/openshift/etcd/pull/17654)
* build(deps): bump github/codeql-action from 3.24.8 to 3.24.9 [#17643](https://github.com/openshift/etcd/pull/17643)
* tests/framework: address golangci var-naming issues [#17651](https://github.com/openshift/etcd/pull/17651)
* all: call Close() after reading http.Response.Body [#17634](https://github.com/openshift/etcd/pull/17634)
* fix some typos [#17640](https://github.com/openshift/etcd/pull/17640)
* Improve watch latency benchmark [#17562](https://github.com/openshift/etcd/pull/17562)
* pkg: address golangci var-naming issues [#17584](https://github.com/openshift/etcd/pull/17584)
* flaky: fix jwt test with increasing ttl [#17588](https://github.com/openshift/etcd/pull/17588)
* Investigate arm64 robustness performance [#17595](https://github.com/openshift/etcd/pull/17595)
* build(deps): bump distroless/static-debian12 from `0d6ada5` to `6dcc833` [#17600](https://github.com/openshift/etcd/pull/17600)
* tests/common, tests/integration: Address tests var-naming lint rule [#17635](https://github.com/openshift/etcd/pull/17635)
* tests/e2e: address golangci var-naming issues [#17636](https://github.com/openshift/etcd/pull/17636)
* Weekly dependency update [#17620](https://github.com/openshift/etcd/pull/17620)
* server: address golangci var-naming issues [#17624](https://github.com/openshift/etcd/pull/17624)
* Update date of v3.4.31 release. [#17632](https://github.com/openshift/etcd/pull/17632)
* Let dapendabot to auto-update docker for release 3.4&3.5. [#17613](https://github.com/openshift/etcd/pull/17613)
* update 3.4 and 3.5 CHANGELOG of watch event loss after compaction fix [#17617](https://github.com/openshift/etcd/pull/17617)
* etcdserver: address var naming lint rule [#17614](https://github.com/openshift/etcd/pull/17614)
* build(deps): bump github/codeql-action from 3.24.6 to 3.24.8 [#17599](https://github.com/openshift/etcd/pull/17599)
* Update community meeting docs to cover lead rotation [#17597](https://github.com/openshift/etcd/pull/17597)
* Update format error for candidate links [#17594](https://github.com/openshift/etcd/pull/17594)
* Update release guide and setup a pool of release candidates [#17589](https://github.com/openshift/etcd/pull/17589)
* Use etcd maintainers ML for security related discussion [#17590](https://github.com/openshift/etcd/pull/17590)
* api: address golangci var-naming issues [#17585](https://github.com/openshift/etcd/pull/17585)
* Fix watch event loss [#17555](https://github.com/openshift/etcd/pull/17555)
* Added changelog for the progress notification issue [#17587](https://github.com/openshift/etcd/pull/17587)
* client: address golangci var-naming issues [#17582](https://github.com/openshift/etcd/pull/17582)
* Bump dependencies identified by dependabot [#17576](https://github.com/openshift/etcd/pull/17576)
* Fix progress notification for watch that doesn't get any events [#17557](https://github.com/openshift/etcd/pull/17557)
* Add patch version release criterion [#17546](https://github.com/openshift/etcd/pull/17546)
* Reimplement tools/rw-heatmaps in go [#17428](https://github.com/openshift/etcd/pull/17428)
* tests: temporary disable coverage redisign Go experiment [#17561](https://github.com/openshift/etcd/pull/17561)
* Changelog: Add CVE-2024-24786 remediation [#17559](https://github.com/openshift/etcd/pull/17559)
* changelog: add 3.4 and 3.5 note about go 1.21.8 [#17542](https://github.com/openshift/etcd/pull/17542)
* Tweak golang version policy to avoid unsupported minor versions [#17544](https://github.com/openshift/etcd/pull/17544)
* Bump dependencies identified by dependabot [#17543](https://github.com/openshift/etcd/pull/17543)
* Migrate to go1.22 [#17393](https://github.com/openshift/etcd/pull/17393)
* Add election test with auth enabled [#17532](https://github.com/openshift/etcd/pull/17532)
* build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 [#17524](https://github.com/openshift/etcd/pull/17524)
* etcdserver: skip when detect a removed peer [#17518](https://github.com/openshift/etcd/pull/17518)
* Add a test status section to display testgrid status. [#17508](https://github.com/openshift/etcd/pull/17508)
* build(deps): bump distroless/static-debian12 from `2eb0c79` to `0d6ada5` [#17495](https://github.com/openshift/etcd/pull/17495)
* build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 [#17492](https://github.com/openshift/etcd/pull/17492)
* Add Cyberfusion to adopters [#17469](https://github.com/openshift/etcd/pull/17469)
* Bump dependencies identified by dependabot [#17503](https://github.com/openshift/etcd/pull/17503)
* Clarify the core dependencies mappings: bbolt and raft [#17485](https://github.com/openshift/etcd/pull/17485)
* Update changelogs to cover the bumping bbolt to v1.3.9 for both 3.4.31 and 3.5.13 [#17486](https://github.com/openshift/etcd/pull/17486)
* update CHANGELOG-3.5.md for #17447 [#17488](https://github.com/openshift/etcd/pull/17488)
* Increased timeout to fix TestHashKVWhenCompacting test [#17481](https://github.com/openshift/etcd/pull/17481)
* changelog: Add ignore old leader's leases revoking requests [#17480](https://github.com/openshift/etcd/pull/17480)
* Add VerifyTxConsistency to backend. [#17359](https://github.com/openshift/etcd/pull/17359)
* Update flake issue template to include prow [#17478](https://github.com/openshift/etcd/pull/17478)
* Bump dependencies identified by dependabot [#17466](https://github.com/openshift/etcd/pull/17466)
* CHANGELOG: Add entries for updated compaction logs [#17473](https://github.com/openshift/etcd/pull/17473)
* tests/robustness: use WithRequireLeader in Kubernetes traffic [#17475](https://github.com/openshift/etcd/pull/17475)
* Revert "tests/robustness: check for compaction before prevKV validation" [#17471](https://github.com/openshift/etcd/pull/17471)
* Fix typo in etcdctl/README.md [#17446](https://github.com/openshift/etcd/pull/17446)
* update changelog for #15940 [#15983](https://github.com/openshift/etcd/pull/15983)
* build(deps): bump distroless/static-debian12 from `4a2c1a5` to `2eb0c79` [#17462](https://github.com/openshift/etcd/pull/17462)
* tests/robustness: check for compaction before prevKV validation [#17450](https://github.com/openshift/etcd/pull/17450)
* build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 [#17461](https://github.com/openshift/etcd/pull/17461)
* Add `Make CGO_ENABLED configurable` to CHANGELOG [#17449](https://github.com/openshift/etcd/pull/17449)
* Added client keepalive arguments to the grpc-proxy [#17366](https://github.com/openshift/etcd/pull/17366)
* *: update logrus to v1.9.3 [#17445](https://github.com/openshift/etcd/pull/17445)
* server/verify: use retErr to shadow local err [#17441](https://github.com/openshift/etcd/pull/17441)
* Update membership process to reflect kubernetes/org automation [#17429](https://github.com/openshift/etcd/pull/17429)
* cleanup contention.go docs, Observe param name [#16603](https://github.com/openshift/etcd/pull/16603)
* tests/robustness: refactors, cleanups and followups [#17426](https://github.com/openshift/etcd/pull/17426)
* feat: add `TestNoErrorLogsDuringNormalOperations` e2e test to validate error logs during etcd bootstrap [#17423](https://github.com/openshift/etcd/pull/17423)
* etcdutl: Fix snapshot restore memory alloc issue [#17277](https://github.com/openshift/etcd/pull/17277)
* tests/robustness: add robustness test for watch with PrevKV() [#17352](https://github.com/openshift/etcd/pull/17352)
* Bump dependencies [#17420](https://github.com/openshift/etcd/pull/17420)
* Make CGO_ENABLED configurable [#17418](https://github.com/openshift/etcd/pull/17418)
* build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 [#17406](https://github.com/openshift/etcd/pull/17406)
* build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 [#17407](https://github.com/openshift/etcd/pull/17407)
* Remove the unused AuthTokenTTL parameter from integration test [#17403](https://github.com/openshift/etcd/pull/17403)
* Add Hitoshi Mitake into the Emeritus Maintainers list [#17395](https://github.com/openshift/etcd/pull/17395)
* Remove string dependent error handling in watch and auth [#17384](https://github.com/openshift/etcd/pull/17384)
* Add go1.21 update to changelog [#17380](https://github.com/openshift/etcd/pull/17380)
* add OpenBSD support to changelog 3.5 [#17388](https://github.com/openshift/etcd/pull/17388)
* Manually bump dependencies [#17392](https://github.com/openshift/etcd/pull/17392)
* feat: add `memberReplaceLearnerTest` test [#17287](https://github.com/openshift/etcd/pull/17287)
* build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 [#17372](https://github.com/openshift/etcd/pull/17372)
* etcd: ignore SetKeepAlivePeriod errors on OpenBSD [#15812](https://github.com/openshift/etcd/pull/15812)
* Update OWNERS: retire mitake [#17385](https://github.com/openshift/etcd/pull/17385)
* Add backoff/retry config to changelog [#17370](https://github.com/openshift/etcd/pull/17370)
* Update ahrtr's email [#17367](https://github.com/openshift/etcd/pull/17367)
* etcdserver: drain leaky goroutines before test completed [#17365](https://github.com/openshift/etcd/pull/17365)
* build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 [#17335](https://github.com/openshift/etcd/pull/17335)
* build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 [#17334](https://github.com/openshift/etcd/pull/17334)
* Manually bump dependencies [#17358](https://github.com/openshift/etcd/pull/17358)
* tests/robustness: fix out of index panic in model replay [#17356](https://github.com/openshift/etcd/pull/17356)
* Update changelog for v3.4.30 [#17354](https://github.com/openshift/etcd/pull/17354)
* Add v3.5.12 changelog [#17351](https://github.com/openshift/etcd/pull/17351)
* Added a error log when learner is not sync with etcd leader. [#17288](https://github.com/openshift/etcd/pull/17288)
* changelog: add 3.4 and 3.5 note about go 1.20.13 [#17309](https://github.com/openshift/etcd/pull/17309)
* Add verification on keys: should be always mononically increasing [#17325](https://github.com/openshift/etcd/pull/17325)
* test: fix `TestHashKVWhenCompacting`: ensure all goroutine finished [#17313](https://github.com/openshift/etcd/pull/17313)
* Disable lazyfs test on arm64 machines [#17323](https://github.com/openshift/etcd/pull/17323)
* Validate watch even if event history cannot be created [#17260](https://github.com/openshift/etcd/pull/17260)
* Add backoff & retries to client config [#17307](https://github.com/openshift/etcd/pull/17307)
* build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 [#17302](https://github.com/openshift/etcd/pull/17302)
* build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0 [#17303](https://github.com/openshift/etcd/pull/17303)
* Print error log when creating peer listener failed [#17314](https://github.com/openshift/etcd/pull/17314)
* Bump dependencies identified by dependabot [#17319](https://github.com/openshift/etcd/pull/17319)
* Separate robustness test scenarios and increase number of times we run exploratory tests in nightly [#17261](https://github.com/openshift/etcd/pull/17261)
* Fix golangci revive error-strings issues [#17286](https://github.com/openshift/etcd/pull/17286)
* Fix test issue in TestScheduleCompaction [#17284](https://github.com/openshift/etcd/pull/17284)
* Added container tools to devcontainer for debugging prow jobs [#17273](https://github.com/openshift/etcd/pull/17273)
* Revert #17228 [#17285](https://github.com/openshift/etcd/pull/17285)
* dependency: upgrade go to 1.21.6 [#17274](https://github.com/openshift/etcd/pull/17274)
* Add changelog for 3.4.30 to cover the nil pointer log panicking issue [#17271](https://github.com/openshift/etcd/pull/17271)
* build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0 [#17253](https://github.com/openshift/etcd/pull/17253)
* Bump dependencies identified by dependabot [#17264](https://github.com/openshift/etcd/pull/17264)
* Replace `CreateBucket` with `CreateBucketIfNotExists` [#17249](https://github.com/openshift/etcd/pull/17249)
* mvcc: Printing etcd backend database related metrics inside scheduleCompaction function [#17204](https://github.com/openshift/etcd/pull/17204)
* Migrate the raft changes to raft's changelog [#17244](https://github.com/openshift/etcd/pull/17244)
* integration: deflake TestMaintenanceSnapshotCancel [#17235](https://github.com/openshift/etcd/pull/17235)
* Specify logger for bbolt [#17237](https://github.com/openshift/etcd/pull/17237)
* Ensure bin/python directory is cleaned after install [#17229](https://github.com/openshift/etcd/pull/17229)
* Fix tx buffer inconsistency if there are duplicate keys in one tx. [#17228](https://github.com/openshift/etcd/pull/17228)
* server: fix learner metric incorrect issue [#17176](https://github.com/openshift/etcd/pull/17176)
* Bump core dependencies bbolt and raft [#17236](https://github.com/openshift/etcd/pull/17236)
* Update contributing guide to ensure there is an associated issue for each PR [#17234](https://github.com/openshift/etcd/pull/17234)
* Fix delete inconsistencies in read buffer [#17195](https://github.com/openshift/etcd/pull/17195)
* build(deps): bump github/codeql-action from 3.22.12 to 3.23.0 [#17209](https://github.com/openshift/etcd/pull/17209)
* Adopt kubernetes issue priorities [#17174](https://github.com/openshift/etcd/pull/17174)
* Fix Struct Config has methods on both value and pointer receivers. Such usage is not recommended by the Go Documentation. [#17219](https://github.com/openshift/etcd/pull/17219)
* docs: update rotation worksheet [#17225](https://github.com/openshift/etcd/pull/17225)
* Bump dependencies manually [#17220](https://github.com/openshift/etcd/pull/17220)
* CHANGELOG: update changes for v3.4.29 [#17221](https://github.com/openshift/etcd/pull/17221)
* Don't flock snapshot files [#17199](https://github.com/openshift/etcd/pull/17199)
* Automate installation of yamllint [#17200](https://github.com/openshift/etcd/pull/17200)
* Update arm64 infra guide standard `arm64` runner definition [#17103](https://github.com/openshift/etcd/pull/17103)
* Improve logs around recovering snapshot backend and add an e2e test [#17152](https://github.com/openshift/etcd/pull/17152)
* Enable org members to approve workflows for backports [#17193](https://github.com/openshift/etcd/pull/17193)
* Bump dependencies [#17191](https://github.com/openshift/etcd/pull/17191)
* Replace the deprecated `x509.ParseCRL` with `x509.ParseRevocationList` [#17106](https://github.com/openshift/etcd/pull/17106)
* Update OWNERS: Retire ptabor [#17156](https://github.com/openshift/etcd/pull/17156)
* build(deps): bump github/codeql-action from 3.22.11 to 3.22.12 [#17167](https://github.com/openshift/etcd/pull/17167)
* Manually bump dependencies [#17172](https://github.com/openshift/etcd/pull/17172)
* build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#17150](https://github.com/openshift/etcd/pull/17150)
* Manually bump dependencies [#17159](https://github.com/openshift/etcd/pull/17159)
* Test etcd fails to bootstrap with older db file [#17153](https://github.com/openshift/etcd/pull/17153)
* Fix artifact upload github action for compatibility with v4.0 [#17148](https://github.com/openshift/etcd/pull/17148)
* Add digest for base image and configure dependabot [#17122](https://github.com/openshift/etcd/pull/17122)
* Correct typo from 'Kuberntes' to 'Kubernetes' [#17149](https://github.com/openshift/etcd/pull/17149)
* Remove workflow telemetry github action [#17131](https://github.com/openshift/etcd/pull/17131)
* changelog: update 3.4 3.5 changelogs to include livez/readyz changes. [#17147](https://github.com/openshift/etcd/pull/17147)
* build(deps): bump github/codeql-action from 2.22.9 to 3.22.11 [#17141](https://github.com/openshift/etcd/pull/17141)
* tests: add comments for clientv3test.TestWatchResumeInitRev [#16888](https://github.com/openshift/etcd/pull/16888)
* Ignore old leader's leases revoking request [#16822](https://github.com/openshift/etcd/pull/16822)
* Update test case TestMemberReplace to always connect to stable endpoints [#17125](https://github.com/openshift/etcd/pull/17125)
* testutils: return early instead of first breaking in LogObserver.Expe… [#17107](https://github.com/openshift/etcd/pull/17107)
* changelog: update 3.4 changelog to include ssrf fix [#17115](https://github.com/openshift/etcd/pull/17115)
* etcdclient: Fix memory leak caused by for + time.After [#17117](https://github.com/openshift/etcd/pull/17117)
* Added some log messages for better diagnosis [#17113](https://github.com/openshift/etcd/pull/17113)
* Add actuated badge [#17102](https://github.com/openshift/etcd/pull/17102)
* contrib: add missing lock and mixin readme descriptions [#17108](https://github.com/openshift/etcd/pull/17108)
* Bump dependencies identified by dependabot [#17104](https://github.com/openshift/etcd/pull/17104)
* Add member replace e2e test [#17079](https://github.com/openshift/etcd/pull/17079)
* Adjusted RAM Requirements for arm64 Workflows [#17089](https://github.com/openshift/etcd/pull/17089)
* build(deps): bump github/codeql-action from 2.22.8 to 2.22.9 [#17091](https://github.com/openshift/etcd/pull/17091)
* build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 [#17090](https://github.com/openshift/etcd/pull/17090)
* Install gofail in module-aware mode and ignore go.mod file [#17088](https://github.com/openshift/etcd/pull/17088)
* Add status column for current release priorities [#17086](https://github.com/openshift/etcd/pull/17086)
* Adding automated install of Protoc if not found on the system [#17047](https://github.com/openshift/etcd/pull/17047)
* Update release-3.4 and 3.5 Changelog for go bump to 1.20.12 [#17080](https://github.com/openshift/etcd/pull/17080)
* server: ignore raft messages if member id mismatch [#17078](https://github.com/openshift/etcd/pull/17078)
* Update go version to 1.21.5 [#17073](https://github.com/openshift/etcd/pull/17073)
* Bump dependencies manually [#17072](https://github.com/openshift/etcd/pull/17072)
* Rollback the pull/14080: which fixed the potential deadlock [#17058](https://github.com/openshift/etcd/pull/17058)
* server: disable redirects in peer communication [#17066](https://github.com/openshift/etcd/pull/17066)
* add workflow telemetry to collect action metrics [#17046](https://github.com/openshift/etcd/pull/17046)
* Revert "Switch to validating v3 when v2 and v3 are synchronized" [#17056](https://github.com/openshift/etcd/pull/17056)
* Abort if failpoint injecton failed [#17055](https://github.com/openshift/etcd/pull/17055)
* Support setting http client timeout when enable/disable failpoint [#17050](https://github.com/openshift/etcd/pull/17050)
* *: dependabot dependency fix [#17044](https://github.com/openshift/etcd/pull/17044)
* build(deps): bump github/codeql-action from 2.22.7 to 2.22.8 [#17028](https://github.com/openshift/etcd/pull/17028)
* Fix message in case of unsupported platform [#17040](https://github.com/openshift/etcd/pull/17040)
* changelog: Update changelog for 3.5.11 to include url redirect fix [#17027](https://github.com/openshift/etcd/pull/17027)
* Extract membership applier [#17015](https://github.com/openshift/etcd/pull/17015)
* Test ApplyConfState after restart [#17021](https://github.com/openshift/etcd/pull/17021)
* Test v3 storage configuration validation [#17026](https://github.com/openshift/etcd/pull/17026)
* Switch to validating v3 when v2 and v3 are synchronized [#17017](https://github.com/openshift/etcd/pull/17017)
* CHANGELOG: Add 3.5.11 note for --experimental-distributed-tracing-sampling-rate [#17023](https://github.com/openshift/etcd/pull/17023)
* Remove unused method and function [#17020](https://github.com/openshift/etcd/pull/17020)
* add initialization for epMu in contetx client [#17018](https://github.com/openshift/etcd/pull/17018)
* Add a simple test ensuring membership is properly bootstrapped [#17014](https://github.com/openshift/etcd/pull/17014)
* Move duplicated shouldApplyV3 logic up into apply method [#17013](https://github.com/openshift/etcd/pull/17013)
* etcd-e2d-test:rename e2e-arm64 file and runs it on every pull request… [#16950](https://github.com/openshift/etcd/pull/16950)
* clientv3test: add comments for clientv3test [#16920](https://github.com/openshift/etcd/pull/16920)
* Update changelog for 3.4.28 [#16998](https://github.com/openshift/etcd/pull/16998)
* Remove v2 applier [#17007](https://github.com/openshift/etcd/pull/17007)
* Remove v2 sync [#17006](https://github.com/openshift/etcd/pull/17006)
* Remove v2 apply logic [#16989](https://github.com/openshift/etcd/pull/16989)
* fix missing json flag when using VERBOSE=1 [#17005](https://github.com/openshift/etcd/pull/17005)
* Refactor v2 deprecation tests to allow different cluster config [#16991](https://github.com/openshift/etcd/pull/16991)
* Add tests for setting cluster version using v2 request [#16994](https://github.com/openshift/etcd/pull/16994)
* Stop using v2 requests in server tests [#16993](https://github.com/openshift/etcd/pull/16993)
* etcdserver: add linearizable_read check to readyz. [#16984](https://github.com/openshift/etcd/pull/16984)
* client: add wasm for client transport [#16909](https://github.com/openshift/etcd/pull/16909)
* build(deps): bump github/codeql-action from 2.22.5 to 2.22.7 [#16983](https://github.com/openshift/etcd/pull/16983)
* Remove v2 proposals code [#16967](https://github.com/openshift/etcd/pull/16967)
* build(deps): bump actions/github-script from 6.4.1 to 7.0.1 [#16982](https://github.com/openshift/etcd/pull/16982)
* Bump dependencies identified by dependabot [#16985](https://github.com/openshift/etcd/pull/16985)
* Disable following redirects when checking peer urls [#16986](https://github.com/openshift/etcd/pull/16986)
* readme: fix slack link for sig-etcd [#16968](https://github.com/openshift/etcd/pull/16968)
* github workflow: enable workflow approval [#16965](https://github.com/openshift/etcd/pull/16965)
* Update 3.4 & 3.5 changelog. [#16943](https://github.com/openshift/etcd/pull/16943)
* Get golangci-lint't version from `tools/mod` for `golangci/golangci-lint-action` [#16954](https://github.com/openshift/etcd/pull/16954)
* tests: fix failed prow test by adding golangci-lint to Makefile [#16949](https://github.com/openshift/etcd/pull/16949)
* changelog: Update fix for CVE-2023-47108 [#16953](https://github.com/openshift/etcd/pull/16953)
* Manually bump dependencies raised by dependabot [#16952](https://github.com/openshift/etcd/pull/16952)
* Refactor mocking rand [#16944](https://github.com/openshift/etcd/pull/16944)
* etcdserver: add metric counters for livez/readyz health checks. [#16797](https://github.com/openshift/etcd/pull/16797)
* robustness test: add with functions of randomizable config params in robustness test [#16914](https://github.com/openshift/etcd/pull/16914)
* dependency: bump go.opentelemetry.io/contrib/instrumentation/google.g… [#16930](https://github.com/openshift/etcd/pull/16930)
* Exclude sleep failpoint from 1 node scenario [#16929](https://github.com/openshift/etcd/pull/16929)
* github workflow: run arm64 tests on every push [#16913](https://github.com/openshift/etcd/pull/16913)
* Increase client timeout for failpoint injection [#16918](https://github.com/openshift/etcd/pull/16918)
* Fix typo in concurrent examples [#16907](https://github.com/openshift/etcd/pull/16907)
* github workflow: update golangci-lint to 1.55.2 [#16903](https://github.com/openshift/etcd/pull/16903)
* doc fix: add instruction to installling protoc and yamllint in contributing.md [#16906](https://github.com/openshift/etcd/pull/16906)
* *: bump dependabot dependency [#16896](https://github.com/openshift/etcd/pull/16896)
* fix test script and lint [#16889](https://github.com/openshift/etcd/pull/16889)
* Complete migration to OWNERS file [#16794](https://github.com/openshift/etcd/pull/16794)
* Update README to callout the issue triage meeting [#16892](https://github.com/openshift/etcd/pull/16892)
* etcd: upgrade go version from 1.21.3 to 1.21.4 [#16895](https://github.com/openshift/etcd/pull/16895)
* scripts: macOS support for scripts/genproto.sh [#16883](https://github.com/openshift/etcd/pull/16883)
* etcd-io tests: trial arm64 on every pr with a small robustness workflow [#16884](https://github.com/openshift/etcd/pull/16884)
* README.md: Add documentation for new snapshot restore flags [#16885](https://github.com/openshift/etcd/pull/16885)
* update dependency in BOM check [#16886](https://github.com/openshift/etcd/pull/16886)
* etcdctl,etcdutl,server,tests: update golang.org/x/time to v0.4.0 [#16882](https://github.com/openshift/etcd/pull/16882)
* clientv3,server,tests: bump dependencies identified by dependabot [#16864](https://github.com/openshift/etcd/pull/16864)
* osutil: remove unused Unsetenv function [#16787](https://github.com/openshift/etcd/pull/16787)
* Add robustness failpoint for IO stall in raft loop [#16859](https://github.com/openshift/etcd/pull/16859)
* build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 [#16854](https://github.com/openshift/etcd/pull/16854)
* build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 [#16855](https://github.com/openshift/etcd/pull/16855)
* add livez readyz e2e tests [#16835](https://github.com/openshift/etcd/pull/16835)
* v3rpc: online defrag toggles gRPC health server serving status [#16836](https://github.com/openshift/etcd/pull/16836)
* Update date of v3.5.10 release [#16840](https://github.com/openshift/etcd/pull/16840)
* Bump bbolt to 1.3.8 for main branch [#16832](https://github.com/openshift/etcd/pull/16832)
* Fix arm64 robustness and stop running workflows in containers [#16824](https://github.com/openshift/etcd/pull/16824)
* gRPC health server sets serving status to NOT_SERVING on defrag [#16278](https://github.com/openshift/etcd/pull/16278)
* Revert runner change for main robustness nightly [#16825](https://github.com/openshift/etcd/pull/16825)
* Schedule the arm64 related workflow nightly [#16821](https://github.com/openshift/etcd/pull/16821)
* Switch over to managed Arm64 hosts [#16801](https://github.com/openshift/etcd/pull/16801)
* Bump raft to latest commit [#16810](https://github.com/openshift/etcd/pull/16810)
* Bump dependencies identified by dependabot [#16820](https://github.com/openshift/etcd/pull/16820)
* build(deps): bump actions/checkout from 4.1.0 to 4.1.1 [#16816](https://github.com/openshift/etcd/pull/16816)
* build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 [#16815](https://github.com/openshift/etcd/pull/16815)
* CHANGELOG-3.5.md: Upgrade gRPC to 1.58.3 [#16762](https://github.com/openshift/etcd/pull/16762)
* add existing http health check handler e2e test [#16698](https://github.com/openshift/etcd/pull/16698)
* Implement random packet dropping [#16786](https://github.com/openshift/etcd/pull/16786)
* Direct questions to our discussion forums [#16793](https://github.com/openshift/etcd/pull/16793)
* remove deprecated gRPC API usage [#16791](https://github.com/openshift/etcd/pull/16791)
* *: enable and fix unparam lint [#16622](https://github.com/openshift/etcd/pull/16622)
* *: cleanup main_test.go [#16789](https://github.com/openshift/etcd/pull/16789)
* Fix cluster variable in mixins [#16778](https://github.com/openshift/etcd/pull/16778)
* Add livez and readyz for etcd [#16651](https://github.com/openshift/etcd/pull/16651)
* Add member replace failpoint to robustness tests [#16766](https://github.com/openshift/etcd/pull/16766)
* Make the main_test the entrypoint and move senario generation to separate file [#16767](https://github.com/openshift/etcd/pull/16767)
* Bump dependencies manually [#16783](https://github.com/openshift/etcd/pull/16783)
* Split failpoints file [#16777](https://github.com/openshift/etcd/pull/16777)
* Move failpoints to separate package [#16775](https://github.com/openshift/etcd/pull/16775)
* build(deps): bump github/codeql-action from 2.22.1 to 2.22.3 [#16774](https://github.com/openshift/etcd/pull/16774)
* Update 3.4 & 3.5 changelog [#16763](https://github.com/openshift/etcd/pull/16763)
* Use the minimal time event was observed on watch [#16757](https://github.com/openshift/etcd/pull/16757)
* Fix linearization failure not causing test failure [#16759](https://github.com/openshift/etcd/pull/16759)
* Refactor and reorder validation to avoid reporting multiple correlated failures [#16756](https://github.com/openshift/etcd/pull/16756)
* etcdserver: remove redundant `len` check in health check [#16755](https://github.com/openshift/etcd/pull/16755)
* *: enable markdown_marker checker [#16708](https://github.com/openshift/etcd/pull/16708)
* tests: deflake TestEtcdTLSVersion [#16753](https://github.com/openshift/etcd/pull/16753)
* http health check bug fixes [#16697](https://github.com/openshift/etcd/pull/16697)
* Dynamically generate flags passed to etcd binary [#16707](https://github.com/openshift/etcd/pull/16707)
* Test dynamic flags v2 [#16748](https://github.com/openshift/etcd/pull/16748)
* CHANGELOG: update 3.4/3.5 golang version [#16752](https://github.com/openshift/etcd/pull/16752)
* Continue on e2e failure [#16737](https://github.com/openshift/etcd/pull/16737)
* Add tests to prepare to dynamic flag generation [#16747](https://github.com/openshift/etcd/pull/16747)
* bump golang.org/x/net to v0.17.0, google.golang.org/grpc to v1.58.3 [#16739](https://github.com/openshift/etcd/pull/16739)
* Bump go to 1.21.3 [#16741](https://github.com/openshift/etcd/pull/16741)
* Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin [#16735](https://github.com/openshift/etcd/pull/16735)
* Update changelog for 3.4 & 3.5 [#16734](https://github.com/openshift/etcd/pull/16734)
* Bump dependencies generated by the bot manually [#16731](https://github.com/openshift/etcd/pull/16731)
* Upgrade go version to 1.21.2 [#16727](https://github.com/openshift/etcd/pull/16727)
* Refactor common revision code to pkg [#16269](https://github.com/openshift/etcd/pull/16269)
* build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 [#16726](https://github.com/openshift/etcd/pull/16726)
* *: cleanup unconvert_pass and remove revive tools [#16714](https://github.com/openshift/etcd/pull/16714)
* build(deps): bump github/codeql-action from 2.21.9 to 2.22.1 [#16725](https://github.com/openshift/etcd/pull/16725)
* Fix providing profile to robustness tests [#16711](https://github.com/openshift/etcd/pull/16711)
* scripts: remove the markdown_you_pass [#16709](https://github.com/openshift/etcd/pull/16709)
* Fix parsing failpoint names when failpoint has set value [#16703](https://github.com/openshift/etcd/pull/16703)
* *: migrate nakedret_pass into golangci-lint [#16705](https://github.com/openshift/etcd/pull/16705)
* Inject sleep during etcd bootstrap to reproduce etcd-io#16666 [#16691](https://github.com/openshift/etcd/pull/16691)
* Fix typo in ci infra admins table [#16696](https://github.com/openshift/etcd/pull/16696)
* Fix watch validation assuming that client requesting older watch revision [#16695](https://github.com/openshift/etcd/pull/16695)
* Use default embed config in e2e tests [#16688](https://github.com/openshift/etcd/pull/16688)
* Avoid timing out and provide a proper error in TestCtlV3GetFormat test [#16692](https://github.com/openshift/etcd/pull/16692)
* test: add test cases to verify consistent reading right after writing [#16678](https://github.com/openshift/etcd/pull/16678)
* Revert "etcd server shouldn't wait for the ready notification infinitely on startup" [#16677](https://github.com/openshift/etcd/pull/16677)
* Refactor mixin with grafonnet [#16246](https://github.com/openshift/etcd/pull/16246)
* Bump dependencies identified by dependabot [#16689](https://github.com/openshift/etcd/pull/16689)
* build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 [#16681](https://github.com/openshift/etcd/pull/16681)
* Refactor registering flags to separate AddEmbedFlags function for future reuse [#16676](https://github.com/openshift/etcd/pull/16676)
* Reuse embed.Config in e2e cluster config [#16674](https://github.com/openshift/etcd/pull/16674)
* test: fix the TestCtlV3ConsistentMemberList: set the wait-cluster-ready-timeout as 1ns [#16671](https://github.com/openshift/etcd/pull/16671)
* .github: ensure there is no change after make-fix [#16670](https://github.com/openshift/etcd/pull/16670)
* Documented removal of etcdutl backup in CHANGELOG-3.6 [#16668](https://github.com/openshift/etcd/pull/16668)
* Fix memberList may return incorrect intermediate results right after bootstrap [#16658](https://github.com/openshift/etcd/pull/16658)
* Remove legacy etcdutl backup [#16662](https://github.com/openshift/etcd/pull/16662)
* pkg/stringutil: sort 'ss' in TestUniqueStrings [#16657](https://github.com/openshift/etcd/pull/16657)
* Add fuweid as reviewer [#16652](https://github.com/openshift/etcd/pull/16652)
* dependency: bump some dependencies [#16636](https://github.com/openshift/etcd/pull/16636)
* *: fix stylecheck/unused/unconvert linter issues [#16638](https://github.com/openshift/etcd/pull/16638)
* build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 [#16645](https://github.com/openshift/etcd/pull/16645)
* build(deps): bump actions/checkout from 4.0.0 to 4.1.0 [#16646](https://github.com/openshift/etcd/pull/16646)
* *: fix revive linter [#16634](https://github.com/openshift/etcd/pull/16634)
* *: fix goimports linter [#16628](https://github.com/openshift/etcd/pull/16628)
* bump dependencies manually [#16630](https://github.com/openshift/etcd/pull/16630)
* Add diagrams for etcd internals and consistent read/write workflows [#16559](https://github.com/openshift/etcd/pull/16559)
* *: fix staticcheck lint [#16626](https://github.com/openshift/etcd/pull/16626)
* *: fix ineffassign lint [#16605](https://github.com/openshift/etcd/pull/16605)
* *: fix govet-shadow lint [#16608](https://github.com/openshift/etcd/pull/16608)
* dependency: bump grpc-gateway from 2.17.1 to 2.18.0 [#16621](https://github.com/openshift/etcd/pull/16621)
* Update 3.6 changelog to include the grpc-gateway upgrading from v1 to v2 and golang upgrading to 1.21 [#16620](https://github.com/openshift/etcd/pull/16620)
* Upgrade grpc-gateway from v1 to v2 [#16595](https://github.com/openshift/etcd/pull/16595)
* build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 [#16609](https://github.com/openshift/etcd/pull/16609)
* *: fix nakedret lint [#16601](https://github.com/openshift/etcd/pull/16601)
* Use any instead of interface{} [#16604](https://github.com/openshift/etcd/pull/16604)
* Add OWNERS file for etcd [#16600](https://github.com/openshift/etcd/pull/16600)
* Update to go1.21 [#16594](https://github.com/openshift/etcd/pull/16594)
* dependency: bump google.golang.org/grpc to 1.58.0 [#16587](https://github.com/openshift/etcd/pull/16587)
* test: simply the expected output for some curl test cases [#16572](https://github.com/openshift/etcd/pull/16572)
* dependency: bump golang.org/x/net from v0.14.0 to v0.15.0 [#16584](https://github.com/openshift/etcd/pull/16584)
* mvcc: cleanup comment in HashStorage.Store [#16586](https://github.com/openshift/etcd/pull/16586)
* build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 [#16575](https://github.com/openshift/etcd/pull/16575)
* test: add test case to cover all election REST APIs [#16570](https://github.com/openshift/etcd/pull/16570)
* CHANGELOG: update 3.5 with #16565 [#16566](https://github.com/openshift/etcd/pull/16566)
* test: split watch and election tests to separate files [#16564](https://github.com/openshift/etcd/pull/16564)
* dependency: bump yamlfmt,sys,otelgrpc,otlptracegrpc [#16567](https://github.com/openshift/etcd/pull/16567)
* test: add test case to cover lock restful APIs [#16553](https://github.com/openshift/etcd/pull/16553)
* server: optimizing memory overhead of copy operation in ConcurrentReadTxn [#16508](https://github.com/openshift/etcd/pull/16508)
* changelog: update changelog to cover the goalng bump [#16557](https://github.com/openshift/etcd/pull/16557)
* dependency: bump golang to 1.20.8 [#16554](https://github.com/openshift/etcd/pull/16554)
* dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from v2.7.0 to v2.16.2 [#16357](https://github.com/openshift/etcd/pull/16357)
* test: add test cases to cover cluster RESTful APIs [#16545](https://github.com/openshift/etcd/pull/16545)
* server/storage/mvcc: deflake TestHashKVWhenCompacting [#16549](https://github.com/openshift/etcd/pull/16549)
* test: fix the flaky test case `TestMemberList` [#16548](https://github.com/openshift/etcd/pull/16548)
* test: de-flake test case TestV3WatchProgressOnMemberRestart [#16547](https://github.com/openshift/etcd/pull/16547)
* test: remove apiPrefix and withApiPrefix [#16546](https://github.com/openshift/etcd/pull/16546)
* build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 [#16532](https://github.com/openshift/etcd/pull/16532)
* build(deps): bump actions/checkout from 3.6.0 to 4.0.0 [#16533](https://github.com/openshift/etcd/pull/16533)
* test: add e2e test cases to cover all auth related RESTful APIs [#16527](https://github.com/openshift/etcd/pull/16527)
* tests/integration: deflake TestV3AuthWithLeaseRevokeWithRootJWT [#16523](https://github.com/openshift/etcd/pull/16523)
* Maintain a consistent naming standard for curlv3 tests [#16525](https://github.com/openshift/etcd/pull/16525)
* test: move all auth related test cases into a separate test file [#16518](https://github.com/openshift/etcd/pull/16518)
* Use test cases from TestCheckTxn to test Put and Range [#16517](https://github.com/openshift/etcd/pull/16517)
* update the debian12 and bookworm remove --v 1.0 [#16516](https://github.com/openshift/etcd/pull/16516)
* server: Test txn checking [#16515](https://github.com/openshift/etcd/pull/16515)
* test: refactor the existing KV RESTful test cases and also add new cases [#16511](https://github.com/openshift/etcd/pull/16511)
* server: Refactor checkTxn into single function handling all request types [#16372](https://github.com/openshift/etcd/pull/16372)
* test: move all KV related RESTful APIs into a separate test file [#16509](https://github.com/openshift/etcd/pull/16509)
* test: add v3 curl test to cover all maintenance REST API [#16489](https://github.com/openshift/etcd/pull/16489)
* CHANGELOG: add #16490 item in CHANGELOG-3.5.md [#16503](https://github.com/openshift/etcd/pull/16503)
* Bump dependencies identified by dependabot [#16501](https://github.com/openshift/etcd/pull/16501)
* build(deps): bump actions/checkout from 3.5.3 to 3.6.0 [#16499](https://github.com/openshift/etcd/pull/16499)
* api: fix duplicate gateway url issue [#16464](https://github.com/openshift/etcd/pull/16464)
* test: support regular expression matching on the response [#16472](https://github.com/openshift/etcd/pull/16472)
* Document project golang version policy [#16463](https://github.com/openshift/etcd/pull/16463)
* dependency: bump honnef.co/go/tools from v0.4.3 to v0.4.5 [#16466](https://github.com/openshift/etcd/pull/16466)
* Unit test for CLI flags and add missing flags [#16465](https://github.com/openshift/etcd/pull/16465)
* Preserve the order of steps done for snapshot [#16460](https://github.com/openshift/etcd/pull/16460)
* Use crypto/rand.Read instead of deprecated math/rand.Read [#16459](https://github.com/openshift/etcd/pull/16459)
* Add membership changes to downgrade tests [#16457](https://github.com/openshift/etcd/pull/16457)
* test: verify snap.Load() is sucessful [#16458](https://github.com/openshift/etcd/pull/16458)
* Update to generate v2 snapshot from v3 state [#16418](https://github.com/openshift/etcd/pull/16418)
* Minor update to test code to remove a local var [#16455](https://github.com/openshift/etcd/pull/16455)
* build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 [#16453](https://github.com/openshift/etcd/pull/16453)
* Run integration, e2e & grpcproxy tests in container. [#16445](https://github.com/openshift/etcd/pull/16445)
* chore: pkg import more than once [#16448](https://github.com/openshift/etcd/pull/16448)
* server: Unify arguments for mvcc methods [#16373](https://github.com/openshift/etcd/pull/16373)
* *: enable ubuntu-latest-8-cores runner for amd64 robustness workflow [#16440](https://github.com/openshift/etcd/pull/16440)
* Update test for v2 deprecation to verify membership match [#16441](https://github.com/openshift/etcd/pull/16441)
* Use new and better canonical link to Google Groups [#16446](https://github.com/openshift/etcd/pull/16446)
* all: stop using math/rand.Seed [#16447](https://github.com/openshift/etcd/pull/16447)
* Fix unit tests and make targets to not fail in some environments [#16433](https://github.com/openshift/etcd/pull/16433)
