# 4.19.0-ec.4

Created: 2025-03-28 17:36:26 +0000 UTC

Image Digest: `sha256:bab7643fa8d4fb93f3879abe88d5f30b25fef23d39f3f3956e18bcf3107ee20c`


## Changes from 4.19.0-ec.3

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.2 to 1.32.3
* Kubernetes Tests 1.32.2
* Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 419.96.202503251418-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| DualReplica <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| DyanmicServiceEndpointIBMCloud <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| GatewayAPIController <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| SELinuxChangePolicy <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |
| SELinuxMount <br/> (6 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |
| ShortCertRotation <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |
| VSphereConfigurableMaxAllowedBlockVolumesPerNode <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* csi-snapshot-validation-webhook


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [0e116160](https://github.com/openshift/apiserver-network-proxy/commit/0e116160848d1eb189c5b5f77330f36e20c7e450) `sha256:2f3610e7422be10f7d8226ffa4e7ec91feed93ea0cf4ebbb2dd460615dc70803`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:095fa39cbd4c9ce4c82cf9ba865003684ee8bdf6bdc144dfabe932e10854db20`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [d4fb1b6d](https://github.com/openshift/azure-kubernetes-kms/commit/d4fb1b6db34b00c12f27003f09ca8e7218ece54e) `sha256:81106df91e2b49e8b70f01acaf82267f06050056b5aa3768348b226a9e868778`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [11ced00e](https://github.com/openshift/azure-service-operator/commit/11ced00e5fa17cb7b854f8a7909f6e9197908036) `sha256:581303045a62680ebe5f649ae805fec65ac24a262bfc1844f98b0efc0d78aad4`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [3e052bfb](https://github.com/openshift/cluster-api-provider-metal3/commit/3e052bfb7fd2758416e0364c2b3406b1a9445112) `sha256:409c117cd081bd667a3ad77ad2a7a780ce01eb9676f71bedd9ac886a9ce51ff0`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [9abe67f1](https://github.com/openshift/cluster-api-provider-baremetal/commit/9abe67f183455c93f4e11c5ac89bab9022bbc759) `sha256:5d2785d3a5cc6ec8a8e56506b297e3636e37e6f6a867abdcc44b9228619d03fc`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [eb6de2ec](https://github.com/openshift/cluster-authentication-operator/commit/eb6de2ecd5097a3146e330ea24b0e66029ae5152) `sha256:4b1836c37d0e6b075a72cbbb65ca867c7d7ef847a03833530d17fe92dcc5499a`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:d7de108fdc94b2b0e613444341849c0c68b8d8d9a2797b8782a9c9dc3dcf4fda`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:3758ea6864e70d4dbb7595e5ceeac84f8480b233fd191ed0bfe2d7f2383d0e02`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [4210c04a](https://github.com/openshift/cluster-kube-scheduler-operator/commit/4210c04aec1c7fde8f4c294421e090ebf9248285) `sha256:e8d3af707592bebe41f130ca2c9eb164bed460a8167d27880026e097922e798c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:c2d3bad3fe97497e7d6141f8f197a2405c8c02c42cdac6514c74267a44c86d8f`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a52da47f](https://github.com/openshift/cluster-machine-approver/commit/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404) `sha256:a23b62ecae49dfd5490b9fb964572db44bd3fc687ada87d2dddd92f671ee0d17`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [f498726f](https://github.com/openshift/cluster-olm-operator/commit/f498726f0e0c7aa06824bde34ef15f2a477f2d6d) `sha256:f82e9a5c114779c80bfa9b6c4c5e678da7a640aa306571f63b3645d823cc4e39`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:7162df6174cf376df02d1156101823ff0f8a5e2a5fd3e7b32ca2490e4c78c125`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:79448f50da4d92220375e3f5177f7e03ec17ad9537fbab10e4142fd8a120160f`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9bfbde86](https://github.com/openshift/configmap-reload/commit/9bfbde8676cca7b45efc4f76f683bd26fe65893d) `sha256:2a77c922c518797160f3642cef70750162cf2578da52bb406c29631dc67dab40`
* [coredns](https://github.com/openshift/coredns) git [7a1451db](https://github.com/openshift/coredns/commit/7a1451db77a68161d58af9b6ca2c9388d578310a) `sha256:2dc21e56c56e5e42637fd3936461ae7d8e46ab0abff32f8ba838404408ea138b`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1fc6ee15](https://github.com/openshift/csi-external-snapshotter/commit/1fc6ee158070b34f84a94489b33accb333714727) `sha256:3c07cf72c04271f6dc32c628f490838050a214f82084404966e1ac0d53914017`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [e1566463](https://github.com/openshift/csi-livenessprobe/commit/e15664632460c507ef35208d21d6fa537a7cd10f) `sha256:4e5093bb9f030fac3f527251cfc9057fb65d5bba57be1ad62e0ab9ea846d71b8`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [378f5c1b](https://github.com/openshift/csi-node-driver-registrar/commit/378f5c1b596d2b221317f603b6f7ad72c97a6930) `sha256:caefbb3b3818f0c4a72710cdfa2d2b41160b3f8534d218ed88089f56effd25a2`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1fc6ee15](https://github.com/openshift/csi-external-snapshotter/commit/1fc6ee158070b34f84a94489b33accb333714727) `sha256:60aeef6ffffc3452e73c1f53566ba167d44781211d9baab074f16b27d515dd3f`
* [docker-registry](https://github.com/openshift/image-registry) git [1b1c80a9](https://github.com/openshift/image-registry/commit/1b1c80a924afac2ed34b22712464a78a407f8bcf) `sha256:1249a96b154b33d66da194784321a71ee9e7e1d5bccfa2102eb0479664f18fdf`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:9d627a4cc72a49e3f0c76403dd89c009ca4a09c66b3d48790e01039a6d9aa24d`
* [haproxy-router](https://github.com/openshift/router) git [b41f9d05](https://github.com/openshift/router/commit/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6) `sha256:d2fb52aa437907ff240fa35ae0cd781cb53e8fb83bb81876adb35f7532433a39`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:6ebd01fc19d98199ec4e07853b6aaacca585dbc0bb456c19d38d4223660b4e43`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [b4596e5f](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/b4596e5f90d79cd43e74a875c534c1f49575238f) `sha256:3116795b45b4166eecc1bb24c32dc50339c62160a6b4c88282db9eebd75dab80`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [0453d282](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/0453d282cbd6e51902d1e8298d15181765e7fe98) `sha256:027544be6de0996f58283323a23a58566ed62cf7e565a07677bda972b473e7d5`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [037a0e7e](https://github.com/openshift/kubernetes-metrics-server/commit/037a0e7e4ef401cd81d3e8330eeed26c8c753592) `sha256:b29df1ca54700ca1879089ad16fc07f5498c1f4ffb31bb6b2f8c1f89249e625c`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:bfb61e3f8198b4b8549f0f6d20a0334dfd5151472de3b6ac035a272a43c23efa`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [c3da3b5f](https://github.com/openshift/kube-state-metrics/commit/c3da3b5fdc5bd2d23966e33b676701a4950b1a53) `sha256:dde8e45941a33d5c0f32070e9d328426075dcd566881379223319d9ba9200543`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [4c521b09](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/4c521b09f4dc55ac69234419e083f3815646f4a9) `sha256:75271e89d467cada175e0ce99c0ebed424c2f1707df930aa8756fc86fddce215`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:f6451ee308cc16e5baf7cbe4fa7a140a361c7161e630f578663df7beee0081d1`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [ba2234bd](https://github.com/openshift/kubevirt-csi-driver/commit/ba2234bd5974a6f9dae6d7f9caec56485351db0a) `sha256:bb1dfa27c643e57d87dac74d40abf73e444167570d369def7d1dbbdaa69d6d70`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:71838b9d668071ef1bbef74538e3a7f0bab3a3e11393970dfaf6f4115840a074`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [0b1b812e](https://github.com/openshift/multus-admission-controller/commit/0b1b812e082285fd19da6bde67c905f3893bf0d7) `sha256:643ecd684b2110f63d465e9da7b43ceb7a8899d7313c0faf5b49bc5ead7a5815`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:43ca0159764b8ea7d04179c202356953e0948155308718c2e31fd8992900a048`
* [must-gather](https://github.com/openshift/must-gather) git [33763a32](https://github.com/openshift/must-gather/commit/33763a3219a52694ab68b4cfe4564c74da15420b) `sha256:2d9f57dfce99b1f7b175911f72649b8768efd89dfa442170fc222c528edd895f`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f575d888](https://github.com/openshift/bond-cni/commit/f575d888893dd427d6cf02271c5b6e64d0baf2c0) `sha256:ea11493f977b285b31419359166db876eb8daaefaff41bc99243e95e5149c9a9`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5ec8c6bd](https://github.com/openshift/network-metrics-daemon/commit/5ec8c6bde236feab19525c2d84f7d55f430f9e2b) `sha256:0f35f30076421b867c667dc6a4da447a031a85865636466fc0920013e3e16e80`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [75914068](https://github.com/openshift/oauth-apiserver/commit/75914068d66a8b5502906526942c2423bec86f7a) `sha256:b91cb8760a2921a29515f89015cf0a384ee7d4067f139669c9992aa7962c431d`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3d12ccbe](https://github.com/openshift/oauth-proxy/commit/3d12ccbee45c5d4bcea8c232867df58a60c4382b) `sha256:ed2f545f15848e4706506833e8a69c39a3fdcacd7ec02769addb91413b5d0503`
* [oauth-server](https://github.com/openshift/oauth-server) git [7c92a059](https://github.com/openshift/oauth-server/commit/7c92a0596c5283a0f17f855529ee5ddeea989918) `sha256:803ad0ae4d8c3e5335f2ed682c6bf23729ae3fe83f824ad4aedd3961df1e59e0`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [85f6eb27](https://github.com/openshift/openshift-apiserver/commit/85f6eb2719a0440565c8b7bf00de954eeb12fdd9) `sha256:2395595832cdaede52b81be6805d3a82a1c8b822e6969d3d2ca89a193bfcef38`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [ed3eae5d](https://github.com/openshift/openshift-controller-manager/commit/ed3eae5db73699e2b6ad0b513589e06b4bf6f5aa) `sha256:8e4f8cd807065fb060ade2e83570240cc4fff9175ddcd7bf4332ca49e5b0e1ba`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3106bcc3](https://github.com/openshift/openshift-state-metrics/commit/3106bcc3747c3c63e24775f096779b06a2436357) `sha256:a90136364dd5a5fea5ac80b660d7269861e30ee6865416023dadff44c5efc3b3`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d2fce230](https://github.com/openshift/machine-api-provider-openstack/commit/d2fce230a2df0cf3b47769f0118d6475f796cb35) `sha256:438a20b61b4fd02d1c8ea29f240db0b5e549d4811383a1d1877756801af79d12`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:d7907143323b52f4965bd5aaf8918d79a1cfec12a011a07f20ea2b935f1ec1e9`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:fb9d6fb6a194ff10bd989a8f22549d719d5232298bb645582424fb8190be6321`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [c5b83033](https://github.com/openshift/ovirt-csi-driver-operator/commit/c5b83033d3979ac73032771467f9bcc3df286cef) `sha256:0189755fe3a7e0c3dc50cf5cf0ad91e73b1b432bc37fa4ffd4a13584988a635f`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [7184f58d](https://github.com/openshift/prom-label-proxy/commit/7184f58d8faba1eb73ff9c0ce188af3aa776c4d7) `sha256:e6a20fdee375ab6eb7128e448cf7b505793ed06987b0bea43d16c89beaeb65ee`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [43131005](https://github.com/openshift/prometheus-alertmanager/commit/4313100525f72692f870af2044fb2822e831c5d2) `sha256:38b99a903b330fad7b1570cf46cb2fa1725b73e1921e8130c4c5d726fe0569e9`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [3779c1d5](https://github.com/openshift/prometheus-operator/commit/3779c1d5d59ac355082618e6423710759675aaed) `sha256:652f9632fee469da82d82870f3bce9946f3e295faf4d9b0080bece5294dd6c8f`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [57a4e998](https://github.com/openshift/node_exporter/commit/57a4e99895d08df172b4fb315f5b7e893d516bde) `sha256:145b3a3e39ddc91d1fb3472004888c51f749ce3010a1f04ff072344bef936038`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [3779c1d5](https://github.com/openshift/prometheus-operator/commit/3779c1d5d59ac355082618e6423710759675aaed) `sha256:9d2f62c7668e3e942688825dc9ade3b0744feaeeb2e733a0aaf0a50af3d0365c`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [3779c1d5](https://github.com/openshift/prometheus-operator/commit/3779c1d5d59ac355082618e6423710759675aaed) `sha256:99dd3de5fefca68e47dff88fb8c82cec1ce4713b0b9cf140de621fb8ca8d2b0a`
* rhel-coreos `sha256:8eee63a09ceeecc2c9863b7cb07c9fd2c99db14618f98f2ce003a42edfafee30`
* rhel-coreos-extensions `sha256:7e1979f8c35e83ae2e16b1ffee9ee1820f750c9b557afbbb4ec5f4a2d8008f5f`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bc97534a](https://github.com/openshift/route-controller-manager/commit/bc97534a12a7a6bac096e4ed488b29535c8d4f33) `sha256:4ddfd8096500768111217f1ac7471bab56c4f188e71addcd65264a2c7c08ee5f`
* [telemeter](https://github.com/openshift/telemeter) git [f63fef91](https://github.com/openshift/telemeter/commit/f63fef91d659c4127838da6e3dc696e07c0e5536) `sha256:38f57b3570e76ff544a1e0e9f9c58171470c30eff8eabeb3e46b6871993137bd`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7962ec54882d73087b16d5c5c90735d8534f38ae)