* fix: throughput typo [#16449](https://github.com/openshift/etcd/pull/16449)
* Update changelog for go 1.20 update and socket options fix [#16442](https://github.com/openshift/etcd/pull/16442)
* Handle ErrCompacted errors for Compact in raftexample [#16423](https://github.com/openshift/etcd/pull/16423)
* tests/*: redirect metrics into file [#16439](https://github.com/openshift/etcd/pull/16439)
* Update issues links in CONTRIBUTING.md [#16430](https://github.com/openshift/etcd/pull/16430)
* Update the roadmap: etcd 3.6.0 will depend on bbolt 1.4.0 instead of 1.3.8 [#16408](https://github.com/openshift/etcd/pull/16408)
* Update dependency management guide [#16420](https://github.com/openshift/etcd/pull/16420)
* dependency: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.37.0 to 0.42.0 [#16417](https://github.com/openshift/etcd/pull/16417)
* test: increase the timeout for the flaky test `TestCtlV3AuthCertCNWithWithConcurrentOperation` [#16421](https://github.com/openshift/etcd/pull/16421)
* Consolidate robustness github actions templates [#16407](https://github.com/openshift/etcd/pull/16407)
* Add example config for TLS protocol version [#16419](https://github.com/openshift/etcd/pull/16419)
* Bump dependencies [#16414](https://github.com/openshift/etcd/pull/16414)
* build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 [#16410](https://github.com/openshift/etcd/pull/16410)
* build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 [#16409](https://github.com/openshift/etcd/pull/16409)
* Update etcdutl restore to create v2 snapshot from v3 [#16376](https://github.com/openshift/etcd/pull/16376)
* Migrate to golang 1.20 [#16394](https://github.com/openshift/etcd/pull/16394)
* 2023-08-10 bump up dependencies [#16397](https://github.com/openshift/etcd/pull/16397)
* Add lazyfs support for arm64 robustness workflow [#16392](https://github.com/openshift/etcd/pull/16392)
* replace github.com/gyuho/gocovmerge with github.com/wadey/gocovmerge [#16384](https://github.com/openshift/etcd/pull/16384)
* Bump golang.org/x/sys from 0.10.0 to 0.11.0 [#16379](https://github.com/openshift/etcd/pull/16379)
* tests/robustness: Reduce minimal QPS to eliminate flakes [#16378](https://github.com/openshift/etcd/pull/16378)
* server: Separate txnRead from txnWrite [#16371](https://github.com/openshift/etcd/pull/16371)
* Bump dependencies identified by dependabot [#16360](https://github.com/openshift/etcd/pull/16360)
* server: Separate internal txn functions for recursion and have public function create transaction and trace [#16355](https://github.com/openshift/etcd/pull/16355)
* clientv3: remove the experimental gRPC API grpccredentials.Bundle [#16358](https://github.com/openshift/etcd/pull/16358)
* Add a method to export membership info to v2 store from RaftCluster [#16132](https://github.com/openshift/etcd/pull/16132)
* Streamline test commands between branches [#16359](https://github.com/openshift/etcd/pull/16359)
* Changelog: modify dependencies bumping go to 1.19.12 [#16354](https://github.com/openshift/etcd/pull/16354)
* Fix 15877 and bump up gRPC from v1.52.0 to v1.57.0 [#16338](https://github.com/openshift/etcd/pull/16338)
* bump go version to 1.19.12 [#16346](https://github.com/openshift/etcd/pull/16346)
* clientv3: add Ctx() to return context of session [#16265](https://github.com/openshift/etcd/pull/16265)
* clientv3: fix barrier.Wait() still block after barrier.Release() [#16223](https://github.com/openshift/etcd/pull/16223)
* checks the client supported versions based on the current version [#16313](https://github.com/openshift/etcd/pull/16313)
* build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 [#16335](https://github.com/openshift/etcd/pull/16335)
* Separate Writer interface from BatchTx interfaces [#16325](https://github.com/openshift/etcd/pull/16325)
* Simplify go data race detection controls [#16318](https://github.com/openshift/etcd/pull/16318)
* Fix http2 authority header in multiple endpoints scenario and bump up grpc from `v1.51.0` to `v1.52.0` [#16324](https://github.com/openshift/etcd/pull/16324)
* Remove RLock/RUnlock from BatchTx [#16320](https://github.com/openshift/etcd/pull/16320)
* Automate adding area/testing label to flake issues [#16323](https://github.com/openshift/etcd/pull/16323)
* tests: Add support for lazyfs [#14691](https://github.com/openshift/etcd/pull/14691)
* server: Remove Lock/Unlock from ReadTx [#16312](https://github.com/openshift/etcd/pull/16312)
* tests: Make EtcdServerProcess substruct of proxyEtcdProcess to dummy methods when extending EtcdProcess interface [#16317](https://github.com/openshift/etcd/pull/16317)
* Replace unnecessary Lock()/Unlock()s with RLock()/RUnlock()s [#16248](https://github.com/openshift/etcd/pull/16248)
* pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss [#16272](https://github.com/openshift/etcd/pull/16272)
* tests/robustness: enhance compact failpoint [#16310](https://github.com/openshift/etcd/pull/16310)
* server: switch to semconv v1.17.0 [#16288](https://github.com/openshift/etcd/pull/16288)
* Manual Dependency Bump [#16306](https://github.com/openshift/etcd/pull/16306)
* Documentation: add roadmap [#16279](https://github.com/openshift/etcd/pull/16279)
* build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 [#16294](https://github.com/openshift/etcd/pull/16294)
* update typo in raft.go [#16283](https://github.com/openshift/etcd/pull/16283)
* Fix typo in triage_issues.md [#16281](https://github.com/openshift/etcd/pull/16281)
* build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 [#16257](https://github.com/openshift/etcd/pull/16257)
* build(deps): bump github.com/mikefarah/yq/v4 from 4.34.1 to 4.34.2 in /tools/mod [#16261](https://github.com/openshift/etcd/pull/16261)
* tests: cleanup unnecessary assignment in cluster.go [#16271](https://github.com/openshift/etcd/pull/16271)
* pkg/ioutil: deflake TestPageWriterRandom [#16268](https://github.com/openshift/etcd/pull/16268)
* Ensure release is run for arm64 e2e nightly tests [#16230](https://github.com/openshift/etcd/pull/16230)
* Fix flaky integration/clientv3/naming TestEtcdGrpcResolverRoundRobin [#16263](https://github.com/openshift/etcd/pull/16263)
* etcdctl/ctlv3/command: simplify code using fmt.Printf with '\n' [#16256](https://github.com/openshift/etcd/pull/16256)
* pkg/expect: avoid hardcoding when checking ErrProcessDone [#16252](https://github.com/openshift/etcd/pull/16252)
* build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 [#16258](https://github.com/openshift/etcd/pull/16258)
* Add changelog for backport 13577 to 3.4&3.5. [#16251](https://github.com/openshift/etcd/pull/16251)
* Update linter and protoc [#16249](https://github.com/openshift/etcd/pull/16249)
* expose op.isOptsWithFromKey and op.isOptsWithPrefix [#16224](https://github.com/openshift/etcd/pull/16224)
* Add new job for nightly release35 arm64 robustness [#16231](https://github.com/openshift/etcd/pull/16231)
* clientv3: create keepAliveCtxCloser goroutine only if ctx can be canc… [#16200](https://github.com/openshift/etcd/pull/16200)
* Changelog: add items to cover the fix of bumping go to 1.19.11 [#16229](https://github.com/openshift/etcd/pull/16229)
* Add jmhbnz as etcd reviewer [#16234](https://github.com/openshift/etcd/pull/16234)
* remove repetitive the [#16232](https://github.com/openshift/etcd/pull/16232)
* pkg/expect: fix data race [#16173](https://github.com/openshift/etcd/pull/16173)
* Bump go version to 1.19.11 to fix CVE GO-2023-1878 [#16226](https://github.com/openshift/etcd/pull/16226)
* tools/benchmark: support --count-only for range [#16196](https://github.com/openshift/etcd/pull/16196)
* Clientv3 prevent nil pointer [#16198](https://github.com/openshift/etcd/pull/16198)
* Changelog: update etcd 3.4.27's release date [#16219](https://github.com/openshift/etcd/pull/16219)
* Templated arm64 integration and e2e workflows for main and release-3.5 [#16152](https://github.com/openshift/etcd/pull/16152)
* Update community meeting frequency to fortnightly [#16189](https://github.com/openshift/etcd/pull/16189)
* CHANGELOG: add item for 3.4.27 [#16218](https://github.com/openshift/etcd/pull/16218)
* Bump dependencies [#16210](https://github.com/openshift/etcd/pull/16210)
* build(deps): bump github/codeql-action from 2.20.2 to 2.20.3 [#16205](https://github.com/openshift/etcd/pull/16205)
* Asking for approval to regain maintainer status [#16197](https://github.com/openshift/etcd/pull/16197)
* Update CHANGELOG for #16029 #16165 #16193 [#16194](https://github.com/openshift/etcd/pull/16194)
* tests: exclude learner endpoint from MemberPromote [#16191](https://github.com/openshift/etcd/pull/16191)
* etcdutl: fix db double closed [#16120](https://github.com/openshift/etcd/pull/16120)
* add tests for uber applier [#16154](https://github.com/openshift/etcd/pull/16154)
* update changelog for #16188 [#16190](https://github.com/openshift/etcd/pull/16190)
* Adding test for updateClusterVersionV3 [#16067](https://github.com/openshift/etcd/pull/16067)
* clientv3: remove v3.WithFirstKey() in Barrier.Wait() [#16156](https://github.com/openshift/etcd/pull/16156)
* Add cluster id check for hash kv handler [#15924](https://github.com/openshift/etcd/pull/15924)
* auth: Support for EdDSA JWT algorithm [#16174](https://github.com/openshift/etcd/pull/16174)
* update changelog for #15939 [#15962](https://github.com/openshift/etcd/pull/15962)
* update README about profile learner [#16155](https://github.com/openshift/etcd/pull/16155)
* tests/robustness: Prevent to many concurrent non-unique writes which are causing linearization to timeout [#16161](https://github.com/openshift/etcd/pull/16161)
* build(deps): bump gotest.tools/v3 from 3.4.0 to 3.5.0 in /tools/mod [#16168](https://github.com/openshift/etcd/pull/16168)
* build(deps): bump github/codeql-action from 2.20.1 to 2.20.2 [#16169](https://github.com/openshift/etcd/pull/16169)
* etcdutl: update description for `--mark-compacted and` and `--bump-revision` flags in snapshot restore command [#16166](https://github.com/openshift/etcd/pull/16166)
* Adding optional revision bump to snapshot restore [#16029](https://github.com/openshift/etcd/pull/16029)
* tests/robustness: Implement loading client reports [#16153](https://github.com/openshift/etcd/pull/16153)
* Manual Dependency Bump [#16149](https://github.com/openshift/etcd/pull/16149)
* raft node notifies configure when confChanged [#15708](https://github.com/openshift/etcd/pull/15708)
* Enable test to verify membership recovery from backend [#16074](https://github.com/openshift/etcd/pull/16074)
* build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 [#16145](https://github.com/openshift/etcd/pull/16145)
* build(deps): bump github/codeql-action from 2.20.0 to 2.20.1 [#16146](https://github.com/openshift/etcd/pull/16146)
* add runtime reconfiguration tests [#16127](https://github.com/openshift/etcd/pull/16127)
* fix action tag comment pattern to be consistent [#16148](https://github.com/openshift/etcd/pull/16148)
* Robustness watch validation [#16136](https://github.com/openshift/etcd/pull/16136)
* etcdserver: add tests for apply_auth.go [#16086](https://github.com/openshift/etcd/pull/16086)
* *: should return exitCode even if cmd isn't nil [#16137](https://github.com/openshift/etcd/pull/16137)
* tests/robustness: Store whole watch operations [#16135](https://github.com/openshift/etcd/pull/16135)
* Update 3.4 and 3.5 changelogs for compile with 1.19.10 [#16117](https://github.com/openshift/etcd/pull/16117)
* Robustness fix patch txn onfailure [#16129](https://github.com/openshift/etcd/pull/16129)
* tests/robustness: Combine watch histories [#16131](https://github.com/openshift/etcd/pull/16131)
* tests/robustness: Implement Kubernetes pagination [#16111](https://github.com/openshift/etcd/pull/16111)
* Manual dependency Bump [#16128](https://github.com/openshift/etcd/pull/16128)
* Enable failpoint in integration test [#16099](https://github.com/openshift/etcd/pull/16099)
* Document steps for setting up new arm64 self hosted actions runner [#16116](https://github.com/openshift/etcd/pull/16116)
* tests/robustness: Implement proper range requests [#16113](https://github.com/openshift/etcd/pull/16113)
* tests/robustness: Fix multi txn key prefix [#16123](https://github.com/openshift/etcd/pull/16123)
* Verify consistent index is latest at the time of snapshot [#16100](https://github.com/openshift/etcd/pull/16100)
* tests/robustness: Add List and StaleList requests to etcd traffic [#16122](https://github.com/openshift/etcd/pull/16122)
* update change logs with lease put improvements [#16090](https://github.com/openshift/etcd/pull/16090)
* build(deps): bump github/codeql-action from 2.3.6 to 2.20.0 [#16110](https://github.com/openshift/etcd/pull/16110)
* tests/robustness: Tune Kubernetes tests to reduce number of delete requests [#16115](https://github.com/openshift/etcd/pull/16115)
* tests/robustness: Separate traffic name from cluster setup in test name [#16114](https://github.com/openshift/etcd/pull/16114)
* Validate stale read [#16072](https://github.com/openshift/etcd/pull/16072)
* Robustness etcd traffic client [#16092](https://github.com/openshift/etcd/pull/16092)
* dependency: bump golang.org/x/net from 0.10.0 to 0.11.0 [#16102](https://github.com/openshift/etcd/pull/16102)
* Document new arm64 infra process [#16087](https://github.com/openshift/etcd/pull/16087)
* tests/robustness: Implement stale reads without validation [#16091](https://github.com/openshift/etcd/pull/16091)
* Robustness retry failpoint [#16094](https://github.com/openshift/etcd/pull/16094)
* tests/robustness: Limit model to start only from fresh state [#16096](https://github.com/openshift/etcd/pull/16096)
* tests/robustness: Disable blackhole until snapshot for v3.5 and v3.4 [#16085](https://github.com/openshift/etcd/pull/16085)
* Ensure goimports can be fixed individually [#16093](https://github.com/openshift/etcd/pull/16093)
* update 3.4 and 3.5 changelogs [#16051](https://github.com/openshift/etcd/pull/16051)
* Robustness Allow errors and partial responses from deterministic model [#16083](https://github.com/openshift/etcd/pull/16083)
* Early exit auth check on lease puts [#16005](https://github.com/openshift/etcd/pull/16005)
* Robustness range request [#16079](https://github.com/openshift/etcd/pull/16079)
* manual dependency bump [#16073](https://github.com/openshift/etcd/pull/16073)
* tests/robustness: Extract validation to separate package [#16066](https://github.com/openshift/etcd/pull/16066)
* tests/robustness: Move get to list of randomized operations [#16075](https://github.com/openshift/etcd/pull/16075)
* Update downgrade test to use a snapshot [#16041](https://github.com/openshift/etcd/pull/16041)
* build(deps): bump actions/checkout from 3.5.2 to 3.5.3 [#16062](https://github.com/openshift/etcd/pull/16062)
* build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 [#16061](https://github.com/openshift/etcd/pull/16061)
* tests/robustness: Assume starting from empty etcd instead of throwing out first failed request [#16044](https://github.com/openshift/etcd/pull/16044)
* tests/robustness: Provide a response diff in model test to make debugging easier [#16046](https://github.com/openshift/etcd/pull/16046)
* add experimental-compact-hash-check-enabled to help [#16031](https://github.com/openshift/etcd/pull/16031)
* add uds test cases into e2e TestAuthority [#16037](https://github.com/openshift/etcd/pull/16037)
* tests/robustness: Put traffic type on second place before cluster size in test name [#16045](https://github.com/openshift/etcd/pull/16045)
* .github/workflows: Read .go-version as a step and not separate workflow [#16043](https://github.com/openshift/etcd/pull/16043)
* tests/e2e: Use epc.Etcdctl [#16042](https://github.com/openshift/etcd/pull/16042)
* Remove Procfile.v2 and Procfile.learner [#16040](https://github.com/openshift/etcd/pull/16040)
* Documenting etcd infrastructure and establish basic controls [#15998](https://github.com/openshift/etcd/pull/15998)
* Update the go version to 1.19.10 patch release [#16027](https://github.com/openshift/etcd/pull/16027)
* Check ScheduledCompactKeyName and FinishedCompactKeyName before writing hash [#15985](https://github.com/openshift/etcd/pull/15985)
* 2023-06-06: bump up dependencies update identified by dependabot [#16023](https://github.com/openshift/etcd/pull/16023)
* ci: move .golangci.yaml to tools dir [#16022](https://github.com/openshift/etcd/pull/16022)
* build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 [#16015](https://github.com/openshift/etcd/pull/16015)
* build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 [#16014](https://github.com/openshift/etcd/pull/16014)
* Promote etcd frequently asked questions in our bug report template and readme [#16003](https://github.com/openshift/etcd/pull/16003)
* Clean golang test cache for remaining ci workflows [#16004](https://github.com/openshift/etcd/pull/16004)
* ci: add fix-yamllint rule in Makefile [#15966](https://github.com/openshift/etcd/pull/15966)
* Add the rotation worksheet into the dependency management document [#15946](https://github.com/openshift/etcd/pull/15946)
* etcdctl: update the description for flag '--rev' [#15997](https://github.com/openshift/etcd/pull/15997)
* Clean golang cache for arm64 ci workflows [#15989](https://github.com/openshift/etcd/pull/15989)
* Strengthen etcd support policy in issue triage docs [#15957](https://github.com/openshift/etcd/pull/15957)
* Update roles reference [#15984](https://github.com/openshift/etcd/pull/15984)
* Bump dependencies identified by dependabot [#15981](https://github.com/openshift/etcd/pull/15981)
* build(deps): bump arduino/setup-protoc from 1.2.0 to 1.3.0 [#15980](https://github.com/openshift/etcd/pull/15980)
* build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 [#15970](https://github.com/openshift/etcd/pull/15970)
* ci: Introduce yamllint for actions workflow files [#15960](https://github.com/openshift/etcd/pull/15960)
* tests/robustness: Use traffic.RecordingClient in watch [#15959](https://github.com/openshift/etcd/pull/15959)
* Run arm64 tests in containers on self hosted runners [#15927](https://github.com/openshift/etcd/pull/15927)
* *: use strings.Builder instead of bytes.Buffer [#15908](https://github.com/openshift/etcd/pull/15908)
* Documentation: describe onboarding process [#15911](https://github.com/openshift/etcd/pull/15911)
* tools/benchmark: support limit flag for range [#15948](https://github.com/openshift/etcd/pull/15948)
* update code comments [#15947](https://github.com/openshift/etcd/pull/15947)
* Bump dependencies identified by dependabot [#15950](https://github.com/openshift/etcd/pull/15950)
* tests/robustness: Expect revisions to be unique for Kubernetes Traffic [#15909](https://github.com/openshift/etcd/pull/15909)
* benchmarks: pin dependencies of rw-heatmaps [#15942](https://github.com/openshift/etcd/pull/15942)
* Add example format for initial-cluster in configuration file [#15938](https://github.com/openshift/etcd/pull/15938)
* build(deps): bump arduino/setup-protoc from 1.1.2 to 1.2.0 [#15937](https://github.com/openshift/etcd/pull/15937)
* clientv3: refactor snapshot SaveWithVersion [#15906](https://github.com/openshift/etcd/pull/15906)
* tests: deflake TestKVDelete/ClientAutoTLS [#15920](https://github.com/openshift/etcd/pull/15920)
* update changelog for https://github.com/etcd-io/etcd/pull/15907 [#15926](https://github.com/openshift/etcd/pull/15926)
* server/storage/schema: prefer equal to compare for equality comparisons [#15915](https://github.com/openshift/etcd/pull/15915)
* Update maintainers emails [#15912](https://github.com/openshift/etcd/pull/15912)
* tests/robustness: Validate all etcd watches opened to etcd [#15893](https://github.com/openshift/etcd/pull/15893)
* tests/robustness: Unify model test cases [#15889](https://github.com/openshift/etcd/pull/15889)
* Bump dependencies identified by dependabot [#15904](https://github.com/openshift/etcd/pull/15904)
* build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 [#15899](https://github.com/openshift/etcd/pull/15899)
* tests/robustness: Implement Kubernetes optimistic concurrency operations [#15888](https://github.com/openshift/etcd/pull/15888)
* tests/robustness: Implement kubernetes list watch protocol [#15891](https://github.com/openshift/etcd/pull/15891)
* tests/robustness: use monotonic clock for watch events [#15892](https://github.com/openshift/etcd/pull/15892)
* grpcproxy: fix memberlist results not update when proxy node down [#15835](https://github.com/openshift/etcd/pull/15835)
* Run robustness tests on arm64 [#15886](https://github.com/openshift/etcd/pull/15886)
* workflow: grant only read permission to all workflows [#15887](https://github.com/openshift/etcd/pull/15887)
* migrate e2e auth tests to common #8 [#15867](https://github.com/openshift/etcd/pull/15867)
* Initial re-write for contributor issue triage guide [#15881](https://github.com/openshift/etcd/pull/15881)
* tests/robustness: Improve naming of Txn fields [#15882](https://github.com/openshift/etcd/pull/15882)
* Changelog: update the release date of 3.4.26 and 3.5.9 [#15883](https://github.com/openshift/etcd/pull/15883)
* dependency: bump dependabot dependencies [#15862](https://github.com/openshift/etcd/pull/15862)
* tests/robustness: Separate stream id from client id and improve AppendableHistory doc [#15880](https://github.com/openshift/etcd/pull/15880)
* tests/robustness: Add safeguards to client and history [#15873](https://github.com/openshift/etcd/pull/15873)
* tests/robustness: Fix pointer causing all cluster tests using kuberne… [#15874](https://github.com/openshift/etcd/pull/15874)
* tests/e2e: add graceful shutdown test [#15828](https://github.com/openshift/etcd/pull/15828)
* tests: Deflake TestEtcdGrpcResolverRoundRobin [#15868](https://github.com/openshift/etcd/pull/15868)
* changelog: add items to cover the fix that LeaseTimeToLive API may re… [#15870](https://github.com/openshift/etcd/pull/15870)
* tests/robustness: Move request progress field from traffic to watch c… [#15869](https://github.com/openshift/etcd/pull/15869)
* Add an option to keep_going with run for modules on failure [#15839](https://github.com/openshift/etcd/pull/15839)
* server: default value for config file field auto-compaction-mode is n… [#15741](https://github.com/openshift/etcd/pull/15741)
* test/robustness: Create dedicated traffic package [#15845](https://github.com/openshift/etcd/pull/15845)
* Move go version to dedicated .go-version file [#15859](https://github.com/openshift/etcd/pull/15859)
* tests/robustness: Make weighted pick random generic [#15851](https://github.com/openshift/etcd/pull/15851)
* server/etcdserver: swap order of return types [#15844](https://github.com/openshift/etcd/pull/15844)
* log time when open backend db took too long [#15842](https://github.com/openshift/etcd/pull/15842)
* Update 3.4 and 3.5 changelogs for compile with 1.19.9. [#15841](https://github.com/openshift/etcd/pull/15841)
* tests/robustness: Implement Range limit and count [#15840](https://github.com/openshift/etcd/pull/15840)
* tests/robustness: Implement delete request for kubernetes scenario [#15827](https://github.com/openshift/etcd/pull/15827)
* tests/robustness: Split model code into deterministic and non-deterministic [#15819](https://github.com/openshift/etcd/pull/15819)
* build(deps): bump actions/upload-artifact from 2 to 3 [#15830](https://github.com/openshift/etcd/pull/15830)
* build(deps): bump github/codeql-action from 2.3.2 to 2.3.3 [#15831](https://github.com/openshift/etcd/pull/15831)
* remove invalid arm64 workflow config [#15829](https://github.com/openshift/etcd/pull/15829)
* tests/robustness: Implement first step in validating the Kubernetes-etcd contract [#15817](https://github.com/openshift/etcd/pull/15817)
* Updated go to latest patch release 1.19.9 [#15821](https://github.com/openshift/etcd/pull/15821)
* keep going with other test suite runs when failure with one [#15813](https://github.com/openshift/etcd/pull/15813)
* dependency_management.md: document go.opentelemetry.io/otel version update is blocked [#15816](https://github.com/openshift/etcd/pull/15816)
* protect LeaseTimeToLive with RBAC [#15656](https://github.com/openshift/etcd/pull/15656)
* build(deps): bump github/codeql-action from 2.3.0 to 2.3.2 [#15809](https://github.com/openshift/etcd/pull/15809)
* tests: Deflake TestEtcdGrpcResolverRoundRobin [#15795](https://github.com/openshift/etcd/pull/15795)
* refactor(util): remove duplicate lg check [#15762](https://github.com/openshift/etcd/pull/15762)
* tests/robustness: tune timeout policy [#15792](https://github.com/openshift/etcd/pull/15792)
* Provide release date for v3.5.8 [#15786](https://github.com/openshift/etcd/pull/15786)
* Add -failfast flag when the mode is fail_fast [#15790](https://github.com/openshift/etcd/pull/15790)
* test: forcibly save data on panicking [#15789](https://github.com/openshift/etcd/pull/15789)
* close the session to avoid leak goroutine [#15785](https://github.com/openshift/etcd/pull/15785)
* chore: deprecate github.com/hexfusion/schwag [#15779](https://github.com/openshift/etcd/pull/15779)
* Incorporate xkcd dependency meme into README [#15781](https://github.com/openshift/etcd/pull/15781)
* Consolidate etcd dockerfiles [#15783](https://github.com/openshift/etcd/pull/15783)
* tests: Add new test for round robin resolver [#15577](https://github.com/openshift/etcd/pull/15577)
* Bump dependencies identified by dependabot [#15776](https://github.com/openshift/etcd/pull/15776)
* server/etcdserver: togRPCError for maintenance API [#15759](https://github.com/openshift/etcd/pull/15759)
* Document: add guidance on dependency management [#15744](https://github.com/openshift/etcd/pull/15744)
* build(deps): bump github/codeql-action from 2.2.12 to 2.3.0 [#15772](https://github.com/openshift/etcd/pull/15772)
* Change the minimum recommended etcd versions to run in production to 3.4.22+ and 3.5.6+ [#15761](https://github.com/openshift/etcd/pull/15761)
* fixes for "improve description of --initial-cluster-state flag" #15743 [#15752](https://github.com/openshift/etcd/pull/15752)
* tests: increases unit test coverage for etcd/server/auth isRangeOpPermitted [#15751](https://github.com/openshift/etcd/pull/15751)
* Bump dependencies identified by dependabot [#15737](https://github.com/openshift/etcd/pull/15737)
* Adds a reusable workflow to setup the GoVersion [#15748](https://github.com/openshift/etcd/pull/15748)
* fix some comments [#15745](https://github.com/openshift/etcd/pull/15745)
* tests: cover txn.CheckTxnAuth logic with unit tests [#15721](https://github.com/openshift/etcd/pull/15721)
* tests: make log monitor as common helper (followup #15667 [#15718](https://github.com/openshift/etcd/pull/15718)
* build(deps): bump github/codeql-action from 2.2.11 to 2.2.12 [#15736](https://github.com/openshift/etcd/pull/15736)
* build(deps): bump actions/checkout from 3.5.0 to 3.5.2 [#15735](https://github.com/openshift/etcd/pull/15735)
* change v3.4.25's release date [#15716](https://github.com/openshift/etcd/pull/15716)
* Add issue template for new membership nominations. [#15713](https://github.com/openshift/etcd/pull/15713)
* chore: cleanup #15514 (Rewrite etcd scripts in strict mode) [#15672](https://github.com/openshift/etcd/pull/15672)
* Robustness merge failpoints [#15611](https://github.com/openshift/etcd/pull/15611)
* tests/framwork/e2e/cluster.go: revert back to sequential cluster stop to reduce e2e test run time [#15637](https://github.com/openshift/etcd/pull/15637)
* server/auth: fix panic a malformed jwt generation and add test-cases [#15639](https://github.com/openshift/etcd/pull/15639)
* Bump some dependencies [#15694](https://github.com/openshift/etcd/pull/15694)
* changelog: add items to cover some fixes for 3.5.8 and 3.4.25 [#15678](https://github.com/openshift/etcd/pull/15678)
* Fix link for maintainers role and responsibilities in README.md [#15679](https://github.com/openshift/etcd/pull/15679)
* Fix gofmt for client/pkg/fileutil/preallocate.go [#15693](https://github.com/openshift/etcd/pull/15693)
* Show darwin as supported in fileutil.Preallocate docstring [#15281](https://github.com/openshift/etcd/pull/15281)
* tests: deflake TestV3WatchRestoreSnapshotUnsync [#15667](https://github.com/openshift/etcd/pull/15667)
* fix: different errc to avoid confused when timeout [#15675](https://github.com/openshift/etcd/pull/15675)
* chore: remove pkg/expect TODO comment [#15673](https://github.com/openshift/etcd/pull/15673)
* build(deps): bump github/codeql-action from 2.2.10 to 2.2.11 [#15670](https://github.com/openshift/etcd/pull/15670)
* build(deps): bump github/codeql-action from 2.2.9 to 2.2.10 [#15650](https://github.com/openshift/etcd/pull/15650)
* tests/robustness: Document analysing watch issue [#15646](https://github.com/openshift/etcd/pull/15646)
* Require 2FA enabled for all members [#15663](https://github.com/openshift/etcd/pull/15663)
* changelog: update items to cover the some new changes in 3.5 and 3.4 [#15654](https://github.com/openshift/etcd/pull/15654)
* tests: Make using etcdctl expicit in e2e tests [#15617](https://github.com/openshift/etcd/pull/15617)
* Update maintainer list [#15657](https://github.com/openshift/etcd/pull/15657)
* changelog: Refactor changelog and add changes for v3.5.8 [#15586](https://github.com/openshift/etcd/pull/15586)
* security: clear password after authenticating the user [#15648](https://github.com/openshift/etcd/pull/15648)
* security: bump golang to 1.19.8 to fix four CVEs [#15649](https://github.com/openshift/etcd/pull/15649)
* tests/framework: Cleanup alternative binaries in e2e tests [#15645](https://github.com/openshift/etcd/pull/15645)
* tests/robustness: Ensure that etcdctl binary is provided [#15644](https://github.com/openshift/etcd/pull/15644)
* etcdserver: Send requested progress notifications through watchStream (fix #15220) [#15237](https://github.com/openshift/etcd/pull/15237)
* Move to community membership model closer to kubernetes one [#15593](https://github.com/openshift/etcd/pull/15593)
* tests/robustness: Detect trigger timeout and exit [#15642](https://github.com/openshift/etcd/pull/15642)
* changelog: add items to cover 15294 [#15641](https://github.com/openshift/etcd/pull/15641)
* tests: Ensure healthy cluster before and after robustness failpoint [#15604](https://github.com/openshift/etcd/pull/15604)
* tests: Enfoce timeout on failpoints [#15633](https://github.com/openshift/etcd/pull/15633)
* tests: Ensure that operation history finishes with successful request [#15603](https://github.com/openshift/etcd/pull/15603)
* Bump some dependencies [#15638](https://github.com/openshift/etcd/pull/15638)
* tests: increase maxWatchDelay to prevent flaky TestWatchDelay* [#15636](https://github.com/openshift/etcd/pull/15636)
* tests: Fix comparing etcd version [#15632](https://github.com/openshift/etcd/pull/15632)
* fix flaking auth member remove test [#15580](https://github.com/openshift/etcd/pull/15580)
* tests: Fix building incorrect etcd version and make switch strict [#15618](https://github.com/openshift/etcd/pull/15618)
* tests: Cleanup endpoints [#15592](https://github.com/openshift/etcd/pull/15592)
* test: fix typo in robustness test [#15616](https://github.com/openshift/etcd/pull/15616)
* tests/robustness: Support running snapshot tests on older versions [#15615](https://github.com/openshift/etcd/pull/15615)
* server/auth: disallow creating empty permission ranges [#15294](https://github.com/openshift/etcd/pull/15294)
* Robustness fix blackhole [#15610](https://github.com/openshift/etcd/pull/15610)
* CHANGELOG: add item into 3.5 [#15614](https://github.com/openshift/etcd/pull/15614)
* build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 [#15607](https://github.com/openshift/etcd/pull/15607)
* Use makefile as entrypoint in CI [#15561](https://github.com/openshift/etcd/pull/15561)
* contrib/raftexample: fix raftexample README's raft library link. [#15602](https://github.com/openshift/etcd/pull/15602)
* tests/robustness: Disable testing network blackhole until #15595 is fixed [#15601](https://github.com/openshift/etcd/pull/15601)
* client: Hide v2 client package [#15591](https://github.com/openshift/etcd/pull/15591)
* Fixes: #15266 All docker images of Architecture show amd64 [#15270](https://github.com/openshift/etcd/pull/15270)
* Remove e2e from coverage calculation [#15544](https://github.com/openshift/etcd/pull/15544)
* server: Fix defer function closure escape [#15588](https://github.com/openshift/etcd/pull/15588)
* Allow user to separate http and grpc server [#15446](https://github.com/openshift/etcd/pull/15446)
* tests: Ensure watch catches all events generated in traffic [#15575](https://github.com/openshift/etcd/pull/15575)
* skip verification if db file does not exist [#15582](https://github.com/openshift/etcd/pull/15582)
* tests: Refactor watch validation [#15319](https://github.com/openshift/etcd/pull/15319)
* Document defining ciphers in example etcd config file [#15576](https://github.com/openshift/etcd/pull/15576)
* add etcd test analyzer build and integrate into measure-test-flakiness workflow [#15513](https://github.com/openshift/etcd/pull/15513)
* migrate auth tests to common #7 [#15578](https://github.com/openshift/etcd/pull/15578)
* tests: Document robustness tests [#14838](https://github.com/openshift/etcd/pull/14838)
* CHANGELOG: Add new tls configuration options [#15553](https://github.com/openshift/etcd/pull/15553)
* build(deps): bump github.com/mikefarah/yq/v4 from 4.31.2 to 4.33.1 in /tools/mod [#15564](https://github.com/openshift/etcd/pull/15564)
* build(deps): bump github/codeql-action from 2.2.8 to 2.2.9 [#15574](https://github.com/openshift/etcd/pull/15574)
* changelog: added item to cover reverting 14548 in release-3.4 [#15559](https://github.com/openshift/etcd/pull/15559)
* build(deps): bump actions/checkout from 3.4.0 to 3.5.0 [#15554](https://github.com/openshift/etcd/pull/15554)
* scripts: Add testing of etcd in local image in release workflow. [#15505](https://github.com/openshift/etcd/pull/15505)
* Update status of postmortem action items [#15552](https://github.com/openshift/etcd/pull/15552)
* build(deps): bump github/codeql-action from 2.2.7 to 2.2.8 [#15551](https://github.com/openshift/etcd/pull/15551)
* chore: introduce strict bash mode for scripts,.github [#15519](https://github.com/openshift/etcd/pull/15519)
* etcd-mixin: Limit etcdDatabaseHighFragmentationRatio to 100MB+ [#15291](https://github.com/openshift/etcd/pull/15291)
* CHANGELOG: add 'server/embed: fix data race when starting both secure & insecure gRPC servers on the same address' into 3.4/3.5 [#15546](https://github.com/openshift/etcd/pull/15546)
* Bump some dependencies [#15538](https://github.com/openshift/etcd/pull/15538)
* build(deps): bump actions/setup-go from 3.5.0 to 4.0.0 [#15536](https://github.com/openshift/etcd/pull/15536)
* build(deps): bump actions/checkout from 3.3.0 to 3.4.0 [#15534](https://github.com/openshift/etcd/pull/15534)
* build(deps): bump github/codeql-action from 2.2.6 to 2.2.7 [#15535](https://github.com/openshift/etcd/pull/15535)
* Point coverage to correct branch [#15521](https://github.com/openshift/etcd/pull/15521)
* Fix 15271 [#15492](https://github.com/openshift/etcd/pull/15492)
* deflake: mvcc storage ut [#15489](https://github.com/openshift/etcd/pull/15489)
* server/embed: fix data race when start insecure grpc [#15509](https://github.com/openshift/etcd/pull/15509)
* Add detailed long description for etcdctl txn [#15494](https://github.com/openshift/etcd/pull/15494)
* document measure-test-flakiness.sh [#15500](https://github.com/openshift/etcd/pull/15500)
* deflake member_test: enable pre-vote by default and add retry [#15502](https://github.com/openshift/etcd/pull/15502)
* deflake TestTracing [#15501](https://github.com/openshift/etcd/pull/15501)
* Rename pr and issue triage docs to fix links [#15493](https://github.com/openshift/etcd/pull/15493)
* Add verify-goimport to verify all import items are well sorted [#15485](https://github.com/openshift/etcd/pull/15485)
* Test connection multiplexing. [#15479](https://github.com/openshift/etcd/pull/15479)
* server/auth: fix auth panic bug when user changes password [#15432](https://github.com/openshift/etcd/pull/15432)
* Refactor: Use proper variable names for urls [#15473](https://github.com/openshift/etcd/pull/15473)
* build(deps): bump github.com/mikefarah/yq/v4 from 4.31.1 to 4.31.2 in /tools/mod [#15456](https://github.com/openshift/etcd/pull/15456)
* Update CONTRIBUTING.md reference for Codespaces [#15455](https://github.com/openshift/etcd/pull/15455)
* build(deps): bump github/codeql-action from 2.2.5 to 2.2.6 [#15466](https://github.com/openshift/etcd/pull/15466)
* Refactor url names [#15453](https://github.com/openshift/etcd/pull/15453)
* test: fix format error [#15467](https://github.com/openshift/etcd/pull/15467)
* tests/integration: deflake TestEtcdVersionFromWAL [#15449](https://github.com/openshift/etcd/pull/15449)
* FIX #13389 [#15447](https://github.com/openshift/etcd/pull/15447)
* Watch random scheduler [#15431](https://github.com/openshift/etcd/pull/15431)
* Bump some dependencies [#15420](https://github.com/openshift/etcd/pull/15420)
* Update contributing guide with new codespaces developement option [#15433](https://github.com/openshift/etcd/pull/15433)
* Updated go to latest 1.19.7 release [#15427](https://github.com/openshift/etcd/pull/15427)
* pkg/schedule: correct comparison for FIFO schedule test [#15201](https://github.com/openshift/etcd/pull/15201)
* tests/integration: Update TestLeasingDeleteRangeContendTxn [#15425](https://github.com/openshift/etcd/pull/15425)
* Return default snapshot count to 10,000 [#15408](https://github.com/openshift/etcd/pull/15408)
* migration auth tests to common #5 [#15378](https://github.com/openshift/etcd/pull/15378)
* CHANGELOG: Add entries for 3.4 and 3.5 go version 1.19. [#15405](https://github.com/openshift/etcd/pull/15405)
* Add initial .devcontainer for go 1.19 [#15383](https://github.com/openshift/etcd/pull/15383)
* Fixing flaky TestLeasingDeleteRangeContendTxn [#15401](https://github.com/openshift/etcd/pull/15401)
* migrate auth tests to common #6 [#15379](https://github.com/openshift/etcd/pull/15379)
* rpctypes: use status.Error() instead of status.New().Err() [#15384](https://github.com/openshift/etcd/pull/15384)
* rafthttp: replace inline code with existing function [#15398](https://github.com/openshift/etcd/pull/15398)
* dependency: bump go.opentelemetry.io/otel to v1.14.0 [#15399](https://github.com/openshift/etcd/pull/15399)
* workflows: Remove non-root gomod dependabot rules [#15313](https://github.com/openshift/etcd/pull/15313)
* Dependencies: bump some dependencies [#15376](https://github.com/openshift/etcd/pull/15376)
* clientv3: support serializable `MemberList` operation [#15261](https://github.com/openshift/etcd/pull/15261)
* tests: Rename linearizability tests to robustness [#15359](https://github.com/openshift/etcd/pull/15359)
* migrate auth test to common #4 [#15351](https://github.com/openshift/etcd/pull/15351)
* build(deps): bump golang.org/x/sys from 0.0.0-20210603125802-9665404d3644 to 0.1.0 in /client/pkg [#15358](https://github.com/openshift/etcd/pull/15358)
* build(deps): bump github/codeql-action from 2.2.4 to 2.2.5 [#15357](https://github.com/openshift/etcd/pull/15357)
* Ensure we are using an up to date govulncheck [#15356](https://github.com/openshift/etcd/pull/15356)
* dependency: bump github.com/golang-jwt/jwt/v4 to v4.5.0 [#15345](https://github.com/openshift/etcd/pull/15345)
* migrate 6 auth test cases to common #3 [#15320](https://github.com/openshift/etcd/pull/15320)
* tests: Refactor file structure [#15325](https://github.com/openshift/etcd/pull/15325)
* test: Report watch histories [#15282](https://github.com/openshift/etcd/pull/15282)
* tests: Detect duplicate watch event [#15324](https://github.com/openshift/etcd/pull/15324)
* tests: use monotonic clock for linearizability test history [#15323](https://github.com/openshift/etcd/pull/15323)
* Codify kubernetes using response header revision as bookmark [#15293](https://github.com/openshift/etcd/pull/15293)
* tests: Implement multi operation Txn [#15259](https://github.com/openshift/etcd/pull/15259)
* Do not run arm64 jobs on forks [#15316](https://github.com/openshift/etcd/pull/15316)
* Allow multiple operations with same mod revisions, but forbid … [#15318](https://github.com/openshift/etcd/pull/15318)
* tests: Refactor blackholing and add separate BlackholePeerUntilSnapsh… [#15283](https://github.com/openshift/etcd/pull/15283)
* tests: Remove functional testing as they were replaced by linearizabi… [#15284](https://github.com/openshift/etcd/pull/15284)
* Adjust time resolution to microseconds [#15239](https://github.com/openshift/etcd/pull/15239)
* tests: trigger raftBeforeFollowerSend failpoint in linearizability test [#15268](https://github.com/openshift/etcd/pull/15268)
* etcdserver: add failpoints walBeforeSync and walAfterSync [#15252](https://github.com/openshift/etcd/pull/15252)
* tests: Validate watch responses in linearizability tests [#15250](https://github.com/openshift/etcd/pull/15250)
* Update @serathius email address just in case [#15249](https://github.com/openshift/etcd/pull/15249)
* tests linearizability: trigger snapshot related failpoints [#15104](https://github.com/openshift/etcd/pull/15104)
* tests/linearizability: force stop cluster with signal kill [#15242](https://github.com/openshift/etcd/pull/15242)
* Add integration test for Arm64 [#15233](https://github.com/openshift/etcd/pull/15233)
* Add E2E tests on arm64 [#15230](https://github.com/openshift/etcd/pull/15230)
* tests/linearizability: remove PeerProxy for ClusterSize=1 [#15232](https://github.com/openshift/etcd/pull/15232)
* Linearizability disable defragment request in traffic to remove flakes [#15227](https://github.com/openshift/etcd/pull/15227)
* Add TLSv1.3 support. [#15156](https://github.com/openshift/etcd/pull/15156)
* tests: Propagage logger through linearizability tests [#15202](https://github.com/openshift/etcd/pull/15202)
* tests: Increase failpoint timeout and add more logs [#15191](https://github.com/openshift/etcd/pull/15191)
* tests: Implement LargePut requests [#15180](https://github.com/openshift/etcd/pull/15180)
* tests: Add defragment request to linearizability tests [#15178](https://github.com/openshift/etcd/pull/15178)
* tests: Deduplicate cluster test scenarios [#15179](https://github.com/openshift/etcd/pull/15179)
* Add functional tests on arm64 [#15172](https://github.com/openshift/etcd/pull/15172)
* tests: Stop cluster after tests finish [#15176](https://github.com/openshift/etcd/pull/15176)
* tests: Separate request type from Txn operation type [#15159](https://github.com/openshift/etcd/pull/15159)
* Cleanup [#15158](https://github.com/openshift/etcd/pull/15158)
* tests: Set artifact name based to avoid file override from different subruns [#15149](https://github.com/openshift/etcd/pull/15149)
* tests: Fix linearizability nightly [#15142](https://github.com/openshift/etcd/pull/15142)
* etcd: fix typo in bug.yaml [#15146](https://github.com/openshift/etcd/pull/15146)
* etcdserver: use time.Ticker instead of time.After [#15130](https://github.com/openshift/etcd/pull/15130)
* tests: Persist operation history [#15133](https://github.com/openshift/etcd/pull/15133)
* Reproduce issue 13766 in linearizability tests [#14682](https://github.com/openshift/etcd/pull/14682)
* CHANGELOG: add item about improvement for count-only range [#15135](https://github.com/openshift/etcd/pull/15135)
* tests: Fix linearizability nightly variable name [#15132](https://github.com/openshift/etcd/pull/15132)
* changelog: add items to cover the issue of promoting a non-started learner member [#15098](https://github.com/openshift/etcd/pull/15098)
* tests: Move linearizability model and identity to dedicated packages [#15128](https://github.com/openshift/etcd/pull/15128)
* Bump some dependencies [#15129](https://github.com/openshift/etcd/pull/15129)
* etcdserver: return `membership.ErrIDNotFound` when the memberID not found [#15095](https://github.com/openshift/etcd/pull/15095)
* Add linearizability nightlies for release 3.4/3.5 [#15106](https://github.com/openshift/etcd/pull/15106)
* clientv3: refactor getToken automatically [#15071](https://github.com/openshift/etcd/pull/15071)
* tests: Reduce number of runs in nightly action [#15105](https://github.com/openshift/etcd/pull/15105)
* tests: Fix history patch window [#15101](https://github.com/openshift/etcd/pull/15101)
* Lease support for linearizability tests : address review feedback [#15093](https://github.com/openshift/etcd/pull/15093)
* CHANGELOG: add dep update item to 3.4 [#15094](https://github.com/openshift/etcd/pull/15094)
* tests: Move stopping proxy to after process stop to speed up cluster … [#15091](https://github.com/openshift/etcd/pull/15091)
* tests: Fix putWithLease traffic timeout/limit and double overall timeout to reduce number of failed requests [#15084](https://github.com/openshift/etcd/pull/15084)
* tests: Use watch events to patch history to speed up linearization [#15078](https://github.com/openshift/etcd/pull/15078)
* Add support for lease api to linearizability tests [#15080](https://github.com/openshift/etcd/pull/15080)
* etcdserver: process the case of the last WAL record being partially synced to disk [backport 3.5] [#15068](https://github.com/openshift/etcd/pull/15068)
* Bump go to 1.19.5 [#15081](https://github.com/openshift/etcd/pull/15081)
* changelog: add 3.5 item to cover the fix for last partically synced WAL record [#15070](https://github.com/openshift/etcd/pull/15070)
* Watch events during linearizability test and compare history [#15044](https://github.com/openshift/etcd/pull/15044)
* tests: Trigger only failpoints available in binary [#15046](https://github.com/openshift/etcd/pull/15046)
* build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 in /server [#15073](https://github.com/openshift/etcd/pull/15073)
* build(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 [#15074](https://github.com/openshift/etcd/pull/15074)
* build(deps): bump actions/checkout from 3.2.0 to 3.3.0 [#15075](https://github.com/openshift/etcd/pull/15075)
* tests: Rewrite etcd requests to use operations [#15059](https://github.com/openshift/etcd/pull/15059)
* tests: Implement network delay and blackholing in linearizability tests [#15048](https://github.com/openshift/etcd/pull/15048)
* client/v3: fix comment typo [#15067](https://github.com/openshift/etcd/pull/15067)
* externalize snapshot catchup entries to etcd flag [#15033](https://github.com/openshift/etcd/pull/15033)
* tests/common: migrate auth tests #2 [#15028](https://github.com/openshift/etcd/pull/15028)
* etcd-dump-logs: Expand to allow diagnosing CRC corrupted problems in WAL log [#15043](https://github.com/openshift/etcd/pull/15043)
* etcd-dump-logs: Make the tests work again. [#15055](https://github.com/openshift/etcd/pull/15055)
* Goimports: Apply automated fixing to test files as well. [#15056](https://github.com/openshift/etcd/pull/15056)
* tests: Support multiple keys in linearizability tests [#14924](https://github.com/openshift/etcd/pull/14924)
* ./scripts/fix.sh: Takes care of goimports across the whole project. [#15052](https://github.com/openshift/etcd/pull/15052)
* enhancement(ctlv3): display `as learner` when member add as learner [#15053](https://github.com/openshift/etcd/pull/15053)
* chore: delete // +build buildtag by `go fix` [#15054](https://github.com/openshift/etcd/pull/15054)
* tests: Refactor etcd model [#15045](https://github.com/openshift/etcd/pull/15045)
* etcdserver: fix typo in comment [#15051](https://github.com/openshift/etcd/pull/15051)
* Added 'secrets.GITHUB_TOKEN' for the static-analysis workflow [#15050](https://github.com/openshift/etcd/pull/15050)
* build(deps): bump ossf/scorecard-action from 2.1.0 to 2.1.2 [#15047](https://github.com/openshift/etcd/pull/15047)
* clientv3/naming/endpoints: fix endpoints prefix bug [#15021](https://github.com/openshift/etcd/pull/15021)
* tests: Reproduce issue 14685 [#14909](https://github.com/openshift/etcd/pull/14909)
* Update nsswitch.conf file [#15040](https://github.com/openshift/etcd/pull/15040)
* Changelog: update base image to static-debian11 and removd dependency on busybox [#15039](https://github.com/openshift/etcd/pull/15039)
* remove the dependency on busybox [#15036](https://github.com/openshift/etcd/pull/15036)
* clientv3: add protection code to prevent SnapshotWithVersion from panicking [#15031](https://github.com/openshift/etcd/pull/15031)
* test(client): add `TestIsUnavailableErr` [#15024](https://github.com/openshift/etcd/pull/15024)
* Improve memberList output consistency [#15023](https://github.com/openshift/etcd/pull/15023)
* test(client): add `credentials_test.go` [#15012](https://github.com/openshift/etcd/pull/15012)
* build(deps): bump ossf/scorecard-action from 2.0.6 to 2.1.0 [#15026](https://github.com/openshift/etcd/pull/15026)
* build(deps): bump github/codeql-action from 2.1.36 to 2.1.37 [#15027](https://github.com/openshift/etcd/pull/15027)
* build(deps): bump github.com/mikefarah/yq/v4 from 4.30.5 to 4.30.6 in /tools/mod [#15025](https://github.com/openshift/etcd/pull/15025)
* changelog: update items to address the critical and high Vulnerabilities [#15020](https://github.com/openshift/etcd/pull/15020)
* clientv3/concurrency: add logger to session, add unit test [#14993](https://github.com/openshift/etcd/pull/14993)
* lease: fix potential goroutine leak in lessor_test.go [#14875](https://github.com/openshift/etcd/pull/14875)
* maintenance: add test to verify content of Snapshot [#14918](https://github.com/openshift/etcd/pull/14918)
* tests/common: migrate auth tests #1 [#14998](https://github.com/openshift/etcd/pull/14998)
* e2e: deflake TestCtlV3AuthGracefulDisable [#14999](https://github.com/openshift/etcd/pull/14999)
* Move trivy scan workflow of specific versions to respective branches [#15005](https://github.com/openshift/etcd/pull/15005)
* fix doc etcdd.io -> etcd.io [#15004](https://github.com/openshift/etcd/pull/15004)
* tests(etcdserver): add `server_access_control_test.go` [#15000](https://github.com/openshift/etcd/pull/15000)
* changelog: added item to cover the rollback to fix 'auth invalid token and old revision errors in watch' [#14996](https://github.com/openshift/etcd/pull/14996)
* build(deps): bump actions/setup-go from 2.2.0 to 3.5.0 [#14978](https://github.com/openshift/etcd/pull/14978)
* build(deps): bump github.com/alexkohler/nakedret from 1.0.0 to 1.0.1 in /tools/mod [#14982](https://github.com/openshift/etcd/pull/14982)
* etcd: add `trivy-nightly-scan` for etcd images [#14928](https://github.com/openshift/etcd/pull/14928)
* build(deps): bump honnef.co/go/tools from 0.3.0 to 0.3.3 in /tools/mod [#14979](https://github.com/openshift/etcd/pull/14979)
* build(deps): bump github.com/anishathalye/porcupine from 0.1.2 to 0.1.4 in /tests [#14981](https://github.com/openshift/etcd/pull/14981)
* deps: bump some dependencies suggested by dependabot [#14973](https://github.com/openshift/etcd/pull/14973)
* dependabot: change schedule interval to weekly [#14972](https://github.com/openshift/etcd/pull/14972)
* resolver: cleanup of deprecated grpc resolver target.Endpoint field [#14922](https://github.com/openshift/etcd/pull/14922)
* client: enhance the function shouldRetryWatch and added unit test [#14935](https://github.com/openshift/etcd/pull/14935)
* build(deps): bump actions/checkout from 2.5.0 to 3.2.0 [#14946](https://github.com/openshift/etcd/pull/14946)
* build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.1 [#14940](https://github.com/openshift/etcd/pull/14940)
* build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 [#14937](https://github.com/openshift/etcd/pull/14937)
* security: add dependabot.yml [#14936](https://github.com/openshift/etcd/pull/14936)
* Trigger release in current branch for github workflow case [#14860](https://github.com/openshift/etcd/pull/14860)
* Secure the github workflows [#14930](https://github.com/openshift/etcd/pull/14930)
* test: fix nil pointer panic in testMutexLock [#14927](https://github.com/openshift/etcd/pull/14927)
* tests: Update gofail to v0.1.0 [#14925](https://github.com/openshift/etcd/pull/14925)
* Pin govulncheck to v0.0.0-20221208180742-f2dca5ff4cc3 [#14919](https://github.com/openshift/etcd/pull/14919)
* tests: Increase test timeout for nighly runs to match job timeout min… [#14917](https://github.com/openshift/etcd/pull/14917)
* Bump go to 1.19.4 and golang.org/x/net to v0.4.0 to address CVEs [#14916](https://github.com/openshift/etcd/pull/14916)
* tests: Add Txn operation to linearizability tests [#14903](https://github.com/openshift/etcd/pull/14903)
* Refactor etcd model [#14902](https://github.com/openshift/etcd/pull/14902)
* Update PSC members [#14913](https://github.com/openshift/etcd/pull/14913)
* Create a nightly job for linearizability tests [#14911](https://github.com/openshift/etcd/pull/14911)
* Set Github workflows default permissions to read-only [#14905](https://github.com/openshift/etcd/pull/14905)
* chore: use Getter in WarnOfExpensiveReadOnlyTxnRequest [#14907](https://github.com/openshift/etcd/pull/14907)
* changelog: add items for the nil pointer panic of readonly txn [#14901](https://github.com/openshift/etcd/pull/14901)
* Improve support for failed requests in linearizability tests [#14880](https://github.com/openshift/etcd/pull/14880)
* etcdserver: fix nil pointer panic for readonly txn [#14895](https://github.com/openshift/etcd/pull/14895)
* Allow failpoint requests to fail assuming that process exists within 1 second [#14897](https://github.com/openshift/etcd/pull/14897)
* linearizability tests - Add support for delete api [#14802](https://github.com/openshift/etcd/pull/14802)
* changelog: added non mutating requests pass through quotaKVServer when NOSPACE in 3.7 [#14898](https://github.com/openshift/etcd/pull/14898)
* Make sure shellcheck exist [#14872](https://github.com/openshift/etcd/pull/14872)
* changelog: added item for the decoupling raft from etcd in 3.6 [#14892](https://github.com/openshift/etcd/pull/14892)
* Linearizability recreate cluster [#14885](https://github.com/openshift/etcd/pull/14885)
* Remove raft from etcd [#14882](https://github.com/openshift/etcd/pull/14882)
* test: fix typo [#14889](https://github.com/openshift/etcd/pull/14889)
* docs: Update raft package to go.etcd.io/raft/v3 in modules SVG [#14887](https://github.com/openshift/etcd/pull/14887)
* Update etcd to use the new raft module go.etcd.io/raft/v3 [#14881](https://github.com/openshift/etcd/pull/14881)
* Read Go Build Flags from env `GO_BUILD_FLAGS` (#14396) [#14868](https://github.com/openshift/etcd/pull/14868)
* Bump golang.org/x imports to address a bunch of CVEs [#14871](https://github.com/openshift/etcd/pull/14871)
* test: fix unit test Instability [#14865](https://github.com/openshift/etcd/pull/14865)
* add more debug info for opening WAL files failure [#14862](https://github.com/openshift/etcd/pull/14862)
* Identify corrupted member depending on quorum [#14828](https://github.com/openshift/etcd/pull/14828)
* tests: Cleanup gofail [#14859](https://github.com/openshift/etcd/pull/14859)
* Deflake transport timeout case [#14861](https://github.com/openshift/etcd/pull/14861)
* fix release pipeline failure [#14858](https://github.com/openshift/etcd/pull/14858)
* bump github.com/stretchr/testify from v1.7.2 to v1.8.1 [#14856](https://github.com/openshift/etcd/pull/14856)
* Display hash_revision for `etcdctl endpoint hash` [#14812](https://github.com/openshift/etcd/pull/14812)
* fix TestSignal test [#14847](https://github.com/openshift/etcd/pull/14847)
* changelog: add items for both 3.4 and 3.5 changelog to cover the case of removing memberid from corrupt alarm [#14854](https://github.com/openshift/etcd/pull/14854)
* bump grpc to v1.51.0 from v1.47.0 [#14834](https://github.com/openshift/etcd/pull/14834)
* Shell func go_srcs_in_module to list go src+test files (#14827) [#14840](https://github.com/openshift/etcd/pull/14840)
* tests: fix anti-pattern name in `NewEtcdProcessCluster` [#14825](https://github.com/openshift/etcd/pull/14825)
* Add missing copyright headers [#14831](https://github.com/openshift/etcd/pull/14831)
* tests/integration: deflake Corruption cases [#14824](https://github.com/openshift/etcd/pull/14824)
* client: update comment for clarity [#14822](https://github.com/openshift/etcd/pull/14822)
* Update changelog for v3.5.6 release [#14817](https://github.com/openshift/etcd/pull/14817)
* Fixed https://github.com/etcd-io/etcd/issues/14709 [#14795](https://github.com/openshift/etcd/pull/14795)
* release: build with consistent paths [#13552](https://github.com/openshift/etcd/pull/13552)
* Graduate `--experimental-warning-unary-request-duration` to `--warning-unary-request-duration` [#14803](https://github.com/openshift/etcd/pull/14803)
* tool: bump gofail version [#14804](https://github.com/openshift/etcd/pull/14804)
* all: goimports -w . [#14788](https://github.com/openshift/etcd/pull/14788)
* Linearizability raft before leader send [#14752](https://github.com/openshift/etcd/pull/14752)
* .github: make govuln-check generic [#14669](https://github.com/openshift/etcd/pull/14669)
* Fix TestCtlV3Lock/Elect flakes [#14798](https://github.com/openshift/etcd/pull/14798)
* docs: fix max recv msg size description [#14794](https://github.com/openshift/etcd/pull/14794)
* changelog: add items to cover the issue of refreshing token on CommonName based authentication [#14793](https://github.com/openshift/etcd/pull/14793)
* clientv3: do not refresh token when users use CommonName based authentication [#14770](https://github.com/openshift/etcd/pull/14770)
* Avoid getting gofail/runtime when failpoints are disabled [#14766](https://github.com/openshift/etcd/pull/14766)
* tests: refactor EtcdProcessClusterConfig using Functional Options Pattern [#14785](https://github.com/openshift/etcd/pull/14785)
* all: Change Printf and friends to Print if there is no formatting [#14767](https://github.com/openshift/etcd/pull/14767)
* client/v3: replace deprecated grpc.WithInsecure() issue #14732 [#14731](https://github.com/openshift/etcd/pull/14731)
* Linearizability compact [#14765](https://github.com/openshift/etcd/pull/14765)
* Update CodeQL to v2 [#14761](https://github.com/openshift/etcd/pull/14761)
* etcdserver: add failpoints for backend [#14757](https://github.com/openshift/etcd/pull/14757)
* tests: refactor `EtcdProcessClusterConfig` using Functional Options Pattern [#14744](https://github.com/openshift/etcd/pull/14744)
* all: Change time unit [#14756](https://github.com/openshift/etcd/pull/14756)
* client: Use func without format [#14754](https://github.com/openshift/etcd/pull/14754)
* feat: raft/log_test se testify packages in tests [#14747](https://github.com/openshift/etcd/pull/14747)
* tests: Make linearizability traffic extendable [#14755](https://github.com/openshift/etcd/pull/14755)
* raft: don't apply entries when applying snapshot [#14721](https://github.com/openshift/etcd/pull/14721)
* Merge [#14723](https://github.com/openshift/etcd/pull/14723)
* all: Use ReplaceAll instead of Replace with -1 pos [#14753](https://github.com/openshift/etcd/pull/14753)
* Revision inconsistency caused by panic during defrag [#14685](https://github.com/openshift/etcd/pull/14685)
* tests/e2e: disable testShellCompletion if enable cov flag [#14742](https://github.com/openshift/etcd/pull/14742)
* Expect exit code enhancement [#14672](https://github.com/openshift/etcd/pull/14672)
* Merge [#14624](https://github.com/openshift/etcd/pull/14624)
* changelog: add item for 3.5 to cover the revision inconsistency issue [#14734](https://github.com/openshift/etcd/pull/14734)
* etcdserver: Add gofailpoints for pre commit hook [#14746](https://github.com/openshift/etcd/pull/14746)
* e2e: test DowngradeVersion with latest point release [#14743](https://github.com/openshift/etcd/pull/14743)
* Add a new field hash_revision into HashKVResponse [#14537](https://github.com/openshift/etcd/pull/14537)
* Merge [#14717](https://github.com/openshift/etcd/pull/14717)
* etcdserver: call the OnPreCommitUnsafe in unsafeCommit [#14730](https://github.com/openshift/etcd/pull/14730)
* README: remove Tobias Grieger from the Emeritus Maintainers list [#14741](https://github.com/openshift/etcd/pull/14741)
* tests: refactor `EtcdProcessClusterConfig` using Functional Options Pattern [#14725](https://github.com/openshift/etcd/pull/14725)
* raft: rename raftLog.nextEnts to raftLog.nextCommittedEnts [#14719](https://github.com/openshift/etcd/pull/14719)
* Merge [#14722](https://github.com/openshift/etcd/pull/14722)
* Merge [#14720](https://github.com/openshift/etcd/pull/14720)
* test: Create a subdirectory for each member when DataDirPath is specified [#14718](https://github.com/openshift/etcd/pull/14718)
* tests: Preserve data dir from failed linearizability tests [#14714](https://github.com/openshift/etcd/pull/14714)
* etcdclient: check mutex state in Unlock method of concurrency.Mutex [#14704](https://github.com/openshift/etcd/pull/14704)
* raft: make Message.Snapshot nullable, halve struct size [#14592](https://github.com/openshift/etcd/pull/14592)
* Merge [#14708](https://github.com/openshift/etcd/pull/14708)
* Take binary version in Downgrade/Upgrade Test [#14710](https://github.com/openshift/etcd/pull/14710)
* test: support mix versions sending snapshot test [#14707](https://github.com/openshift/etcd/pull/14707)
* raft: send empty appends when replication is paused [#14633](https://github.com/openshift/etcd/pull/14633)
* tests: refactor `EtcdProcessClusterConfig` using Functional Options Pattern [#14711](https://github.com/openshift/etcd/pull/14711)
* raft: Remove dependency on etcd api [#14705](https://github.com/openshift/etcd/pull/14705)
* etcdserver: fix log typo when checking version compatiblity [#14706](https://github.com/openshift/etcd/pull/14706)
* raft: remove the raft dependency on go.etcd.io/etcd/client/pkg/v3 [#14703](https://github.com/openshift/etcd/pull/14703)
* tests: Add triggering random go failpoints to linearizability tests [#14687](https://github.com/openshift/etcd/pull/14687)
* raft: change the log from debug to warning when uncommitted size exceeds threshold [#14698](https://github.com/openshift/etcd/pull/14698)
* raft: simplify auto-leave joint config on entry application logic [#14545](https://github.com/openshift/etcd/pull/14545)
* changelog: update 3.4.22's release date [#14677](https://github.com/openshift/etcd/pull/14677)
* test: support mix versions testing [#14697](https://github.com/openshift/etcd/pull/14697)
* Merge [#14659](https://github.com/openshift/etcd/pull/14659)
* clientv3: fix init client error [#14368](https://github.com/openshift/etcd/pull/14368)
* changelog: add item to cover the fix on adding protection on maintenance requests when auth is enabled [#14695](https://github.com/openshift/etcd/pull/14695)
* test: fix pipeline errors due to PRs conflict [#14693](https://github.com/openshift/etcd/pull/14693)
* auth: check permission when performing maintainenence operations if auth is enabled [#14663](https://github.com/openshift/etcd/pull/14663)
* test: refactor the framework structure to make it clearer [#14683](https://github.com/openshift/etcd/pull/14683)
* tests: Pass only etcd related environment variables during e2e tests [#14560](https://github.com/openshift/etcd/pull/14560)
* (Re-) add @tbg as maintainer [#14681](https://github.com/openshift/etcd/pull/14681)
* test: deflake TestDowngradeUpgradeClusterOf3 timeout [#14657](https://github.com/openshift/etcd/pull/14657)
* bump go version to 1.19.3 to address security fixes [#14678](https://github.com/openshift/etcd/pull/14678)
* ci: ensure the generated code is up-to-date [#14664](https://github.com/openshift/etcd/pull/14664)
* server: add more context to panic message [#14667](https://github.com/openshift/etcd/pull/14667)
* tests: TestRunner.NewCluster accepts options [#14660](https://github.com/openshift/etcd/pull/14660)
* clientv3: fix the implementation of double barrier [#14604](https://github.com/openshift/etcd/pull/14604)
* test: terminate functional test on failure and code cleanup [#14621](https://github.com/openshift/etcd/pull/14621)
* update changelogs of 3.4 and 3.5 for backporting PR 14574 and 14647 [#14650](https://github.com/openshift/etcd/pull/14650)
* server: add a unit test case for authStore.Reocver() with empty rangePermCache [#14647](https://github.com/openshift/etcd/pull/14647)
* remove inactive reviewers [#14644](https://github.com/openshift/etcd/pull/14644)
* chore: update the warn message on startup when the server name is default [#14642](https://github.com/openshift/etcd/pull/14642)
* Update 3.4, 3.5, and 3.6 changelogs for adding configurable cipher list to gRPC proxy [#14524](https://github.com/openshift/etcd/pull/14524)
* Fix error on Scorecard run by upgrading the action version [#14646](https://github.com/openshift/etcd/pull/14646)
* .github: add govuln check [#14625](https://github.com/openshift/etcd/pull/14625)
* *: bump to go1.19.2 from 1.19.1 [#14639](https://github.com/openshift/etcd/pull/14639)
* etcdserver: call refreshRangePermCache on Recover() in AuthStore. [#14574](https://github.com/openshift/etcd/pull/14574)
* tests: add a ClusterOption interface for ClusterSize in config.Cluster [#14632](https://github.com/openshift/etcd/pull/14632)
* don't pass --endpoints flag in test HashKV implementation [#14637](https://github.com/openshift/etcd/pull/14637)
* fix: close conn [#14635](https://github.com/openshift/etcd/pull/14635)
* fix: add a warning message on startup if the server name is default [#14613](https://github.com/openshift/etcd/pull/14613)
* common test: update auth test interface [#14626](https://github.com/openshift/etcd/pull/14626)
* test: fix anti-pattern naming problem in config.ClusterConfig [#14629](https://github.com/openshift/etcd/pull/14629)
* test: define a default WithAuth to resolve Unresolved reference error [#14628](https://github.com/openshift/etcd/pull/14628)
* etcd-dump-db: enhance metaDecoder [#14630](https://github.com/openshift/etcd/pull/14630)
* tests: Add linearizability tests scenario for #14370 [#14611](https://github.com/openshift/etcd/pull/14611)
* test: add common function "WithAuth" [#14618](https://github.com/openshift/etcd/pull/14618)
* chore: commit the change generated by scripts/genproto.sh [#14612](https://github.com/openshift/etcd/pull/14612)
* test: refactor the client interface [#14615](https://github.com/openshift/etcd/pull/14615)
* Ensure that input validation between API and Apply is consistent [#14561](https://github.com/openshift/etcd/pull/14561)
* Validate etcd linearizability [#14398](https://github.com/openshift/etcd/pull/14398)
* functional_test: code cleanup and minor enhancements [#14602](https://github.com/openshift/etcd/pull/14602)
* raft: remove duplicate letter in comment. [#14609](https://github.com/openshift/etcd/pull/14609)
* Fix AuthEnable/Disable e2e test implementations [#14608](https://github.com/openshift/etcd/pull/14608)
* lessor: simplify expireExists to make it more clear [#14600](https://github.com/openshift/etcd/pull/14600)
* Fix bug in EtcdctlV3.HashKV() e2e implementation. [#14607](https://github.com/openshift/etcd/pull/14607)
* Simplify e2e coverage code [#14596](https://github.com/openshift/etcd/pull/14596)
* server: Handle cluster version equal downgrade version [#14588](https://github.com/openshift/etcd/pull/14588)
* etcdmain: Corrects the link to supported-platform.md docs [#14590](https://github.com/openshift/etcd/pull/14590)
* tests: Move MustAbsPath function to testutils [#14597](https://github.com/openshift/etcd/pull/14597)
* Tests: Check Watch response error not nil to avoid runtime panic. [#14591](https://github.com/openshift/etcd/pull/14591)
* Support dynamically adding & starting new member [#14589](https://github.com/openshift/etcd/pull/14589)
* Update changelog readme to add rules on how to add changelog items [#14570](https://github.com/openshift/etcd/pull/14570)
* Test port allocating using net.Listen [#14585](https://github.com/openshift/etcd/pull/14585)
* tests: Use bash like patterns in TestAuthority instead of string fo… [#14586](https://github.com/openshift/etcd/pull/14586)
* Update both 3.4 and 3.5 changelog to cover two fixes [#14583](https://github.com/openshift/etcd/pull/14583)
* functional-test: move the check on log-outputs out of the 'if clientTLS' branch [#14584](https://github.com/openshift/etcd/pull/14584)
* etcdserver: fix corruption check when server has just been compacted [#14457](https://github.com/openshift/etcd/pull/14457)
* embed: add integration test for distributed tracing [#14348](https://github.com/openshift/etcd/pull/14348)
* client/v3: Add backoff before retry when watch stream returns unavailable [#14556](https://github.com/openshift/etcd/pull/14556)
* functional_test: stop etcd and cleanup data when test is successful [#14565](https://github.com/openshift/etcd/pull/14565)
* etcdserver: added more debug log for the purgeFile goroutine [#14576](https://github.com/openshift/etcd/pull/14576)
* update changelogs of 3.4 and 3.5 for fixing avoid closing a watch with ID 0 incorrectly [#14567](https://github.com/openshift/etcd/pull/14567)
* Merge [#14555](https://github.com/openshift/etcd/pull/14555)
* Replace egrep with grep -E [#14568](https://github.com/openshift/etcd/pull/14568)
* functional: remove SIGQUIT_ETCD_AND_REMOVE_DATA_AND_STOP_AGENT command [#14387](https://github.com/openshift/etcd/pull/14387)
* Remove mention of ETCDCTL_API environment variable as it was removed from etcdctl [#14559](https://github.com/openshift/etcd/pull/14559)
* integration: deflaking TestMaintenanceSnapshotCancel/Timeout [#14552](https://github.com/openshift/etcd/pull/14552)
* Update changelog 3.6 to clearly requiring applications which depend on etcd 3.6 packages must be built with go version >= 1.18 [#14551](https://github.com/openshift/etcd/pull/14551)
* update changelogs of 3.4 and 3.5 for handling auth invalid token and old revision errors in watch [#14549](https://github.com/openshift/etcd/pull/14549)
* raft: update prevHardSt on Ready accept, not advance [#14539](https://github.com/openshift/etcd/pull/14539)
* raft: broadcast MsgApp on auto-leave joint config proposal [#14538](https://github.com/openshift/etcd/pull/14538)
* common tests framework: cluster client creation could fail with invalid auth [#14331](https://github.com/openshift/etcd/pull/14331)
* etcdserver: get peer's hash using the same revision as the value used by leader [#14536](https://github.com/openshift/etcd/pull/14536)
* golangci: add import order check [#14534](https://github.com/openshift/etcd/pull/14534)
* golangci: add unconvert check [#14535](https://github.com/openshift/etcd/pull/14535)
* Update changelog-3.4 to cover the issue: memberID equals zero in corruption alarm [#14531](https://github.com/openshift/etcd/pull/14531)
* upate:use google/btree in the genric way [#14515](https://github.com/openshift/etcd/pull/14515)
* membership: Remove PickPeerURL Method [#14521](https://github.com/openshift/etcd/pull/14521)
* Fixed unexpected cancelled watch with WatchID=0. [#14296](https://github.com/openshift/etcd/pull/14296)
* wal: Fix the `walWriteBytes` metric [#14506](https://github.com/openshift/etcd/pull/14506)
* Enable the OpenSSF Scorecard Github Action [#14512](https://github.com/openshift/etcd/pull/14512)
* Update changelog-3.6 to reflect the bumping of go 1.19 [#14504](https://github.com/openshift/etcd/pull/14504)
* etcdserve: revert the etcdserver side change for the data loss in one node cluster [#14505](https://github.com/openshift/etcd/pull/14505)
* Bump golang version to 1.19.1 [#14463](https://github.com/openshift/etcd/pull/14463)
* raft: don't emit unstable CommittedEntries [#14413](https://github.com/openshift/etcd/pull/14413)
* etcd: remove redundant type conversion [#14494](https://github.com/openshift/etcd/pull/14494)
* Improve static analysis fixing scripts [#14488](https://github.com/openshift/etcd/pull/14488)
* etcd: format import order [#14493](https://github.com/openshift/etcd/pull/14493)
* e2e: make maxstream test stable [#14482](https://github.com/openshift/etcd/pull/14482)
* etcd: Bump golang-jwt/jwt/ version to 4.4.2 [#14491](https://github.com/openshift/etcd/pull/14491)
* *: Update golang.org/x/net to latest [#14492](https://github.com/openshift/etcd/pull/14492)
* etcd: modify declaring empty slices [#14479](https://github.com/openshift/etcd/pull/14479)
* Doc: Add feature graduation and deprecation policies [#14483](https://github.com/openshift/etcd/pull/14483)
* *: handle auth invalid token and old revision errors in watch [#14322](https://github.com/openshift/etcd/pull/14322)
* makefile: Split fmt into separate verify commands [#14481](https://github.com/openshift/etcd/pull/14481)
* Build: remove the invalid quote character ' for flag -ldflags [#14485](https://github.com/openshift/etcd/pull/14485)
* CI: remove hardcode go version in .golangci.yaml [#14484](https://github.com/openshift/etcd/pull/14484)
* Test: increase the TestKVDelete's timeout to 15s [#14486](https://github.com/openshift/etcd/pull/14486)
* server/etcdmain: add configurable cipher list to gRPC proxy listener [#14308](https://github.com/openshift/etcd/pull/14308)
* makefile: Make static analysis commands easier to use [#14470](https://github.com/openshift/etcd/pull/14470)
* Changelog: cleanup 3.6 changelog to remove all bug fixes [#14480](https://github.com/openshift/etcd/pull/14480)
* Update changelog for v3.5.5 release [#14472](https://github.com/openshift/etcd/pull/14472)
* pkg: replace the deprecated Expect with ExpectWithContext in pkg/expect/expect_test.go [#14471](https://github.com/openshift/etcd/pull/14471)
* remove redundant log messsages [#14422](https://github.com/openshift/etcd/pull/14422)
* Add features dev and support guidelines doc [#14428](https://github.com/openshift/etcd/pull/14428)
* really fix measure-test-flakiness [#14475](https://github.com/openshift/etcd/pull/14475)
* Fix measuring test flakiness [#14473](https://github.com/openshift/etcd/pull/14473)
* Changelog: correct the 3.4 changelog item [#14469](https://github.com/openshift/etcd/pull/14469)
* Update changelog for 3.4.21 [#14468](https://github.com/openshift/etcd/pull/14468)
* mvcc: Remove unused revisions and change comment rev to modified [#14464](https://github.com/openshift/etcd/pull/14464)
* Improve contributor guidelines and simplify development commands [#14458](https://github.com/openshift/etcd/pull/14458)
* changelog: update the recommended version to 3.5.4+ [#14461](https://github.com/openshift/etcd/pull/14461)
* Integration_test: fix the flaky test TestV3AuthRestartMember [#14460](https://github.com/openshift/etcd/pull/14460)
* Just some cleanup of expect [#14451](https://github.com/openshift/etcd/pull/14451)
* github: Improve issue templates to speed up issue triage [#14459](https://github.com/openshift/etcd/pull/14459)
* add a verification on the pagebytes which must be > 0 [#14452](https://github.com/openshift/etcd/pull/14452)
* add verification on nil log [#14455](https://github.com/openshift/etcd/pull/14455)
* Updated changelog to cover the two issues [#14443](https://github.com/openshift/etcd/pull/14443)
* etcdctl: fix move-leader for multiple endpoints [#14445](https://github.com/openshift/etcd/pull/14445)
* tests: Migrate member remove tests to common framework [#14437](https://github.com/openshift/etcd/pull/14437)
* Move inactive maintainers to emeritus [#14373](https://github.com/openshift/etcd/pull/14373)
* Document compact-hash-check flags in changelog [#14435](https://github.com/openshift/etcd/pull/14435)
* testing: fix TestOpenWithMaxIndex cleanup [#14421](https://github.com/openshift/etcd/pull/14421)
* Mockserver can handle requests to the leases API [#14427](https://github.com/openshift/etcd/pull/14427)
* Update changelog to cover some PRs [#14430](https://github.com/openshift/etcd/pull/14430)
* tests: Migrate member add tests to common framework [#14281](https://github.com/openshift/etcd/pull/14281)
* Update changelog for 3.4, 3.5 and 3.6 for the potential data loss in one-node cluster [#14425](https://github.com/openshift/etcd/pull/14425)
* Move consistent_index forward when executing alarmList operation [#14419](https://github.com/openshift/etcd/pull/14419)
* [Second Solution] Fix the potential data loss for clusters with only one member (simpler solution) [#14400](https://github.com/openshift/etcd/pull/14400)
* tests: unify `--strict-reconfig-check` config of common framework [#14360](https://github.com/openshift/etcd/pull/14360)
* Procfiles: Update Goreman Installation Command [#14418](https://github.com/openshift/etcd/pull/14418)
* Add revive to the list of linters. [#14391](https://github.com/openshift/etcd/pull/14391)
* Setup golangci-lint GitHub action [#14392](https://github.com/openshift/etcd/pull/14392)
* chore: remove duplicate word in comments [#14405](https://github.com/openshift/etcd/pull/14405)
* Fix test code compiling error due to not enough arguments [#14401](https://github.com/openshift/etcd/pull/14401)
* Reduce redundant code and memory allocation. [#14374](https://github.com/openshift/etcd/pull/14374)
* tests: Add context to e2e cluster start [#14383](https://github.com/openshift/etcd/pull/14383)
* add the missing parameter 'name' into SpawnCmdWithLogger for cov test [#14395](https://github.com/openshift/etcd/pull/14395)
* chore: remove duplicate word in comments [#14390](https://github.com/openshift/etcd/pull/14390)
* server/auth: refresh cache on each NewAuthStore [#14358](https://github.com/openshift/etcd/pull/14358)
* Readme: Removed unnecessary comma. [#14386](https://github.com/openshift/etcd/pull/14386)
* etcdmain: Honour ExperimentalWaitClusterReadyTimeout in startEtcd [#14388](https://github.com/openshift/etcd/pull/14388)
* Cleanup some e2e test configurations [#14389](https://github.com/openshift/etcd/pull/14389)
* Add context to tests common client interface [#14381](https://github.com/openshift/etcd/pull/14381)
* Added client-auto-sync-interval argument to the grpc-proxy [#14354](https://github.com/openshift/etcd/pull/14354)
* tests: Migrate watch test to common framework [#14345](https://github.com/openshift/etcd/pull/14345)
* Cleanup the go.mod for etcdctl [#14380](https://github.com/openshift/etcd/pull/14380)
* Add ErrTimeoutDueToLeaderFail as expected error [#14377](https://github.com/openshift/etcd/pull/14377)
* Fixed infinite loop in ExpectProcess.ExpectFunc [#14376](https://github.com/openshift/etcd/pull/14376)
* Remove IRC ref [#14378](https://github.com/openshift/etcd/pull/14378)
* Update changelog-3.5 to cover the change for refactoring the keepAliveListener and keepAliveConn [#14367](https://github.com/openshift/etcd/pull/14367)
* Documentation: Update Broken Links [#14375](https://github.com/openshift/etcd/pull/14375)
* Add process to remove maintainers that don't fulfill their duties [#14238](https://github.com/openshift/etcd/pull/14238)
* Add test name to e2e cluster members [#14292](https://github.com/openshift/etcd/pull/14292)
* Add logging grpc request and response content with grpc-proxy mode [#14266](https://github.com/openshift/etcd/pull/14266)
* Cleanup all etcd-agent and etcd processes when the test finishes [#14359](https://github.com/openshift/etcd/pull/14359)
* clientv3: close streams after use in lessor keepAliveOnce method [#14357](https://github.com/openshift/etcd/pull/14357)
* chore: log when an invalid watch request is received [#14351](https://github.com/openshift/etcd/pull/14351)
* Minor refactoring on the keepAliveListener and keepAliveConn [#14356](https://github.com/openshift/etcd/pull/14356)
* etcdctl: add --max-txn-ops flag to make-mirror command [#14340](https://github.com/openshift/etcd/pull/14340)
* Improve functional test code [#14346](https://github.com/openshift/etcd/pull/14346)
* tests: e2e and integration share TickDuration constant [#14344](https://github.com/openshift/etcd/pull/14344)
* tests: add WaitLeader function to common framework [#14304](https://github.com/openshift/etcd/pull/14304)
* server: don't panic in readonly serializable txn [#14149](https://github.com/openshift/etcd/pull/14149)
* Print clusterID, memberID and leaseID in hexdecimal [#14208](https://github.com/openshift/etcd/pull/14208)
* more logging around auto sync [#14334](https://github.com/openshift/etcd/pull/14334)
* logging RoleGrantPermission key and range end [#14330](https://github.com/openshift/etcd/pull/14330)
* add .DS_Store into .gitignore [#14327](https://github.com/openshift/etcd/pull/14327)
* benchmark: Fix the panic when running `benchmark watch` [#14212](https://github.com/openshift/etcd/pull/14212)
* pkg/types: Support Unix sockets in NewURLS [#12469](https://github.com/openshift/etcd/pull/12469)
* Add alarms metrics for server [#14276](https://github.com/openshift/etcd/pull/14276)
* tests: fix status responses size and nil [#14299](https://github.com/openshift/etcd/pull/14299)
* clientv3: fix --insecure-skip-tls-verify not working when not specify… [#14317](https://github.com/openshift/etcd/pull/14317)