* WIP AGENT-538: Add ability for ABI UI to generate kubeconfig (#7391) [#7391](https://github.com/openshift/assisted-service/pull/7391)
* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required sast tasks for Konflux (#7441) [#7441](https://github.com/openshift/assisted-service/pull/7441)
* NO-ISSUE: Remove eran ifrach account from OWNERS (#7446) [#7446](https://github.com/openshift/assisted-service/pull/7446)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.13, 4.18, 4.14 (#7443) [#7443](https://github.com/openshift/assisted-service/pull/7443)
* [MGMT-20155](https://issues.redhat.com/browse/MGMT-20155): Add Node Healthcheck Operator alongside with remediation operators (#7436) [#7436](https://github.com/openshift/assisted-service/pull/7436)
* [OCPBUGS-53031](https://issues.redhat.com/browse/OCPBUGS-53031): Bump oauth2 with v0.26.openshift.1 (#7410) [#7410](https://github.com/openshift/assisted-service/pull/7410)
* [MGMT-19903](https://issues.redhat.com/browse/MGMT-19903): Disable ODF and OpenShift AI Operators for Oracle (OCI) (#7341) [#7341](https://github.com/openshift/assisted-service/pull/7341)
* [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7430) [#7430](https://github.com/openshift/assisted-service/pull/7430)
* aantal-MGMT-19423: replacing HighAvailabilityMode with ControlPlaneCount. Some places like updating cluster params HighAvailabilityMode is still needed for backward compatibility. (#7373) [#7373](https://github.com/openshift/assisted-service/pull/7373)
* NO-ISSUE: Update Konflux references (#7406) [#7406](https://github.com/openshift/assisted-service/pull/7406)
* NO-ISSUE: Fix setuptools issue (#7415) [#7415](https://github.com/openshift/assisted-service/pull/7415)
* NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12 (#7408) [#7408](https://github.com/openshift/assisted-service/pull/7408)
* NO-ISSUE: Only get the release image during install if it's necessary (#7390) [#7390](https://github.com/openshift/assisted-service/pull/7390)
* NO-ISSUE: [master] Bump OCP versions: 4.17 (#7400) [#7400](https://github.com/openshift/assisted-service/pull/7400)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) [#7398](https://github.com/openshift/assisted-service/pull/7398)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) [#7397](https://github.com/openshift/assisted-service/pull/7397)
* [MGMT-19830](https://issues.redhat.com/browse/MGMT-19830): Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) [#7272](https://github.com/openshift/assisted-service/pull/7272)
* [MGMT-19596](https://issues.redhat.com/browse/MGMT-19596): Fixing broken KubeAPI tests (#7383) [#7383](https://github.com/openshift/assisted-service/pull/7383)
* NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) [#7386](https://github.com/openshift/assisted-service/pull/7386)
* [MGMT-19832](https://issues.redhat.com/browse/MGMT-19832): Fix time out during cluster last finalizing stage (#7372) [#7372](https://github.com/openshift/assisted-service/pull/7372)
* [MGMT-20099](https://issues.redhat.com/browse/MGMT-20099): add nmstate to /v2/supported-operators (#7378) [#7378](https://github.com/openshift/assisted-service/pull/7378)
* [MGMT-20022](https://issues.redhat.com/browse/MGMT-20022): Handle missing ManagedCluster in non MCE environments (#7348) [#7348](https://github.com/openshift/assisted-service/pull/7348)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) [#7380](https://github.com/openshift/assisted-service/pull/7380)
* [MGMT-20095](https://issues.redhat.com/browse/MGMT-20095): Remove KMM operator from OpenShift AI NVIDIA bundle (#7376) [#7376](https://github.com/openshift/assisted-service/pull/7376)
* [MGMT-20010](https://issues.redhat.com/browse/MGMT-20010): Bump LSO override to 4.19 (#7366) [#7366](https://github.com/openshift/assisted-service/pull/7366)
* [MGMT-20043](https://issues.redhat.com/browse/MGMT-20043): Modify MTU Validation CMN to support multiple machine networks (#7357) [#7357](https://github.com/openshift/assisted-service/pull/7357)
* NO-ISSUE: [master] Bump OCP versions: 4.18 (#7374) [#7374](https://github.com/openshift/assisted-service/pull/7374)
* [MGMT-19840](https://issues.redhat.com/browse/MGMT-19840): Gather operational metrics from installercache (#7281) [#7281](https://github.com/openshift/assisted-service/pull/7281)
* [MGMT-19939](https://issues.redhat.com/browse/MGMT-19939): Allow using the rootfs install method to add nodes (#7325) [#7325](https://github.com/openshift/assisted-service/pull/7325)
* [Full changelog](https://github.com/openshift/assisted-service/compare/94d21390c21b6904b3f03744286f9a0c9b1a3b7a...7962ec54882d73087b16d5c5c90735d8534f38ae)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/122699f16e57d299824267081024560ded6a281e)