* CHANGELOG: update version recommendation [#14306](https://github.com/openshift/etcd/pull/14306)
* Bump OpenTelemetry to 1.0.1 and gRPC to 1.41.0 [#14320](https://github.com/openshift/etcd/pull/14320)
* Enhance the WAL file related error [#14300](https://github.com/openshift/etcd/pull/14300)
* Update the release date for 3.4.20 [#14319](https://github.com/openshift/etcd/pull/14319)
* Fixed goroutine leak in server/etcdserver/raft_test.go [#14286](https://github.com/openshift/etcd/pull/14286)
* server/etcdserver: check whether raftNode has stopped [#14262](https://github.com/openshift/etcd/pull/14262)
* rafthttp: test multiple transport removes [#14284](https://github.com/openshift/etcd/pull/14284)
* Fixed goroutine leak in tests/integration/clientv3/watch_test.go [#14288](https://github.com/openshift/etcd/pull/14288)
* Fixed goroutine leak [#14287](https://github.com/openshift/etcd/pull/14287)
* Fixed goroutine leak in tests/integration/v3_watch_restore_test.go [#14289](https://github.com/openshift/etcd/pull/14289)
* Add golangci-lint config file and `make` target. [#14255](https://github.com/openshift/etcd/pull/14255)
* Reduce ExpectFunc polling interval [#14283](https://github.com/openshift/etcd/pull/14283)
* update contrib/lock example [#14261](https://github.com/openshift/etcd/pull/14261)
* fix: code cleanup [#14280](https://github.com/openshift/etcd/pull/14280)
* memberID equals zero in corruption alarm [#14272](https://github.com/openshift/etcd/pull/14272)
* tests: Migrate member list tests to common framework [#14278](https://github.com/openshift/etcd/pull/14278)
* server: Implement compaction hash checking [#14120](https://github.com/openshift/etcd/pull/14120)
* Update changelog for 3.4.20 [#14277](https://github.com/openshift/etcd/pull/14277)
* tests: fix the logic of testNonleaderElectionTimeoutRandomized in raft_paper_test.go [#14273](https://github.com/openshift/etcd/pull/14273)
* update changelog-3.4 to protection for rangePermCache with a RW lock [#14231](https://github.com/openshift/etcd/pull/14231)
* No need to manually remove tmp directory created by t.TempDir() [#14248](https://github.com/openshift/etcd/pull/14248)
* readme: remove broken roadmap link [#14247](https://github.com/openshift/etcd/pull/14247)
* delete unreachable code [#14235](https://github.com/openshift/etcd/pull/14235)
* etcd-mixin: fix etcdDatabaseQuotaLowSpace alert name [#14242](https://github.com/openshift/etcd/pull/14242)
* etcd-mixin: use-last_over_time-with-etcdBackendQuotaLowSpace-alert [#14237](https://github.com/openshift/etcd/pull/14237)
* etcd-mixin:add etcdDatabaseHighFragmentationRatio alert [#14221](https://github.com/openshift/etcd/pull/14221)
* update changelog-3.5 to protection for rangePermCache with a RW lock [#14228](https://github.com/openshift/etcd/pull/14228)
* fix:etcd-mixin:use-predictlinear-insteadof-increase [#14196](https://github.com/openshift/etcd/pull/14196)
* clientv3: Fix parsing of ETCD_CLIENT_DEBUG [#14203](https://github.com/openshift/etcd/pull/14203)
* Fix syntax errors in comments [#14201](https://github.com/openshift/etcd/pull/14201)
* Update both 3.5 and 3.6 changelog to cover the new flag `--max-concurrent-streams` [#14220](https://github.com/openshift/etcd/pull/14220)
* Make Benjamin an official v3.4 release manager [#14215](https://github.com/openshift/etcd/pull/14215)
* Support configuring `MaxConcurrentStreams` for http2 [#14169](https://github.com/openshift/etcd/pull/14169)
* update v3.4.19 release date [#14214](https://github.com/openshift/etcd/pull/14214)
* Update goreman installation command in local_cluster.md [#14207](https://github.com/openshift/etcd/pull/14207)
* Update scripts/release.sh to remove message related to travis.yml [#14206](https://github.com/openshift/etcd/pull/14206)
* Update 3.4 changelog to prepare for the release of 3.4.19 [#14202](https://github.com/openshift/etcd/pull/14202)
* lease: Rename `Poll` to `Peek` in the `LeaseExpiredNotifier` [#14198](https://github.com/openshift/etcd/pull/14198)
* Fix a typo in etcdctl readme for the elect command [#14194](https://github.com/openshift/etcd/pull/14194)
* ectdctl: Add the `SilenceErrors` config For the `cobra.Command` [#14173](https://github.com/openshift/etcd/pull/14173)
* Update 3.4 change log to cover fixes for two issues [#14154](https://github.com/openshift/etcd/pull/14154)
* snap: Delete the nil judgment of the log object [#14172](https://github.com/openshift/etcd/pull/14172)
* server/auth: protect rangePermCache with a mutex [#13954](https://github.com/openshift/etcd/pull/13954)
* Remove duplicate certificate configuration for proxy test [#14184](https://github.com/openshift/etcd/pull/14184)
* Client: fix check for WithPrefix op [#14182](https://github.com/openshift/etcd/pull/14182)
* pkg/expect: send SIGTERM to target expect process instead of SIGKILL for `Stop()` [#14165](https://github.com/openshift/etcd/pull/14165)
* fix #14162 [#14166](https://github.com/openshift/etcd/pull/14166)
* removes empty option in JSON tag [#14160](https://github.com/openshift/etcd/pull/14160)
* proxy: Put the pb object into the struct [#14157](https://github.com/openshift/etcd/pull/14157)
* verify: Get backend using simple api [#14153](https://github.com/openshift/etcd/pull/14153)
* fix #14161 [#14163](https://github.com/openshift/etcd/pull/14163)
* sync-changelog: /health break change was reverted [#14152](https://github.com/openshift/etcd/pull/14152)
* config: Add the default case when failing to parse the log rotate config json [#14146](https://github.com/openshift/etcd/pull/14146)
* Update 3.4 change log item for 3.4.19 [#14141](https://github.com/openshift/etcd/pull/14141)
* tools/benchmark: migrate cheggaaa/pb.v1 to cheggaaa/pb/v3 [#14082](https://github.com/openshift/etcd/pull/14082)
* mvcc:add ut for Revisions/CountRevisions and remove RangeSince as it … [#14124](https://github.com/openshift/etcd/pull/14124)
* update changelog for both 3.5 and 3.6 to cover the authBundle overwrite issue [#14133](https://github.com/openshift/etcd/pull/14133)
* Doc: provide more clarify to the usage of check perf command [#14111](https://github.com/openshift/etcd/pull/14111)
* Update dependencies - including zap (1.21) [#14126](https://github.com/openshift/etcd/pull/14126)
* Update to grpc-1.47 (and fix the connection-string format) [#14125](https://github.com/openshift/etcd/pull/14125)
* Update 3.5 and 3.6 changelog to cover the fix of restricting the max WAL entry [#14129](https://github.com/openshift/etcd/pull/14129)
* replace ioutil with os package [#14128](https://github.com/openshift/etcd/pull/14128)
* Restrict the max size of each WAL entry to the remaining size of the WAL file [#14122](https://github.com/openshift/etcd/pull/14122)
* fix: typo gouroutine [#14123](https://github.com/openshift/etcd/pull/14123)
* Embed server should log errors (and not get stuck) [#14116](https://github.com/openshift/etcd/pull/14116)
* schedule: Provide logs when the fifo job panic happens [#14109](https://github.com/openshift/etcd/pull/14109)
* Extend .gitignore to ignore intelij config/generated files. [#14117](https://github.com/openshift/etcd/pull/14117)
* Fix a syntax error in a code comment [#14121](https://github.com/openshift/etcd/pull/14121)
* wal: remove the repeated test case [#14106](https://github.com/openshift/etcd/pull/14106)
* Calculate hash during compaction [#14049](https://github.com/openshift/etcd/pull/14049)
* Use single "stage/tracked" label to prevent issue from getting stale [#14108](https://github.com/openshift/etcd/pull/14108)
* Update build file to run with an argument [#14097](https://github.com/openshift/etcd/pull/14097)
* Get all constant etcd versions defined in a centralized place [#14107](https://github.com/openshift/etcd/pull/14107)
* add flag range for del in etcdctl [#13747](https://github.com/openshift/etcd/pull/13747)
* Update 3.5 changelog to add an entry to cover the new flag `---experimental-bootstrap-defrag-threshold-megabytes` [#14103](https://github.com/openshift/etcd/pull/14103)
* mvcc: improve the use of locks in index.go [#14084](https://github.com/openshift/etcd/pull/14084)
* server: Fix broken code during merge [#14101](https://github.com/openshift/etcd/pull/14101)
* Fix potential deadlock between Revoke and (Grant or Checkpoint) [#14080](https://github.com/openshift/etcd/pull/14080)
* skip compact when rev not change at period compact mode [#13829](https://github.com/openshift/etcd/pull/13829)
* Update link to tuning page [#14099](https://github.com/openshift/etcd/pull/14099)
* Fix the DATA RACE issue of TestCloseProposerInflight [#14095](https://github.com/openshift/etcd/pull/14095)
* Update 3.5 changelog to cover the two bug fixes related to leases revoke and checkpoint [#14088](https://github.com/openshift/etcd/pull/14088)
* Clean up the local variable cps so that it will not continue to schedule checkpoint [#14078](https://github.com/openshift/etcd/pull/14078)
* Fix the race condition between goroutine and channel on the same leases to be revoked [#14067](https://github.com/openshift/etcd/pull/14067)
* Move lease related code into a separate file lease.go [#14079](https://github.com/openshift/etcd/pull/14079)
* Update changelog-3.5 to correct the entry for decommissioning `etcdctl migrate` [#14069](https://github.com/openshift/etcd/pull/14069)
* Add etcd tool binaries into .gitignore [#14063](https://github.com/openshift/etcd/pull/14063)
* use go install instead of go get [#14060](https://github.com/openshift/etcd/pull/14060)
* Encapsulation of applier logic: Move Txn related code out of applier.go. [#13878](https://github.com/openshift/etcd/pull/13878)
* Governance: Use lazy consensus when needed to make decision [#14053](https://github.com/openshift/etcd/pull/14053)
* Fix a typo: print the correct error info [#14052](https://github.com/openshift/etcd/pull/14052)
* scripts: Detect staged files before building release [#14051](https://github.com/openshift/etcd/pull/14051)
* scripts: Avoid additional repo clone [#14044](https://github.com/openshift/etcd/pull/14044)
* Documentation: Publish v3.5 data inconsistency postmortem [#14046](https://github.com/openshift/etcd/pull/14046)
* tests: Make common framework context aware [#14042](https://github.com/openshift/etcd/pull/14042)
* Hide the revision field when it isn't populated [#14033](https://github.com/openshift/etcd/pull/14033)
* tests: Refactor spawn json command [#14029](https://github.com/openshift/etcd/pull/14029)
* tests: Extract cluster test cases [#14038](https://github.com/openshift/etcd/pull/14038)
* Remove v2 http proxy [#14034](https://github.com/openshift/etcd/pull/14034)
* server: Director can be stopped [#14032](https://github.com/openshift/etcd/pull/14032)
* Provide a generic assert function [#14036](https://github.com/openshift/etcd/pull/14036)
* tests: Migrate Txn tests to common framework [#14000](https://github.com/openshift/etcd/pull/14000)
* migrate e2e & integration role_test to common [#14020](https://github.com/openshift/etcd/pull/14020)
* Update 3.4 change log for 3.4.19 [#14017](https://github.com/openshift/etcd/pull/14017)
* Update 3.5 and 3.6 changelog for recent merged PRs [#14018](https://github.com/openshift/etcd/pull/14018)
* Enhance the '/version' endpoint to add storageVersion [#13772](https://github.com/openshift/etcd/pull/13772)
* coverage: Run coverage only on push [#14016](https://github.com/openshift/etcd/pull/14016)
* tests: Use zaptest.NewLogger in places we missed [#13881](https://github.com/openshift/etcd/pull/13881)
* Implement HA E2e for downgrades [#13696](https://github.com/openshift/etcd/pull/13696)
* Nomination for Benjamin (ahrtr@) as a project maintainer [#14011](https://github.com/openshift/etcd/pull/14011)
* Cleanup healthcheck code after V2 removal [#13655](https://github.com/openshift/etcd/pull/13655)
* Remove the workflow/transparency.yaml [#14014](https://github.com/openshift/etcd/pull/14014)
* Update CHANGELOG for PR 13999 [#14005](https://github.com/openshift/etcd/pull/14005)
* Verify consistent_index in snapshot must be greater than the snapshot index [#13988](https://github.com/openshift/etcd/pull/13988)
* github: Add necessery permissions for CodeQL [#14010](https://github.com/openshift/etcd/pull/14010)
* change ARCH to GOARCH in build.yaml [#14007](https://github.com/openshift/etcd/pull/14007)
* Fix data race in testWatchOverlapContextCancel #14003 [#14004](https://github.com/openshift/etcd/pull/14004)
* tests/common/lease: don't use revision to wait for leases [#13940](https://github.com/openshift/etcd/pull/13940)
* Simply etcdutl backup command to cleanup v2 related implementation [#13972](https://github.com/openshift/etcd/pull/13972)
* Fixed potential goroutine leak due to p.Ready() receive in pkg/proxy and dependents. [#13966](https://github.com/openshift/etcd/pull/13966)
* *: Update golang.org/x/crypto to latest [#13969](https://github.com/openshift/etcd/pull/13969)
* Doc: add installtion instructions for tools [#13994](https://github.com/openshift/etcd/pull/13994)
* allocate unique port for each member in v3_snapshot_test cases [#13982](https://github.com/openshift/etcd/pull/13982)
* scripts: Add tests for release scripts [#13981](https://github.com/openshift/etcd/pull/13981)
* doc: Fix Markdown code block [#13986](https://github.com/openshift/etcd/pull/13986)
* Add verification consistent index is (nearly) never decreasing [#13963](https://github.com/openshift/etcd/pull/13963)
* etcdctl: Remove V2 API commands [#13643](https://github.com/openshift/etcd/pull/13643)
* Documentation: Create a data inconsistency postmortem [#13967](https://github.com/openshift/etcd/pull/13967)
* Update the release date of 3.5.4 [#13977](https://github.com/openshift/etcd/pull/13977)
* embed: Fix logger spelling in NewZapLoggerBuilder godoc [#13974](https://github.com/openshift/etcd/pull/13974)
* Documentation: Update contributor guide and remove outdated ROADMAP.md [#13965](https://github.com/openshift/etcd/pull/13965)
* Update changelog for 3.5.4 and 3.6 [#13970](https://github.com/openshift/etcd/pull/13970)
* Doc: update logging convention [#13971](https://github.com/openshift/etcd/pull/13971)
* Update consitent_index when applying fails [#13942](https://github.com/openshift/etcd/pull/13942)
* Add contributor docs [#13962](https://github.com/openshift/etcd/pull/13962)
* Fix code scanning alert: This log write receives unsanitized user input [#13959](https://github.com/openshift/etcd/pull/13959)
* Revert #13712 [#13949](https://github.com/openshift/etcd/pull/13949)
* test.sh script improvement (OsX centric) [#13955](https://github.com/openshift/etcd/pull/13955)
* smoke test:fix license header check [#13956](https://github.com/openshift/etcd/pull/13956)
* Use lineariziable range request in TestKVGet [#13957](https://github.com/openshift/etcd/pull/13957)
* Rollback the opentelemetry bumpping to recover the pipeline failures [#13945](https://github.com/openshift/etcd/pull/13945)
* Update production recommendation for v3.5.3 [#13941](https://github.com/openshift/etcd/pull/13941)
* go.mod: upgrade opentelemetry deps [#13888](https://github.com/openshift/etcd/pull/13888)
* contrib/raftexample: Save snapshot and WAL before hard state [#13929](https://github.com/openshift/etcd/pull/13929)
* cv3/mirror: Fetch the most recent revision from the prefix [#13923](https://github.com/openshift/etcd/pull/13923)
* CHANGELOG-3.5: Add #13862 [#13935](https://github.com/openshift/etcd/pull/13935)
* scripts: Remove Windows build scripts [#13710](https://github.com/openshift/etcd/pull/13710)
* Update 3.6 and 3.5 change log to cover two issues [#13934](https://github.com/openshift/etcd/pull/13934)
* Set backend to cindex before recovering the lessor in applySnapshot [#13930](https://github.com/openshift/etcd/pull/13930)
* Leases wait for entries to be applied [#13690](https://github.com/openshift/etcd/pull/13690)
* clientv3: filter learner members during autosync [#13837](https://github.com/openshift/etcd/pull/13837)
* MAINTAINERS: update Sam's contact email [#13916](https://github.com/openshift/etcd/pull/13916)
* Update 3.5 and 3.6 changelog to cover the data inconsistency issue [#13914](https://github.com/openshift/etcd/pull/13914)
* *: update golang.org/x/crypto [#13910](https://github.com/openshift/etcd/pull/13910)
* *: drop use of humanize.Time() in favour of zap.Duration and time.Duration [#13906](https://github.com/openshift/etcd/pull/13906)
* Use readTx in (*store).restore [#13907](https://github.com/openshift/etcd/pull/13907)
* tests: Add tests for snapshot compatibility and recovery between versions [#13756](https://github.com/openshift/etcd/pull/13756)
* tools/mod: Update tools [#13898](https://github.com/openshift/etcd/pull/13898)
* server: Save consistency index and term to backend even when they decease [#13903](https://github.com/openshift/etcd/pull/13903)
* tests/framework/integration: Fail BeforeTest nesting early [#13807](https://github.com/openshift/etcd/pull/13807)
* Fix the data inconsistency issue by moving the SetConsistentIndex into the transaction lock [#13854](https://github.com/openshift/etcd/pull/13854)
* go.mod: Bump prometheus/client_golang to v1.12.1 [#13897](https://github.com/openshift/etcd/pull/13897)
* Makefile: Drop log tee calls [#13869](https://github.com/openshift/etcd/pull/13869)
* migrate e2e/users tests to common framework [#13819](https://github.com/openshift/etcd/pull/13819)
* fix unexpose todo [#13893](https://github.com/openshift/etcd/pull/13893)
* etcd-dump-logs will panic if there is no WAL entry after the snapshot [#13880](https://github.com/openshift/etcd/pull/13880)
* tests: Pass logger to backend [#13886](https://github.com/openshift/etcd/pull/13886)
* server: Add verification of whether lock was called within out outside of apply [#13885](https://github.com/openshift/etcd/pull/13885)
* scripts: add script to measure percentage of commits with failed status [#13175](https://github.com/openshift/etcd/pull/13175)
* tests/common/lease: Wait for correct lease list response [#13868](https://github.com/openshift/etcd/pull/13868)
* tests: Use zaptest.NewLogger in tests [#13867](https://github.com/openshift/etcd/pull/13867)
* Integration tests flake fixes [#13876](https://github.com/openshift/etcd/pull/13876)
* fix WARNING: DATA RACE issue when multiple goroutines access the backend [#13875](https://github.com/openshift/etcd/pull/13875)
* Makefile: Additional logic fix [#13860](https://github.com/openshift/etcd/pull/13860)
* Fix TestauthTokenBundleOnOverwrite on OsX: [#13872](https://github.com/openshift/etcd/pull/13872)
* fix comment in raft.go [#13870](https://github.com/openshift/etcd/pull/13870)
* Fix inconsistent log format [#13864](https://github.com/openshift/etcd/pull/13864)
* The file server/storage/mvcc/util.go isn't used at all, so removing it [#13856](https://github.com/openshift/etcd/pull/13856)
* Makefile: Fix wrong target [#13857](https://github.com/openshift/etcd/pull/13857)
* changelog: Update and deduplicate production recommendations [#13852](https://github.com/openshift/etcd/pull/13852)
* Fix the etcd api dependency in pkg. And Update Cobra Version to1.4.0 [#13802](https://github.com/openshift/etcd/pull/13802)
* enhance etcd-dump-db to display keys in meta more friendly [#13834](https://github.com/openshift/etcd/pull/13834)
* test: set etcdutl to default [#13836](https://github.com/openshift/etcd/pull/13836)
* Update go to 1.17.8 [#13831](https://github.com/openshift/etcd/pull/13831)
* Move the newClientCfg into clientv3 package so as to be reused by both etcdctl and v3discovery [#13821](https://github.com/openshift/etcd/pull/13821)
* Fix panic in etcd validate secure endpoints #13810 [#13824](https://github.com/openshift/etcd/pull/13824)
* Removing deprecated commands in etcdctl & etcdutl [#13809](https://github.com/openshift/etcd/pull/13809)
* server/auth: avoid logging for JWT token [#13301](https://github.com/openshift/etcd/pull/13301)
* Add unit test for newClientCfg [#13830](https://github.com/openshift/etcd/pull/13830)
* Update changelog to cover the fix for the watchablestore runlock bug [#13835](https://github.com/openshift/etcd/pull/13835)
* tests: Migrate noquorum kv tests to common framework [#13754](https://github.com/openshift/etcd/pull/13754)
* tests/integration: re-enable TestV3AuthOldRevConcurrent [#13828](https://github.com/openshift/etcd/pull/13828)
* tests: Migrate alarm tests to common framework [#13823](https://github.com/openshift/etcd/pull/13823)
* Migrate e2e Lease tests to common [#13812](https://github.com/openshift/etcd/pull/13812)
* tests: Migrate defrag tests to common framework [#13820](https://github.com/openshift/etcd/pull/13820)
* Add one more field storageVersion into StatusResponse [#13773](https://github.com/openshift/etcd/pull/13773)
* expect_test: Look up binaries from the path [#13803](https://github.com/openshift/etcd/pull/13803)
* integration/client/watch.TestWatchCancelRunning: remove duplicate setup [#13804](https://github.com/openshift/etcd/pull/13804)
* integration/clientv3/exp/recipes: Fix lock tests [#13806](https://github.com/openshift/etcd/pull/13806)
* tests: Migrate endpoint tests to common framework [#13774](https://github.com/openshift/etcd/pull/13774)
* *: Restore release documentation [#13799](https://github.com/openshift/etcd/pull/13799)
* delete offline defrag in etcdctl [#13793](https://github.com/openshift/etcd/pull/13793)
* Move clientconfig into clientv3 so that it can be reused by both etcd… [#13751](https://github.com/openshift/etcd/pull/13751)
* Add fuzzing audit report [#13788](https://github.com/openshift/etcd/pull/13788)
* tests: Migrate compact tests to common framework [#13770](https://github.com/openshift/etcd/pull/13770)
* Fix some log format typos [#13771](https://github.com/openshift/etcd/pull/13771)
* Fix some typos related to downgrade [#13769](https://github.com/openshift/etcd/pull/13769)
* clean up unnecessary stack log when restore [#13767](https://github.com/openshift/etcd/pull/13767)
* Update the confstate before sending snapshot [#13760](https://github.com/openshift/etcd/pull/13760)
* fix some typos [#13759](https://github.com/openshift/etcd/pull/13759)
* tests: Migrate kv delete tests to common framework. [#13753](https://github.com/openshift/etcd/pull/13753)
* add timeout for http client [#13750](https://github.com/openshift/etcd/pull/13750)
* Migrate key value Get to common framework [#13740](https://github.com/openshift/etcd/pull/13740)
* mvcc: clean up duplicate metrics name [#13752](https://github.com/openshift/etcd/pull/13752)
* Updated servePeers to remove the grpc server [#13565](https://github.com/openshift/etcd/pull/13565)
* server/etcdserver: fix oss-fuzz issue [#13700](https://github.com/openshift/etcd/pull/13700)
* scripts: Fix release scripts [#13744](https://github.com/openshift/etcd/pull/13744)
* delete duplicate metrics rangeCounterDebug [#13746](https://github.com/openshift/etcd/pull/13746)
* fix: a little grammar issue [#13704](https://github.com/openshift/etcd/pull/13704)
* Update 3.5 changelog to cover the PR of always printing raft_term in decimal [#13728](https://github.com/openshift/etcd/pull/13728)
* Add failover test cases [#13737](https://github.com/openshift/etcd/pull/13737)
* Add ahrthr@ to reviewers [#13731](https://github.com/openshift/etcd/pull/13731)
* Create common framework for e2e and integration tests and migrate TestKVPut test [#13708](https://github.com/openshift/etcd/pull/13708)
* Change v3 discovery url to endpoints so as to support failover [#13733](https://github.com/openshift/etcd/pull/13733)
* Add downgrade commands [#13687](https://github.com/openshift/etcd/pull/13687)
* Always print the raft_term in decimal [#13711](https://github.com/openshift/etcd/pull/13711)
* Update 3.5 changelog to cover the PR of improving health check [#13725](https://github.com/openshift/etcd/pull/13725)
* e2e: Call WithStopSignal on proxyV2 object [#13309](https://github.com/openshift/etcd/pull/13309)
* support v3 discovery to bootstrap a new etcd cluster [#13635](https://github.com/openshift/etcd/pull/13635)
* *: use `T.TempDir` to create temporary test directory [#13644](https://github.com/openshift/etcd/pull/13644)
* Update changelog for both 3.5 and 3.6 for the PRs of trimming the suffix dot from target in SRV record [#13720](https://github.com/openshift/etcd/pull/13720)
* server: Snapshot after cluster version downgrade [#13686](https://github.com/openshift/etcd/pull/13686)
* server: Switch to publishV3 [#13683](https://github.com/openshift/etcd/pull/13683)
* Fix typo, renamed ErrGPRCNotSupportedForLearner to ErrGRPCNotSupportedForLearner [#13721](https://github.com/openshift/etcd/pull/13721)
* fix panic when restart after removeMember [#13645](https://github.com/openshift/etcd/pull/13645)
* Trim the suffix dot from the srv.Target for etcd-client DNS lookup [#13712](https://github.com/openshift/etcd/pull/13712)
* contrib/mixin: Generate rules, fix tests [#13671](https://github.com/openshift/etcd/pull/13671)
* server/storage/wal: fix oss-fuzz issue 44433 [#13689](https://github.com/openshift/etcd/pull/13689)
* server/etcdserver: fix oss-fuzz issue 42181 [#13695](https://github.com/openshift/etcd/pull/13695)
* Load all leases from backend [#13676](https://github.com/openshift/etcd/pull/13676)
* Fix coverage failures [#13693](https://github.com/openshift/etcd/pull/13693)
* server/storage/backend: restore original bolt db options after defrag [#13679](https://github.com/openshift/etcd/pull/13679)
* server: Make --v2-deprecation=write-only the default and remove not-y… [#13612](https://github.com/openshift/etcd/pull/13612)
* tests: Fix cluster version and downgrade request timeout [#13694](https://github.com/openshift/etcd/pull/13694)
* server/storage/mvcc: fix oss-fuzz issue 44449 [#13681](https://github.com/openshift/etcd/pull/13681)
* server/auth: fix oss-fuzz issue 44478 [#13682](https://github.com/openshift/etcd/pull/13682)
* Cleanup scripts in root directory [#13649](https://github.com/openshift/etcd/pull/13649)
* Replace gobin with go install [#13673](https://github.com/openshift/etcd/pull/13673)
* Etcd server shouldn't wait for the ready notification infinitely on startup [#13525](https://github.com/openshift/etcd/pull/13525)
* Remove v2 server [#13636](https://github.com/openshift/etcd/pull/13636)
* release: Post v3.5.2 release updates and fixes [#13663](https://github.com/openshift/etcd/pull/13663)
* Implement WAL static analysis to ensure that new entries will be properly annotated [#13490](https://github.com/openshift/etcd/pull/13490)
* Add Marek as a project maintainer [#13652](https://github.com/openshift/etcd/pull/13652)
* Remove unused .words file [#13647](https://github.com/openshift/etcd/pull/13647)
* Remove travis [#13157](https://github.com/openshift/etcd/pull/13157)
* Add bug report issue template [#13638](https://github.com/openshift/etcd/pull/13638)
* Re-enable code coverage upload [#13651](https://github.com/openshift/etcd/pull/13651)
* tests: Parallelize grpcproxy tests [#13657](https://github.com/openshift/etcd/pull/13657)
* Move changelogs to subdirectory [#13646](https://github.com/openshift/etcd/pull/13646)
* Remove badge for disabled test suite [#13650](https://github.com/openshift/etcd/pull/13650)
* tests: Move revision tests out of concurrency [#13640](https://github.com/openshift/etcd/pull/13640)
* Remove V2 API usage from Integration tests [#13621](https://github.com/openshift/etcd/pull/13621)
* Add protection code for Range when the sortTarget is an invalid value [#13555](https://github.com/openshift/etcd/pull/13555)
* Use Distroless as base image [#13556](https://github.com/openshift/etcd/pull/13556)
* Avoid always update meta term. [#13568](https://github.com/openshift/etcd/pull/13568)
* Revert CodeQL permission [#13633](https://github.com/openshift/etcd/pull/13633)
* Add required permissions for CodeQL [#13631](https://github.com/openshift/etcd/pull/13631)
* README: fix go version that development required [#13627](https://github.com/openshift/etcd/pull/13627)
* contrib/mixin: add missing summary to alerts [#13626](https://github.com/openshift/etcd/pull/13626)
* Update maintainers [#13625](https://github.com/openshift/etcd/pull/13625)
* mvcc: add a fast return at put method [#13601](https://github.com/openshift/etcd/pull/13601)
* format listenning address correctly for IPv6 ip address [#13551](https://github.com/openshift/etcd/pull/13551)
* Add protection code to prevent etcd from panic when the client api version is not valid UTF-8 string [#13560](https://github.com/openshift/etcd/pull/13560)
* Update dep: gopkg.in/yaml.v2 v2.2.8 -> v2.4.0 due to: CVE-2019-11254 [#13614](https://github.com/openshift/etcd/pull/13614)
* Code clean: make rangeKeys close to storeTxnRead. [#13561](https://github.com/openshift/etcd/pull/13561)
* raft: fix out-of-bounds in maybeAppend [#13603](https://github.com/openshift/etcd/pull/13603)
* client: retry_interceptor.go: Log the method that failed [#13607](https://github.com/openshift/etcd/pull/13607)
* Use test.sh instead of test for linux-386-unit-1-cpu [#13605](https://github.com/openshift/etcd/pull/13605)
* v2auth: fix out of bounds in test [#13575](https://github.com/openshift/etcd/pull/13575)
* The public key doesn't match if any field doesn't match [#13382](https://github.com/openshift/etcd/pull/13382)
* raft: avoid jump tag to make code more understandable [#13438](https://github.com/openshift/etcd/pull/13438)
* Add a new flag "--rev" to make-mirror command to support incremental mirror [#13519](https://github.com/openshift/etcd/pull/13519)
* *: Bump to go 1.17.6 [#13487](https://github.com/openshift/etcd/pull/13487)
* fixing goroutine leaks [#13558](https://github.com/openshift/etcd/pull/13558)
* server: --enable-v2 and --enable-v2v3 is decomissioned [#13595](https://github.com/openshift/etcd/pull/13595)
* Update Cobra version to 1.2.1 [#13571](https://github.com/openshift/etcd/pull/13571)
* ctlv3: add forgotten member promote method to printerRPC [#13597](https://github.com/openshift/etcd/pull/13597)
* fixing the goroutine leaks in TestHashKVWhenCompacting [#13549](https://github.com/openshift/etcd/pull/13549)
* Fix goroutine leaks in TestNodeProposeAddDuplicateNode [#13562](https://github.com/openshift/etcd/pull/13562)
* Fix goroutine leaks in TestCommitPagination [#13563](https://github.com/openshift/etcd/pull/13563)
* tests: Add integration test for revision monotonic under failure injection [#13584](https://github.com/openshift/etcd/pull/13584)
* Remove CodeQL errors [#13591](https://github.com/openshift/etcd/pull/13591)
* update CHANGELOG-3.5.md to cover the fix for issue 13494 [#13594](https://github.com/openshift/etcd/pull/13594)
* README: Cleanup community meetings video recordings [#13590](https://github.com/openshift/etcd/pull/13590)
* update dump db tool [#13572](https://github.com/openshift/etcd/pull/13572)
* Update supported versions and ref to the policy [#13581](https://github.com/openshift/etcd/pull/13581)
* Golang Client docs: defer `cancel()`, avoid erroring [#13574](https://github.com/openshift/etcd/pull/13574)
* Disable auth gracefully without impacting existing watchers [#13577](https://github.com/openshift/etcd/pull/13577)
* fixing one panic and two goroutine leaks [#13540](https://github.com/openshift/etcd/pull/13540)
* server/etcdmain: add build support for Apple M1 [#13545](https://github.com/openshift/etcd/pull/13545)
* Set the backend again after recovering v3 backend from snapshot [#13500](https://github.com/openshift/etcd/pull/13500)
* fix potential goroutine leaks [#13537](https://github.com/openshift/etcd/pull/13537)
* images: Use Kubernetes debian-base:bullseye-v1.1.0 as base image [#13546](https://github.com/openshift/etcd/pull/13546)
* Remove the redundant line from test.sh [#13528](https://github.com/openshift/etcd/pull/13528)
* fix watchablestore runlock bug [#13505](https://github.com/openshift/etcd/pull/13505)
* Lease Checkpoints fix [#13508](https://github.com/openshift/etcd/pull/13508)
* etcdctl: enhance the make-mirror command to return error asap when invalid flags are provided [#13513](https://github.com/openshift/etcd/pull/13513)
* *: Upgrade to use go.opentelemetry.io/otel@v1.2.0 [#13498](https://github.com/openshift/etcd/pull/13498)
* fix etcd benchmark binary not found [#13497](https://github.com/openshift/etcd/pull/13497)
* Update CHANGELOG for PR 13477 [#13492](https://github.com/openshift/etcd/pull/13492)
* etcdctl/ctlv3/command: add use time for defrag command [#13461](https://github.com/openshift/etcd/pull/13461)
* CHANGELOG: add experimental-max-learners [#13481](https://github.com/openshift/etcd/pull/13481)
* Enhance health check endpoint to support serializable request [#13399](https://github.com/openshift/etcd/pull/13399)
* Add experimental-max-learners flag [#13377](https://github.com/openshift/etcd/pull/13377)
* Fix undefined io [#13470](https://github.com/openshift/etcd/pull/13470)
* server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers [#13467](https://github.com/openshift/etcd/pull/13467)
* client/v2: remove unsafe json-iterator/reflect2 [#13439](https://github.com/openshift/etcd/pull/13439)
* Fix genproto path error:./server/wal/walpb [#13358](https://github.com/openshift/etcd/pull/13358)
* v3compactor: refine some code and fix a typo [#13404](https://github.com/openshift/etcd/pull/13404)
* Implement single node downgrades [#13405](https://github.com/openshift/etcd/pull/13405)
* *: move from io/ioutil to io and os packages [#13447](https://github.com/openshift/etcd/pull/13447)
* *: fixup go 1.17 bump [#13450](https://github.com/openshift/etcd/pull/13450)
* Merge [#13440](https://github.com/openshift/etcd/pull/13440)
* raft: add test for leadership transfer in joint configuration [#13436](https://github.com/openshift/etcd/pull/13436)
* etcdserver: Expose metrics with all known peers [#13412](https://github.com/openshift/etcd/pull/13412)
* etcdserver: non-mutating requests pass through quotaKVServer when NOS… [#13435](https://github.com/openshift/etcd/pull/13435)
* MAINTAINERS: update Gyuho's contact email [#13437](https://github.com/openshift/etcd/pull/13437)
* Move e2e/integration cluster setup to separate package [#13411](https://github.com/openshift/etcd/pull/13411)
* contrib/mixin: Update dashboard promql to use $__rate_interval. [#13388](https://github.com/openshift/etcd/pull/13388)
* Grafana datasource template should be labelled 'Data Source'. [#13430](https://github.com/openshift/etcd/pull/13430)
* server: update OpenTelemetry to 1.0.1 [#13361](https://github.com/openshift/etcd/pull/13361)
* CHANGELOG: add v3.5 to recommended version list [#13427](https://github.com/openshift/etcd/pull/13427)
* Merge [#13339](https://github.com/openshift/etcd/pull/13339)
* contrib/mixin/mixin.libsonnet: Include gRPC method in alert description [#13419](https://github.com/openshift/etcd/pull/13419)
* add autoSync flag in benchmark tool [#13416](https://github.com/openshift/etcd/pull/13416)
* scripts/genproto.sh: fix module path of wal proto files [#13424](https://github.com/openshift/etcd/pull/13424)
* CHANGELOG: 3.5.1 [#13422](https://github.com/openshift/etcd/pull/13422)
* CHANGELOG: 3.4.18 [#13421](https://github.com/openshift/etcd/pull/13421)
* CHANGELOG: 3.3.27 [#13420](https://github.com/openshift/etcd/pull/13420)
* contrib/mixin: omit Defragment method from etcdGRPCRequestsSlow [#13407](https://github.com/openshift/etcd/pull/13407)
* Refactor code to make place for downgrade logic [#13391](https://github.com/openshift/etcd/pull/13391)
* client/pkg/fileutil: add missing logger to {Create,Touch}DirAll [#13401](https://github.com/openshift/etcd/pull/13401)
* netutil: add url comparison without resolver to URLStringsEqual [#13224](https://github.com/openshift/etcd/pull/13224)
* CHANGELOG updating changelogs for etcd_disk_defrag_inflight backport [#13398](https://github.com/openshift/etcd/pull/13398)
* storage/backend: Add a gauge to indicate if defrag is active [#13371](https://github.com/openshift/etcd/pull/13371)
* CHANGELOG: 3.3.26 [#13384](https://github.com/openshift/etcd/pull/13384)
* CHANGELOG: 3.4.17 [#13383](https://github.com/openshift/etcd/pull/13383)
* Dockerfile: bump debian image to bullseye-20210927 [#13376](https://github.com/openshift/etcd/pull/13376)
* Fix http2 authority header in single endpoint scenario [#13359](https://github.com/openshift/etcd/pull/13359)
* Decouple prefixArgs from os.Env dependency [#13343](https://github.com/openshift/etcd/pull/13343)
* etcdserver: remove code duplication from the peer.send func [#13238](https://github.com/openshift/etcd/pull/13238)
* etcdserver,clientv3: server-side ignore sort-ascend-key for range reqs [#13261](https://github.com/openshift/etcd/pull/13261)
* Move storage bootstrap to its package [#13230](https://github.com/openshift/etcd/pull/13230)
* mvcc: simplify watchable_store addVictim code [#13366](https://github.com/openshift/etcd/pull/13366)
* client/pkg/v3: fixes Solaris build of transport [#13311](https://github.com/openshift/etcd/pull/13311)
* Stop using golang tip version in CI [#13338](https://github.com/openshift/etcd/pull/13338)
* Implement schema migration and panic when trying to downgrade storage [#13200](https://github.com/openshift/etcd/pull/13200)
* fix IsOptsWithFromKey [#13334](https://github.com/openshift/etcd/pull/13334)
* rw benchmark add val-size [#13318](https://github.com/openshift/etcd/pull/13318)
* Fix a few typos [#13321](https://github.com/openshift/etcd/pull/13321)
* Merge [#13308](https://github.com/openshift/etcd/pull/13308)
* doc, log: fix typo in wal doc, log [#13288](https://github.com/openshift/etcd/pull/13288)
* server: Add sampling rate to distributed tracing [#13248](https://github.com/openshift/etcd/pull/13248)
* client/v3: refresh the token when ErrUserEmpty is received while retrying [#13262](https://github.com/openshift/etcd/pull/13262)
* etcdserver: add zap.AddCallerSkip in NewRaftLoggerZap [#13239](https://github.com/openshift/etcd/pull/13239)
* etcdserver: remove always true or false in if statement [#13252](https://github.com/openshift/etcd/pull/13252)
* Benchmark: remove redundant function call [#13290](https://github.com/openshift/etcd/pull/13290)
* migrate_command: Fix typo in migrate [#13282](https://github.com/openshift/etcd/pull/13282)
* MINOR: Fix typos(hearbeat -> heartbeat) [#13279](https://github.com/openshift/etcd/pull/13279)
* Cleanup remaining TODOs for/past 3.5 release [#13278](https://github.com/openshift/etcd/pull/13278)
* Annotate proto messages with version and detect etcd version generated the wal [#13216](https://github.com/openshift/etcd/pull/13216)
* contrib/mixin/mixin.libsonnet: Add dashboard for peer round trip time [#13275](https://github.com/openshift/etcd/pull/13275)
* etcdutl: Implement migrate --force command [#13220](https://github.com/openshift/etcd/pull/13220)
* *: Bump release tests to use v3.5.0 [#13270](https://github.com/openshift/etcd/pull/13270)
* Move storage bootstrap dependencies to storage package [#13268](https://github.com/openshift/etcd/pull/13268)
* Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt [#13256](https://github.com/openshift/etcd/pull/13256)
* CHANGELOG: add missing PR number [#13265](https://github.com/openshift/etcd/pull/13265)
* *: Cleanup Makefile [#13245](https://github.com/openshift/etcd/pull/13245)
* Mixin: Support configuring cluster label [#13255](https://github.com/openshift/etcd/pull/13255)
* etcdserver: configure "expensive" requests duration [#13236](https://github.com/openshift/etcd/pull/13236)
* client: call .Endpoints() in dial() in client/v3/client.go instead of accessing cfg.Endpoints directly [#13203](https://github.com/openshift/etcd/pull/13203)
* fix self-signed-cert-validity parameter cannot be specified in the co… [#13237](https://github.com/openshift/etcd/pull/13237)
* update makefile for test egrep [#13214](https://github.com/openshift/etcd/pull/13214)
* etcdctl|etcdutl: Invaild args [#13246](https://github.com/openshift/etcd/pull/13246)
* Introduces Backend interfaces for alarm and auth bucket [#13190](https://github.com/openshift/etcd/pull/13190)
* Merge [#13221](https://github.com/openshift/etcd/pull/13221)
* etcdserver: Restructure storage packages to make place for schema [#13198](https://github.com/openshift/etcd/pull/13198)
* test: Bump release tests to use 3.5.0 [#13218](https://github.com/openshift/etcd/pull/13218)
* Use method const in package http instead of literal [#13197](https://github.com/openshift/etcd/pull/13197)
* test: Prevent TestMaintenanceSnapshotWithVersionVersion & TestSaveSnapshotVersion from flaking [#13204](https://github.com/openshift/etcd/pull/13204)
* server/auth: enable tokenProvider if recoved store enables auth [#13172](https://github.com/openshift/etcd/pull/13172)
* README: link maintainers role details [#13171](https://github.com/openshift/etcd/pull/13171)
* Add Lili, Marek & Wilson as etcd reviewers. [#13199](https://github.com/openshift/etcd/pull/13199)
* Skip empty query value(alarm) from the query parameter [#13188](https://github.com/openshift/etcd/pull/13188)
* Refactor NewServer function [#13194](https://github.com/openshift/etcd/pull/13194)
* fix typo [#13195](https://github.com/openshift/etcd/pull/13195)
* etcdserver: Move Read/Update methods on Meta bucket to one place [#13155](https://github.com/openshift/etcd/pull/13155)
* workflows: disable ARM64 job for maintenance [#13181](https://github.com/openshift/etcd/pull/13181)
* docs: fix broken links in README [#13180](https://github.com/openshift/etcd/pull/13180)
* etcdserver: Extract functions for setting and reading compaction information in backend [#13160](https://github.com/openshift/etcd/pull/13160)
* *: Upload test junit results [#13152](https://github.com/openshift/etcd/pull/13152)
* etcdserver: Membership uses MembershipStorage interface instead of directly accessing Backend [#13161](https://github.com/openshift/etcd/pull/13161)
* etcdserver: Move read/update methods on Auth bucket to one place [#13162](https://github.com/openshift/etcd/pull/13162)
* etcdserver: Move all get/put/delete on AuthUsers and AuthRoles to buckets module [#13163](https://github.com/openshift/etcd/pull/13163)
* etcdserver: Move put/read/delete on Alarm bucket to bucket package [#13164](https://github.com/openshift/etcd/pull/13164)
* etcdserver: Move get/put/delete on Lease bucket to bucket package [#13165](https://github.com/openshift/etcd/pull/13165)
* CHANGELOG: add 3.6, highlight completion commands [#13143](https://github.com/openshift/etcd/pull/13143)
* README: explain "MAINTAINERS" [#13170](https://github.com/openshift/etcd/pull/13170)
* client/pkg/fileutil: use `golang.org/x/sys/windows` for `FileLockEx` [#13146](https://github.com/openshift/etcd/pull/13146)
* client/v3: do not overwrite authTokenBundle on dial [#12992](https://github.com/openshift/etcd/pull/12992)
* etcdutl: add command to generate shell completion [#13142](https://github.com/openshift/etcd/pull/13142)
* CHANGELOG-3.5: fix broken link [#13158](https://github.com/openshift/etcd/pull/13158)
* *: Add missing file licenses and Fix the static analysis to prevent skipping them [#13159](https://github.com/openshift/etcd/pull/13159)
* etcdserver: Move all named keys to buckets module [#13151](https://github.com/openshift/etcd/pull/13151)
* fix health endpoint not usable when authentication is enabled [#13145](https://github.com/openshift/etcd/pull/13145)
* [Version in Snapshot] Preserve etcd version in backend allowing etcdutl to read it from snapshot [#13094](https://github.com/openshift/etcd/pull/13094)
* scripts: add option to generate junit xml reports [#13112](https://github.com/openshift/etcd/pull/13112)
* Bump etcd version to 3.5.0 and 3.6.0-pre [#13114](https://github.com/openshift/etcd/pull/13114)
* etcdserver: Move version monitor logic to separate module [#13132](https://github.com/openshift/etcd/pull/13132)
* etcdctl: add command to generate shell completion [#13133](https://github.com/openshift/etcd/pull/13133)
* contrib/mixin/mixin.libsonnet: Adjust gRPC failed requests [#13127](https://github.com/openshift/etcd/pull/13127)
* [Version in Snapshot] SnapshotResponse includes local etcd version [#13073](https://github.com/openshift/etcd/pull/13073)
* Update Readme for install etcd client v3 more visibility #13108 [#13118](https://github.com/openshift/etcd/pull/13118)
* Merge [#13113](https://github.com/openshift/etcd/pull/13113)
* embed: unlimit the recv msg size of grpc-gateway [#13077](https://github.com/openshift/etcd/pull/13077)
* CHANGELOG-3.5: Fix a typo, add dates [#13098](https://github.com/openshift/etcd/pull/13098)
* --log-outputs relative path are not supported when --log-rotate-config-json is defined [#13049](https://github.com/openshift/etcd/pull/13049)
* Update client_golang dependency to v1.11.0 [#13091](https://github.com/openshift/etcd/pull/13091)
* tools: rw-heatmaps output format bug fix [#13090](https://github.com/openshift/etcd/pull/13090)
* Merge [#13089](https://github.com/openshift/etcd/pull/13089)
* client/v3/maintenance.go: Add Downgrade support to client [#13083](https://github.com/openshift/etcd/pull/13083)
* CHANGELOG: etcdserver: don't attempt to grant nil permission to a role [#13087](https://github.com/openshift/etcd/pull/13087)
* etcdserver: don't attempt to grant nil permission to a role [#13086](https://github.com/openshift/etcd/pull/13086)
* etcdserver: don't activate alarm w/missing AlarmType [#13084](https://github.com/openshift/etcd/pull/13084)
* tests: Switch regenerating functional/rpcpb proto to scripts/genproto.sh [#13071](https://github.com/openshift/etcd/pull/13071)
* tools: update mixed read/write perf testing script for a larger range of value size [#13082](https://github.com/openshift/etcd/pull/13082)
* server: skip unnecessary sprintf which executes proto.Size() [#13075](https://github.com/openshift/etcd/pull/13075)
* Update of dependencies in go.mod: zap, bbolt, grpc, ... [#13078](https://github.com/openshift/etcd/pull/13078)
* tools: fix small rw-heatmaps python plot script argument parsing bug [#13074](https://github.com/openshift/etcd/pull/13074)
* updating scripts/genproto.sh [#13062](https://github.com/openshift/etcd/pull/13062)
* client, raft: Log unhandled errors [#13069](https://github.com/openshift/etcd/pull/13069)
* client/v3/README.md: Remove warning [#13072](https://github.com/openshift/etcd/pull/13072)
* integration: Use subtests to defer cluster.Terminate call [#13063](https://github.com/openshift/etcd/pull/13063)
* Improve output of the 'functional' tests [#13058](https://github.com/openshift/etcd/pull/13058)
* etcdserver: Fix invalid count returned on Range with Limit [#13060](https://github.com/openshift/etcd/pull/13060)
* tools/benchmark/README.md: Update installation as go get does not work [#13027](https://github.com/openshift/etcd/pull/13027)
* integration.BeforeTest can be run without leak-detection. [#13052](https://github.com/openshift/etcd/pull/13052)
* tool: save test parameters in mixed read/write benchmark script. [#13045](https://github.com/openshift/etcd/pull/13045)
* limit tx lock scope in store.scheduleCompaction [#13010](https://github.com/openshift/etcd/pull/13010)
* tools: no hardcoded repeat times in rw-benchmark scripts [#13042](https://github.com/openshift/etcd/pull/13042)
* Expose clientv3.CreateDefaultZapLoggerConfig [#13039](https://github.com/openshift/etcd/pull/13039)
* tools: update mixed read/write benchmark script [#13040](https://github.com/openshift/etcd/pull/13040)
* tools: add mixed read-write performance evaluation scripts [#13038](https://github.com/openshift/etcd/pull/13038)
* add bolt compaction sleep interval [#13018](https://github.com/openshift/etcd/pull/13018)
* server: set multiple concurrentReadTx instances share one txReadBuffer [#12933](https://github.com/openshift/etcd/pull/12933)
* CHANGELOG: add missing default setting for grpc gateway flag [#13034](https://github.com/openshift/etcd/pull/13034)
* CHANGELOG: added missing entry for ClientCertFile [#13032](https://github.com/openshift/etcd/pull/13032)
* Fix the goroutine leak in StubServer [#13024](https://github.com/openshift/etcd/pull/13024)
* *: Replace internal testutil AssertEqual function [#13017](https://github.com/openshift/etcd/pull/13017)
* tests/functional: Set socket-reuse-port and socket-reuse-address [#13014](https://github.com/openshift/etcd/pull/13014)
* WIP: client,server: Expose reuse-port and reuse-address so they can be configured via a config file [#13011](https://github.com/openshift/etcd/pull/13011)
* Correct typo [#13012](https://github.com/openshift/etcd/pull/13012)
* Enhance getRole output when the role is 'root'. [#12979](https://github.com/openshift/etcd/pull/12979)
* Fix not retryable error codes from: Unavailable -> FailedPrecondition [#12985](https://github.com/openshift/etcd/pull/12985)
* applyV2 should apply on backend only once [#13000](https://github.com/openshift/etcd/pull/13000)
* Represent bucket as object instead of []byte name. [#12991](https://github.com/openshift/etcd/pull/12991)
* scripts: add missing etcdutl to release pipeline [#12997](https://github.com/openshift/etcd/pull/12997)
* Simplify client's logger configuration in tests. [#12995](https://github.com/openshift/etcd/pull/12995)
* backend: fix buffer range bug [#12587](https://github.com/openshift/etcd/pull/12587)
* github/workflow: run arm64 tests for all branches startin from 3.5 [#12989](https://github.com/openshift/etcd/pull/12989)
* use v2 api to update cluster version [#12988](https://github.com/openshift/etcd/pull/12988)
* Reset 'seq' flags between transactions and track per 'bucket' [#12986](https://github.com/openshift/etcd/pull/12986)
* And 64 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/etcd/compare/eac09c01677bb03daed156d407be27785fd61e0d...806f690e1f140e0aea2eb05ef5f288b756b62895)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e9159d6b083b2a27eb4c99e805e7d45fc32de2ad)
* [OCPCLOUD-3094](https://issues.redhat.com/browse/OCPCLOUD-3094): Merge https://github.com/kubernetes/cloud-provider-gcp:master (2e53900) into main [#93](https://github.com/openshift/cloud-provider-gcp/pull/93)
* [OCPBUGS-62572](https://issues.redhat.com/browse/OCPBUGS-62572): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 [#92](https://github.com/openshift/cloud-provider-gcp/pull/92)
* NO-JIRA: Update OWNERS [#90](https://github.com/openshift/cloud-provider-gcp/pull/90)
* [OCPBUGS-61006](https://issues.redhat.com/browse/OCPBUGS-61006): Adjust vendoring to use go.work to get rid of the symlink [#91](https://github.com/openshift/cloud-provider-gcp/pull/91)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/f940e72e7611ce4a96da3e47966ba1befd25c474...e9159d6b083b2a27eb4c99e805e7d45fc32de2ad)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/a476e2fcd2d4b422b176325e6dea91fc6868bc76)
* [OCPBUGS-62417](https://issues.redhat.com/browse/OCPBUGS-62417): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 [#249](https://github.com/openshift/cluster-api-provider-gcp/pull/249)
* NO-JIRA: Update OWNERS [#248](https://github.com/openshift/cluster-api-provider-gcp/pull/248)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...a476e2fcd2d4b422b176325e6dea91fc6868bc76)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8f59a1a26d427b1c53b1be0ccf4e9fff07f23db5)
* NO-JIRA: JN-2789: added H200 support [#131](https://github.com/openshift/machine-api-provider-gcp/pull/131)
* [OCPCLOUD-3173](https://issues.redhat.com/browse/OCPCLOUD-3173): Implement Spot instances [#133](https://github.com/openshift/machine-api-provider-gcp/pull/133)
* [OCPCLOUD-3089](https://issues.redhat.com/browse/OCPCLOUD-3089): Bump k8s dependencies to 1.34 [#135](https://github.com/openshift/machine-api-provider-gcp/pull/135)
* [OCPBUGS-62520](https://issues.redhat.com/browse/OCPBUGS-62520): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 [#130](https://github.com/openshift/machine-api-provider-gcp/pull/130)
* NO-JIRA: Update OWNERS [#129](https://github.com/openshift/machine-api-provider-gcp/pull/129)
* no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate [#128](https://github.com/openshift/machine-api-provider-gcp/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...8f59a1a26d427b1c53b1be0ccf4e9fff07f23db5)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/223267890211674a7273aa99c3a5dee257bdc042)
* Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 [#84](https://github.com/openshift/gcp-pd-csi-driver/pull/84)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/500ab5d31ad382805070c8ae329a9a34163ebc99...223267890211674a7273aa99c3a5dee257bdc042)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/c88906d168c0b6a11c7bb1b27cdd6d5d9457e06b)
* NO-JIRA: Fix invalid field names [#155](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/155)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#154](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/154)
* [CORS-4227](https://issues.redhat.com/browse/CORS-4227): Revert gcp custom endpoints [#153](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/153)
* NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/151)
* [CORS-4201](https://issues.redhat.com/browse/CORS-4201): Search for the feature gate for GCP Custom Endpoints [#150](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e0ad050a84bab669e0f11e080fc4c388ef417bba...c88906d168c0b6a11c7bb1b27cdd6d5d9457e06b)
### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/d481e5cb9323b01964bf143b58403b62fa31e5e7)
* [OCPBUGS-62591](https://issues.redhat.com/browse/OCPBUGS-62591): Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 [#10](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/10)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8...d481e5cb9323b01964bf143b58403b62fa31e5e7)
### [haproxy-router](https://github.com/openshift/router/tree/526b4d0ad4cd9d44b43e2585b3415e513fbaf3da)
* [OCPBUGS-62501](https://issues.redhat.com/browse/OCPBUGS-62501): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 [#679](https://github.com/openshift/router/pull/679)
* [OCPBUGS-62555](https://issues.redhat.com/browse/OCPBUGS-62555): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 [#680](https://github.com/openshift/router/pull/680)
* [OCPBUGS-49769](https://issues.redhat.com/browse/OCPBUGS-49769): Validate the key and cert content before accepting [#669](https://github.com/openshift/router/pull/669)
* [NE-2137](https://issues.redhat.com/browse/NE-2137): Bump router k8s libraries to 0.33.4 [#671](https://github.com/openshift/router/pull/671)
* [OCPBUGS-60257](https://issues.redhat.com/browse/OCPBUGS-60257): fix extra space in haproxy template [#676](https://github.com/openshift/router/pull/676)
* [OCPBUGS-57896](https://issues.redhat.com/browse/OCPBUGS-57896): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#660](https://github.com/openshift/router/pull/660)
* [OCPBUGS-57845](https://issues.redhat.com/browse/OCPBUGS-57845): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#659](https://github.com/openshift/router/pull/659)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#675](https://github.com/openshift/router/pull/675)
* [OCPBUGS-61224](https://issues.redhat.com/browse/OCPBUGS-61224): Revert Prevent startup failures due to name resolution" [#672](https://github.com/openshift/router/pull/672)
* NO-JIRA: Add davidesalerno to OWNERS [#670](https://github.com/openshift/router/pull/670)
* [Full changelog](https://github.com/openshift/router/compare/96bfd2164c7885df9019ce9eeb79d506bd7e871b...526b4d0ad4cd9d44b43e2585b3415e513fbaf3da)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/891f5bb0306166d5625b89fc8dc86bbc8c85f549)
* [OCPBUGS-57477](https://issues.redhat.com/browse/OCPBUGS-57477): UPSTREAM: 133392: test: add retry to getMetricsFromNode [#2401](https://github.com/openshift/kubernetes/pull/2401)
* [STOR-2534](https://issues.redhat.com/browse/STOR-2534): UPSTREAM: <drop>: Disable volume group snapshot tests [#2507](https://github.com/openshift/kubernetes/pull/2507)
* [TRT-2113](https://issues.redhat.com/browse/TRT-2113): Remove annotation framework in favor of environment selectors [#2393](https://github.com/openshift/kubernetes/pull/2393)
* [OCPBUGS-61377](https://issues.redhat.com/browse/OCPBUGS-61377): UPSTREAM: <carry>: Re-enable temporarily disabled kuberc tests [#2501](https://github.com/openshift/kubernetes/pull/2501)
* NO-JIRA: enable CBOR tests [#2500](https://github.com/openshift/kubernetes/pull/2500)
* [OCPBUGS-62270](https://issues.redhat.com/browse/OCPBUGS-62270): UPSTREAM: <carry>: Skip CPU resource status for workload-pinned pods [#2490](https://github.com/openshift/kubernetes/pull/2490)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#2484](https://github.com/openshift/kubernetes/pull/2484)
* [OCPBUGS-62608](https://issues.redhat.com/browse/OCPBUGS-62608): Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 [#2481](https://github.com/openshift/kubernetes/pull/2481)
* [OCPBUGS-60610](https://issues.redhat.com/browse/OCPBUGS-60610): UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 [#2472](https://github.com/openshift/kubernetes/pull/2472)
* [OCPBUGS-43994](https://issues.redhat.com/browse/OCPBUGS-43994): UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain [#2477](https://github.com/openshift/kubernetes/pull/2477)
* [OCPBUGS-61554](https://issues.redhat.com/browse/OCPBUGS-61554): Bump 1.33.5 [#2459](https://github.com/openshift/kubernetes/pull/2459)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. [#2467](https://github.com/openshift/kubernetes/pull/2467)
* [OCPBUGS-61222](https://issues.redhat.com/browse/OCPBUGS-61222): Do not remove PVC ClaimRef to fix flaky VAC test [#2452](https://github.com/openshift/kubernetes/pull/2452)
* [OCPBUGS-58313](https://issues.redhat.com/browse/OCPBUGS-58313): apiserver library go bump [#2457](https://github.com/openshift/kubernetes/pull/2457)
* NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout [#2428](https://github.com/openshift/kubernetes/pull/2428)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Unrevert bump to v1.33.4 [#2441](https://github.com/openshift/kubernetes/pull/2441)
* [OCPBUGS-56594](https://issues.redhat.com/browse/OCPBUGS-56594): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write [#2443](https://github.com/openshift/kubernetes/pull/2443)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… [#2444](https://github.com/openshift/kubernetes/pull/2444)
* [OCPBUGS-60946](https://issues.redhat.com/browse/OCPBUGS-60946): UPSTREAM: 133425: Fix SELinux label comparison [#2417](https://github.com/openshift/kubernetes/pull/2417)
* [Full changelog](https://github.com/openshift/kubernetes/compare/cf396bff09dcb68a96f718b5e0e80b50e874afb5...891f5bb0306166d5625b89fc8dc86bbc8c85f549)
### [hypershift](https://github.com/openshift/hypershift/tree/e83d907270ba8545b371edfa7b69989da2903214)
* [OCPBUGS-65617](https://issues.redhat.com/browse/OCPBUGS-65617): fix(conformance): set priorityClass on global-pull-secret-syncer DaemonSet [#7236](https://github.com/openshift/hypershift/pull/7236)
* [OCPBUGS-64628](https://issues.redhat.com/browse/OCPBUGS-64628): add hypershift-no-cgo to the latest operator conta… [#7222](https://github.com/openshift/hypershift/pull/7222)
* [OCPBUGS-62226](https://issues.redhat.com/browse/OCPBUGS-62226): fix: Use annotations for AWS and Azure load balancer health probe configuration [#6927](https://github.com/openshift/hypershift/pull/6927)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): Fix MIRRORED_RELEASE_IMAGE flapping with mirror availability cache [#7184](https://github.com/openshift/hypershift/pull/7184)
* [CNTRLPLANE-1398](https://issues.redhat.com/browse/CNTRLPLANE-1398), [OCPBUGS-59649](https://issues.redhat.com/browse/OCPBUGS-59649): feat(globalps): security enhancements on GlobalPullSecret feature [#6745](https://github.com/openshift/hypershift/pull/6745)
* [CNTRLPLANE-1924](https://issues.redhat.com/browse/CNTRLPLANE-1924): Update Konflux Tekton task digests and fix pipeline triggers [#7225](https://github.com/openshift/hypershift/pull/7225)
* [OCPBUGS-64792](https://issues.redhat.com/browse/OCPBUGS-64792): fix(api): Check imageType exists before accessing in CEL validation [#7205](https://github.com/openshift/hypershift/pull/7205)
* [OCPBUGS-61299](https://issues.redhat.com/browse/OCPBUGS-61299): fix(shared-vpc): vpc share doesn't work with public-only when create hypershift aws cluster [#6766](https://github.com/openshift/hypershift/pull/6766)
* NO-JIRA: docs: update Azure self-managed cluster marketplace image documentation [#7156](https://github.com/openshift/hypershift/pull/7156)
* [GCP-179](https://issues.redhat.com/browse/GCP-179): feat(cmd/infra): add GCP IAM infrastructure creation command [#7209](https://github.com/openshift/hypershift/pull/7209)
* [OCPBUGS-33372](https://issues.redhat.com/browse/OCPBUGS-33372): fix(azure): make Azure SDK clients cloud-agnostic [#7144](https://github.com/openshift/hypershift/pull/7144)
* [OCPBUGS-62949](https://issues.redhat.com/browse/OCPBUGS-62949): fix(resources): prevent indefinite blocking on cloud resource cleanup during deletion [#7024](https://github.com/openshift/hypershift/pull/7024)
* [GCP-174](https://issues.redhat.com/browse/GCP-174): configure router service with Internal Load Balancer for PSC support [#7183](https://github.com/openshift/hypershift/pull/7183)
* [CNTRLPLANE-1892](https://issues.redhat.com/browse/CNTRLPLANE-1892): test(e2e-v2): add ginkgo-based v2 test suite [#7192](https://github.com/openshift/hypershift/pull/7192)
* [MULTIARCH-5629](https://issues.redhat.com/browse/MULTIARCH-5629): Added support to pick s390x boot image for s390x Nodepool for type kubevirt [#7058](https://github.com/openshift/hypershift/pull/7058)
* NO-JIRA: docs(azure): add self-managed Azure setup without external DNS [#7191](https://github.com/openshift/hypershift/pull/7191)
* [OCPQE-29333](https://issues.redhat.com/browse/OCPQE-29333): Add hypershift-ci-python Image [#5851](https://github.com/openshift/hypershift/pull/5851)
* [OCPBUGS-64763](https://issues.redhat.com/browse/OCPBUGS-64763): MCE 2.11 konflux pipeline [#7189](https://github.com/openshift/hypershift/pull/7189)
* [GCP-152](https://issues.redhat.com/browse/GCP-152): feat:(gcp)Add basic GCP platform recognition support [#7137](https://github.com/openshift/hypershift/pull/7137)
* [OCPBUGS-64817](https://issues.redhat.com/browse/OCPBUGS-64817): Update 4.19 control-plane-operator image overrides [#7196](https://github.com/openshift/hypershift/pull/7196)
* [CNTRLPLANE-1850](https://issues.redhat.com/browse/CNTRLPLANE-1850): test(e2e): add N-3 and N-4 release image flags [#7159](https://github.com/openshift/hypershift/pull/7159)
* [CORENET-6484](https://issues.redhat.com/browse/CORENET-6484): Restart ovnkube-control-plane pods when restart-date annotation is set [#7100](https://github.com/openshift/hypershift/pull/7100)
* [OCPBUGS-63613](https://issues.redhat.com/browse/OCPBUGS-63613): Fix --image-generation flag being ignored in Azure cluster creation [#7108](https://github.com/openshift/hypershift/pull/7108)
* [OCPBUGS-56444](https://issues.redhat.com/browse/OCPBUGS-56444): feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift [#6025](https://github.com/openshift/hypershift/pull/6025)
* [OCPBUGS-60457](https://issues.redhat.com/browse/OCPBUGS-60457): test(e2e): Revert "Workaround for external oidc tests to bypass the teardown" [#6979](https://github.com/openshift/hypershift/pull/6979)
* [CNTRLPLANE-408](https://issues.redhat.com/browse/CNTRLPLANE-408): feat(api) add imagetype to AWS nodepool api [#6746](https://github.com/openshift/hypershift/pull/6746)
* [GCP-114](https://issues.redhat.com/browse/GCP-114): add API types and CRD infrastructure for GCP Private Service Connect (PSC) [#7131](https://github.com/openshift/hypershift/pull/7131)
* [OCPBUGS-63594](https://issues.redhat.com/browse/OCPBUGS-63594): fix(konnectivity): bind health server to localhost to prevent external exposure [#7106](https://github.com/openshift/hypershift/pull/7106)
* [GCP-120](https://issues.redhat.com/browse/GCP-120): feat(cli): add support for GCP cluster creation and destruction [#7146](https://github.com/openshift/hypershift/pull/7146)
* [OCPBUGS-38358](https://issues.redhat.com/browse/OCPBUGS-38358): Fix nil pointer dereference in AWS CloudProviderConfig [#7129](https://github.com/openshift/hypershift/pull/7129)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): feat(cpo): enable tests for UID security context in storage components [#6934](https://github.com/openshift/hypershift/pull/6934)
* [OCPBUGS-51136](https://issues.redhat.com/browse/OCPBUGS-51136): revert scc annotation for components in kube-system [#7130](https://github.com/openshift/hypershift/pull/7130)
* [OCPBUGS-62060](https://issues.redhat.com/browse/OCPBUGS-62060): fix(cmd/destory/aws): detach managed policies before deleting inline policies [#7033](https://github.com/openshift/hypershift/pull/7033)
* NO-JIRA: fix(ai): fix plugin marketplace name [#7127](https://github.com/openshift/hypershift/pull/7127)
* [CNTRLPLANE-1756](https://issues.redhat.com/browse/CNTRLPLANE-1756): fix(ai-skill): prevent security warning in git-commit-format skill [#7125](https://github.com/openshift/hypershift/pull/7125)
* [CNTRLPLANE-1644](https://issues.redhat.com/browse/CNTRLPLANE-1644): Request serving topology end to end test [#7031](https://github.com/openshift/hypershift/pull/7031)
* [OCPBUGS-62496](https://issues.redhat.com/browse/OCPBUGS-62496): fix: delete old profile during replacement [#7089](https://github.com/openshift/hypershift/pull/7089)
* [CNTRLPLANE-1650](https://issues.redhat.com/browse/CNTRLPLANE-1650): chore(tekton): consolidate main branch pipelines [#7053](https://github.com/openshift/hypershift/pull/7053)
* [OCPBUGS-63639](https://issues.redhat.com/browse/OCPBUGS-63639): add support for control-plane-operator hotfix builds [#7119](https://github.com/openshift/hypershift/pull/7119)
* [CNTRLPLANE-1687](https://issues.redhat.com/browse/CNTRLPLANE-1687): feat(e2e): add support for azure-workload-identities-file flag [#7101](https://github.com/openshift/hypershift/pull/7101)
* [CNTRLPLANE-1681](https://issues.redhat.com/browse/CNTRLPLANE-1681): chore(deps): update mvdan.cc/unparam digest to 0df0534 [#7049](https://github.com/openshift/hypershift/pull/7049)
* [OCPBUGS-61296](https://issues.redhat.com/browse/OCPBUGS-61296): fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7087](https://github.com/openshift/hypershift/pull/7087)
* [OCPBUGS-51136](https://issues.redhat.com/browse/OCPBUGS-51136): specify SCC annotation for pods in data plane [#7091](https://github.com/openshift/hypershift/pull/7091)
* [CNTRLPLANE-1681](https://issues.redhat.com/browse/CNTRLPLANE-1681): chore(deps): update sigs.k8s.io/cluster-api-provider-openstack/orc digest to e4f56a2 [#7096](https://github.com/openshift/hypershift/pull/7096)
* [OCPBUGS-63205](https://issues.redhat.com/browse/OCPBUGS-63205): fix(e2e): correct readOnlyRootFilesystem test logic [#7076](https://github.com/openshift/hypershift/pull/7076)
* NO-JIRA: docs(ai): add reference to AGENTS.md for AI agent guidance [#7085](https://github.com/openshift/hypershift/pull/7085)
* [OCPBUGS-61941](https://issues.redhat.com/browse/OCPBUGS-61941): fix(ingress): add LoadBalancerSourceRanges support for external router service [#6859](https://github.com/openshift/hypershift/pull/6859)
* [OCPBUGS-63175](https://issues.redhat.com/browse/OCPBUGS-63175): remove NTO Service and ServiceMonitor [#7086](https://github.com/openshift/hypershift/pull/7086)
* NO-JIRA: fix(ibm): Update version information for Red Hat OpenShift on IBM Cloud [#6776](https://github.com/openshift/hypershift/pull/6776)
* [OCPBUGS-62871](https://issues.redhat.com/browse/OCPBUGS-62871): fix(e2e): refactor createHostedCluster to remove deps between option settings [#6997](https://github.com/openshift/hypershift/pull/6997)
* [CNTRLPLANE-475](https://issues.redhat.com/browse/CNTRLPLANE-475): Enable Azure NodePool API happy path to pick image [#6904](https://github.com/openshift/hypershift/pull/6904)
* NO-JIRA: Add Claude Code skills and Azure unit tests [#7074](https://github.com/openshift/hypershift/pull/7074)
* NO-JIRA: refactor(ignitionserver): move lookupMappedImage to shared util package [#6778](https://github.com/openshift/hypershift/pull/6778)
* [GCP-97](https://issues.redhat.com/browse/GCP-97): Add initial GCP platform support to Hosted Cluster API [#6960](https://github.com/openshift/hypershift/pull/6960)
* [OCPBUGS-63130](https://issues.redhat.com/browse/OCPBUGS-63130): fix: routes are not used in case of IBM Cloud [#7054](https://github.com/openshift/hypershift/pull/7054)
* [OCPBUGS-63153](https://issues.redhat.com/browse/OCPBUGS-63153): Revert "fix(capi-provider): wait for infrastructure resource before startup" [#7057](https://github.com/openshift/hypershift/pull/7057)
* [CNTRLPLANE-1550](https://issues.redhat.com/browse/CNTRLPLANE-1550), [CNTRLPLANE-1552](https://issues.redhat.com/browse/CNTRLPLANE-1552): Implement environment variable override for shared ingress HAProxy image [#6989](https://github.com/openshift/hypershift/pull/6989)
* [OCPBUGS-63049](https://issues.redhat.com/browse/OCPBUGS-63049): Make the hypershift CLI binary FIPS-compliant [#7032](https://github.com/openshift/hypershift/pull/7032)
* [OCPBUGS-61164](https://issues.redhat.com/browse/OCPBUGS-61164): Add per-pod crash toleration [#6958](https://github.com/openshift/hypershift/pull/6958)
* [OCPBUGS-60472](https://issues.redhat.com/browse/OCPBUGS-60472): fix kubevirt, use 100.66.0.0/16 for join subnet [#6978](https://github.com/openshift/hypershift/pull/6978)
* [OCPBUGS-36389](https://issues.redhat.com/browse/OCPBUGS-36389): Omit metadata for telemetry remote write and ensure _id label [#6208](https://github.com/openshift/hypershift/pull/6208)
* [OCPBUGS-63172](https://issues.redhat.com/browse/OCPBUGS-63172): control-plane-operator/.../ingress-operator/deployment: Declare a metrics port [#7052](https://github.com/openshift/hypershift/pull/7052)
* [OCPBUGS-63215](https://issues.redhat.com/browse/OCPBUGS-63215): fix: hosted cluster CRD compatibility with ocp 4.15 [#7069](https://github.com/openshift/hypershift/pull/7069)
* [CNTRLPLANE-1673](https://issues.redhat.com/browse/CNTRLPLANE-1673): feat(claude): add /test-tag-pipeline command [#7062](https://github.com/openshift/hypershift/pull/7062)
* NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins [#7068](https://github.com/openshift/hypershift/pull/7068)
* [OCPBUGS-63194](https://issues.redhat.com/browse/OCPBUGS-63194): fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline [#7064](https://github.com/openshift/hypershift/pull/7064)
* [OCPBUGS-61881](https://issues.redhat.com/browse/OCPBUGS-61881): Red Hat Konflux update hypershift-gomaxprocs-webhook [#7063](https://github.com/openshift/hypershift/pull/7063)
* [OCPBUGS-63194](https://issues.redhat.com/browse/OCPBUGS-63194): fix(konflux): fix tag pipeline EC failures [#7060](https://github.com/openshift/hypershift/pull/7060)
* [OCPBUGS-55751](https://issues.redhat.com/browse/OCPBUGS-55751): Fix Konflux tag pipeline template variable substitution [#6910](https://github.com/openshift/hypershift/pull/6910)
* [CNTRLPLANE-1620](https://issues.redhat.com/browse/CNTRLPLANE-1620): feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS [#6994](https://github.com/openshift/hypershift/pull/6994)
* [OCPBUGS-63148](https://issues.redhat.com/browse/OCPBUGS-63148): bump Konflux build images [#7055](https://github.com/openshift/hypershift/pull/7055)
* [CNTRLPLANE-1615](https://issues.redhat.com/browse/CNTRLPLANE-1615): Add repo metrics tool for tracking AI-assisted commits [#6983](https://github.com/openshift/hypershift/pull/6983)
* [CNTRLPLANE-980](https://issues.redhat.com/browse/CNTRLPLANE-980): feat(api): Validation for hc.status.configuration.authentication status [#6883](https://github.com/openshift/hypershift/pull/6883)
* [OCPBUGS-61829](https://issues.redhat.com/browse/OCPBUGS-61829): resolve initContainer permission issue after node reboot [#6990](https://github.com/openshift/hypershift/pull/6990)
* NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run [#6924](https://github.com/openshift/hypershift/pull/6924)
* NO-JIRA: migrate renovate config [#7029](https://github.com/openshift/hypershift/pull/7029)
* [CNTRLPLANE-1643](https://issues.redhat.com/browse/CNTRLPLANE-1643): implement multi-branch strategy with security-focused release management [#7023](https://github.com/openshift/hypershift/pull/7023)
* [CNTRLPLANE-1641](https://issues.redhat.com/browse/CNTRLPLANE-1641): update Tekton tasks to latest trusted versions [#6998](https://github.com/openshift/hypershift/pull/6998)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add OpenStack node drivers to allowed non-read-only root filesystem containers [#6946](https://github.com/openshift/hypershift/pull/6946)
* [OCPBUGS-62863](https://issues.redhat.com/browse/OCPBUGS-62863): feat(cmd): collect ServiceMonitor and PodMonitor resources in dump [#6970](https://github.com/openshift/hypershift/pull/6970)
* NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first [#6995](https://github.com/openshift/hypershift/pull/6995)
* [CNTRLPLANE-1493](https://issues.redhat.com/browse/CNTRLPLANE-1493): Add Claude command for automated Konflux task updates [#6921](https://github.com/openshift/hypershift/pull/6921)
* [CNTRLPLANE-1484](https://issues.redhat.com/browse/CNTRLPLANE-1484): Expose cluster autoscaler metrics in HCP [#6902](https://github.com/openshift/hypershift/pull/6902)
* [CNTRLPLANE-1582](https://issues.redhat.com/browse/CNTRLPLANE-1582): Prevent azure cluster destroy command from deleting managed/main resource group [#6956](https://github.com/openshift/hypershift/pull/6956)
* [CNTRLPLANE-1543](https://issues.redhat.com/browse/CNTRLPLANE-1543): fix(aws): use clean image for placeholder nodes [#6935](https://github.com/openshift/hypershift/pull/6935)
* [CNTRLPLANE-1468](https://issues.redhat.com/browse/CNTRLPLANE-1468): feat(install): add command line argument for ImagePullPolicy configuration [#6875](https://github.com/openshift/hypershift/pull/6875)
* NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis [#6737](https://github.com/openshift/hypershift/pull/6737)
* [CNTRLPLANE-1374](https://issues.redhat.com/browse/CNTRLPLANE-1374): feat(azure): add setup scripts for self-managed Azure hosted clusters [#6752](https://github.com/openshift/hypershift/pull/6752)
* NO-JIRA: chore(ai): configure all agents to inherit model configuration [#6906](https://github.com/openshift/hypershift/pull/6906)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(azure): add self-managed Azure HyperShift overview guide [#6948](https://github.com/openshift/hypershift/pull/6948)
* [CNTRLPLANE-1432](https://issues.redhat.com/browse/CNTRLPLANE-1432): Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate [#6923](https://github.com/openshift/hypershift/pull/6923)
* [CNTRLPLANE-1581](https://issues.redhat.com/browse/CNTRLPLANE-1581): feat(azure): relax API to make externalDNS optional for self-managed clusters [#6951](https://github.com/openshift/hypershift/pull/6951)
* [OCPBUGS-62446](https://issues.redhat.com/browse/OCPBUGS-62446): fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues [#6918](https://github.com/openshift/hypershift/pull/6918)
* NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions [#6957](https://github.com/openshift/hypershift/pull/6957)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): feat(cpo): add UID security context to CSO deployment [#6786](https://github.com/openshift/hypershift/pull/6786)
* [OCPBUGS-62407](https://issues.redhat.com/browse/OCPBUGS-62407): chore(build): update container images to 4.21 [#6936](https://github.com/openshift/hypershift/pull/6936)
* NO-JIRA: Add openstack-reviewers, openstack-approvers [#6911](https://github.com/openshift/hypershift/pull/6911)
* [GCP-96](https://issues.redhat.com/browse/GCP-96): add GCPPlatform feature gate [#6929](https://github.com/openshift/hypershift/pull/6929)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(readme): correct spelling mistake [#6943](https://github.com/openshift/hypershift/pull/6943)
* [CNTRLPLANE-1332](https://issues.redhat.com/browse/CNTRLPLANE-1332): docs(azure): add self-managed cluster setup documentation [#6808](https://github.com/openshift/hypershift/pull/6808)
* [OCPBUGS-61245](https://issues.redhat.com/browse/OCPBUGS-61245): Fix driver-config ConfigMap content flapping due to random ordering [#6907](https://github.com/openshift/hypershift/pull/6907)
* [CNTRLPLANE-1545](https://issues.redhat.com/browse/CNTRLPLANE-1545): docs(commands): improve jira-solve command with logical commit organization [#6937](https://github.com/openshift/hypershift/pull/6937)
* NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions [#6928](https://github.com/openshift/hypershift/pull/6928)
* [OCPBUGS-62328](https://issues.redhat.com/browse/OCPBUGS-62328): Add missing svc-kubeconfig mount to CAPO Deployment [#6909](https://github.com/openshift/hypershift/pull/6909)
* [OCPBUGS-62324](https://issues.redhat.com/browse/OCPBUGS-62324): Fix test-e2e `annotations` flag parsing [#6908](https://github.com/openshift/hypershift/pull/6908)
* [AUTOSCALE-322](https://issues.redhat.com/browse/AUTOSCALE-322): fix karpenter token secret leak [#6790](https://github.com/openshift/hypershift/pull/6790)
* [CNTRLPLANE-980](https://issues.redhat.com/browse/CNTRLPLANE-980): feat(api): add hc.status.configuration.authentication status field [#6261](https://github.com/openshift/hypershift/pull/6261)
* NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout [#6913](https://github.com/openshift/hypershift/pull/6913)
* [KFLUXSPRT-5246](https://issues.redhat.com/browse/KFLUXSPRT-5246): update base images from RHEL9 ELS to UBI9 minimal 9.4 [#6916](https://github.com/openshift/hypershift/pull/6916)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false [#6885](https://github.com/openshift/hypershift/pull/6885)
* NO-JIRA: fix(test): support external oidc settings on non-aws platform [#6754](https://github.com/openshift/hypershift/pull/6754)
* NO-JIRA: chore(ai): ensure jira-solve run make pre-commit [#6901](https://github.com/openshift/hypershift/pull/6901)
* NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc [#6898](https://github.com/openshift/hypershift/pull/6898)
* [OCPBUGS-61936](https://issues.redhat.com/browse/OCPBUGS-61936): fix(capi-provider): wait for infrastructure resource before startup [#6860](https://github.com/openshift/hypershift/pull/6860)
* [OCPBUGS-62224](https://issues.redhat.com/browse/OCPBUGS-62224): fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness [#6892](https://github.com/openshift/hypershift/pull/6892)
* [CNTRLPLANE-1478](https://issues.redhat.com/browse/CNTRLPLANE-1478): chore: add AI directory paths to OWNERS file [#6884](https://github.com/openshift/hypershift/pull/6884)
* NO-JIRA: chore(ai): add claude slash command jira solve [#6882](https://github.com/openshift/hypershift/pull/6882)
* [OCPBUGS-62099](https://issues.redhat.com/browse/OCPBUGS-62099): make TestAutoscalingBalancing more robust [#6877](https://github.com/openshift/hypershift/pull/6877)
* [OCPBUGS-61850](https://issues.redhat.com/browse/OCPBUGS-61850): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6843](https://github.com/openshift/hypershift/pull/6843)
* NO-JIRA: ci(dev-cluster): Fix dev token secret annotation [#6876](https://github.com/openshift/hypershift/pull/6876)
* [OCPBUGS-62056](https://issues.redhat.com/browse/OCPBUGS-62056): test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic [#6872](https://github.com/openshift/hypershift/pull/6872)
* [OCPBUGS-62128](https://issues.redhat.com/browse/OCPBUGS-62128): hcco: sync watched resource types to availability-prober [#6879](https://github.com/openshift/hypershift/pull/6879)
* [CNTRLPLANE-1331](https://issues.redhat.com/browse/CNTRLPLANE-1331): Get self-managed Azure working again [#6703](https://github.com/openshift/hypershift/pull/6703)
* [OCPBUGS-59885](https://issues.redhat.com/browse/OCPBUGS-59885): [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC [#6826](https://github.com/openshift/hypershift/pull/6826)
* [CNTRLPLANE-1455](https://issues.redhat.com/browse/CNTRLPLANE-1455): docs(contribute): consolidate contributing guide; refresh PR template; add landing page [#6866](https://github.com/openshift/hypershift/pull/6866)
* [OCPBUGS-61776](https://issues.redhat.com/browse/OCPBUGS-61776): fix(ignition-server): Don't delete user-managed cert secrets [#6836](https://github.com/openshift/hypershift/pull/6836)
* [OCPBUGS-61894](https://issues.redhat.com/browse/OCPBUGS-61894): Enable VolumeAttributesClass runtime config [#6855](https://github.com/openshift/hypershift/pull/6855)
* [CNTRLPLANE-1452](https://issues.redhat.com/browse/CNTRLPLANE-1452): docs(ci): add documentation for checking CI status [#6849](https://github.com/openshift/hypershift/pull/6849)
* [OCPBUGS-61438](https://issues.redhat.com/browse/OCPBUGS-61438): fix(security): harden konnectivity-agent DaemonSet security context [#6835](https://github.com/openshift/hypershift/pull/6835)