* [MGMT-20149](https://issues.redhat.com/browse/MGMT-20149): Add required SAST tasks for Konflux (#1064) [#1064](https://github.com/openshift/assisted-installer/pull/1064)
* NO-ISSUE: Remove Paul account from OWNERS (#1073) [#1073](https://github.com/openshift/assisted-installer/pull/1073)
* [MGMT-20198](https://issues.redhat.com/browse/MGMT-20198): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) [#1066](https://github.com/openshift/assisted-installer/pull/1066)
* NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) [#1057](https://github.com/openshift/assisted-installer/pull/1057)
* [OCPBUGS-52696](https://issues.redhat.com/browse/OCPBUGS-52696), [OCPBUGS-52704](https://issues.redhat.com/browse/OCPBUGS-52704): Bump crpto to v0.33.openshift.1 (#1053) [#1053](https://github.com/openshift/assisted-installer/pull/1053)
* NO-ISSUE: Update Konflux references (#1051) [#1051](https://github.com/openshift/assisted-installer/pull/1051)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) [#1049](https://github.com/openshift/assisted-installer/pull/1049)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/c389a38405383961d26191799161c86127451635...122699f16e57d299824267081024560ded6a281e)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9e23eeb29c8aa30af68a03e126086e275d661716)

* NO-ISSUE: Remove eran ifrach account from OWNERS (#947) [#947](https://github.com/openshift/assisted-installer-agent/pull/947)
* [MGMT-20199](https://issues.redhat.com/browse/MGMT-20199): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) [#943](https://github.com/openshift/assisted-installer-agent/pull/943)
* NO-ISSUE: Update Konflux references (#929) [#929](https://github.com/openshift/assisted-installer-agent/pull/929)
* NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) [#926](https://github.com/openshift/assisted-installer-agent/pull/926)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/cfe93a9779dea6ad2a628280b40071d23f3cb429...9e23eeb29c8aa30af68a03e126086e275d661716)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/e54daf547c9a55634af7fe96449a71eff986d3e9)

* NO-ISSUE: iso_builder: Run appliance without sudo [#54](https://github.com/openshift/agent-installer-utils/pull/54)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Add logging [#50](https://github.com/openshift/agent-installer-utils/pull/50)
* [AGENT-1137](https://issues.redhat.com/browse/AGENT-1137): Support both --ocp-version and --release-image-url [#49](https://github.com/openshift/agent-installer-utils/pull/49)
* [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Ensure the correct selinux labels are applied to agent tui files [#57](https://github.com/openshift/agent-installer-utils/pull/57)
* [OCPBUGS-45505](https://issues.redhat.com/browse/OCPBUGS-45505): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 [#37](https://github.com/openshift/agent-installer-utils/pull/37)
* [AGENT-1147](https://issues.redhat.com/browse/AGENT-1147): Update operators [#51](https://github.com/openshift/agent-installer-utils/pull/51)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Support url in appliance-config.yaml [#47](https://github.com/openshift/agent-installer-utils/pull/47)
* [AGENT-1119](https://issues.redhat.com/browse/AGENT-1119): agent-setup-tui.service typo fix [#48](https://github.com/openshift/agent-installer-utils/pull/48)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): Enable agent installer interactive flow [#46](https://github.com/openshift/agent-installer-utils/pull/46)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Refactor UI for Rendezvous node IP entry [#42](https://github.com/openshift/agent-installer-utils/pull/42)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): load agent tui [#44](https://github.com/openshift/agent-installer-utils/pull/44)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087): OVE ISO Builder script improvements [#40](https://github.com/openshift/agent-installer-utils/pull/40)
* [AGENT-464](https://issues.redhat.com/browse/AGENT-464): Adds form to agent-tui to enter rendezvous IP address [#38](https://github.com/openshift/agent-installer-utils/pull/38)
* [AGENT-1087](https://issues.redhat.com/browse/AGENT-1087), [AGENT-1118](https://issues.redhat.com/browse/AGENT-1118): Add script to generate agent-based installer OVE ISO [#39](https://github.com/openshift/agent-installer-utils/pull/39)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...e54daf547c9a55634af7fe96449a71eff986d3e9)


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/d365efdad4f566821463becaf0d5551a1a5c322f)

* [OCPBUGS-45273](https://issues.redhat.com/browse/OCPBUGS-45273): Properly annotate networking skip according to Jira ticket [#2235](https://github.com/openshift/kubernetes/pull/2235)
* [OCPBUGS-53014](https://issues.redhat.com/browse/OCPBUGS-53014): Bump 1.32.3 [#2241](https://github.com/openshift/kubernetes/pull/2241)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): translate test annotations to use: `include`/`exclude` CEL, labels, filtering [#2215](https://github.com/openshift/kubernetes/pull/2215)
* [STOR-2285](https://issues.redhat.com/browse/STOR-2285): UPSTREAM: &lt;carry&gt;: Add volume group snapshot test driver [#2232](https://github.com/openshift/kubernetes/pull/2232)
* [OCPBUGS-44693](https://issues.redhat.com/browse/OCPBUGS-44693): Revert "disable ResilientWatchCacheInitialization feature" [#2192](https://github.com/openshift/kubernetes/pull/2192)
* [OCPBUGS-52477](https://issues.redhat.com/browse/OCPBUGS-52477): Revert #2229: Initialize testContext before enumerating tests [#2236](https://github.com/openshift/kubernetes/pull/2236)
* NO-JIRA: Initialize testContext before enumerating tests [#2229](https://github.com/openshift/kubernetes/pull/2229)
* UPSTREAM: &lt;carry&gt;: OCPBUGS-45274: Enable PodRejectionStatus test [#2231](https://github.com/openshift/kubernetes/pull/2231)
* [OCPBUGS-45274](https://issues.redhat.com/browse/OCPBUGS-45274): UPSTREAM: 130097: Modify how to check the status [#2228](https://github.com/openshift/kubernetes/pull/2228)
* [Full changelog](https://github.com/openshift/kubernetes/compare/c3a6a36c352ab7a0616fd1e6ffedaf872b4aba21...d365efdad4f566821463becaf0d5551a1a5c322f)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/43f705ae1c5b66e1b9584bc20cf7e9c2a003a1c9)