* [OCPBUGS-61828](https://issues.redhat.com/browse/OCPBUGS-61828): refactor FeatureGate status check [#6862](https://github.com/openshift/hypershift/pull/6862)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods [#6842](https://github.com/openshift/hypershift/pull/6842)
* [OCPBUGS-61825](https://issues.redhat.com/browse/OCPBUGS-61825): test(e2e,kubevirt): skip break-glass-credentials on kubevirt [#6856](https://github.com/openshift/hypershift/pull/6856)
* [OCPBUGS-61862](https://issues.redhat.com/browse/OCPBUGS-61862): ci: Remove the MCE 2.10 konflux pipeline [#6848](https://github.com/openshift/hypershift/pull/6848)
* [OCPBUGS-61719](https://issues.redhat.com/browse/OCPBUGS-61719): fix: propagate AWSLoadBalancerTargetNodesAnnotation to… [#6823](https://github.com/openshift/hypershift/pull/6823)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler, 2 [#6824](https://github.com/openshift/hypershift/pull/6824)
* [OCPBUGS-61177](https://issues.redhat.com/browse/OCPBUGS-61177): ci: use common MCE konflux pipeline [#6743](https://github.com/openshift/hypershift/pull/6743)
* NO-JIRA: Update Branch Tasks Docs [#6840](https://github.com/openshift/hypershift/pull/6840)
* [OCPBUGS-56249](https://issues.redhat.com/browse/OCPBUGS-56249): fix lint-fix Makefile rule [#6151](https://github.com/openshift/hypershift/pull/6151)
* [OCPBUGS-61048](https://issues.redhat.com/browse/OCPBUGS-61048): test(e2e): add autoscaler deployment verification to autoscaling test [#6779](https://github.com/openshift/hypershift/pull/6779)
* [OCPBUGS-61687](https://issues.redhat.com/browse/OCPBUGS-61687): fix(capi-provider): use single replica deployment for aws and azure [#6807](https://github.com/openshift/hypershift/pull/6807)
* fix(disable-psa): disable PSA check for 4.20 [#6831](https://github.com/openshift/hypershift/pull/6831)
* [OCPBUGS-61482](https://issues.redhat.com/browse/OCPBUGS-61482): fix(proxy): ensure URLs have scheme before proxy resolution [#6789](https://github.com/openshift/hypershift/pull/6789)
* [OCPBUGS-61587](https://issues.redhat.com/browse/OCPBUGS-61587): fix(oauth): oauth-openshift deployment should be HA [#6802](https://github.com/openshift/hypershift/pull/6802)
* [CNTRLPLANE-1277](https://issues.redhat.com/browse/CNTRLPLANE-1277): Enable TestCreateClusterCustomConfig for Azure [#6706](https://github.com/openshift/hypershift/pull/6706)
* Revert "OCPBUGS-61334: fix(kas): Set correct container port in postStart handler" [#6805](https://github.com/openshift/hypershift/pull/6805)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): resolve MIRRORED_RELEASE_IMAGE flapping [#6751](https://github.com/openshift/hypershift/pull/6751)
* [OCPBUGS-61499](https://issues.redhat.com/browse/OCPBUGS-61499): fix(control-plane): remove resource limits from kube-controller-manager [#6785](https://github.com/openshift/hypershift/pull/6785)
* [CNTRLPLANE-1364](https://issues.redhat.com/browse/CNTRLPLANE-1364): feat: enable global pull secret for AWS [#6736](https://github.com/openshift/hypershift/pull/6736)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler [#6773](https://github.com/openshift/hypershift/pull/6773)
* NO-JIRA: fix karpenter metric validation in e2e [#6714](https://github.com/openshift/hypershift/pull/6714)
* NO-JIRA: chore(AI): add claude agents for different SMEs [#6787](https://github.com/openshift/hypershift/pull/6787)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem [#6770](https://github.com/openshift/hypershift/pull/6770)
* [OCPBUGS-61462](https://issues.redhat.com/browse/OCPBUGS-61462): temporarily use v4.20 catalogs [#6782](https://github.com/openshift/hypershift/pull/6782)
* NO-JIRA: add permissions to role policy [#6783](https://github.com/openshift/hypershift/pull/6783)
* [CNTRLPLANE-1385](https://issues.redhat.com/browse/CNTRLPLANE-1385): docs: add MCP setup guide for Cursor with sample config [#6775](https://github.com/openshift/hypershift/pull/6775)
* [CNTRLPLANE-1383](https://issues.redhat.com/browse/CNTRLPLANE-1383): docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule [#6774](https://github.com/openshift/hypershift/pull/6774)
* [OCPBUGS-61218](https://issues.redhat.com/browse/OCPBUGS-61218): test(e2e): add control plane component rollout validation to upgrade test [#6767](https://github.com/openshift/hypershift/pull/6767)
* [CNTRLPLANE-203](https://issues.redhat.com/browse/CNTRLPLANE-203): feat(sharedingress): add Azure Public IP tagging support for router service [#6730](https://github.com/openshift/hypershift/pull/6730)
* [OCPBUGS-61219](https://issues.redhat.com/browse/OCPBUGS-61219): fix: cleanup old PKI operator deployment during upgrades [#6758](https://github.com/openshift/hypershift/pull/6758)
* [OCPBUGS-61282](https://issues.redhat.com/browse/OCPBUGS-61282): rename CCM deployments to align with 4.19 [#6757](https://github.com/openshift/hypershift/pull/6757)
* NO-JIRA: fix(api): enhance API NodePool's API docs [#6753](https://github.com/openshift/hypershift/pull/6753)
* NO-JIRA: chore(tests): validate conditions after executing tests [#6738](https://github.com/openshift/hypershift/pull/6738)
* [OCPBUGS-60376](https://issues.redhat.com/browse/OCPBUGS-60376): fix token rotation causing Karpenter to stop working [#6561](https://github.com/openshift/hypershift/pull/6561)
* NO-JIRA: contrib: add utility for cleaning roles [#5945](https://github.com/openshift/hypershift/pull/5945)
* [CNTRLPLANE-267](https://issues.redhat.com/browse/CNTRLPLANE-267): Restructure the OWNERS usage in the whole repo [#5784](https://github.com/openshift/hypershift/pull/5784)
* [AUTOSCALE-332](https://issues.redhat.com/browse/AUTOSCALE-332): allow karpenter-operator to support rhobs monitoring [#6704](https://github.com/openshift/hypershift/pull/6704)
* [CNTRLPLANE-1370](https://issues.redhat.com/browse/CNTRLPLANE-1370): feat(supportedversion): add OCP 4.21 support; update e2e constants and tests [#6739](https://github.com/openshift/hypershift/pull/6739)
* NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions [#6741](https://github.com/openshift/hypershift/pull/6741)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/73e8a0ef65aa019bad67eae70987f5ca71edda52...e83d907270ba8545b371edfa7b69989da2903214)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/c566572b2cf0120499e81181f1efb1e729e9c418)
* [OCPCLOUD-3095](https://issues.redhat.com/browse/OCPCLOUD-3095): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.34 (64b1744) into main [#82](https://github.com/openshift/cloud-provider-ibm/pull/82)
* [OCPBUGS-62342](https://issues.redhat.com/browse/OCPBUGS-62342): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/cloud-provider-ibm/pull/86)
* NO-JIRA: Update OWNERS [#85](https://github.com/openshift/cloud-provider-ibm/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/36ab30f90e87de0daa926d20ccda88c41abed191...c566572b2cf0120499e81181f1efb1e729e9c418)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/ab36dcc19e6063bf55158b59588448151a200170)
* [STOR-2589](https://issues.redhat.com/browse/STOR-2589): Rebase to upstream v5.2.19 for OCP 4.21 [#113](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/113)
* Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 [#112](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/112)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/19801353c97d08b1333177be45c848082af0643c...ab36dcc19e6063bf55158b59588448151a200170)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/327e3b29a2b93c80008ca69c6f14ba29c46e1672)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#157](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/157)
* [OCPBUGS-62375](https://issues.redhat.com/browse/OCPBUGS-62375): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/21f405cce9573eee1c4f1cf95c0eb601ae77ed99...327e3b29a2b93c80008ca69c6f14ba29c46e1672)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/69ed5e056af689cb34fd099355c0c5534ede70be)
* [OCPBUGS-62486](https://issues.redhat.com/browse/OCPBUGS-62486): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 [#130](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/130)
* NO-JIRA: Update OWNERS [#126](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/126)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/8b6396a4c78f4791b7f3c5ec404a78b499f8546b...69ed5e056af689cb34fd099355c0c5534ede70be)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/03d7a9679f70e4bc1c884ebb5d6577dd757b1553)
* [OCPBUGS-62491](https://issues.redhat.com/browse/OCPBUGS-62491): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 [#71](https://github.com/openshift/machine-api-provider-ibmcloud/pull/71)
* NO-JIRA: Update OWNERS [#70](https://github.com/openshift/machine-api-provider-ibmcloud/pull/70)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...03d7a9679f70e4bc1c884ebb5d6577dd757b1553)
### [insights-operator](https://github.com/openshift/insights-operator/tree/cb14df1950d420784099e08ba5450974be236dba)
* [OCPBUGS-63747](https://issues.redhat.com/browse/OCPBUGS-63747): [bugfix] The archive's records may include files whose names are out of bounds [#1168](https://github.com/openshift/insights-operator/pull/1168)
* [OCPBUGS-63396](https://issues.redhat.com/browse/OCPBUGS-63396): Add filtering to add other possible pod status to QEMU gatherer [#1167](https://github.com/openshift/insights-operator/pull/1167)
* NO-JIRA: remove trailing commas from ConfigMap example [#1166](https://github.com/openshift/insights-operator/pull/1166)
* [OCPBUGS-63015](https://issues.redhat.com/browse/OCPBUGS-63015): QEMU logs are not gathered if there are pending status virt-launcher pods [#1164](https://github.com/openshift/insights-operator/pull/1164)
* NO-JIRA: add CLAUDE.md [#1162](https://github.com/openshift/insights-operator/pull/1162)
* [CCXDEV-15577](https://issues.redhat.com/browse/CCXDEV-15577): retry mechanism for network error [#1161](https://github.com/openshift/insights-operator/pull/1161)
* NO-JIRA: remove CRD manifests [#1156](https://github.com/openshift/insights-operator/pull/1156)
* [CCXDEV-15551](https://issues.redhat.com/browse/CCXDEV-15551): Decouple CRD storage specs [#1157](https://github.com/openshift/insights-operator/pull/1157)
* [OCPBUGS-60870](https://issues.redhat.com/browse/OCPBUGS-60870): The Gather Job did not check the current configuration before running [#1154](https://github.com/openshift/insights-operator/pull/1154)
* [OCPBUGS-61893](https://issues.redhat.com/browse/OCPBUGS-61893): set extractor as default container [#1141](https://github.com/openshift/insights-operator/pull/1141)
* [OCPBUGS-62215](https://issues.redhat.com/browse/OCPBUGS-62215): operator is not set as degraded when failed [#1151](https://github.com/openshift/insights-operator/pull/1151)
* And 9 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/10a1c1746d728197c42163217764eda00a3cbb4f...cb14df1950d420784099e08ba5450974be236dba)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/81d9ede484137d8609bae3ff5ebd5e7bfe88c4cd)
* [OCPBUGS-62351](https://issues.redhat.com/browse/OCPBUGS-62351): Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#53](https://github.com/openshift/insights-runtime-extractor/pull/53)
* [OCPBUGS-62433](https://issues.redhat.com/browse/OCPBUGS-62433): Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#54](https://github.com/openshift/insights-runtime-extractor/pull/54)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/3d3783698b20f5c27e4f35051b1450e47e789068...81d9ede484137d8609bae3ff5ebd5e7bfe88c4cd)
### [ironic](https://github.com/openshift/ironic-image/tree/492e3f2c0f2e4afa4a04dc69a464f563464be758)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#714](https://github.com/openshift/ironic-image/pull/714)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#709](https://github.com/openshift/ironic-image/pull/709)
* NO-ISSUE: Add project changes section only if we change something [#712](https://github.com/openshift/ironic-image/pull/712)
* NO-ISSUE: Documented prerequisites for building ironic-image locally [#710](https://github.com/openshift/ironic-image/pull/710)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#708](https://github.com/openshift/ironic-image/pull/708)
* NO-ISSUE: Update ironic and sushy commit [#704](https://github.com/openshift/ironic-image/pull/704)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#706](https://github.com/openshift/ironic-image/pull/706)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#705](https://github.com/openshift/ironic-image/pull/705)
* [METAL-1599](https://issues.redhat.com/browse/METAL-1599): Allow additional PXE file mount point [#702](https://github.com/openshift/ironic-image/pull/702)
* [OCPBUGS-62443](https://issues.redhat.com/browse/OCPBUGS-62443): Updating ironic-container image to be consistent with ART for 4.21 [#699](https://github.com/openshift/ironic-image/pull/699)
* [OCPBUGS-62201](https://issues.redhat.com/browse/OCPBUGS-62201): Bump ironic to include idrac10 fix [#697](https://github.com/openshift/ironic-image/pull/697)
* [METAL-1446](https://issues.redhat.com/browse/METAL-1446), [METAL-1566](https://issues.redhat.com/browse/METAL-1566), [METAL-1577](https://issues.redhat.com/browse/METAL-1577): Sync Ironic and Sushy [#695](https://github.com/openshift/ironic-image/pull/695)
* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Remove temporary dependencies from source [#692](https://github.com/openshift/ironic-image/pull/692)
* [OKD-283](https://issues.redhat.com/browse/OKD-283): fixing OKD ironic-image errors and metal3 pod crashes (centos9) [#688](https://github.com/openshift/ironic-image/pull/688)
* [OCPBUGS-61459](https://issues.redhat.com/browse/OCPBUGS-61459): sync with Ironic changes, including the local RPC revert [#687](https://github.com/openshift/ironic-image/pull/687)
* [METAL-1528](https://issues.redhat.com/browse/METAL-1528): Use custom directories in the runironic-proxy script [#679](https://github.com/openshift/ironic-image/pull/679)
* [OCPBUGS-60455](https://issues.redhat.com/browse/OCPBUGS-60455): set [json_rpc]port unconditionally [#684](https://github.com/openshift/ironic-image/pull/684)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9c57a81902530b0268eddd7ad623a972b5ba4042...492e3f2c0f2e4afa4a04dc69a464f563464be758)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a30ba903caabfae104ecddad6e133095321c8441)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#208](https://github.com/openshift/ironic-agent-image/pull/208)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#205](https://github.com/openshift/ironic-agent-image/pull/205)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#204](https://github.com/openshift/ironic-agent-image/pull/204)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#202](https://github.com/openshift/ironic-agent-image/pull/202)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#201](https://github.com/openshift/ironic-agent-image/pull/201)
* [OKD-297](https://issues.redhat.com/browse/OKD-297): Fix broken OKD4.20 ironic-agent-image [#200](https://github.com/openshift/ironic-agent-image/pull/200)
* [OKD-295](https://issues.redhat.com/browse/OKD-295): Fix broken OKD ironic-agent-image [#199](https://github.com/openshift/ironic-agent-image/pull/199)
* [OCPBUGS-62329](https://issues.redhat.com/browse/OCPBUGS-62329): Updating ironic-agent-container image to be consistent with ART for 4.21 [#197](https://github.com/openshift/ironic-agent-image/pull/197)
* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Update deps pkgs versions [#196](https://github.com/openshift/ironic-agent-image/pull/196)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...a30ba903caabfae104ecddad6e133095321c8441)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555)
* [OCPBUGS-62357](https://issues.redhat.com/browse/OCPBUGS-62357): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ironic-rhcos-downloader/pull/107)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/6c92e5425b58baa9d4dd951a992b7460e8407247...08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/b95b05fe0ba17255ef61e92d4167ca4c9de789b8)
* [OCPBUGS-62511](https://issues.redhat.com/browse/OCPBUGS-62511): Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 [#54](https://github.com/openshift/ironic-static-ip-manager/pull/54)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/fa5b8b8bb73e509f74205a99a0ed1cb07a843885...b95b05fe0ba17255ef61e92d4167ca4c9de789b8)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/c4506d8a1bbede077d3e8e7e4dcf2736909d8e89)
* [OCPBUGS-62497](https://issues.redhat.com/browse/OCPBUGS-62497): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.21 [#215](https://github.com/openshift/images/pull/215)
* Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 [#214](https://github.com/openshift/images/pull/214)
* Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 [#213](https://github.com/openshift/images/pull/213)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...c4506d8a1bbede077d3e8e7e4dcf2736909d8e89)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ed76a5e8051caae6519342ae189088b8ddd09979)
* [OCPBUGS-62397](https://issues.redhat.com/browse/OCPBUGS-62397): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 [#47](https://github.com/openshift/kubernetes-metrics-server/pull/47)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/cfa5ee9f1c94d7faec36de970033b9e329326f38...ed76a5e8051caae6519342ae189088b8ddd09979)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/cd636680e06a55395c26570dff0cb37277014388)
* [OCPBUGS-62563](https://issues.redhat.com/browse/OCPBUGS-62563): Updating kube-rbac-proxy-container image to be consistent with ART for 4.21 [#126](https://github.com/openshift/kube-rbac-proxy/pull/126)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b9134351be37c43408334047d8eb85d0ac01fe4e...cd636680e06a55395c26570dff0cb37277014388)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/d818e81d447d78e42fc7025e95137a096e8e90f3)
* [OCPBUGS-62356](https://issues.redhat.com/browse/OCPBUGS-62356): Updating kube-state-metrics-container image to be consistent with ART for 4.21 [#125](https://github.com/openshift/kube-state-metrics/pull/125)
* NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 [#124](https://github.com/openshift/kube-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d...d818e81d447d78e42fc7025e95137a096e8e90f3)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/ce5ff17e9a81ce754567e6dd5053d13409c251e9)
* [OCPBUGS-62566](https://issues.redhat.com/browse/OCPBUGS-62566): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 [#234](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/234)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953...ce5ff17e9a81ce754567e6dd5053d13409c251e9)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/c9d7405057a3399e45e3efd187c238dd4e8a0cc6)
* [OCPBUGS-62592](https://issues.redhat.com/browse/OCPBUGS-62592): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.21 [#56](https://github.com/openshift/cloud-provider-kubevirt/pull/56)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...c9d7405057a3399e45e3efd187c238dd4e8a0cc6)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9e2dbddfe27080b834c83ef93503f886ad4189b6)
* [OCPBUGS-62564](https://issues.redhat.com/browse/OCPBUGS-62564): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.21 [#70](https://github.com/openshift/kubevirt-csi-driver/pull/70)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...9e2dbddfe27080b834c83ef93503f886ad4189b6)
### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/76effeca10bccccbc7a514f708122f660cde1183)
* [OCPBUGS-63352](https://issues.redhat.com/browse/OCPBUGS-63352): Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.21 [#291](https://github.com/openshift/cluster-api-provider-libvirt/pull/291)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...76effeca10bccccbc7a514f708122f660cde1183)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/026e9dff6a1c85235641aafa560499a283be8994)
* Revert "SPLAT-2167: Added dedicated hosts support for AWS" [#1434](https://github.com/openshift/machine-api-operator/pull/1434)
* [OCPBUGS-59627](https://issues.redhat.com/browse/OCPBUGS-59627): Adding E2E test for multi-subnet featureGate [#1425](https://github.com/openshift/machine-api-operator/pull/1425)
* [SPLAT-2167](https://issues.redhat.com/browse/SPLAT-2167): Added dedicated hosts support for AWS [#1419](https://github.com/openshift/machine-api-operator/pull/1419)
* [OCPCLOUD-3173](https://issues.redhat.com/browse/OCPCLOUD-3173): Validating webhooks for GCP ProvisioningModel [#1428](https://github.com/openshift/machine-api-operator/pull/1428)
* [OCPCLOUD-3080](https://issues.redhat.com/browse/OCPCLOUD-3080): Bump k8s dependencies to 1.34 [#1431](https://github.com/openshift/machine-api-operator/pull/1431)
* [OCPBUGS-63738](https://issues.redhat.com/browse/OCPBUGS-63738): Revert "SPLAT-2526: Refactor openshift-tests-ext" [#1426](https://github.com/openshift/machine-api-operator/pull/1426)
* [SPLAT-2526](https://issues.redhat.com/browse/SPLAT-2526): Refactor openshift-tests-ext [#1423](https://github.com/openshift/machine-api-operator/pull/1423)
* [OCPCLOUD-3072](https://issues.redhat.com/browse/OCPCLOUD-3072): Support AMD SEV-SNP on AWS [#1420](https://github.com/openshift/machine-api-operator/pull/1420)
* [OCPBUGS-62333](https://issues.redhat.com/browse/OCPBUGS-62333): Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 [#1421](https://github.com/openshift/machine-api-operator/pull/1421)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Fixed multi nic e2e to wait for node removal after machineset tests [#1417](https://github.com/openshift/machine-api-operator/pull/1417)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Adjusted machine e2e tests to wait for nodes to clean up [#1415](https://github.com/openshift/machine-api-operator/pull/1415)
* NO-JIRA: Update OWNERS_ALIASES [#1414](https://github.com/openshift/machine-api-operator/pull/1414)
* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): bump openshift/api [#1407](https://github.com/openshift/machine-api-operator/pull/1407)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4a9b90e306a04ddfacfa408609c98b48a1cdea17...026e9dff6a1c85235641aafa560499a283be8994)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ca0c19decec85967d149661825b334d0fa5ad7a8)
* [OCPBUGS-57364](https://issues.redhat.com/browse/OCPBUGS-57364): Fix IP address for default AWS DNS resolver [#5402](https://github.com/openshift/machine-config-operator/pull/5402)
* [MCO-1966](https://issues.redhat.com/browse/MCO-1966): Filter extended tests by platform [#5388](https://github.com/openshift/machine-config-operator/pull/5388)
* [OCPBUGS-63006](https://issues.redhat.com/browse/OCPBUGS-63006): Ensure MOSC updates rolls out new image built to nodes [#5383](https://github.com/openshift/machine-config-operator/pull/5383)
* [OCPBUGS-63593](https://issues.redhat.com/browse/OCPBUGS-63593): Need to persist NIC device names on RHEL9 [#5406](https://github.com/openshift/machine-config-operator/pull/5406)
* [CORS-4170](https://issues.redhat.com/browse/CORS-4170): Fix IP address for default Azure DNS resolver [#5401](https://github.com/openshift/machine-config-operator/pull/5401)
* [OCPBUGS-51041](https://issues.redhat.com/browse/OCPBUGS-51041): Update nodeip-configuration.service service files to use SyslogIdentifier [#4867](https://github.com/openshift/machine-config-operator/pull/4867)
* [OCPBUGS-59543](https://issues.redhat.com/browse/OCPBUGS-59543): Watch openshift-config CMs [#5181](https://github.com/openshift/machine-config-operator/pull/5181)
* [MCO-1911](https://issues.redhat.com/browse/MCO-1911): Use the right naming in migrated test cases [#5386](https://github.com/openshift/machine-config-operator/pull/5386)
* [OCPBUGS-60157](https://issues.redhat.com/browse/OCPBUGS-60157): ensure that images are rebuilt if they do not exist [#5268](https://github.com/openshift/machine-config-operator/pull/5268)
* [OCPBUGS-63734](https://issues.redhat.com/browse/OCPBUGS-63734): Fix error reporting on OS image failure [#5385](https://github.com/openshift/machine-config-operator/pull/5385)
* NO-ISSUE: Split extended directory [#5394](https://github.com/openshift/machine-config-operator/pull/5394)
* [MCO-1933](https://issues.redhat.com/browse/MCO-1933): Pick up openshift/kubernetes 1.34 rebase updates [#5380](https://github.com/openshift/machine-config-operator/pull/5380)
* [MCO-1886](https://issues.redhat.com/browse/MCO-1886): add the missing service to the expose ports 22623 and 22624 [#5371](https://github.com/openshift/machine-config-operator/pull/5371)
* [MCO-1228](https://issues.redhat.com/browse/MCO-1228): MCO-1728: Calculate MCP updated machine counts using MCN properties [#5141](https://github.com/openshift/machine-config-operator/pull/5141)
* [MCO-1911](https://issues.redhat.com/browse/MCO-1911): Migrate the mco_password test suite from the private repository to the MCO repository [#5374](https://github.com/openshift/machine-config-operator/pull/5374)
* [MCO-1898](https://issues.redhat.com/browse/MCO-1898): MCS serves image-aware first-boot config [#5357](https://github.com/openshift/machine-config-operator/pull/5357)
* [OCPBUGS-62714](https://issues.redhat.com/browse/OCPBUGS-62714): Temporary policy.json for PIS rpm-ostree rebasing [#5345](https://github.com/openshift/machine-config-operator/pull/5345)
* [MCO-1807](https://issues.redhat.com/browse/MCO-1807): Add CPMS support in the MCO's boot image controller [#5332](https://github.com/openshift/machine-config-operator/pull/5332)
* [OCPNODE-3806](https://issues.redhat.com/browse/OCPNODE-3806): Do not change default PSI setting in MCO [#5343](https://github.com/openshift/machine-config-operator/pull/5343)
* [OCPBUGS-62925](https://issues.redhat.com/browse/OCPBUGS-62925): RHEL10 RT kernel packages filtering [#5362](https://github.com/openshift/machine-config-operator/pull/5362)
* NO-ISSUE: Add AMI update automation script [#5351](https://github.com/openshift/machine-config-operator/pull/5351)
* [OCPBUGS-62376](https://issues.redhat.com/browse/OCPBUGS-62376): Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 [#5316](https://github.com/openshift/machine-config-operator/pull/5316)
* [OCPBUGS-52302](https://issues.redhat.com/browse/OCPBUGS-52302): MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields [#5282](https://github.com/openshift/machine-config-operator/pull/5282)
* [OCPBUGS-54682](https://issues.redhat.com/browse/OCPBUGS-54682): Fix - NetworkManager restart or crash renders br-ex unusable [#5304](https://github.com/openshift/machine-config-operator/pull/5304)
* [OCPNODE-3747](https://issues.redhat.com/browse/OCPNODE-3747): Disable Swap mode in Kubelet and enable drop-in directory [#5294](https://github.com/openshift/machine-config-operator/pull/5294)
* [OCPEDGE-2188](https://issues.redhat.com/browse/OCPEDGE-2188): embed fencing validator into TNF MCO [#5285](https://github.com/openshift/machine-config-operator/pull/5285)
* NO-JIRA: shiftstack: Update OWNERS [#5334](https://github.com/openshift/machine-config-operator/pull/5334)
* [OCPBUGS-62510](https://issues.redhat.com/browse/OCPBUGS-62510): Skip rpm-ostree local rebase if no PIS [#5333](https://github.com/openshift/machine-config-operator/pull/5333)
* [OCPBUGS-62493](https://issues.redhat.com/browse/OCPBUGS-62493): Only fire OSImageURLOverridden and set metrics on changes [#5319](https://github.com/openshift/machine-config-operator/pull/5319)
* [MCO-1844](https://issues.redhat.com/browse/MCO-1844): Remove MissingMachineConfig Alert [#5261](https://github.com/openshift/machine-config-operator/pull/5261)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize utility main logic [#5303](https://github.com/openshift/machine-config-operator/pull/5303)
* [OCPBUGS-59968](https://issues.redhat.com/browse/OCPBUGS-59968): Cert Controller should live fetch SAN IPs during cert rotation [#5245](https://github.com/openshift/machine-config-operator/pull/5245)
* [OCPBUGS-62341](https://issues.redhat.com/browse/OCPBUGS-62341): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5305](https://github.com/openshift/machine-config-operator/pull/5305)
* [OCPBUGS-60805](https://issues.redhat.com/browse/OCPBUGS-60805): configure-ovs: work around a Cisco switch issue [#5274](https://github.com/openshift/machine-config-operator/pull/5274)
* [MCO-408](https://issues.redhat.com/browse/MCO-408): Add OpenShift-native access to change logLevel for MachineConfigOperator components [#5291](https://github.com/openshift/machine-config-operator/pull/5291)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Networking: reset ovn-remote config and allow ovnkube controller to s… [#5123](https://github.com/openshift/machine-config-operator/pull/5123)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize file processing logic [#5298](https://github.com/openshift/machine-config-operator/pull/5298)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize redactor [#5295](https://github.com/openshift/machine-config-operator/pull/5295)
* [OCPBUGS-58198](https://issues.redhat.com/browse/OCPBUGS-58198): Fix MCP updated machine count for image mode disabling case [#5271](https://github.com/openshift/machine-config-operator/pull/5271)
* [MCO-1673](https://issues.redhat.com/browse/MCO-1673): Add Component Readiness tests for Azure boot image updates [#5257](https://github.com/openshift/machine-config-operator/pull/5257)
* [MCO-1840](https://issues.redhat.com/browse/MCO-1840): Remove MCN CRD cleanup cronjob [#5234](https://github.com/openshift/machine-config-operator/pull/5234)
* [OCPBUGS-60120](https://issues.redhat.com/browse/OCPBUGS-60120): Add nil/null checks to image registry secret decode [#5253](https://github.com/openshift/machine-config-operator/pull/5253)
* NO-ISSUE: Add delays to reduce TestOSBuildController failures [#5239](https://github.com/openshift/machine-config-operator/pull/5239)
* [MCO-1808](https://issues.redhat.com/browse/MCO-1808): MCO-1790: Implement Azure boot image updates [#5202](https://github.com/openshift/machine-config-operator/pull/5202)
* [OCPBUGS-61695](https://issues.redhat.com/browse/OCPBUGS-61695): Override NMState service definition [#5284](https://github.com/openshift/machine-config-operator/pull/5284)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages recording rule [#5242](https://github.com/openshift/machine-config-operator/pull/5242)
* [CORS-4170](https://issues.redhat.com/browse/CORS-4170): Extending in-cluster DNS support to Azure [#5216](https://github.com/openshift/machine-config-operator/pull/5216)
* [OCPBUGS-60537](https://issues.redhat.com/browse/OCPBUGS-60537): Machine-config controller should actively manage cordon while draining [#5276](https://github.com/openshift/machine-config-operator/pull/5276)
* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Recheck `generatedByControllerVersion` annotation prior to deleting a degraded MC [#5259](https://github.com/openshift/machine-config-operator/pull/5259)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b9dbf396412a463e6828332ce28a2ff514424e9e...ca0c19decec85967d149661825b334d0fa5ad7a8)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d958f0bf39ee93368c89919b7dbe23363f38493e)
* [METAL-1564](https://issues.redhat.com/browse/METAL-1564): Use available images [#147](https://github.com/openshift/image-customization-controller/pull/147)
* [OCPBUGS-62505](https://issues.redhat.com/browse/OCPBUGS-62505): Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/image-customization-controller/pull/148)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/20f6d615c03b9c579037cdcdc327bd2bcefde4e6...d958f0bf39ee93368c89919b7dbe23363f38493e)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/03609a989d93de635d03fff886afeffe150dc9a3)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Write sha checksum file to /coreos [#71](https://github.com/openshift/machine-os-images/pull/71)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Provide SHA checksum for aarch64 iso [#70](https://github.com/openshift/machine-os-images/pull/70)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Acquire aarch64 ISO at runtime [#67](https://github.com/openshift/machine-os-images/pull/67)
* [OCPBUGS-56049](https://issues.redhat.com/browse/OCPBUGS-56049): Force rebuild for OCP 4.21 [#66](https://github.com/openshift/machine-os-images/pull/66)
* [OCPBUGS-62596](https://issues.redhat.com/browse/OCPBUGS-62596): Updating ose-machine-os-images-container image to be consistent with ART for 4.21 [#69](https://github.com/openshift/machine-os-images/pull/69)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/64bfec79ae03b50b1da5b614a4cca2937ea9927d...03609a989d93de635d03fff886afeffe150dc9a3)
### [metallb-frr](https://github.com/openshift/frr/tree/be6377b44e9c303c42deacdcb7e0d3db77bbd383)
* Dockerfile: unpin FRR rpm [#110](https://github.com/openshift/frr/pull/110)
* [OCPBUGS-62371](https://issues.redhat.com/browse/OCPBUGS-62371): Bump the root image version [#109](https://github.com/openshift/frr/pull/109)
* [Full changelog](https://github.com/openshift/frr/compare/fc0fe74f94b415b28d772dbc61f6323171a11b50...be6377b44e9c303c42deacdcb7e0d3db77bbd383)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/4e1f998d6466274b58371180936b1959c49b035f)
* [OU-877](https://issues.redhat.com/browse/OU-877): perses e2e testing [#643](https://github.com/openshift/monitoring-plugin/pull/643)
* [OU-356](https://issues.redhat.com/browse/OU-356): feat: add scripts for translations upload and download from memsource [#640](https://github.com/openshift/monitoring-plugin/pull/640)
* [COO-1015](https://issues.redhat.com/browse/COO-1015): Automate testing of ACM alerting UI [#605](https://github.com/openshift/monitoring-plugin/pull/605)
* [COO-1311](https://issues.redhat.com/browse/COO-1311): Fix incorrect tooltip positioning for silenced alerts [#634](https://github.com/openshift/monitoring-plugin/pull/634)
* NO-JIRA: Set push as default image-build behavior [#630](https://github.com/openshift/monitoring-plugin/pull/630)
* [COO-1297](https://issues.redhat.com/browse/COO-1297): fix: set translation namespace from environment [#626](https://github.com/openshift/monitoring-plugin/pull/626)
* NO-JIRA: AGENTS.md [#620](https://github.com/openshift/monitoring-plugin/pull/620)
* NO-JIRA: chore: make dockerfile consistent with konflux, add make podman-cross-build command [#619](https://github.com/openshift/monitoring-plugin/pull/619)
* [OU-1031](https://issues.redhat.com/browse/OU-1031): Show the alert request error to the user [#607](https://github.com/openshift/monitoring-plugin/pull/607)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Regression for Silences [#615](https://github.com/openshift/monitoring-plugin/pull/615)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Add filtering regression tests [#613](https://github.com/openshift/monitoring-plugin/pull/613)
* [OU-1036](https://issues.redhat.com/browse/OU-1036): fetch metric labels from tenancy path when appropriate [#608](https://github.com/openshift/monitoring-plugin/pull/608)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): [Incidents] Regression for Charts Display [#609](https://github.com/openshift/monitoring-plugin/pull/609)
* NO-JIRA: Display incidents' last update time [#610](https://github.com/openshift/monitoring-plugin/pull/610)
* [OBSINTA-777](https://issues.redhat.com/browse/OBSINTA-777): Tests for Incidents Redux Related Regressions [#606](https://github.com/openshift/monitoring-plugin/pull/606)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Improve Cypress Incidents Testing Infrastructure [#595](https://github.com/openshift/monitoring-plugin/pull/595)
* [OU-1033](https://issues.redhat.com/browse/OU-1033): close the first dropdown when deselecting incident [#599](https://github.com/openshift/monitoring-plugin/pull/599)
* [OU-1032](https://issues.redhat.com/browse/OU-1032): resolve stale Redux state bug in incidents time range calculation [#598](https://github.com/openshift/monitoring-plugin/pull/598)
* [OCPBUGS-63056](https://issues.redhat.com/browse/OCPBUGS-63056), [OCPBUGS-63061](https://issues.redhat.com/browse/OCPBUGS-63061): Improve alignment with console SDK [#600](https://github.com/openshift/monitoring-plugin/pull/600)
* [OU-1030](https://issues.redhat.com/browse/OU-1030): revert most of my previous changes & avoid flickering when chang… [#596](https://github.com/openshift/monitoring-plugin/pull/596)
* [OU-995](https://issues.redhat.com/browse/OU-995): automation monitoring testing namespace level [#594](https://github.com/openshift/monitoring-plugin/pull/594)
* [OU-1024](https://issues.redhat.com/browse/OU-1024): Add translations for all strings in Incidents page [#570](https://github.com/openshift/monitoring-plugin/pull/570)
* [OU-1022](https://issues.redhat.com/browse/OU-1022): recalculate incident x values when filtering [#589](https://github.com/openshift/monitoring-plugin/pull/589)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): Display determistic start and end dates [#585](https://github.com/openshift/monitoring-plugin/pull/585)
* [OU-999](https://issues.redhat.com/browse/OU-999): automation monitoring plugin image injection and kubevirt installation cleanup working [#590](https://github.com/openshift/monitoring-plugin/pull/590)
* [OCPBUGS-62276](https://issues.redhat.com/browse/OCPBUGS-62276): allow additional TLS config [#580](https://github.com/openshift/monitoring-plugin/pull/580)
* [OCPBUGS-62454](https://issues.redhat.com/browse/OCPBUGS-62454): Updating monitoring-plugin-container image to be consistent with ART for 4.21 [#566](https://github.com/openshift/monitoring-plugin/pull/566)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): Render short-lived incidents and alerts [#581](https://github.com/openshift/monitoring-plugin/pull/581)
* [OU-1016](https://issues.redhat.com/browse/OU-1016): avoid displaying stale alerts data when selecting another incident detail [#573](https://github.com/openshift/monitoring-plugin/pull/573)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Sort alerts by start time [#577](https://github.com/openshift/monitoring-plugin/pull/577)
* NO-JIRA: fix handle empty queries when removing incident filters [#574](https://github.com/openshift/monitoring-plugin/pull/574)
* NO-JIRA: Fix tooltip vertical position [#576](https://github.com/openshift/monitoring-plugin/pull/576)
* [OU-986](https://issues.redhat.com/browse/OU-986): automation removing uncaught exception [#575](https://github.com/openshift/monitoring-plugin/pull/575)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Fix alert loading and processing [#569](https://github.com/openshift/monitoring-plugin/pull/569)
* [OU-1025](https://issues.redhat.com/browse/OU-1025): keep alerts populated for the incident, when the graph is hidden… [#572](https://github.com/openshift/monitoring-plugin/pull/572)
* NO-JIRA: chore: add unit test command and dependencies [#571](https://github.com/openshift/monitoring-plugin/pull/571)
* [OBSINTA-857](https://issues.redhat.com/browse/OBSINTA-857): Cypress add SKIP_ALL_INSTALL [#568](https://github.com/openshift/monitoring-plugin/pull/568)
* NO-JIRA: fix hermetic builds [#564](https://github.com/openshift/monitoring-plugin/pull/564)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents incident traversing robustness [#556](https://github.com/openshift/monitoring-plugin/pull/556)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents mocking metric name change workaround [#553](https://github.com/openshift/monitoring-plugin/pull/553)
* [COO-1134](https://issues.redhat.com/browse/COO-1134): fix: update vulnerable dependencies [#561](https://github.com/openshift/monitoring-plugin/pull/561)
* NO-JIRA: Update .gitignore (Cypress specific) [#558](https://github.com/openshift/monitoring-plugin/pull/558)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): REVERT add a 5 minute to the first alert timestamp [#559](https://github.com/openshift/monitoring-plugin/pull/559)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): add a 5 minute to the first alert timestamp [#550](https://github.com/openshift/monitoring-plugin/pull/550)
* NO-JIRA: automation log and debug mode in headless mode [#557](https://github.com/openshift/monitoring-plugin/pull/557)
* [OU-1015](https://issues.redhat.com/browse/OU-1015): fix: incidents dropdown stays open fix [#554](https://github.com/openshift/monitoring-plugin/pull/554)
* NO-JIRA: Update translations for incidents [#555](https://github.com/openshift/monitoring-plugin/pull/555)
* [OBSINTA-795](https://issues.redhat.com/browse/OBSINTA-795): Data Test Selectors for Incidents Page [#545](https://github.com/openshift/monitoring-plugin/pull/545)
* NO-JIRA: fix: immer dependency anr patternfly icons import [#542](https://github.com/openshift/monitoring-plugin/pull/542)
* [OU-989](https://issues.redhat.com/browse/OU-989): Kubevirt with fixes after namespace level and session handler [#543](https://github.com/openshift/monitoring-plugin/pull/543)
* NO-JIRA: Improve incidents timeline chart domain and loading UX [#551](https://github.com/openshift/monitoring-plugin/pull/551)
* [OU-1005](https://issues.redhat.com/browse/OU-1005): upgrade perses plugins [#540](https://github.com/openshift/monitoring-plugin/pull/540)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Fix alerts chart empty state [#549](https://github.com/openshift/monitoring-plugin/pull/549)
* [RHINENG-20863](https://issues.redhat.com/browse/RHINENG-20863): improved fetching logic for incidents [#546](https://github.com/openshift/monitoring-plugin/pull/546)
* NO-JIRA: Login validation for all session flows [#544](https://github.com/openshift/monitoring-plugin/pull/544)
* [OU-833](https://issues.redhat.com/browse/OU-833): fix 2 bugs for incidents page [#539](https://github.com/openshift/monitoring-plugin/pull/539)
* NO-JIRA: Cypress Testsuite – Enhance Session Management [#536](https://github.com/openshift/monitoring-plugin/pull/536)
* [OBSINTA-463](https://issues.redhat.com/browse/OBSINTA-463): Rename the cluster health metrics [#514](https://github.com/openshift/monitoring-plugin/pull/514)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Update layout and labels [#534](https://github.com/openshift/monitoring-plugin/pull/534)
* [OU-863](https://issues.redhat.com/browse/OU-863): fix step calculation to fix non existent data gaps [#535](https://github.com/openshift/monitoring-plugin/pull/535)
* [RHINENG-20701](https://issues.redhat.com/browse/RHINENG-20701): fix utc timestamps in chart tooltips [#531](https://github.com/openshift/monitoring-plugin/pull/531)
* [OBSINTA-798](https://issues.redhat.com/browse/OBSINTA-798): Cypress Incident Tests – Query Mocking [#521](https://github.com/openshift/monitoring-plugin/pull/521)
* NO-JIRA: set rules as silenced if all alerts are silenced [#533](https://github.com/openshift/monitoring-plugin/pull/533)
* [RHINENG-20667](https://issues.redhat.com/browse/RHINENG-20667): silenced alerts for chart and table [#530](https://github.com/openshift/monitoring-plugin/pull/530)
* [OU-658](https://issues.redhat.com/browse/OU-658): Major Refactor + Adding Namespace dropdown to admin pages [#483](https://github.com/openshift/monitoring-plugin/pull/483)
* NO-JIRA: automation - fix monitoring-plugin injection [#532](https://github.com/openshift/monitoring-plugin/pull/532)
* NO-JIRA: Update build-image.sh [#528](https://github.com/openshift/monitoring-plugin/pull/528)
* [OU-671](https://issues.redhat.com/browse/OU-671): Add Patternfly Theming to Perses [#522](https://github.com/openshift/monitoring-plugin/pull/522)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): fix clear filter bug with incident selected [#527](https://github.com/openshift/monitoring-plugin/pull/527)
* [OU-783](https://issues.redhat.com/browse/OU-783): Fit the alerts timeline to the actual data timespan [#529](https://github.com/openshift/monitoring-plugin/pull/529)
* [OU-727](https://issues.redhat.com/browse/OU-727): Filter incidents by max severity over time [#526](https://github.com/openshift/monitoring-plugin/pull/526)
* [OU-988](https://issues.redhat.com/browse/OU-988): automation - cleanup for all scripts and fix on MP injection [#523](https://github.com/openshift/monitoring-plugin/pull/523)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): Incident ID filter for the Incidents Page [#520](https://github.com/openshift/monitoring-plugin/pull/520)
* [OU-897](https://issues.redhat.com/browse/OU-897): automation OU-721 and hygiene of existing scripts [#519](https://github.com/openshift/monitoring-plugin/pull/519)
* NO-JIRA: automation - regression testing for metrics - changes [#516](https://github.com/openshift/monitoring-plugin/pull/516)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): improved filters for severity and state [#515](https://github.com/openshift/monitoring-plugin/pull/515)
* [OU-501](https://issues.redhat.com/browse/OU-501): automation - dashboards legacy and export csv [#517](https://github.com/openshift/monitoring-plugin/pull/517)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c6a042a64369147cf997e5e794b89e577a3c3532...4e1f998d6466274b58371180936b1959c49b035f)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/6284bf7d0e3163a827aff46afe1df285fbeab135)
* [OCPBUGS-62412](https://issues.redhat.com/browse/OCPBUGS-62412): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 [#110](https://github.com/openshift/multus-admission-controller/pull/110)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/fc73c803caa1140e5a9115ceeb0e38504b001722...6284bf7d0e3163a827aff46afe1df285fbeab135)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/85bd7c6d53b12f8a155edb4113efaec1d232fc9b)
* [OCPBUGS-45980](https://issues.redhat.com/browse/OCPBUGS-45980): Downstream merge 2025-10-29 [#76](https://github.com/openshift/multus-networkpolicy/pull/76)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/278ec20e795c3a590500e789716be7fcc4d7107b...85bd7c6d53b12f8a155edb4113efaec1d232fc9b)
### [must-gather](https://github.com/openshift/must-gather/tree/ba8e5fcbc4ce554f2871a1455cb32114a6fccc8a)
* [STOR-2691](https://issues.redhat.com/browse/STOR-2691): Collect VolumeAttributesClasses in must-gather [#509](https://github.com/openshift/must-gather/pull/509)
* [OSSM-10530](https://issues.redhat.com/browse/OSSM-10530): add Istio/Gateway API gather scripts [#503](https://github.com/openshift/must-gather/pull/503)
* [OCPBUGS-62551](https://issues.redhat.com/browse/OCPBUGS-62551): Updating ose-must-gather-container image to be consistent with ART for 4.21 [#507](https://github.com/openshift/must-gather/pull/507)
* [Full changelog](https://github.com/openshift/must-gather/compare/f0c64742c79afce5e367ca2c7b830ad448abe1df...ba8e5fcbc4ce554f2871a1455cb32114a6fccc8a)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/8bdeb1b47598f74f713ca8898734e4354e36637c)
* [OCPBUGS-62415](https://issues.redhat.com/browse/OCPBUGS-62415): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 [#97](https://github.com/openshift/bond-cni/pull/97)
* [Full changelog](https://github.com/openshift/bond-cni/compare/dd3c4d0b886138d974022b963e72f2e90293abfe...8bdeb1b47598f74f713ca8898734e4354e36637c)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/6841ce34a290098f99a961ded646513e12dbd66c)
* [OCPBUGS-62414](https://issues.redhat.com/browse/OCPBUGS-62414): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.21 [#137](https://github.com/openshift/network-metrics-daemon/pull/137)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b81340a9fc6963fa3d64d215a12e8528ca797131...6841ce34a290098f99a961ded646513e12dbd66c)
### [network-tools](https://github.com/openshift/network-tools/tree/b3053c24f9799e8357fbed7af82cd8e4643bfab9)
* NO-JIRA: Fix jira ID for new members [#164](https://github.com/openshift/network-tools/pull/164)
* [OCPBUGS-62553](https://issues.redhat.com/browse/OCPBUGS-62553): Updating ose-network-tools-container image to be consistent with ART for 4.21 [#162](https://github.com/openshift/network-tools/pull/162)
* NO-JIRA:Add two new team members [#163](https://github.com/openshift/network-tools/pull/163)
* NO-JIRA: Add Marty P to bug tooling [#161](https://github.com/openshift/network-tools/pull/161)
* [OCPBUGS-53196](https://issues.redhat.com/browse/OCPBUGS-53196): Update references of `master` to `main` [#160](https://github.com/openshift/network-tools/pull/160)
* [Full changelog](https://github.com/openshift/network-tools/compare/26d09174cbd92386469e777e3bf49bfa95d035d5...b3053c24f9799e8357fbed7af82cd8e4643bfab9)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f730a7e683819ee79a6bf46963864904278f9f08)
* [CNV-71610](https://issues.redhat.com/browse/CNV-71610): Allow to delete UDN/CUDN object directly from UserDefinedNe… [#296](https://github.com/openshift/networking-console-plugin/pull/296)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): Improve MTU validation in VM Networks form [#295](https://github.com/openshift/networking-console-plugin/pull/295)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): VirtualMachine networks enhancements [#281](https://github.com/openshift/networking-console-plugin/pull/281)
* [CNV-71649](https://issues.redhat.com/browse/CNV-71649): hide NAD create button for non-admin users [#294](https://github.com/openshift/networking-console-plugin/pull/294)
* [CNV-71915](https://issues.redhat.com/browse/CNV-71915): display the Description field for NetworkAttachmentDefinition [#293](https://github.com/openshift/networking-console-plugin/pull/293)
* [CNV-70776](https://issues.redhat.com/browse/CNV-70776): Problematic suggestion for UDN subnet and a typo [#291](https://github.com/openshift/networking-console-plugin/pull/291)
* [CNV-71585](https://issues.redhat.com/browse/CNV-71585): fix primaryUDN broken link and have red hat docs as default documentation [#292](https://github.com/openshift/networking-console-plugin/pull/292)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): replace useProjectsWithPrimaryUserDefinedLabel hook for VM networks [#287](https://github.com/openshift/networking-console-plugin/pull/287)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): fix selecting multiple projects for VM network [#286](https://github.com/openshift/networking-console-plugin/pull/286)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): rename VirtualMachine networks to Virtual Machine Networks [#289](https://github.com/openshift/networking-console-plugin/pull/289)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): show VirtualMachine network pages only if nmstate plugin is installed [#288](https://github.com/openshift/networking-console-plugin/pull/288)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): SelectTypeahead selection fixes [#285](https://github.com/openshift/networking-console-plugin/pull/285)
* [CNV-60063](https://issues.redhat.com/browse/CNV-60063): fixing the Create ClusterUserDefinedNetwork form appearance [#280](https://github.com/openshift/networking-console-plugin/pull/280)
* [CNV-62168](https://issues.redhat.com/browse/CNV-62168): Typos in Networking Pages [#277](https://github.com/openshift/networking-console-plugin/pull/277)
* [CNV-56937](https://issues.redhat.com/browse/CNV-56937): Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin [#284](https://github.com/openshift/networking-console-plugin/pull/284)
* [CNV-56937](https://issues.redhat.com/browse/CNV-56937): Hiding the option to create cluster user defined networks or non-priv users [#283](https://github.com/openshift/networking-console-plugin/pull/283)
* [CNV-61569](https://issues.redhat.com/browse/CNV-61569): Mark OVN K8s secondary localnet as deprecated [#282](https://github.com/openshift/networking-console-plugin/pull/282)
* [OCPBUGS-62442](https://issues.redhat.com/browse/OCPBUGS-62442): Updating networking-console-plugin-container image to be consistent with ART for 4.21 [#279](https://github.com/openshift/networking-console-plugin/pull/279)
* [CNV-70018](https://issues.redhat.com/browse/CNV-70018): fix null error [#278](https://github.com/openshift/networking-console-plugin/pull/278)
* Merge [#273](https://github.com/openshift/networking-console-plugin/pull/273)
* [CNV-59876](https://issues.redhat.com/browse/CNV-59876): use correct name space when switching tabs [#276](https://github.com/openshift/networking-console-plugin/pull/276)
* [OCPBUGS-61531](https://issues.redhat.com/browse/OCPBUGS-61531): show VM network menu only on admin [#275](https://github.com/openshift/networking-console-plugin/pull/275)
* [OCPBUGS-61548](https://issues.redhat.com/browse/OCPBUGS-61548): use console extension to render same nad actions [#274](https://github.com/openshift/networking-console-plugin/pull/274)
* [CNV-59629](https://issues.redhat.com/browse/CNV-59629): set default MTU visible in form and yaml [#272](https://github.com/openshift/networking-console-plugin/pull/272)
* [CNV-68685](https://issues.redhat.com/browse/CNV-68685): add primary UDN label info to VirtualMachine network creation form [#271](https://github.com/openshift/networking-console-plugin/pull/271)
* [CNV-68643](https://issues.redhat.com/browse/CNV-68643): fix documentation links [#270](https://github.com/openshift/networking-console-plugin/pull/270)
* [CNV-68676](https://issues.redhat.com/browse/CNV-68676): fix wizard cancel button [#269](https://github.com/openshift/networking-console-plugin/pull/269)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9de315953ad1b357c35003937a1a2f27aa9068e0...f730a7e683819ee79a6bf46963864904278f9f08)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/30e83e611c277c0fe5a633a5c3e6f8d5af212aa6)
* [OCPBUGS-62418](https://issues.redhat.com/browse/OCPBUGS-62418): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 [#51](https://github.com/openshift/cloud-provider-nutanix/pull/51)
* NO-JIRA: Update OWNERS [#50](https://github.com/openshift/cloud-provider-nutanix/pull/50)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b575ef15f13e1434c793ae50824fd0676480be05...30e83e611c277c0fe5a633a5c3e6f8d5af212aa6)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be)
* [OCPCLOUD-3091](https://issues.redhat.com/browse/OCPCLOUD-3091): Bump k8s dependencies to 1.34 [#124](https://github.com/openshift/machine-api-provider-nutanix/pull/124)
* [OCPBUGS-62378](https://issues.redhat.com/browse/OCPBUGS-62378): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 [#123](https://github.com/openshift/machine-api-provider-nutanix/pull/123)
* NO-JIRA: Update OWNERS [#122](https://github.com/openshift/machine-api-provider-nutanix/pull/122)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/3200ddef48a5a8d47b96539419c51f3619cb1fd5...b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/9db210272bb2e085ff975022f531b404ee7f491e)
* [OCPBUGS-62584](https://issues.redhat.com/browse/OCPBUGS-62584): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.21 [#144](https://github.com/openshift/oauth-apiserver/pull/144)
* [OCPBUGS-62612](https://issues.redhat.com/browse/OCPBUGS-62612): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#148](https://github.com/openshift/oauth-apiserver/pull/148)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#146](https://github.com/openshift/oauth-apiserver/pull/146)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#142](https://github.com/openshift/oauth-apiserver/pull/142)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa...9db210272bb2e085ff975022f531b404ee7f491e)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/39f8426add0e2b669cae3232c3fb793ad1b6bb07)
* [OCPBUGS-62590](https://issues.redhat.com/browse/OCPBUGS-62590): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.21 [#337](https://github.com/openshift/oauth-proxy/pull/337)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991...39f8426add0e2b669cae3232c3fb793ad1b6bb07)
### [oauth-server](https://github.com/openshift/oauth-server/tree/34b3502e2a62f27fba5e5f1a424ddc3e0c1538e0)
* [OCPBUGS-62391](https://issues.redhat.com/browse/OCPBUGS-62391): Updating oauth-server-container image to be consistent with ART for 4.21 [#199](https://github.com/openshift/oauth-server/pull/199)
* [Full changelog](https://github.com/openshift/oauth-server/compare/81098796234cbe75e656ffddd8a015953e0bb1c7...34b3502e2a62f27fba5e5f1a424ddc3e0c1538e0)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/efa9f7a87f75fedf0c0b2adf99e361e0cb17d7e2)
* [CLID-477](https://issues.redhat.com/browse/CLID-477): Add in missing temp GraphDataDir in cincinnati tests [#1304](https://github.com/openshift/oc-mirror/pull/1304)
* [OCPBUGS-61497](https://issues.redhat.com/browse/OCPBUGS-61497): fix: return only requested version [#1299](https://github.com/openshift/oc-mirror/pull/1299)
* NO-JIRA: Changes the dependabot directories [#1301](https://github.com/openshift/oc-mirror/pull/1301)
* [CLID-474](https://issues.redhat.com/browse/CLID-474): add AI configuration [#1298](https://github.com/openshift/oc-mirror/pull/1298)
* [CLID-405](https://issues.redhat.com/browse/CLID-405): move v2 code to base folder [#1294](https://github.com/openshift/oc-mirror/pull/1294)
* no-jira: v2: add golangci-lint v2 config [#1295](https://github.com/openshift/oc-mirror/pull/1295)
* [CLID-460](https://issues.redhat.com/browse/CLID-460): Adds a column with the actual implemented logic [#1288](https://github.com/openshift/oc-mirror/pull/1288)
* [CLID-443](https://issues.redhat.com/browse/CLID-443): add mandatory --v1/--v2 flag [#1284](https://github.com/openshift/oc-mirror/pull/1284)
* [OCPBUGS-60571](https://issues.redhat.com/browse/OCPBUGS-60571): reject configurations with duplicated keys and/or entries [#1275](https://github.com/openshift/oc-mirror/pull/1275)
* [CLID-430](https://issues.redhat.com/browse/CLID-430): migration to containers/container-libs [#1255](https://github.com/openshift/oc-mirror/pull/1255)
* [OCPBUGS-55489](https://issues.redhat.com/browse/OCPBUGS-55489): removes unintended exec permissions [#1285](https://github.com/openshift/oc-mirror/pull/1285)
* [OCPBUGS-56398](https://issues.redhat.com/browse/OCPBUGS-56398): Removes the clean up of logs directory [#1289](https://github.com/openshift/oc-mirror/pull/1289)
* [OCPBUGS-62478](https://issues.redhat.com/browse/OCPBUGS-62478): Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) [#1283](https://github.com/openshift/oc-mirror/pull/1283)
* [OCPBUGS-62478](https://issues.redhat.com/browse/OCPBUGS-62478): Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 [#1280](https://github.com/openshift/oc-mirror/pull/1280)
* [OCPBUGS-60929](https://issues.redhat.com/browse/OCPBUGS-60929): generate the archive only after mirroring [#1272](https://github.com/openshift/oc-mirror/pull/1272)
* [OCPBUGS-62106](https://issues.redhat.com/browse/OCPBUGS-62106): v2/cli: show binary version in output [#1273](https://github.com/openshift/oc-mirror/pull/1273)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b598121bb70555120dde8d60fa9fbcde4f7b3d65...efa9f7a87f75fedf0c0b2adf99e361e0cb17d7e2)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/009fb1922be173b2058253299f645c3f8e03d401)
* NO-ISSUE: Synchronize From Upstream Repositories [#556](https://github.com/openshift/operator-framework-operator-controller/pull/556)
* [OCPQE-31108](https://issues.redhat.com/browse/OCPQE-31108): add disconnected environment support with custom prow job for migrated qe cases [#557](https://github.com/openshift/operator-framework-operator-controller/pull/557)
* [OPRUN-4251](https://issues.redhat.com/browse/OPRUN-4251): [Default Catalog Tests] Upgrade go 1.24.6 and dependencies ( OPM 1.57.0 ; max version that works ) [#554](https://github.com/openshift/operator-framework-operator-controller/pull/554)
* NO-ISSUE: Synchronize From Upstream Repositories [#555](https://github.com/openshift/operator-framework-operator-controller/pull/555)
* NO-ISSUE: Synchronize From Upstream Repositories [#548](https://github.com/openshift/operator-framework-operator-controller/pull/548)
* [OPRUN-4252](https://issues.redhat.com/browse/OPRUN-4252): fix(OTE): fix OpenShift Kubernetes replace version format [#549](https://github.com/openshift/operator-framework-operator-controller/pull/549)
* [OPRUN-4252](https://issues.redhat.com/browse/OPRUN-4252): [OTE]: Upgrade dependencies used and to go 1.24.6 ( Aim for compatibility and maintainability ) [#544](https://github.com/openshift/operator-framework-operator-controller/pull/544)
* [OCPQE-30671](https://issues.redhat.com/browse/OCPQE-30671): Add [OTP] to migrated tests-private cases Per ERT [#547](https://github.com/openshift/operator-framework-operator-controller/pull/547)
* [OPRUN-4212](https://issues.redhat.com/browse/OPRUN-4212): [OTE]: Add webhook cleanup validation on extension uninstall [#542](https://github.com/openshift/operator-framework-operator-controller/pull/542)
* [OCPBUGS-62942](https://issues.redhat.com/browse/OCPBUGS-62942): Synchronize from Upstream [#546](https://github.com/openshift/operator-framework-operator-controller/pull/546)
* NO-ISSUE: Synchronize From Upstream Repositories [#540](https://github.com/openshift/operator-framework-operator-controller/pull/540)
* [OCPQE-31083](https://issues.redhat.com/browse/OCPQE-31083): Update OwnSingle template to use inline.watchNamespace for QE cases [#541](https://github.com/openshift/operator-framework-operator-controller/pull/541)
* NO-ISSUE: Synchronize From Upstream Repositories [#538](https://github.com/openshift/operator-framework-operator-controller/pull/538)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c69 ) [#539](https://github.com/openshift/operator-framework-operator-controller/pull/539)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups [#536](https://github.com/openshift/operator-framework-operator-controller/pull/536)
* NO-ISSUE: Update to new feature-gate options in helm [#537](https://github.com/openshift/operator-framework-operator-controller/pull/537)
* NO-ISSUE: Synchronize From Upstream Repositories [#532](https://github.com/openshift/operator-framework-operator-controller/pull/532)
* [OCPBUGS-63347](https://issues.redhat.com/browse/OCPBUGS-63347): Define Default timeouts and apply their usage accross to avoid flakes [#535](https://github.com/openshift/operator-framework-operator-controller/pull/535)
* NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes [#528](https://github.com/openshift/operator-framework-operator-controller/pull/528)
* [OPRUN-4181](https://issues.redhat.com/browse/OPRUN-4181): UPSTREAM: <carry>: support singleown cases in disconnected [#524](https://github.com/openshift/operator-framework-operator-controller/pull/524)
* NO-ISSUE: Synchronize From Upstream Repositories [#526](https://github.com/openshift/operator-framework-operator-controller/pull/526)
* [OPRUN-4194](https://issues.redhat.com/browse/OPRUN-4194): Update OCP catalogs to v4.21 [#518](https://github.com/openshift/operator-framework-operator-controller/pull/518)
* NO-ISSUE: Synchronize From Upstream Repositories [#523](https://github.com/openshift/operator-framework-operator-controller/pull/523)
* [OPRUN-4197](https://issues.redhat.com/browse/OPRUN-4197): Upgrade OCP image from 4.20 to 4.21 [#517](https://github.com/openshift/operator-framework-operator-controller/pull/517)
* [OPRUN-4134](https://issues.redhat.com/browse/OPRUN-4134): Add 2 new tests for Single/Own Namespace install mode support [#502](https://github.com/openshift/operator-framework-operator-controller/pull/502)
* [OPRUN-4199](https://issues.redhat.com/browse/OPRUN-4199): [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml [#521](https://github.com/openshift/operator-framework-operator-controller/pull/521)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Synchronize from upstream [#519](https://github.com/openshift/operator-framework-operator-controller/pull/519)
* [OPRUN-4176](https://issues.redhat.com/browse/OPRUN-4176): Consolidate build API [#514](https://github.com/openshift/operator-framework-operator-controller/pull/514)
* [OPRUN-4156](https://issues.redhat.com/browse/OPRUN-4156): UPSTREAM: <carry>: support webhook case in disconnected [#508](https://github.com/openshift/operator-framework-operator-controller/pull/508)
* NO-ISSUE: Synchronize From Upstream Repositories [#512](https://github.com/openshift/operator-framework-operator-controller/pull/512)
* [OPRUN-4176](https://issues.redhat.com/browse/OPRUN-4176): Update does-not-exist and simple install to work i… [#510](https://github.com/openshift/operator-framework-operator-controller/pull/510)
* NO-ISSUE: Clean up cp-manifests [#511](https://github.com/openshift/operator-framework-operator-controller/pull/511)
* NO-ISSUE: Synchronize From Upstream Repositories [#506](https://github.com/openshift/operator-framework-operator-controller/pull/506)
* NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite [#507](https://github.com/openshift/operator-framework-operator-controller/pull/507)
* NO-ISSUE: Fix VERSION replacement in catalog bindata [#505](https://github.com/openshift/operator-framework-operator-controller/pull/505)
* NO-ISSUE: Synchronize From Upstream Repositories [#498](https://github.com/openshift/operator-framework-operator-controller/pull/498)
* [OCPBUGS-62753](https://issues.redhat.com/browse/OCPBUGS-62753): for incompatible test add func to wait SA creation [#501](https://github.com/openshift/operator-framework-operator-controller/pull/501)
* NO-ISSUE: Synchronize From Upstream Repositories [#497](https://github.com/openshift/operator-framework-operator-controller/pull/497)
* [OPRUN-4169](https://issues.redhat.com/browse/OPRUN-4169): OTE building controller image [#483](https://github.com/openshift/operator-framework-operator-controller/pull/483)
* [OPRUN-4080](https://issues.redhat.com/browse/OPRUN-4080): Remove kustomize manifests from images and repo [#494](https://github.com/openshift/operator-framework-operator-controller/pull/494)
* NO-ISSUE: Synchronize From Upstream Repositories [#493](https://github.com/openshift/operator-framework-operator-controller/pull/493)
* [OCPBUGS-62372](https://issues.redhat.com/browse/OCPBUGS-62372): Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 [#491](https://github.com/openshift/operator-framework-operator-controller/pull/491)
* NO-ISSUE: Synchronize From Upstream Repositories [#492](https://github.com/openshift/operator-framework-operator-controller/pull/492)
* [OCPBUGS-62370](https://issues.redhat.com/browse/OCPBUGS-62370): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 [#490](https://github.com/openshift/operator-framework-operator-controller/pull/490)
* [OCPQE-30671](https://issues.redhat.com/browse/OCPQE-30671): UPSTREAM: <carry>: migrate more cases from tests-private [#488](https://github.com/openshift/operator-framework-operator-controller/pull/488)
* NO-ISSUE: Synchronize From Upstream Repositories [#489](https://github.com/openshift/operator-framework-operator-controller/pull/489)
* [OPRUN-4160](https://issues.redhat.com/browse/OPRUN-4160): Fix cp-manifests copying of helm charts [#482](https://github.com/openshift/operator-framework-operator-controller/pull/482)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#487](https://github.com/openshift/operator-framework-operator-controller/pull/487)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#484](https://github.com/openshift/operator-framework-operator-controller/pull/484)
* NO-ISSUE: Add pedjak and trgeiger as reviewers [#463](https://github.com/openshift/operator-framework-operator-controller/pull/463)
* NO-ISSUE: Synchronize From Upstream Repositories [#480](https://github.com/openshift/operator-framework-operator-controller/pull/480)
* NO-ISSUE: Synchronize From Upstream Repositories [#479](https://github.com/openshift/operator-framework-operator-controller/pull/479)
* [OCPQE-29416](https://issues.redhat.com/browse/OCPQE-29416): Init OLMv1 OTE Framework for tests-private to migrate first case [#467](https://github.com/openshift/operator-framework-operator-controller/pull/467)
* [OPRUN-4076](https://issues.redhat.com/browse/OPRUN-4076), [OPRUN-4078](https://issues.redhat.com/browse/OPRUN-4078): Replace kustomize config with helm config [#475](https://github.com/openshift/operator-framework-operator-controller/pull/475)
* NO-ISSUE: add jiazha to approvers [#477](https://github.com/openshift/operator-framework-operator-controller/pull/477)
* NO-ISSUE: Synchronize From Upstream Repositories [#476](https://github.com/openshift/operator-framework-operator-controller/pull/476)
* NO-ISSUE: Synchronize From Upstream Repositories [#473](https://github.com/openshift/operator-framework-operator-controller/pull/473)
* NO-ISSUE: Synchronize From Upstream Repositories [#471](https://github.com/openshift/operator-framework-operator-controller/pull/471)
* NO-ISSUE: Synchronize From Upstream Repositories [#465](https://github.com/openshift/operator-framework-operator-controller/pull/465)
* NO-ISSUE: Grant QE approver permissions for OTE contributions [#457](https://github.com/openshift/operator-framework-operator-controller/pull/457)
* NO-ISSUE: Synchronize From Upstream Repositories [#464](https://github.com/openshift/operator-framework-operator-controller/pull/464)
* NO-ISSUE: Synchronize From Upstream Repositories [#456](https://github.com/openshift/operator-framework-operator-controller/pull/456)
* [OCPBUGS-60868](https://issues.redhat.com/browse/OCPBUGS-60868): Revert "Handle service-ca cert availability/rotation" [#460](https://github.com/openshift/operator-framework-operator-controller/pull/460)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/3e2401f23ef666e8f33789a397d81a7d352b0a33...009fb1922be173b2058253299f645c3f8e03d401)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6bca7ff2a5adb91ddc8db30b0f5c1c983027b7df)
* [CNTRLPLANE-1722](https://issues.redhat.com/browse/CNTRLPLANE-1722): Create separate Go module for test extension [#571](https://github.com/openshift/openshift-apiserver/pull/571)
* NO-JIRA: Created an OWNERS file for the tests-extension directory for separate ote scaffold [#567](https://github.com/openshift/openshift-apiserver/pull/567)
* [OCPBUGS-62516](https://issues.redhat.com/browse/OCPBUGS-62516): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 [#560](https://github.com/openshift/openshift-apiserver/pull/560)
* [OCPBUGS-61768](https://issues.redhat.com/browse/OCPBUGS-61768): update pkg/image/OWNERS [#555](https://github.com/openshift/openshift-apiserver/pull/555)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#556](https://github.com/openshift/openshift-apiserver/pull/556)
* [OCPBUGS-61228](https://issues.redhat.com/browse/OCPBUGS-61228): Bump Route generation when spec is updated [#550](https://github.com/openshift/openshift-apiserver/pull/550)
* [OCPBUGS-37215](https://issues.redhat.com/browse/OCPBUGS-37215): pkg/image: conditionally parse raw image manifest [#551](https://github.com/openshift/openshift-apiserver/pull/551)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#549](https://github.com/openshift/openshift-apiserver/pull/549)
* [OCPBUGS-57474](https://issues.redhat.com/browse/OCPBUGS-57474): ensure cache invalidation after a time [#547](https://github.com/openshift/openshift-apiserver/pull/547)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a1535bf4ed12bd3210135bbe459f9324875f24ce...6bca7ff2a5adb91ddc8db30b0f5c1c983027b7df)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/433bd500afb879dd82e27336359cd4e3051245b0)
* [OCPBUGS-62559](https://issues.redhat.com/browse/OCPBUGS-62559): Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.21 [#414](https://github.com/openshift/openshift-controller-manager/pull/414)
* [OCPBUGS-61899](https://issues.redhat.com/browse/OCPBUGS-61899): CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging [#419](https://github.com/openshift/openshift-controller-manager/pull/419)
* [CNTRLPLANE-1308](https://issues.redhat.com/browse/CNTRLPLANE-1308): set up openshift-tests-extension for openshift-controller-manager and add a sanity test [#417](https://github.com/openshift/openshift-controller-manager/pull/417)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/d9e543dd31e981f279c447e4f92f0dac3f665f9e...433bd500afb879dd82e27336359cd4e3051245b0)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8)
* [OCPBUGS-62431](https://issues.redhat.com/browse/OCPBUGS-62431): Updating openshift-state-metrics-container image to be consistent with ART for 4.21 [#126](https://github.com/openshift/openshift-state-metrics/pull/126)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/b04e2ef05498c2a4504bd9396a3290c4f263fc37...ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/19b666d6f3675775e0cdf2e0a9f243800c3c5da6)
* [OCPBUGS-62567](https://issues.redhat.com/browse/OCPBUGS-62567): Updating openstack-cluster-api-controllers-container image to be cons… [#379](https://github.com/openshift/cluster-api-provider-openstack/pull/379)
* NO-JIRA: Fix internal vendoring [#378](https://github.com/openshift/cluster-api-provider-openstack/pull/378)
* NO-JIRA: shiftstack: Update OWNERS [#377](https://github.com/openshift/cluster-api-provider-openstack/pull/377)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...19b666d6f3675775e0cdf2e0a9f243800c3c5da6)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/2011501b227250ea1ee403b6a93aa4d17dd19ad1)
* [OCPBUGS-62473](https://issues.redhat.com/browse/OCPBUGS-62473): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/machine-api-provider-openstack/pull/138)
* NO-JIRA: shiftstack: Update OWNERS [#139](https://github.com/openshift/machine-api-provider-openstack/pull/139)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5085f184c7d2ed21f36e5e3fe65bf023b38afe67...2011501b227250ea1ee403b6a93aa4d17dd19ad1)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72)
* [OCPBUGS-62455](https://issues.redhat.com/browse/OCPBUGS-62455): Updating openstack-resource-controller-container image to be consistent with ART for 4.21 [#22](https://github.com/openshift/openstack-resource-controller/pull/22)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc...70f5ad34915041c82ad0a8ed6ea64bd8859d1e72)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d9496b7fafa32956655b40592761887bea8e9220)
* NO-ISSUE: Synchronize From Upstream Repositories [#1151](https://github.com/openshift/operator-framework-olm/pull/1151)
* NO-ISSUE: Synchronize From Upstream Repositories [#1150](https://github.com/openshift/operator-framework-olm/pull/1150)
* NO-ISSUE: Remove no longer required replaces [#1143](https://github.com/openshift/operator-framework-olm/pull/1143)
* NO-ISSUE: Synchronize From Upstream Repositories [#1142](https://github.com/openshift/operator-framework-olm/pull/1142)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): add Label OTP per ERT required [#1141](https://github.com/openshift/operator-framework-olm/pull/1141)
* NO-ISSUE: Synchronize From Upstream Repositories [#1140](https://github.com/openshift/operator-framework-olm/pull/1140)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): Continue migration of OLM v0 test cases from tests-private to tests-extension [#1137](https://github.com/openshift/operator-framework-olm/pull/1137)
* NO-ISSUE: Synchronize From Upstream Repositories [#1135](https://github.com/openshift/operator-framework-olm/pull/1135)
* NO-ISSUE: Synchronize From Upstream Repositories [#1134](https://github.com/openshift/operator-framework-olm/pull/1134)
* NO-ISSUE: Update verify_commits.sh to use main branch [#1127](https://github.com/openshift/operator-framework-olm/pull/1127)
* [OCPQE-30995](https://issues.redhat.com/browse/OCPQE-30995): Define AI Guide for OLMv0 QE Migration cases [#1128](https://github.com/openshift/operator-framework-olm/pull/1128)
* [OCPBUGS-59768](https://issues.redhat.com/browse/OCPBUGS-59768): Synchronize From Upstream Repositories [#1129](https://github.com/openshift/operator-framework-olm/pull/1129)
* [OCPQE-30680](https://issues.redhat.com/browse/OCPQE-30680): migrate opm cases to OTE [#1126](https://github.com/openshift/operator-framework-olm/pull/1126)
* [OCPQE-30741](https://issues.redhat.com/browse/OCPQE-30741): support opm cases [#1121](https://github.com/openshift/operator-framework-olm/pull/1121)
* [OCPQE-30781](https://issues.redhat.com/browse/OCPQE-30781): support hypershift binary [#1119](https://github.com/openshift/operator-framework-olm/pull/1119)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): migrate more cases from tests-private to make layout [#1118](https://github.com/openshift/operator-framework-olm/pull/1118)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): correct suite name [#1117](https://github.com/openshift/operator-framework-olm/pull/1117)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): enhance filters to add more suites [#1116](https://github.com/openshift/operator-framework-olm/pull/1116)
* NO-ISSUE: Synchronize From Upstream Repositories [#1115](https://github.com/openshift/operator-framework-olm/pull/1115)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add testing framework based on OTE and the first tests-private case [#1113](https://github.com/openshift/operator-framework-olm/pull/1113)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): move golangci-lint and go-bindata to new location to fix sync [#1114](https://github.com/openshift/operator-framework-olm/pull/1114)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add OTE into olmv0 with new location [#1108](https://github.com/openshift/operator-framework-olm/pull/1108)
* NO-ISSUE: Synchronize From Upstream Repositories [#1112](https://github.com/openshift/operator-framework-olm/pull/1112)
* NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers [#1110](https://github.com/openshift/operator-framework-olm/pull/1110)
* Revert "OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0" [#1109](https://github.com/openshift/operator-framework-olm/pull/1109)
* NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 [#1106](https://github.com/openshift/operator-framework-olm/pull/1106)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): UPSTREAM: <carry>: add OTE into olmv0 [#1105](https://github.com/openshift/operator-framework-olm/pull/1105)
* NO-ISSUE: set package-server-manager as default container [#1104](https://github.com/openshift/operator-framework-olm/pull/1104)
* NO-ISSUE: Synchronize From Upstream Repositories [#1103](https://github.com/openshift/operator-framework-olm/pull/1103)
* NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 [#1100](https://github.com/openshift/operator-framework-olm/pull/1100)
* NO-ISSUE: Synchronize From Upstream Repositories [#1101](https://github.com/openshift/operator-framework-olm/pull/1101)
* NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 [#1094](https://github.com/openshift/operator-framework-olm/pull/1094)
* NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions [#1092](https://github.com/openshift/operator-framework-olm/pull/1092)
* NO-ISSUE: Synchronize From Upstream Repositories [#1088](https://github.com/openshift/operator-framework-olm/pull/1088)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/10d327b38876b2fbc654ddc54eee6199ea0dbbb8...d9496b7fafa32956655b40592761887bea8e9220)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/bc8be0c487ae70b5b268e3251a599265499101fa)
* [OPRUN-4204](https://issues.redhat.com/browse/OPRUN-4204): Update OCP Catalog index from 4.20 to 4.21 [#679](https://github.com/operator-framework/operator-marketplace/pull/679)
* [OPRUN-4248](https://issues.redhat.com/browse/OPRUN-4248): (Minor Upgrades) Upgrade dependencies and go version from 1.24.4 to 1.24.6 [#683](https://github.com/operator-framework/operator-marketplace/pull/683)
* NO-ISSUE: add jiazha to approvers [#675](https://github.com/operator-framework/operator-marketplace/pull/675)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 [#682](https://github.com/operator-framework/operator-marketplace/pull/682)
* NO-ISSUE: 🌱 Upgrade dependencies ( github.com/openshift/api, github.com/openshift/library-go and indirect github.com/prometheus/procfs ) [#681](https://github.com/operator-framework/operator-marketplace/pull/681)
* NO-ISSUE: Upgrade OCP dependencies [#680](https://github.com/operator-framework/operator-marketplace/pull/680)
* [OPRUN-4198](https://issues.redhat.com/browse/OPRUN-4198): Upgrade deps to have compatible k8s version [#676](https://github.com/operator-framework/operator-marketplace/pull/676)
* [OPRUN-4198](https://issues.redhat.com/browse/OPRUN-4198): upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo [#677](https://github.com/operator-framework/operator-marketplace/pull/677)
* NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 [#678](https://github.com/operator-framework/operator-marketplace/pull/678)
* [OCPBUGS-62384](https://issues.redhat.com/browse/OCPBUGS-62384): Updating marketplace-operator-container image to be consistent with ART for 4.21 [#674](https://github.com/operator-framework/operator-marketplace/pull/674)
* NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 [#661](https://github.com/operator-framework/operator-marketplace/pull/661)
* [OCPBUGS-62132](https://issues.redhat.com/browse/OCPBUGS-62132): Remove Expect func so that the test case can use the retry logic [#665](https://github.com/operator-framework/operator-marketplace/pull/665)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 [#658](https://github.com/operator-framework/operator-marketplace/pull/658)