* [CORS-3918](https://issues.redhat.com/browse/CORS-3918): Send service endpoint overrides to CAPG through cluster spec [#9528](https://github.com/openshift/installer/pull/9528)
* [OCPBUGS-53465](https://issues.redhat.com/browse/OCPBUGS-53465): Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 [#9593](https://github.com/openshift/installer/pull/9593)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): Fixed topology logic for 2-node installs and added unit tests [#9579](https://github.com/openshift/installer/pull/9579)
* [OCPBUGS-53379](https://issues.redhat.com/browse/OCPBUGS-53379): Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 [#9582](https://github.com/openshift/installer/pull/9582)
* [AGENT-467](https://issues.redhat.com/browse/AGENT-467): show the agent ui url when available [#9584](https://github.com/openshift/installer/pull/9584)
* [CORS-3861](https://issues.redhat.com/browse/CORS-3861), [CORS-3883](https://issues.redhat.com/browse/CORS-3883), [CORS-3937](https://issues.redhat.com/browse/CORS-3937): Azure Machine Identity API [#9538](https://github.com/openshift/installer/pull/9538)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Run agent installer command to create certificates [#9574](https://github.com/openshift/installer/pull/9574)
* [OCPBUGS-52959](https://issues.redhat.com/browse/OCPBUGS-52959): Issue short lived certificates if ShortCertRotation featuregate is enabled [#8784](https://github.com/openshift/installer/pull/8784)
* [OCPBUGS-53173](https://issues.redhat.com/browse/OCPBUGS-53173): PowerVS: remove TF code [#9568](https://github.com/openshift/installer/pull/9568)
* no-jira: add dev docs for bumping CAPI provider version [#9567](https://github.com/openshift/installer/pull/9567)
* [OCPBUGS-53183](https://issues.redhat.com/browse/OCPBUGS-53183): Avoid adding duplicate entries to NO_PROXY [#9573](https://github.com/openshift/installer/pull/9573)
* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#9560](https://github.com/openshift/installer/pull/9560)
* [OCPBUGS-53280](https://issues.redhat.com/browse/OCPBUGS-53280): PowerVS: Re-enable disconnected installs [#9551](https://github.com/openshift/installer/pull/9551)
* [AGENT-537](https://issues.redhat.com/browse/AGENT-537): Add agent command to generate certificates [#9557](https://github.com/openshift/installer/pull/9557)
* [OCPBUGS-39146](https://issues.redhat.com/browse/OCPBUGS-39146): Validate sgdisk partition start in image based installer config [#9541](https://github.com/openshift/installer/pull/9541)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): additional refinement for loading the agent UI [#9565](https://github.com/openshift/installer/pull/9565)
* [SPLAT-2072](https://issues.redhat.com/browse/SPLAT-2072): Removed VSphereMultiVCenters feature gate [#9553](https://github.com/openshift/installer/pull/9553)
* [OCPEDGE-1513](https://issues.redhat.com/browse/OCPEDGE-1513): feat(topologies): add DualReplica topology mode [#9534](https://github.com/openshift/installer/pull/9534)
* [OCPBUGS-45692](https://issues.redhat.com/browse/OCPBUGS-45692): Modified ova template name to use failure domain name [#9300](https://github.com/openshift/installer/pull/9300)
* [OCPBUGS-50552](https://issues.redhat.com/browse/OCPBUGS-50552): Power VS: Disallow clusterOSImage install-configuration parameter [#9417](https://github.com/openshift/installer/pull/9417)
* NO-JIRA: OWNERS: add thuan [#9555](https://github.com/openshift/installer/pull/9555)
* [OCPBUGS-51209](https://issues.redhat.com/browse/OCPBUGS-51209): Changed  kernelFileType name from kernel.img to vmlinuz for s390x [#9533](https://github.com/openshift/installer/pull/9533)
* [OCPBUGS-6271](https://issues.redhat.com/browse/OCPBUGS-6271): Adding VIPs Validation for agent based vsphere installation [#9532](https://github.com/openshift/installer/pull/9532)
* [AGENT-1113](https://issues.redhat.com/browse/AGENT-1113): enhance the unconfigured-ignition command to support the interactive workflow [#9529](https://github.com/openshift/installer/pull/9529)
* [OCPBUGS-33370](https://issues.redhat.com/browse/OCPBUGS-33370): Improve baremetal gather error message [#9120](https://github.com/openshift/installer/pull/9120)
* [OCPBUGS-36553](https://issues.redhat.com/browse/OCPBUGS-36553): VSphere: add vips to machinenetwork [#9526](https://github.com/openshift/installer/pull/9526)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): Custom-DNS: Update master and worker user data secrets [#9451](https://github.com/openshift/installer/pull/9451)
* [CORS-2508](https://issues.redhat.com/browse/CORS-2508): aws: remove unused autoscaling:DescribeAutoScalingGroups perm [#9223](https://github.com/openshift/installer/pull/9223)
* [OCPBUGS-51378](https://issues.redhat.com/browse/OCPBUGS-51378): Change vsphere conversion govmomi err to be clear [#9524](https://github.com/openshift/installer/pull/9524)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Bump IBM Cloud CAPI to v0.10.0 [#9523](https://github.com/openshift/installer/pull/9523)
* [OCPBUGS-44840](https://issues.redhat.com/browse/OCPBUGS-44840): Mount the user-ca-bundle into ICC [#9227](https://github.com/openshift/installer/pull/9227)
* [OCPBUGS-50637](https://issues.redhat.com/browse/OCPBUGS-50637): Remove error logging when determining image arch [#9531](https://github.com/openshift/installer/pull/9531)
* [OCPBUGS-51171](https://issues.redhat.com/browse/OCPBUGS-51171): aws: add ec2:ReplaceRoute permission [#9525](https://github.com/openshift/installer/pull/9525)
* [OCPBUGS-47724](https://issues.redhat.com/browse/OCPBUGS-47724): AWS: Copy static MCO resources needed for custom-dns [#9489](https://github.com/openshift/installer/pull/9489)
* [OCPBUGS-49623](https://issues.redhat.com/browse/OCPBUGS-49623): IBMCloud: Missing ca-mon region due to static region list [#9421](https://github.com/openshift/installer/pull/9421)
* [OCPBUGS-47681](https://issues.redhat.com/browse/OCPBUGS-47681): Support regions only available in v2 of the aws sdk [#9383](https://github.com/openshift/installer/pull/9383)
* [OKD-235](https://issues.redhat.com/browse/OKD-235): Add stream metadata for scos to be used by OKD [#9520](https://github.com/openshift/installer/pull/9520)
* [OCPEDGE-1635](https://issues.redhat.com/browse/OCPEDGE-1635): Set default values for arbiter [#9530](https://github.com/openshift/installer/pull/9530)
* [OCPBUGS-39583](https://issues.redhat.com/browse/OCPBUGS-39583): Remove tmp directory used for agent pxe files [#9527](https://github.com/openshift/installer/pull/9527)
* No-ISSUE: (dep) Bump openshift/api [#9522](https://github.com/openshift/installer/pull/9522)
* [CORS-3917](https://issues.redhat.com/browse/CORS-3917): Add install config validation for service endpoints [#9517](https://github.com/openshift/installer/pull/9517)
* NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer [#9515](https://github.com/openshift/installer/pull/9515)
* [OCPBUGS-51350](https://issues.redhat.com/browse/OCPBUGS-51350): PowerVS: Extra network routes for disconnected install [#9510](https://github.com/openshift/installer/pull/9510)
* NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage [#9508](https://github.com/openshift/installer/pull/9508)
* [OCPBUGS-50961](https://issues.redhat.com/browse/OCPBUGS-50961): Power VS: Log accurate error when deploying Internal with no vpcName [#9497](https://github.com/openshift/installer/pull/9497)
* [SPLAT-1995](https://issues.redhat.com/browse/SPLAT-1995): vsphere on destroy remove cns volumes [#9425](https://github.com/openshift/installer/pull/9425)
* [OCPBUGS-47459](https://issues.redhat.com/browse/OCPBUGS-47459): IBMCloud: CAPI add permitted network [#9397](https://github.com/openshift/installer/pull/9397)
* [OCPBUGS-47652](https://issues.redhat.com/browse/OCPBUGS-47652): IBMCloud: Set CAPI boot volumes [#9385](https://github.com/openshift/installer/pull/9385)
* [CORS-3869](https://issues.redhat.com/browse/CORS-3869): static validation for new vpc.subnets field [#9505](https://github.com/openshift/installer/pull/9505)
* [OSASINFRA-3695](https://issues.redhat.com/browse/OSASINFRA-3695): openstack: Create security group rules in batches [#9042](https://github.com/openshift/installer/pull/9042)
* [OCPBUGS-46051](https://issues.redhat.com/browse/OCPBUGS-46051): IBMCloud: Fix CAPI AZ handling [#9415](https://github.com/openshift/installer/pull/9415)
* [Full changelog](https://github.com/openshift/installer/compare/b20e29d3c3b19bf389379afe9d5cf103b5489799...43f705ae1c5b66e1b9584bc20cf7e9c2a003a1c9)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/20a31adf14bcf961e6057f231b0bb9f88fcb83d3)

* [OCPBUGS-53233](https://issues.redhat.com/browse/OCPBUGS-53233): Sync mar 18 [#403](https://github.com/openshift/baremetal-operator/pull/403)
* NO-ISSUE: Upstream Sync Mar 10 [#401](https://github.com/openshift/baremetal-operator/pull/401)
* [OCPBUGS-52215](https://issues.redhat.com/browse/OCPBUGS-52215): Bump x/oauth2 to 0.27.0 [#400](https://github.com/openshift/baremetal-operator/pull/400)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/307bd7fc9a712104f1beb0297d33d7ff246d51d3...20a31adf14bcf961e6057f231b0bb9f88fcb83d3)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/22c15212b8236a490eeda4d0dbfa00235af8a8c8)

* [OCPEDGE-1689](https://issues.redhat.com/browse/OCPEDGE-1689): Include Arbiter nodes in the API backends if there is only one master [#344](https://github.com/openshift/baremetal-runtimecfg/pull/344)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Include cloud platform specific parameters to argument list for corednsmonitor [#341](https://github.com/openshift/baremetal-runtimecfg/pull/341)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/d49333efda0129d0315b879fb0d79d83a7749c86...22c15212b8236a490eeda4d0dbfa00235af8a8c8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/f2c6ae49d3ba3b58e506d5948bceb3a752def432)

* [OCPBUGS-54168](https://issues.redhat.com/browse/OCPBUGS-54168): Use ProxyFromEnvironment when creating HTTP transport [#1995](https://github.com/openshift/oc/pull/1995)
* NO-JIRA: debug: suggest nsenter instead of chroot [#1991](https://github.com/openshift/oc/pull/1991)
* [OCPBUGS-53389](https://issues.redhat.com/browse/OCPBUGS-53389): Use fedora image in unit tests instead of centos [#1992](https://github.com/openshift/oc/pull/1992)
* [OCPBUGS-23514](https://issues.redhat.com/browse/OCPBUGS-23514): status: Adjust impact summary for Failing=Unknown [#1989](https://github.com/openshift/oc/pull/1989)
* [OCPBUGS-52504](https://issues.redhat.com/browse/OCPBUGS-52504): pkg/cli/admin/upgrade/recommend: Populate RESTConfig [#1987](https://github.com/openshift/oc/pull/1987)
* [Full changelog](https://github.com/openshift/oc/compare/e7e738cc324d3cde21df43c3e22286ff595d493d...f2c6ae49d3ba3b58e506d5948bceb3a752def432)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/90b793848d80af28d81c94570916e448a1789fda)

* NO-JIRA: Report the error when syncing STS secrets [#827](https://github.com/openshift/cloud-credential-operator/pull/827)
* [OSASINFRA-3657](https://issues.redhat.com/browse/OSASINFRA-3657): Add support for storing OpenStack CA bundles [#780](https://github.com/openshift/cloud-credential-operator/pull/780)
* [OCPBUGS-52505](https://issues.redhat.com/browse/OCPBUGS-52505): golang.org/x/oauth2 v0.28.0 [#821](https://github.com/openshift/cloud-credential-operator/pull/821)
* [CCO-647](https://issues.redhat.com/browse/CCO-647): Enable readOnlyRootFilesystem on all containers [#819](https://github.com/openshift/cloud-credential-operator/pull/819)
* [OCPBUGS-52507](https://issues.redhat.com/browse/OCPBUGS-52507): github.com/go-jose/go-jose/v4 v4.0.5 [#823](https://github.com/openshift/cloud-credential-operator/pull/823)
* NO-JIRA: Add dry-run on aws create-all command [#818](https://github.com/openshift/cloud-credential-operator/pull/818)
* NO-JIRA: add example of how to build from source [#820](https://github.com/openshift/cloud-credential-operator/pull/820)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/216fd1a30ec35c25369cd8d4e20ccc140cf4ecc4...90b793848d80af28d81c94570916e448a1789fda)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/5985f3b31274c555b32ac59aa0dfcbca877a3235)

* [OCPBUGS-53201](https://issues.redhat.com/browse/OCPBUGS-53201): Revert "CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller" [#164](https://github.com/openshift/cloud-network-config-controller/pull/164)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#161](https://github.com/openshift/cloud-network-config-controller/pull/161)
* [SDN-5690](https://issues.redhat.com/browse/SDN-5690): Rebase k8s to 1.32 [#163](https://github.com/openshift/cloud-network-config-controller/pull/163)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/03c3d59cded36b8f157a1e17c08a700bd116295c...5985f3b31274c555b32ac59aa0dfcbca877a3235)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/655e434ffb704eac6cc0044c1e25fabf81bc1db0)

* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve failed machine detection in clusterapi [#347](https://github.com/openshift/kubernetes-autoscaler/pull/347)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): make DecreaseTargetSize more accurate [#343](https://github.com/openshift/kubernetes-autoscaler/pull/343)
* [OCPBUGS-11115](https://issues.redhat.com/browse/OCPBUGS-11115): improve replica counting on openshift [#278](https://github.com/openshift/kubernetes-autoscaler/pull/278)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a9375f28dcc57a52262c2c5e1aaa1cb1edbd0163...655e434ffb704eac6cc0044c1e25fabf81bc1db0)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/64b0a39c0bf9418d779a0f6dbe6cc85a6df26b72)

* [OCPBUGS-52216](https://issues.redhat.com/browse/OCPBUGS-52216): Bump x/oauth2 to 0.27.0 [#463](https://github.com/openshift/cluster-baremetal-operator/pull/463)
* [OCPBUGS-51275](https://issues.redhat.com/browse/OCPBUGS-51275): Add new resources to controller relatedObjects [#465](https://github.com/openshift/cluster-baremetal-operator/pull/465)
* [OCPBUGS-44839](https://issues.redhat.com/browse/OCPBUGS-44839): Mount the user-ca-bundle into ICC [#455](https://github.com/openshift/cluster-baremetal-operator/pull/455)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fc6ee14cc11098b5a93c1a2c785285a69b5c19c6...64b0a39c0bf9418d779a0f6dbe6cc85a6df26b72)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/8fde9c52fbb6b6044785ebae0751000b049fd0ed)

* [OCPEDGE-1683](https://issues.redhat.com/browse/OCPEDGE-1683): feat: add support for arbiter and dual replica: [#116](https://github.com/openshift/cluster-bootstrap/pull/116)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/5a201a043f2c403d0de1df031071526526ad8af2...8fde9c52fbb6b6044785ebae0751000b049fd0ed)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d)

* [OCPCLOUD-2860](https://issues.redhat.com/browse/OCPCLOUD-2860): Enable propagation of Machine annotations to Nodes [#233](https://github.com/openshift/cluster-api/pull/233)
* [OCPCLOUD-2680](https://issues.redhat.com/browse/OCPCLOUD-2680): Enable machine to node propagation [#229](https://github.com/openshift/cluster-api/pull/229)
* [Full changelog](https://github.com/openshift/cluster-api/compare/242bd7153f250b93070e8d2f57d3969887d469e1...7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/24f685d0d11e0b9b249c765b6c74ed2e6e5712cd)

* NO-JIRA: fix: e2e: azure conditionally set identity [#276](https://github.com/openshift/cluster-capi-operator/pull/276)
* [TRT-2048](https://issues.redhat.com/browse/TRT-2048): Revert "OCPCLOUD-2792: corecluster: set controller level conditions + tests" [#273](https://github.com/openshift/cluster-capi-operator/pull/273)
* [OCPBUGS-53057](https://issues.redhat.com/browse/OCPBUGS-53057): Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic [#266](https://github.com/openshift/cluster-capi-operator/pull/266)
* [OCPCLOUD-2858](https://issues.redhat.com/browse/OCPCLOUD-2858): Bump dependencies to CAPI v1.9.z [#270](https://github.com/openshift/cluster-capi-operator/pull/270)
* NO-JIRA: Update TODOs with new Jira issues [#269](https://github.com/openshift/cluster-capi-operator/pull/269)
* [OCPCLOUD-2718](https://issues.redhat.com/browse/OCPCLOUD-2718): Add default VolumeSize for MAPI to CAPI conversion [#260](https://github.com/openshift/cluster-capi-operator/pull/260)
* [OCPCLOUD-2792](https://issues.redhat.com/browse/OCPCLOUD-2792): corecluster: set controller level conditions + tests [#256](https://github.com/openshift/cluster-capi-operator/pull/256)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/1ca4e107158834200ae8343e7d385d62cd15a0e2...24f685d0d11e0b9b249c765b6c74ed2e6e5712cd)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/09f143bfcc676ab16c216515873aa236c2e0a5e7)

* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#380](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e938398a53735d2f448fcf924b54f34b5b93af06...09f143bfcc676ab16c216515873aa236c2e0a5e7)