* NO-ISSUE: Update CRD version installed via makefile target [#648](https://github.com/operator-framework/operator-marketplace/pull/648)
* NO-ISSUE: Fix hyperlink [#651](https://github.com/operator-framework/operator-marketplace/pull/651)
* [OCPBUGS-60669](https://issues.redhat.com/browse/OCPBUGS-60669): Add NetworkPolicy for hypershift [#656](https://github.com/operator-framework/operator-marketplace/pull/656)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c6abd3acc6af77a7f117bd89cececfae8c4830b1...bc8be0c487ae70b5b268e3251a599265499101fa)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9a9b8929d7040ab7d8cf574c48c96d58991bf6f6)
* NO-JIRA: DownStream Merge [11-11-2025] [#2852](https://github.com/openshift/ovn-kubernetes/pull/2852)
* [OCPBUGS-50709](https://issues.redhat.com/browse/OCPBUGS-50709), [OCPBUGS-62262](https://issues.redhat.com/browse/OCPBUGS-62262): DownStream Merge [11-06-2025] [#2846](https://github.com/openshift/ovn-kubernetes/pull/2846)
* NO-JIRA: DownStream Merge [10-30-2025] [#2838](https://github.com/openshift/ovn-kubernetes/pull/2838)
* [OCPBUGS-50709](https://issues.redhat.com/browse/OCPBUGS-50709): DownStream Merge [10-28-2025] [#2832](https://github.com/openshift/ovn-kubernetes/pull/2832)
* [OCPBUGS-56749](https://issues.redhat.com/browse/OCPBUGS-56749): DownStream Merge [10-24-2025] [#2829](https://github.com/openshift/ovn-kubernetes/pull/2829)
* [OCPBUGS-59552](https://issues.redhat.com/browse/OCPBUGS-59552), [OCPBUGS-61865](https://issues.redhat.com/browse/OCPBUGS-61865), [OCPBUGS-62636](https://issues.redhat.com/browse/OCPBUGS-62636): DownStream Merge [10-19-2025] [#2817](https://github.com/openshift/ovn-kubernetes/pull/2817)
* [OCPBUGS-62546](https://issues.redhat.com/browse/OCPBUGS-62546): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.21 [#2772](https://github.com/openshift/ovn-kubernetes/pull/2772)
* [CORENET-6160](https://issues.redhat.com/browse/CORENET-6160): DownStream Merge [10-10-2025] [#2798](https://github.com/openshift/ovn-kubernetes/pull/2798)
* [OCPBUGS-62545](https://issues.redhat.com/browse/OCPBUGS-62545): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 [#2771](https://github.com/openshift/ovn-kubernetes/pull/2771)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055): Dockerfile: Unpin OVN and consume the latest from FDP. [#2721](https://github.com/openshift/ovn-kubernetes/pull/2721)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303), [OCPBUGS-56783](https://issues.redhat.com/browse/OCPBUGS-56783): DownStream Merge [10-08-2025] [#2790](https://github.com/openshift/ovn-kubernetes/pull/2790)
* [OCPBUGS-62574](https://issues.redhat.com/browse/OCPBUGS-62574): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 [#2756](https://github.com/openshift/ovn-kubernetes/pull/2756)
* [OCPBUGS-60468](https://issues.redhat.com/browse/OCPBUGS-60468): DownStream Merge [09-23-2025] [#2762](https://github.com/openshift/ovn-kubernetes/pull/2762)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303), [OCPBUGS-58501](https://issues.redhat.com/browse/OCPBUGS-58501), [OCPBUGS-59657](https://issues.redhat.com/browse/OCPBUGS-59657), [OCPBUGS-61566](https://issues.redhat.com/browse/OCPBUGS-61566): DownStream Merge [09-09-2025] [#2750](https://github.com/openshift/ovn-kubernetes/pull/2750)
* [OCPBUGS-61065](https://issues.redhat.com/browse/OCPBUGS-61065): Adding ovndb-raft-functions.sh to ovnk image [#2740](https://github.com/openshift/ovn-kubernetes/pull/2740)
* NO-JIRA: DownStream Merge [08-27-2025] [#2736](https://github.com/openshift/ovn-kubernetes/pull/2736)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/c7e12ae3e00d8fdc6744815370e450bcc68c0dac...9a9b8929d7040ab7d8cf574c48c96d58991bf6f6)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)
* Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/e22228ae9f53298e7520d9ae2b9230b2d5dd4cff)
* NO-JIRA: Fix invalid field names [#92](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/92)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#91](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/91)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#89](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/89)
* [OCPBUGS-62373](https://issues.redhat.com/browse/OCPBUGS-62373): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#88](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/88)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...e22228ae9f53298e7520d9ae2b9230b2d5dd4cff)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/969a04e9dcb4cdde10e3038a9e28d2e27548918d)
* [OCPBUGS-62515](https://issues.redhat.com/browse/OCPBUGS-62515): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 [#88](https://github.com/openshift/cloud-provider-powervs/pull/88)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4...969a04e9dcb4cdde10e3038a9e28d2e27548918d)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/551974ef93dedb1b9677a778e1533391448e0c56)
* [OCPCLOUD-3097](https://issues.redhat.com/browse/OCPCLOUD-3097): Bump k8s 1.34 [#130](https://github.com/openshift/machine-api-provider-powervs/pull/130)
* [OCPBUGS-62519](https://issues.redhat.com/browse/OCPBUGS-62519): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 [#129](https://github.com/openshift/machine-api-provider-powervs/pull/129)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/f011b3c727c5377302b2ab0a203457490b930a3d...551974ef93dedb1b9677a778e1533391448e0c56)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494)
* [OCPBUGS-62508](https://issues.redhat.com/browse/OCPBUGS-62508): Updating prom-label-proxy-container image to be consistent with ART for 4.21 [#386](https://github.com/openshift/prom-label-proxy/pull/386)
* NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 [#385](https://github.com/openshift/prom-label-proxy/pull/385)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...610c11b59dd17f1d6dc35b62ca1d0602b5c0f494)
### [prometheus](https://github.com/openshift/prometheus/tree/ad27870101a40340f4ec54f8db8a324ba1d4f548)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 [#278](https://github.com/openshift/prometheus/pull/278)
* NO-JIRA: update Prometheus to v3.6.0 [#277](https://github.com/openshift/prometheus/pull/277)
* [OCPBUGS-62401](https://issues.redhat.com/browse/OCPBUGS-62401): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 [#274](https://github.com/openshift/prometheus/pull/274)
* [OCPBUGS-62166](https://issues.redhat.com/browse/OCPBUGS-62166): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#272](https://github.com/openshift/prometheus/pull/272)
* NO-JIRA: [bot] sync rh-manifest.txt [#261](https://github.com/openshift/prometheus/pull/261)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore: compute highestTimestamp at queryManager level [#262](https://github.com/openshift/prometheus/pull/262)
* [Full changelog](https://github.com/openshift/prometheus/compare/af9b206808f8eaeb4acec7fe74ba6b145bbdc921...ad27870101a40340f4ec54f8db8a324ba1d4f548)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/3dbe0b64ae3b9439b888be65a32431c7bf0d6806)
* NO-JIRA: Bump openshift/prometheus-alertmanager to v0.29.0 [#108](https://github.com/openshift/prometheus-alertmanager/pull/108)
* [OCPBUGS-62428](https://issues.redhat.com/browse/OCPBUGS-62428): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/prometheus-alertmanager/pull/107)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/419f2843332265d44982920d6fb4db220ec26f91...3dbe0b64ae3b9439b888be65a32431c7bf0d6806)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/a674b18734e86fa70c8f3c19ad1c21bfa8839b20)
* NO-JIRA: Bump openshift/prometheus-operator to v0.86.2 [#346](https://github.com/openshift/prometheus-operator/pull/346)
* NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 [#345](https://github.com/openshift/prometheus-operator/pull/345)
* [MON-4395](https://issues.redhat.com/browse/MON-4395): Bump openshift/prometheus-operator to v0.86.0 [#344](https://github.com/openshift/prometheus-operator/pull/344)
* [OCPBUGS-62448](https://issues.redhat.com/browse/OCPBUGS-62448): Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 [#341](https://github.com/openshift/prometheus-operator/pull/341)
* [OCPBUGS-62542](https://issues.redhat.com/browse/OCPBUGS-62542): Updating prometheus-operator-container image to be consistent with ART for 4.21 [#342](https://github.com/openshift/prometheus-operator/pull/342)
* Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 [#340](https://github.com/openshift/prometheus-operator/pull/340)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666...a674b18734e86fa70c8f3c19ad1c21bfa8839b20)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/39d728735779afef886bc10a8bc7cf72f54d51a0)
* [OCPBUGS-62727](https://issues.redhat.com/browse/OCPBUGS-62727): Bump openshift/node_exporter to v1.10.2 [#172](https://github.com/openshift/node_exporter/pull/172)
* NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 [#170](https://github.com/openshift/node_exporter/pull/170)
* [Full changelog](https://github.com/openshift/node_exporter/compare/fa749d65d8eca1cc937554baab91385a78ec8ce1...39d728735779afef886bc10a8bc7cf72f54d51a0)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/8a69194a461dc33d2ed67a220bca91d384d34df4)
* [NE-2186](https://issues.redhat.com/browse/NE-2186): Propagate ingress labels to routes [#67](https://github.com/openshift/route-controller-manager/pull/67)
* [OCPBUGS-62586](https://issues.redhat.com/browse/OCPBUGS-62586): Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 [#65](https://github.com/openshift/route-controller-manager/pull/65)
* [NE-2169](https://issues.redhat.com/browse/NE-2169): Move annotations and metrics to a constants file [#66](https://github.com/openshift/route-controller-manager/pull/66)
* NO-JIRA: Add new team members to OWNERS [#64](https://github.com/openshift/route-controller-manager/pull/64)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20...8a69194a461dc33d2ed67a220bca91d384d34df4)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/c5e7cf4a92ca76778c20defc14a823e097d0f15d)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Use user namespace for the deployment [#277](https://github.com/openshift/service-ca-operator/pull/277)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): controller deployment: Use user namespace [#278](https://github.com/openshift/service-ca-operator/pull/278)
* [TRT-2385](https://issues.redhat.com/browse/TRT-2385): Remove all tests and add fake test that always passes [#289](https://github.com/openshift/service-ca-operator/pull/289)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate OTE scaffold for service-ca-operator [#285](https://github.com/openshift/service-ca-operator/pull/285)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate ote scaffold for test extension [#283](https://github.com/openshift/service-ca-operator/pull/283)
* NO-JIRA:Created an OWNERS file for the tests-extension directory [#284](https://github.com/openshift/service-ca-operator/pull/284)
* [OCPBUGS-62377](https://issues.redhat.com/browse/OCPBUGS-62377): Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 [#276](https://github.com/openshift/service-ca-operator/pull/276)
* [OCPBUGS-63124](https://issues.redhat.com/browse/OCPBUGS-63124): Fix e2e-aws-operator e2e test failures [#281](https://github.com/openshift/service-ca-operator/pull/281)
* [OCPBUGS-56599](https://issues.redhat.com/browse/OCPBUGS-56599): don't hotloop on secret creation errors [#274](https://github.com/openshift/service-ca-operator/pull/274)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/37e0c31790b6a954214817974a56c9a699d0cf78...c5e7cf4a92ca76778c20defc14a823e097d0f15d)
### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/2b6ac09e306e4b2fa293a887ef88196bfe6c3143)
* NO-JIRA: update the okd repo for 4.21 [#1862](https://github.com/openshift/os/pull/1862)
* NO-JIRA: OWNERS: switch to joelcapitao [#1861](https://github.com/openshift/os/pull/1861)
* NO-JIRA: bump version to 4.21 [#1860](https://github.com/openshift/os/pull/1860)
* [Full changelog](https://github.com/openshift/os/compare/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f...2b6ac09e306e4b2fa293a887ef88196bfe6c3143)
### [telemeter](https://github.com/openshift/telemeter/tree/80acf50b0b105f9a83b2caec8a1e9aba05ab0f4d)
* [OCPBUGS-15495](https://issues.redhat.com/browse/OCPBUGS-15495): telemeter-client: set default LogLevel to `info` [#568](https://github.com/openshift/telemeter/pull/568)
* [OCPBUGS-63248](https://issues.redhat.com/browse/OCPBUGS-63248): Remove elide label filter from telemeter server receive handler [#569](https://github.com/openshift/telemeter/pull/569)
* Updating telemeter-container image to be consistent with ART for 4.21 [#565](https://github.com/openshift/telemeter/pull/565)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...80acf50b0b105f9a83b2caec8a1e9aba05ab0f4d)
### [tests](https://github.com/openshift/origin/tree/111e2032a329ad0ebce4a98ad1520439c2d44088)
* [OCPNODE-3877](https://issues.redhat.com/browse/OCPNODE-3877): add normal grace period allow non-drain updates to complete [#30480](https://github.com/openshift/origin/pull/30480)
* NO-JIRA: Fix compat_otp.DebugNode() to support guest kubeconfig for HyperShift [#30484](https://github.com/openshift/origin/pull/30484)
* [TRT-2403](https://issues.redhat.com/browse/TRT-2403): Extension spec 2 [#30483](https://github.com/openshift/origin/pull/30483)
* [OCPBUGS-64738](https://issues.redhat.com/browse/OCPBUGS-64738): add support of hypershift [#30482](https://github.com/openshift/origin/pull/30482)
* [TRT-2403](https://issues.redhat.com/browse/TRT-2403): Extension spec k8s isolation [#30470](https://github.com/openshift/origin/pull/30470)
* NO-JIRA: Add an exception for co/network [#30481](https://github.com/openshift/origin/pull/30481)
* [TRT-2072](https://issues.redhat.com/browse/TRT-2072): remove skipped annotations synthetic test [#30463](https://github.com/openshift/origin/pull/30463)
* [OCPBUGS-62930](https://issues.redhat.com/browse/OCPBUGS-62930): Wait for egressfirewall rules to be applied successfully before sending traffic [#30433](https://github.com/openshift/origin/pull/30433)
* [OTA-1643](https://issues.redhat.com/browse/OTA-1643): Each CO must go Progressing during upgrade [#30333](https://github.com/openshift/origin/pull/30333)
* NO-ISSUE: Automated - Update synthetic test data [#30464](https://github.com/openshift/origin/pull/30464)
* [TRT-2403](https://issues.redhat.com/browse/TRT-2403): Separate cli tests [#30469](https://github.com/openshift/origin/pull/30469)
* [CNTRLPLANE-1315](https://issues.redhat.com/browse/CNTRLPLANE-1315): Register ote binary for etcd-o [#30459](https://github.com/openshift/origin/pull/30459)
* [TRT-2254](https://issues.redhat.com/browse/TRT-2254): extract Operator Progressing / Degraded Counts and Timing [#30449](https://github.com/openshift/origin/pull/30449)
* [OCPBUGS-64688](https://issues.redhat.com/browse/OCPBUGS-64688): Add an exception for CO/console [#30461](https://github.com/openshift/origin/pull/30461)
* NO-JIRA: OVNK BGP: use vrf name instead of table number when fetching routes [#30456](https://github.com/openshift/origin/pull/30456)
* NO-JIRA: oidc: ensure console and cli OIDC clients are available when enabling OIDC [#30406](https://github.com/openshift/origin/pull/30406)
* [TRT-2403](https://issues.redhat.com/browse/TRT-2403): Removed k8s filtering due to annotation change [#30466](https://github.com/openshift/origin/pull/30466)
* [OCPBUGS-62703](https://issues.redhat.com/browse/OCPBUGS-62703): Relax duplicate events detection for Prometheus [#30372](https://github.com/openshift/origin/pull/30372)
* [OCPBUGS-63478](https://issues.redhat.com/browse/OCPBUGS-63478): Check operators for pod deletion [#30457](https://github.com/openshift/origin/pull/30457)
* [OCPBUGS-14246](https://issues.redhat.com/browse/OCPBUGS-14246): Remove exceptions for missing CVO alert runbook URLs [#30454](https://github.com/openshift/origin/pull/30454)
* NO-ISSUE: Automated - Update synthetic test data [#30444](https://github.com/openshift/origin/pull/30444)
* NO-JIRA: Add showInfo flag to control CLI command logging [#30442](https://github.com/openshift/origin/pull/30442)
* NO-JIRA: OWNERS: Add myself, clean up [#30453](https://github.com/openshift/origin/pull/30453)
* [TRT-2257](https://issues.redhat.com/browse/TRT-2257): Restore fixed seed [#30392](https://github.com/openshift/origin/pull/30392)
* [OCPBUGS-55755](https://issues.redhat.com/browse/OCPBUGS-55755): Create intervals when etcd disk metrics are over upstream recommended thresholds [#30413](https://github.com/openshift/origin/pull/30413)
* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert "Revert "Merge pull request #30296 from hongkailiu/OTA-1637-reboot"" [#30438](https://github.com/openshift/origin/pull/30438)
* [OCPBUGS-63333](https://issues.redhat.com/browse/OCPBUGS-63333): Add Dot Net 9.0 to Origin Tests [#30401](https://github.com/openshift/origin/pull/30401)
* [STOR-2340](https://issues.redhat.com/browse/STOR-2340): Add e2e tests for storage network policy [#30359](https://github.com/openshift/origin/pull/30359)
* [TRT-2373](https://issues.redhat.com/browse/TRT-2373): Revert "Revert "Merge pull request openshift#30269 from hongkailiu/OTA-1626"" [#30426](https://github.com/openshift/origin/pull/30426)
* [CNTRLPLANE-1485](https://issues.redhat.com/browse/CNTRLPLANE-1485): fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30307](https://github.com/openshift/origin/pull/30307)
* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert #30296 "OTA-1637: ClusterOperators should not go Progressing only for a node reboot" [#30437](https://github.com/openshift/origin/pull/30437)
* NO-ISSUE: Automated - Update synthetic test data [#30416](https://github.com/openshift/origin/pull/30416)
* [OCPBUGS-63201](https://issues.redhat.com/browse/OCPBUGS-63201): Updated the upgrade duration limit to 100 minutes for ppc64le [#30390](https://github.com/openshift/origin/pull/30390)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Revert " flake the missing port 9194 and 9193 once the team will fix will remove it" [#30430](https://github.com/openshift/origin/pull/30430)
* [OTA-1637](https://issues.redhat.com/browse/OTA-1637): ClusterOperators should not go Progressing only for a node reboot [#30296](https://github.com/openshift/origin/pull/30296)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): tests: authorization/rbac: Align restricted-v3 rule [#30427](https://github.com/openshift/origin/pull/30427)
* [OCPBUGS-57334](https://issues.redhat.com/browse/OCPBUGS-57334): Redact bearertoken in TestContext [#29912](https://github.com/openshift/origin/pull/29912)
* [OCPBUGS-63383](https://issues.redhat.com/browse/OCPBUGS-63383): Fix empty operator name [#30407](https://github.com/openshift/origin/pull/30407)
* [OCPBUGS-61376](https://issues.redhat.com/browse/OCPBUGS-61376): Isolate HPA tests [#30411](https://github.com/openshift/origin/pull/30411)
* [TRT-2373](https://issues.redhat.com/browse/TRT-2373): Revert #30269 "OTA-1626: fail CI if any ClusterOperator takes too long to update" [#30425](https://github.com/openshift/origin/pull/30425)
* [OCPBUGS-63519](https://issues.redhat.com/browse/OCPBUGS-63519): flake the missing port 9194 and 9193 once the team will fix will remove it [#30424](https://github.com/openshift/origin/pull/30424)
* [TRT-2144](https://issues.redhat.com/browse/TRT-2144): Add tcpdump to in cluster disruption monitor test when disruption is … [#30177](https://github.com/openshift/origin/pull/30177)
* NO-JIRA: fix hcpclustername [#30422](https://github.com/openshift/origin/pull/30422)
* NO-ISSUE: Fixing and investigating flakes during overlapping test execution [#30410](https://github.com/openshift/origin/pull/30410)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): tests: authorization/rbac: Add restricted-v3 scc [#30384](https://github.com/openshift/origin/pull/30384)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update to Kubernetes v1.34.1 [#30346](https://github.com/openshift/origin/pull/30346)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): add a test that should validate the communication matrix ports match the node's listening ports [#30003](https://github.com/openshift/origin/pull/30003)
* NO-JIRA: known-image-checker: do nothing in WriteContentToStorage [#30344](https://github.com/openshift/origin/pull/30344)
* [OTA-1626](https://issues.redhat.com/browse/OTA-1626): fail CI if any ClusterOperator takes too long to update [#30269](https://github.com/openshift/origin/pull/30269)
* NO-JIRA: Extend project deletion timeout [#30393](https://github.com/openshift/origin/pull/30393)
* NO-JIRA: enhance TNF e2e test to handle quick member promotion [#30385](https://github.com/openshift/origin/pull/30385)
* [CNTRLPLANE-1662](https://issues.redhat.com/browse/CNTRLPLANE-1662): Migrate OCP-32383 to upstream [#30378](https://github.com/openshift/origin/pull/30378)
* [CORENET-6373](https://issues.redhat.com/browse/CORENET-6373): ovn-k, virt, preconfigured udn addresses: Test MAC conflict detection [#30314](https://github.com/openshift/origin/pull/30314)
* NO-ISSUE: Automated - Update synthetic test data [#30334](https://github.com/openshift/origin/pull/30334)
* [OCPBUGS-56281](https://issues.redhat.com/browse/OCPBUGS-56281): gatewayapicontroller: Use dynamic client for OLM [#30397](https://github.com/openshift/origin/pull/30397)
* [MULTIARCH-5391](https://issues.redhat.com/browse/MULTIARCH-5391): Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite [#30239](https://github.com/openshift/origin/pull/30239)
* [OCPBUGS-62359](https://issues.redhat.com/browse/OCPBUGS-62359): Check more operatorsProgressing [#30367](https://github.com/openshift/origin/pull/30367)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): some enhancement for e2e-analysis [#30276](https://github.com/openshift/origin/pull/30276)
* [OCPBUGS-63149](https://issues.redhat.com/browse/OCPBUGS-63149): revert https://github.com/openshift/origin/pull/30054 [#30386](https://github.com/openshift/origin/pull/30386)
* NO-JIRA: Combine global and command args in BackgroundRC [#30382](https://github.com/openshift/origin/pull/30382)
* NO-JIRA: MCO add GetAlerts to the Monitor thanos struct [#30379](https://github.com/openshift/origin/pull/30379)
* NO-JIRA: enhance-waitnodeready-util [#30377](https://github.com/openshift/origin/pull/30377)
* [OCPBUGS-63040](https://issues.redhat.com/browse/OCPBUGS-63040): Add imagestream update dryrun test [#30357](https://github.com/openshift/origin/pull/30357)
* [OCPEDGE-1565](https://issues.redhat.com/browse/OCPEDGE-1565): [TNF] Add double node failure recovery test [#30370](https://github.com/openshift/origin/pull/30370)
* NO-JIRA: implement WithoutKubeconf method to clear config path [#30371](https://github.com/openshift/origin/pull/30371)
* NO-JIRA: `oc adm upgrade status`: Record err and outputs [#30151](https://github.com/openshift/origin/pull/30151)
* NO-JIRA:I Fixing race condtion [#30360](https://github.com/openshift/origin/pull/30360)
* [OCPBUGS-62552](https://issues.redhat.com/browse/OCPBUGS-62552): Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 [#30327](https://github.com/openshift/origin/pull/30327)
* NO-JIRA: init lease-checker namespaces [#30373](https://github.com/openshift/origin/pull/30373)
* NO-JIRA: generate unique namespace names for UDN tests [#30348](https://github.com/openshift/origin/pull/30348)
* NO-JIRA: update namespace privilege check to use PSA label [#30355](https://github.com/openshift/origin/pull/30355)
* [OCPBUGS-56281](https://issues.redhat.com/browse/OCPBUGS-56281): gatewayapicontroller: Clean up resources when done [#29900](https://github.com/openshift/origin/pull/29900)
* NO-JIRA: another attempt at disabling blank issues [#30369](https://github.com/openshift/origin/pull/30369)
* NO-JIRA: Make it clear that we do not monitor GH issues [#30368](https://github.com/openshift/origin/pull/30368)
* NO-JIRA: Update OWNERS for compat_otp [#30361](https://github.com/openshift/origin/pull/30361)
* NO-ISSUE: Add webhook image for the olmv1 tests [#30356](https://github.com/openshift/origin/pull/30356)
* [OTA-1637](https://issues.redhat.com/browse/OTA-1637): ClusterOperators should not go Progressing only for cluster scaling [#30297](https://github.com/openshift/origin/pull/30297)
* [OCPBUGS-60593](https://issues.redhat.com/browse/OCPBUGS-60593): Skip oauth test for external control plane topology [#30200](https://github.com/openshift/origin/pull/30200)
* [TRT-2351](https://issues.redhat.com/browse/TRT-2351): Revert "NO-JIRA: Improve case execution time" [#30363](https://github.com/openshift/origin/pull/30363)
* [TRT-2349](https://issues.redhat.com/browse/TRT-2349): Revert "make TLS registry tests required" [#30358](https://github.com/openshift/origin/pull/30358)
* [OCPNODE-3238](https://issues.redhat.com/browse/OCPNODE-3238): Add SigstoreImageVerificationPKI image policy validation tests [#30315](https://github.com/openshift/origin/pull/30315)
* [TRT-2346](https://issues.redhat.com/browse/TRT-2346): Fix not initializing adminRESTConfig [#30345](https://github.com/openshift/origin/pull/30345)
* [OCPBUGS-60853](https://issues.redhat.com/browse/OCPBUGS-60853): make TLS registry tests required [#29074](https://github.com/openshift/origin/pull/29074)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): remove upstream annotation framework [#30340](https://github.com/openshift/origin/pull/30340)
* NO-JIRA: Filter preconfiguredIPs based on cluster IP family support [#30338](https://github.com/openshift/origin/pull/30338)
* NO-JIRA: Improve case execution time [#30329](https://github.com/openshift/origin/pull/30329)
* [CORENET-6363](https://issues.redhat.com/browse/CORENET-6363): Add PreconfiguredUDNAddresses duplicate IP detection tests [#30197](https://github.com/openshift/origin/pull/30197)
* [OCPBUGS-62701](https://issues.redhat.com/browse/OCPBUGS-62701): Revert TRT-1854: remove upstream annotation framework [#30337](https://github.com/openshift/origin/pull/30337)
* Revert "Revert "NO-JIRA: Add olm into the known operator set"" [#30325](https://github.com/openshift/origin/pull/30325)
* NO-JIRA: BugFix- don't modify finalArgs in Template func [#30328](https://github.com/openshift/origin/pull/30328)
* [OCPNODE-3659](https://issues.redhat.com/browse/OCPNODE-3659): Not fail upgrade checks if all nodes are ready [#30318](https://github.com/openshift/origin/pull/30318)
* [OCPBUGS-62249](https://issues.redhat.com/browse/OCPBUGS-62249): Tweak Endpoints admission test for upcoming change [#30304](https://github.com/openshift/origin/pull/30304)
* [MCO-1828](https://issues.redhat.com/browse/MCO-1828): Remove pathological test in disruptive [#30272](https://github.com/openshift/origin/pull/30272)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add test that the ServiceCIDR API is blocked [#30234](https://github.com/openshift/origin/pull/30234)
* NO-JIRA: `oc adm upgrade status`: Skip test in multihop update jobs [#30150](https://github.com/openshift/origin/pull/30150)
* [MCO-1865](https://issues.redhat.com/browse/MCO-1865): Update MCO tests to be in only one test suite each [#30309](https://github.com/openshift/origin/pull/30309)
* [OCPBUGS-62474](https://issues.redhat.com/browse/OCPBUGS-62474): CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator [#30270](https://github.com/openshift/origin/pull/30270)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): remove upstream annotation framework [#30305](https://github.com/openshift/origin/pull/30305)
* Revert "NO-JIRA: Add olm into the known operator set" [#30313](https://github.com/openshift/origin/pull/30313)
* NO-JIRA: Add olm into the known operator set [#30308](https://github.com/openshift/origin/pull/30308)
* [MCO-1875](https://issues.redhat.com/browse/MCO-1875): Bump timeout for vSphereBootimageUpdate tests [#30288](https://github.com/openshift/origin/pull/30288)
* NO-ISSUE: Automated - Update synthetic test data [#30277](https://github.com/openshift/origin/pull/30277)
* [OCPBUGS-62227](https://issues.redhat.com/browse/OCPBUGS-62227): bump telemetry series limit to 1000 [#30302](https://github.com/openshift/origin/pull/30302)
* [OCPERT-151](https://issues.redhat.com/browse/OCPERT-151): Migrate new func for Compare structured data instead of string from openshift-test-private repo [#30291](https://github.com/openshift/origin/pull/30291)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(ginkgo): avoid nil deref and harden env var setup [#30289](https://github.com/openshift/origin/pull/30289)
* [OCPQE-30698](https://issues.redhat.com/browse/OCPQE-30698): enable OTE for olmv0 [#30285](https://github.com/openshift/origin/pull/30285)
* [OTA-1626](https://issues.redhat.com/browse/OTA-1626): Fail CI if alert/ClusterOperatorDegraded is fired [#30282](https://github.com/openshift/origin/pull/30282)
* [TRT-2071](https://issues.redhat.com/browse/TRT-2071): Remove annotations and replace with environment selector based test skipping and disablement [#30064](https://github.com/openshift/origin/pull/30064)
* trt-2246: lower parallelism based on worker nodes [#30226](https://github.com/openshift/origin/pull/30226)
* [OCPSTRAT-2045](https://issues.redhat.com/browse/OCPSTRAT-2045): Automating OCPSTRAT-2045 feature in upstream [#30067](https://github.com/openshift/origin/pull/30067)
* [OCPBUGS-61980](https://issues.redhat.com/browse/OCPBUGS-61980): Temporarily remove commatrix documentation test for rework [#30280](https://github.com/openshift/origin/pull/30280)
* [OCPBUGS-61905](https://issues.redhat.com/browse/OCPBUGS-61905): oidc: improve rollout wait times [#30274](https://github.com/openshift/origin/pull/30274)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): image: add busybox to list of allowed images [#30281](https://github.com/openshift/origin/pull/30281)
* [CORENET-6418](https://issues.redhat.com/browse/CORENET-6418): drop openshift-sdn tests [#29085](https://github.com/openshift/origin/pull/29085)
* [OCPEDGE-1483](https://issues.redhat.com/browse/OCPEDGE-1483): Add TNF E2E tests for network failure [#30110](https://github.com/openshift/origin/pull/30110)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Skip ServiceCIDR in etcd_storage_path test [#30254](https://github.com/openshift/origin/pull/30254)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase [#30275](https://github.com/openshift/origin/pull/30275)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(test): prevent nil pointer dereference in ginkgo test runner [#30224](https://github.com/openshift/origin/pull/30224)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): CRD Apply Alert Allowance [#30265](https://github.com/openshift/origin/pull/30265)
* [NE-2090](https://issues.redhat.com/browse/NE-2090): adding one GIE automation test [#30189](https://github.com/openshift/origin/pull/30189)
* [OTA-1601](https://issues.redhat.com/browse/OTA-1601): upgrade status: recover checking the updating COs [#30154](https://github.com/openshift/origin/pull/30154)
* NO-JIRA: Allow systemd-coredump test to fail [#30261](https://github.com/openshift/origin/pull/30261)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update etcd test data for k8s 1.34 release [#30242](https://github.com/openshift/origin/pull/30242)
* [OCPBUGS-61733](https://issues.redhat.com/browse/OCPBUGS-61733): Restore retries for port-forward test [#30255](https://github.com/openshift/origin/pull/30255)
* [OCPEDGE-2090](https://issues.redhat.com/browse/OCPEDGE-2090): Add validation tests for tnf topology effects [#30252](https://github.com/openshift/origin/pull/30252)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): introduce cluster e2e-analysis sub command for openshift-tests [#30211](https://github.com/openshift/origin/pull/30211)
* [MON-4290](https://issues.redhat.com/browse/MON-4290): add test for must-gather gather_metrics [#30054](https://github.com/openshift/origin/pull/30054)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): 2/2: make 'targets auth' test more lenient and more resilient [#30256](https://github.com/openshift/origin/pull/30256)
* [OCPBUGS-57325](https://issues.redhat.com/browse/OCPBUGS-57325): update machines scale test [#30028](https://github.com/openshift/origin/pull/30028)
* Trt-2246: network test isolation [#30192](https://github.com/openshift/origin/pull/30192)
* NO-ISSUE: Automated - Update synthetic test data [#30244](https://github.com/openshift/origin/pull/30244)
* NO-JIRA: Remove runbook exceptions for fixed bugs [#30246](https://github.com/openshift/origin/pull/30246)
* trt-2230: Add monitor test annotation [#30196](https://github.com/openshift/origin/pull/30196)
* NO-JIRA: Increase request-timeout to deflake test [#30248](https://github.com/openshift/origin/pull/30248)
* NO-JIRA: Deflake oc observe test by using explicit port number [#30247](https://github.com/openshift/origin/pull/30247)
* [OTA-1559](https://issues.redhat.com/browse/OTA-1559): test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time [#30160](https://github.com/openshift/origin/pull/30160)
* NO-JIRA: Add intervals and a test for systemd-coredumps [#30222](https://github.com/openshift/origin/pull/30222)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: add retry logic for Keycloak route creation [#30233](https://github.com/openshift/origin/pull/30233)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Update vendor to include communication matrix bug fix [#30232](https://github.com/openshift/origin/pull/30232)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): images: add keycloak images and use them in ExternalOIDC tests [#30221](https://github.com/openshift/origin/pull/30221)
* NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo [#30193](https://github.com/openshift/origin/pull/30193)
* NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster [#30161](https://github.com/openshift/origin/pull/30161)
* [OCPBUGS-61538](https://issues.redhat.com/browse/OCPBUGS-61538): Skip config-operator checking when featureSet is DevPreviewNoUpgrade [#30236](https://github.com/openshift/origin/pull/30236)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): make 'targets auth' test more lenient and more resilient. [#30219](https://github.com/openshift/origin/pull/30219)
* NO-ISSUE: Automated - Update synthetic test data [#30020](https://github.com/openshift/origin/pull/30020)
* [OCPBUGS-61287](https://issues.redhat.com/browse/OCPBUGS-61287): Add flaky kubectl logs test to the retry list to clean signal for release [#30215](https://github.com/openshift/origin/pull/30215)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump to latest openshift/kubernetes (v1.33.4) [#30227](https://github.com/openshift/origin/pull/30227)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): update the commatrix vendor version to contain new changes [#30220](https://github.com/openshift/origin/pull/30220)
* Trt-2257: track run options [#30195](https://github.com/openshift/origin/pull/30195)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): test/extended/cli/adm_upgrade/recommend: Enable precheck and accept [#30113](https://github.com/openshift/origin/pull/30113)
* NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted [#30188](https://github.com/openshift/origin/pull/30188)
* [OCPBUGS-61194](https://issues.redhat.com/browse/OCPBUGS-61194): Mark etcd net overload logging test as a flake [#30210](https://github.com/openshift/origin/pull/30210)
* [CORENET-5329](https://issues.redhat.com/browse/CORENET-5329): revert primary udn test workaround from virt tests [#29386](https://github.com/openshift/origin/pull/29386)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): improve logging, add startup probe to Keycloak Deployment [#30184](https://github.com/openshift/origin/pull/30184)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Enable OTE for cluster-kube-storage-version-migrator-operator [#30199](https://github.com/openshift/origin/pull/30199)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/b4a97e59b086e20d856d2fca30e27cbf994ed4a8...111e2032a329ad0ebce4a98ad1520439c2d44088)
### [thanos](https://github.com/openshift/thanos/tree/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)
* Updating ose-thanos-container image to be consistent with ART for 4.21 [#164](https://github.com/openshift/thanos/pull/164)
* [Full changelog](https://github.com/openshift/thanos/compare/c0951032b34b832d0f5467e616999490a284101b...6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)
### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/241816559ead1a8b5d455827400888babb6ce352)
* [OCPBUGS-62367](https://issues.redhat.com/browse/OCPBUGS-62367): Updating volume-data-source-validator-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/volume-data-source-validator/pull/5)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/0e61642f8d898ee199e42f37319864851dd3627f...241816559ead1a8b5d455827400888babb6ce352)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e)
* [OCPCLOUD-3087](https://issues.redhat.com/browse/OCPCLOUD-3087): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (5691b82) into main [#97](https://github.com/openshift/cloud-provider-vsphere/pull/97)
* [OCPBUGS-62571](https://issues.redhat.com/browse/OCPBUGS-62571): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 [#100](https://github.com/openshift/cloud-provider-vsphere/pull/100)
* NO-JIRA: Update OWNERS [#99](https://github.com/openshift/cloud-provider-vsphere/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b93eb64ff72e7c005687813c8b478d694a0f517a...f69584d6ed7411504b0fff77eb36d0fd64f0fd5e)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/bb598980bdac48449b7fe817a99b546586fd1c19)
* [OCPBUGS-62332](https://issues.redhat.com/browse/OCPBUGS-62332): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 [#75](https://github.com/openshift/cluster-api-provider-vsphere/pull/75)
* [OCPBUGS-57668](https://issues.redhat.com/browse/OCPBUGS-57668): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#59](https://github.com/openshift/cluster-api-provider-vsphere/pull/59)
* NO-JIRA: Update OWNERS [#65](https://github.com/openshift/cluster-api-provider-vsphere/pull/65)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default [#67](https://github.com/openshift/cluster-api-provider-vsphere/pull/67)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): Fix openshift/unit-tests.sh [#66](https://github.com/openshift/cluster-api-provider-vsphere/pull/66)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1ff9e11f5a117505d935549b96cd0d129917c015...bb598980bdac48449b7fe817a99b546586fd1c19)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/133442c239c6ebfeec175f1620b5b08d887cbe90)
* Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/vmware-vsphere-csi-driver/pull/150)
* NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/vmware-vsphere-csi-driver/pull/148)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/61d0d00a78ee60ee57fcc99648a8851f0db52e5a...133442c239c6ebfeec175f1620b5b08d887cbe90)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c098581641c4a26d82e46fd2bc1a3fbc46cc0380)
* NO-JIRA: Fix invalid field names [#316](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/316)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#315](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/315)
* [OCPBUGS-62344](https://issues.redhat.com/browse/OCPBUGS-62344): Fix escaping of password [#312](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/312)
* [OCPBUGS-57797](https://issues.redhat.com/browse/OCPBUGS-57797): Degrade OCP cluster on storagepolicy sync errors [#310](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/310)
* Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 [#311](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/311)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5cd04d61c20872edaaa2c3958779ff29ea6e6d82...c098581641c4a26d82e46fd2bc1a3fbc46cc0380)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/352125ea654157e73fe5bbab7965a81b70e2d90d)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 [#193](https://github.com/openshift/vsphere-problem-detector/pull/193)
* NO-JIRA: Add cursor command to debug the operator [#192](https://github.com/openshift/vsphere-problem-detector/pull/192)
* [OCPBUGS-62595](https://issues.redhat.com/browse/OCPBUGS-62595): Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 [#191](https://github.com/openshift/vsphere-problem-detector/pull/191)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9d55c028b27bc63c687342f0b7172ce39e07ec5a...352125ea654157e73fe5bbab7965a81b70e2d90d)