### [cluster-config-api](https://github.com/openshift/api/tree/0f14a211af331fdff85df33c6112e48cb8405dd3)

* Migrate DeepCopy and Compatibility gen to Gengo v2 [#1776](https://github.com/openshift/api/pull/1776)
* [CCXDEV-10455](https://issues.redhat.com/browse/CCXDEV-10455): update insightsDataGather to v1alpha2 with GathererConfig [#2195](https://github.com/openshift/api/pull/2195)
* [API-1843](https://issues.redhat.com/browse/API-1843): FeatureGate(d) KMS encryption [#2035](https://github.com/openshift/api/pull/2035)
* [CONSOLE-4448](https://issues.redhat.com/browse/CONSOLE-4448), [OCPBUGS-53412](https://issues.redhat.com/browse/OCPBUGS-53412): Add the ability to specify a second custom logo for PatternFly 6 [#2177](https://github.com/openshift/api/pull/2177)
* [MCO-1521](https://issues.redhat.com/browse/MCO-1521): Promote PinnedImageSet to GA [#2198](https://github.com/openshift/api/pull/2198)
* Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven [#2238](https://github.com/openshift/api/pull/2238)
* Update KAL and remove patch strategy tags [#2241](https://github.com/openshift/api/pull/2241)
* [STOR-2141](https://issues.redhat.com/browse/STOR-2141): add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec [#2190](https://github.com/openshift/api/pull/2190)
* [MCO-1590](https://issues.redhat.com/browse/MCO-1590): Add explicit opt-out & status field for boot image update configuration [#2223](https://github.com/openshift/api/pull/2223)
* [API-1689](https://issues.redhat.com/browse/API-1689): features: add ShortCertRotation [#1977](https://github.com/openshift/api/pull/1977)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Introduce GatewayAPIController feature gate [#2219](https://github.com/openshift/api/pull/2219)
* [CCXDEV-14850](https://issues.redhat.com/browse/CCXDEV-14850): insights add storage spec [#2200](https://github.com/openshift/api/pull/2200)
* Support SEV_SNP and TDX confidential instance type selection on GCP [#2165](https://github.com/openshift/api/pull/2165)
* [OCPBUGS-48641](https://issues.redhat.com/browse/OCPBUGS-48641): config/v1/types_cluster_version: Explain image and version both set [#2158](https://github.com/openshift/api/pull/2158)
* [OCPEDGE-1512](https://issues.redhat.com/browse/OCPEDGE-1512): feat: add dualreplica featuregate [#2196](https://github.com/openshift/api/pull/2196)
* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Add SELinuxMount and SELinuxChangePolicy to DevPreview [#2212](https://github.com/openshift/api/pull/2212)
* Add changes to infrastructure object to contain service endpoints and feature flag added [#2078](https://github.com/openshift/api/pull/2078)
* [Full changelog](https://github.com/openshift/api/compare/f587fb60f627fcdcff72a34293cb0771a8897338...0f14a211af331fdff85df33c6112e48cb8405dd3)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cbfd00a8204d5ae5d755edf05b7c26a60218a9b7)

* [OCPEDGE-1643](https://issues.redhat.com/browse/OCPEDGE-1643): bump: ocp/api ocp/library-go k8s [#431](https://github.com/openshift/cluster-config-operator/pull/431)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/1af8cf3ae4240132ef86786112b2a6e75d17a2fd...cbfd00a8204d5ae5d755edf05b7c26a60218a9b7)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/29750392e6b818d5fa6f3f02f1d48e4144fd5c6c)

* [OAPE-147](https://issues.redhat.com/browse/OAPE-147): Add E2E tests for MachineNamePrefix with OnDelete update strategy [#353](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/353)
* [OCPBUGS-52224](https://issues.redhat.com/browse/OCPBUGS-52224): Bump to golang.org/x/oauth2@v0.27.0 [#352](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/6bf1961f27a4d358221b7d4b056785f10f6dcba7...29750392e6b818d5fa6f3f02f1d48e4144fd5c6c)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/7d1e842d8920df6788b92a36b7f0564cb4a49f0e)

* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook references [#231](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/231)
* [OCPBUGS-24588](https://issues.redhat.com/browse/OCPBUGS-24588): bump library-go [#233](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/233)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#228](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/a68ffe82329d198f79508daeb6c63c6bc2a4e19a...7d1e842d8920df6788b92a36b7f0564cb4a49f0e)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/659813065170f4e52f80b7a29bbab64bfa9aa172)

* [OCPBUGS-51193](https://issues.redhat.com/browse/OCPBUGS-51193): Add runbook_url for CoreDNSErrorsHigh [#426](https://github.com/openshift/cluster-dns-operator/pull/426)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0a9deeea4c335e259747b35267811a4a040289fd...659813065170f4e52f80b7a29bbab64bfa9aa172)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ba5c2e88e7c489978fa847aee8afc8fb99a30e65)

* [OCPEDGE-1500](https://issues.redhat.com/browse/OCPEDGE-1500): Added scaling strategies for TNF [#1396](https://github.com/openshift/cluster-etcd-operator/pull/1396)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/5bbe49442101475febb89bba3be808aa121f5c0c...ba5c2e88e7c489978fa847aee8afc8fb99a30e65)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f27308c19e654021b614b12505b298315a72135c)

* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Bump msi-dataplane dependency [#1187](https://github.com/openshift/cluster-image-registry-operator/pull/1187)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication [#1186](https://github.com/openshift/cluster-image-registry-operator/pull/1186)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e23f7e61cb1589b7068183aed4bd9f4c0fe00553...f27308c19e654021b614b12505b298315a72135c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1b72b75bd12ae929dbae3ff0e71ab3bb7017c4c8)

* [NE-1934](https://issues.redhat.com/browse/NE-1934): Bump to OSSM 3.0 for Gateway API support [#1152](https://github.com/openshift/cluster-ingress-operator/pull/1152)
* [CORS-3907](https://issues.redhat.com/browse/CORS-3907): Update ingress operator to with custom endpoints [#1197](https://github.com/openshift/cluster-ingress-operator/pull/1197)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add experimental Gateway API group to Validating Admission Policy [#1200](https://github.com/openshift/cluster-ingress-operator/pull/1200)
* [NE-1907](https://issues.redhat.com/browse/NE-1907): Manage OSSM operator subscription manually to ensure a compatible version is installed [#1112](https://github.com/openshift/cluster-ingress-operator/pull/1112)
* [NE-1981](https://issues.redhat.com/browse/NE-1981): Move controller test helpers to dedicated package [#1199](https://github.com/openshift/cluster-ingress-operator/pull/1199)
* [NE-1953](https://issues.redhat.com/browse/NE-1953): Add Validating Admission Policy for Gateway API CRDs [#1192](https://github.com/openshift/cluster-ingress-operator/pull/1192)
* [NE-1954](https://issues.redhat.com/browse/NE-1954): Implement GatewayAPIController feature gate [#1198](https://github.com/openshift/cluster-ingress-operator/pull/1198)
* [NE-1936](https://issues.redhat.com/browse/NE-1936): Bump k8s.io dependencies to v0.32.1 [#1184](https://github.com/openshift/cluster-ingress-operator/pull/1184)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/26f8b0f9c9fa30ff84f08f7e1f9da87aef431891...1b72b75bd12ae929dbae3ff0e71ab3bb7017c4c8)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e41854880dcb1a9df3322c1494c93e9a9ac0babe)

* [OCPBUGS-35102](https://issues.redhat.com/browse/OCPBUGS-35102): Bump library-go [#1824](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/c13665bdedd2ee30d28ff83c187ea739d9b8094d...e41854880dcb1a9df3322c1494c93e9a9ac0babe)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/75f30cdb07d58ce71c0a247207a5d91799a48cc0)

* [STOR-2267](https://issues.redhat.com/browse/STOR-2267): Run SELinux warning controller [#834](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/834)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/84e020145ed33c98597f675fff638c83f4d351a4...75f30cdb07d58ce71c0a247207a5d91799a48cc0)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4c301ea57db05239182a6c4d9cacc2285dd5991e)

* [MON-4188](https://issues.redhat.com/browse/MON-4188): Add docs for proxy_url alertmanager [#2582](https://github.com/openshift/cluster-monitoring-operator/pull/2582)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2577](https://github.com/openshift/cluster-monitoring-operator/pull/2577)
* [MON-4189](https://issues.redhat.com/browse/MON-4189): Updating node-exporter accelerators configmap [#2558](https://github.com/openshift/cluster-monitoring-operator/pull/2558)
* [MON-4043](https://issues.redhat.com/browse/MON-4043): Configuring external Alertmangers with proxy_url [#2580](https://github.com/openshift/cluster-monitoring-operator/pull/2580)
* [MON-4136](https://issues.redhat.com/browse/MON-4136): set up the PrometheusPossibleNarrowSelectors alert [#2554](https://github.com/openshift/cluster-monitoring-operator/pull/2554)
* [MON-3960](https://issues.redhat.com/browse/MON-3960): test: enable back TestTLSSecurityProfileConfiguration and m… [#2545](https://github.com/openshift/cluster-monitoring-operator/pull/2545)
* NO-JIRA: chore: versions: kubeRbacProxy's primary branch isn't main yet [#2574](https://github.com/openshift/cluster-monitoring-operator/pull/2574)
* [OU-515](https://issues.redhat.com/browse/OU-515): remove old nginx configmap deletion [#2575](https://github.com/openshift/cluster-monitoring-operator/pull/2575)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4e74c9de1fbda42550b21a48bb76aeef708e60cd...4c301ea57db05239182a6c4d9cacc2285dd5991e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1daca87a5c6ebd5e6d7b5bcc4374119b59061af6)

* [OCPBUGS-52280](https://issues.redhat.com/browse/OCPBUGS-52280): Move to use newer IPsec DaemonSets irrespective of MCP state [#2454](https://github.com/openshift/cluster-network-operator/pull/2454)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Update managed Azure HCP cloud network config [#2647](https://github.com/openshift/cluster-network-operator/pull/2647)
* [OCPBUGS-52972](https://issues.redhat.com/browse/OCPBUGS-52972): Correct namespace ref and cert dir [#2665](https://github.com/openshift/cluster-network-operator/pull/2665)
* NO-JIRA: ovn-k: sync EgressService with upstream [#2664](https://github.com/openshift/cluster-network-operator/pull/2664)
* [OCPBUGS-52361](https://issues.redhat.com/browse/OCPBUGS-52361): frr-k8s: rename validatingwebhook name [#2659](https://github.com/openshift/cluster-network-operator/pull/2659)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/972dea1fa5ac0b403496f88b2b0c59e1aa471de8...1daca87a5c6ebd5e6d7b5bcc4374119b59061af6)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/33b83c7ca017d81743847d43d35f2496f4dd0ab0)

* [CNF-16638](https://issues.redhat.com/browse/CNF-16638): Reduce code duplication of RPS enabled checks (#1301) [#1301](https://github.com/openshift/cluster-node-tuning-operator/pull/1301)
* Add observedGeneration to Profile status (#1305) [#1305](https://github.com/openshift/cluster-node-tuning-operator/pull/1305)
* Manage TuneD profiles with the same name and different content (#1216) [#1216](https://github.com/openshift/cluster-node-tuning-operator/pull/1216)
* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) [#1217](https://github.com/openshift/cluster-node-tuning-operator/pull/1217)
* Switch builder image to multi-arch image (#1297) [#1297](https://github.com/openshift/cluster-node-tuning-operator/pull/1297)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f166846b7256402cd37db880edc94752cbf481bc...33b83c7ca017d81743847d43d35f2496f4dd0ab0)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/748524784686a5f397490563882cbfb88f9acd01)

* [CNTRLPLANE-55](https://issues.redhat.com/browse/CNTRLPLANE-55): Add MinimallySufficientPodSecurityStandard annotation to namespaces [#161](https://github.com/openshift/cluster-policy-controller/pull/161)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/5cc0d0ecd3cdfe8e2fbb55bb62de7fb047b2a127...748524784686a5f397490563882cbfb88f9acd01)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/4c91605762fc41b9bd5c6fc0f7ee7ae121a1ed0f)

* [OCPBUGS-54149](https://issues.redhat.com/browse/OCPBUGS-54149): Updates to README.md [#613](https://github.com/openshift/cluster-samples-operator/pull/613)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Unrevert the revert "OCPBUGS-45049: Adding mutex to func createSamples on handler.go" [#609](https://github.com/openshift/cluster-samples-operator/pull/609)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Unrevert the revert "OCPBUGS-52346: bump x/oauth2 to version 0.27.0" [#608](https://github.com/openshift/cluster-samples-operator/pull/608)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Revert "OCPBUGS-52346: bump x/oauth2 to version 0.27.0" [#606](https://github.com/openshift/cluster-samples-operator/pull/606)
* [OCPBUGS-52848](https://issues.redhat.com/browse/OCPBUGS-52848): Revert "OCPBUGS-45049: Adding mutex to func createSamples on handler.go" [#607](https://github.com/openshift/cluster-samples-operator/pull/607)
* [OCPBUGS-52379](https://issues.redhat.com/browse/OCPBUGS-52379): relevant references to master renamed in README.md [#603](https://github.com/openshift/cluster-samples-operator/pull/603)
* [OCPBUGS-52346](https://issues.redhat.com/browse/OCPBUGS-52346): bump x/oauth2 to version 0.27.0 [#602](https://github.com/openshift/cluster-samples-operator/pull/602)
* [OCPBUGS-45049](https://issues.redhat.com/browse/OCPBUGS-45049): Adding mutex to func createSamples on handler.go [#601](https://github.com/openshift/cluster-samples-operator/pull/601)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5c075681e6b61e9de5eb3ff98ba19643ba23fecf...4c91605762fc41b9bd5c6fc0f7ee7ae121a1ed0f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/37acadf5d1b61acd6d20a62a655efa67857a199e)

* [STOR-1881](https://issues.redhat.com/browse/STOR-1881): Role and ClusterRole with too wide permissions [#569](https://github.com/openshift/cluster-storage-operator/pull/569)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#568](https://github.com/openshift/cluster-storage-operator/pull/568)
* [OCPBUGS-24588](https://issues.redhat.com/browse/OCPBUGS-24588): bump library-go [#566](https://github.com/openshift/cluster-storage-operator/pull/566)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#554](https://github.com/openshift/cluster-storage-operator/pull/554)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): Added token minter Sidecar for aws-ebs hypershift-deployments [#528](https://github.com/openshift/cluster-storage-operator/pull/528)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a20a39c2bf1e1d4215f2705061b57203fc0dd173...37acadf5d1b61acd6d20a62a655efa67857a199e)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c1c56b4cfb93588290de3734031b1a2d556788fc)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#70](https://github.com/openshift/cluster-update-keys/pull/70)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...c1c56b4cfb93588290de3734031b1a2d556788fc)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4ec8c48667e960ffeff65f1e272a27e2dabc6261)

* [OTA-1403](https://issues.redhat.com/browse/OTA-1403): Move the CVO CLI Application to a Separate Folder [#1169](https://github.com/openshift/cluster-version-operator/pull/1169)
* [OTA-209](https://issues.redhat.com/browse/OTA-209): Add CVOConfiguration controller [#1163](https://github.com/openshift/cluster-version-operator/pull/1163)
* [OTA-1427](https://issues.redhat.com/browse/OTA-1427): Reconcile all nodes via a special event [#1164](https://github.com/openshift/cluster-version-operator/pull/1164)
* [OCPBUGS-52258](https://issues.redhat.com/browse/OCPBUGS-52258): pkg/cvo/updatepayload: Context around ValidateDirectory calls [#1166](https://github.com/openshift/cluster-version-operator/pull/1166)
* NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities [#1159](https://github.com/openshift/cluster-version-operator/pull/1159)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ff3778c368351aea28f7245743966745b14d40a8...4ec8c48667e960ffeff65f1e272a27e2dabc6261)


### [console](https://github.com/openshift/console/tree/84c8a7ce14d00e8e6997b6a65cea90094140aea2)

* (chores) Add approvers [#14895](https://github.com/openshift/console/pull/14895)
* [OCPBUGS-52864](https://issues.redhat.com/browse/OCPBUGS-52864): Edit form for key/value secrets should be showing decoded base64 values. [#14852](https://github.com/openshift/console/pull/14852)
* [ODC-7773](https://issues.redhat.com/browse/ODC-7773): Add e2e tests for Favorites feature [#14802](https://github.com/openshift/console/pull/14802)
* [CONSOLE-4437](https://issues.redhat.com/browse/CONSOLE-4437): Add CSP test to the test-prow-e2e.sh [#14858](https://github.com/openshift/console/pull/14858)
* [RHSTOR-6927](https://issues.redhat.com/browse/RHSTOR-6927): Removes LSO static plugin from console [#14740](https://github.com/openshift/console/pull/14740)
* [OCPBUGS-53119](https://issues.redhat.com/browse/OCPBUGS-53119): Add support for extensibility in SnapshotClass and StorageClass pages [#14878](https://github.com/openshift/console/pull/14878)
* [OCPBUGS-52489](https://issues.redhat.com/browse/OCPBUGS-52489): Fixed the typo 'enivornments' on tour page [#14857](https://github.com/openshift/console/pull/14857)
* [CONSOLE-4081](https://issues.redhat.com/browse/CONSOLE-4081): Refactor EditSecret component [#14853](https://github.com/openshift/console/pull/14853)
* [OCPBUGS-53030](https://issues.redhat.com/browse/OCPBUGS-53030): Fix type-only dynamic module import build warnings for plugins [#14861](https://github.com/openshift/console/pull/14861)
* [CONSOLE-3960](https://issues.redhat.com/browse/CONSOLE-3960): Migrate `react-helmet` to `react-helmet-async` [#14876](https://github.com/openshift/console/pull/14876)
* [CONSOLE-3247](https://issues.redhat.com/browse/CONSOLE-3247): Remove `react-measure` [#14844](https://github.com/openshift/console/pull/14844)
* [OCPBUGS-34737](https://issues.redhat.com/browse/OCPBUGS-34737): Disable pipeline ci tests due to failure in task creation [#14893](https://github.com/openshift/console/pull/14893)
* [OCPBUGS-53103](https://issues.redhat.com/browse/OCPBUGS-53103): Apply plugin-api-changed label to plugin SDK shared modules [#14872](https://github.com/openshift/console/pull/14872)
* [ODC-7776](https://issues.redhat.com/browse/ODC-7776): Add getting started alert [#14830](https://github.com/openshift/console/pull/14830)
* [ODC-7766](https://issues.redhat.com/browse/ODC-7766): Test updates pertaining to perspective merge [#14717](https://github.com/openshift/console/pull/14717)
* [CONSOLE-4515](https://issues.redhat.com/browse/CONSOLE-4515), [CONSOLE-4516](https://issues.redhat.com/browse/CONSOLE-4516), [CONSOLE-4517](https://issues.redhat.com/browse/CONSOLE-4517): Update `react-modal`, `react-tagsinput` [#14874](https://github.com/openshift/console/pull/14874)
* [OCPBUGS-53118](https://issues.redhat.com/browse/OCPBUGS-53118): Include init containers in readiness count if ready and started is true [#14877](https://github.com/openshift/console/pull/14877)
* [CONSOLE-4461](https://issues.redhat.com/browse/CONSOLE-4461): Notification drawer move to Page props, fixing the small overlap on the notification drawer [#14723](https://github.com/openshift/console/pull/14723)
* [OCPBUGS-45847](https://issues.redhat.com/browse/OCPBUGS-45847): Remove barrel file references in static plugin `exposedModules` [#14683](https://github.com/openshift/console/pull/14683)
* [OCPBUGS-52589](https://issues.redhat.com/browse/OCPBUGS-52589): Fix hooks in `CaptureTelemetry` [#14870](https://github.com/openshift/console/pull/14870)
* [CONSOLE-3414](https://issues.redhat.com/browse/CONSOLE-3414): Fix flaky `Loading` tests [#14873](https://github.com/openshift/console/pull/14873)
* [OCPBUGS-53047](https://issues.redhat.com/browse/OCPBUGS-53047): Disable guided tour in admin perspective [#14866](https://github.com/openshift/console/pull/14866)
* [OCPBUGS-52166](https://issues.redhat.com/browse/OCPBUGS-52166): Fix sort function on Access review table [#14848](https://github.com/openshift/console/pull/14848)
* [OCPBUGS-52589](https://issues.redhat.com/browse/OCPBUGS-52589): update @types/react to v17, use new JSX transform [#14864](https://github.com/openshift/console/pull/14864)
* [ODC-7775](https://issues.redhat.com/browse/ODC-7775): Update content in Getting started resources on cluster and project overview page [#14829](https://github.com/openshift/console/pull/14829)
* [OCPBUGS-52325](https://issues.redhat.com/browse/OCPBUGS-52325): fix Node Logs toolbar layout at mobile [#14836](https://github.com/openshift/console/pull/14836)
* [CONSOLE-4430](https://issues.redhat.com/browse/CONSOLE-4430): Content Security Policy E2E testing with Puppeteer & Chrome [#14675](https://github.com/openshift/console/pull/14675)
* [CONSOLE-3414](https://issues.redhat.com/browse/CONSOLE-3414): Replace `Loading` with PF `Spinner` [#14842](https://github.com/openshift/console/pull/14842)
* [ODC-7727](https://issues.redhat.com/browse/ODC-7727): Add hover effect to favourites icon [#14839](https://github.com/openshift/console/pull/14839)
* [CONSOLE-4504](https://issues.redhat.com/browse/CONSOLE-4504): set LogViewer theme using console's theme [#14827](https://github.com/openshift/console/pull/14827)
* [OCPBUGS-48491](https://issues.redhat.com/browse/OCPBUGS-48491): Namespace is not persisting when switching to developer view from the topology page of admin page [#14812](https://github.com/openshift/console/pull/14812)
* [OCPBUGS-49348](https://issues.redhat.com/browse/OCPBUGS-49348): Fix Secret form drag and drop issue [#14798](https://github.com/openshift/console/pull/14798)
* [OCPBUGS-37101](https://issues.redhat.com/browse/OCPBUGS-37101): Remove logoutOpenShift method call [#14658](https://github.com/openshift/console/pull/14658)
* [OCPBUGS-52316](https://issues.redhat.com/browse/OCPBUGS-52316): enable clicking outside NodeLogs Selects to close them [#14826](https://github.com/openshift/console/pull/14826)
* [OCPBUGS-52214](https://issues.redhat.com/browse/OCPBUGS-52214): add missing v5 patternfly-addons.scss and patternfly-charts.scss styles [#14813](https://github.com/openshift/console/pull/14813)
* [CONSOLE-4409](https://issues.redhat.com/browse/CONSOLE-4409): Update monaco theming and sidebar logic [#14835](https://github.com/openshift/console/pull/14835)
* [CONSOLE-4503](https://issues.redhat.com/browse/CONSOLE-4503): Replace custom Banner with PatternFly equivalent [#14825](https://github.com/openshift/console/pull/14825)
* [OCPBUGS-52298](https://issues.redhat.com/browse/OCPBUGS-52298): Add breadcrumbs to ODC Project details page [#14824](https://github.com/openshift/console/pull/14824)
* [OCPBUGS-51372](https://issues.redhat.com/browse/OCPBUGS-51372): Filter 'Name' on resource list page doesn't align well when language is set to Chinese/Japanese/Korean [#14822](https://github.com/openshift/console/pull/14822)
* [ODC-7727](https://issues.redhat.com/browse/ODC-7727): Favoriting page in the Console admin perspective [#14765](https://github.com/openshift/console/pull/14765)
* [OCPBUGS-51355](https://issues.redhat.com/browse/OCPBUGS-51355): VolumeSnapshots are not displayed in OpenShift Web Console [#14820](https://github.com/openshift/console/pull/14820)
* [CONSOLE-4498](https://issues.redhat.com/browse/CONSOLE-4498): Replace checkboxes with Switch in ResourceLog [#14815](https://github.com/openshift/console/pull/14815)
* [OCPBUGS-30973](https://issues.redhat.com/browse/OCPBUGS-30973): Remove @ts-ignore comment missed in #14680 [#14814](https://github.com/openshift/console/pull/14814)
* [CONSOLE-4496](https://issues.redhat.com/browse/CONSOLE-4496): Replace custom Checkbox filter with PatternFly Switch [#14807](https://github.com/openshift/console/pull/14807)
* [OCPBUGS-51037](https://issues.redhat.com/browse/OCPBUGS-51037): Update the monitoring topic used by the console team [#14781](https://github.com/openshift/console/pull/14781)
* [OCPBUGS-50650](https://issues.redhat.com/browse/OCPBUGS-50650): Retain original path when detecting perspective [#14810](https://github.com/openshift/console/pull/14810)
* [CONSOLE-4407](https://issues.redhat.com/browse/CONSOLE-4407), [CONSOLE-4409](https://issues.redhat.com/browse/CONSOLE-4409): Update monaco and YAML language server, use PF6 CodeEditor [#14663](https://github.com/openshift/console/pull/14663)
* [OCPBUGS-51076](https://issues.redhat.com/browse/OCPBUGS-51076): Console UI Displays Incorrect Subscription Values [#14790](https://github.com/openshift/console/pull/14790)
* [CONSOLE-4399](https://issues.redhat.com/browse/CONSOLE-4399): Added 'createdTime' in Jobs.tsx [#14786](https://github.com/openshift/console/pull/14786)
* [OCPBUGS-48413](https://issues.redhat.com/browse/OCPBUGS-48413): Sorted Links based on OS in CLI [#14819](https://github.com/openshift/console/pull/14819)
* [Full changelog](https://github.com/openshift/console/compare/e487b63cf0934c4c4f61aab5b5260f935bf070b6...84c8a7ce14d00e8e6997b6a65cea90094140aea2)


### [console-operator](https://github.com/openshift/console-operator/tree/644c7134e44dad29e47747c67aa2d50138d8f316)

* [NETOBSERV-2029](https://issues.redhat.com/browse/NETOBSERV-2029): add netobserv ConsoleCLIDownload [#958](https://github.com/openshift/console-operator/pull/958)
* [OCPBUGS-53164](https://issues.redhat.com/browse/OCPBUGS-53164): Add annotations to Enable developer perspective quick start to include in the console quick starts [#970](https://github.com/openshift/console-operator/pull/970)
* [ODC-7723](https://issues.redhat.com/browse/ODC-7723): Add quick start to enable developer perspective [#968](https://github.com/openshift/console-operator/pull/968)
* [CONSOLE-4508](https://issues.redhat.com/browse/CONSOLE-4508): Enable CSP e2e test [#969](https://github.com/openshift/console-operator/pull/969)
* [OCPBUGS-51256](https://issues.redhat.com/browse/OCPBUGS-51256): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#965](https://github.com/openshift/console-operator/pull/965)
* [Full changelog](https://github.com/openshift/console-operator/compare/ef22ce9089e2510fb7af58756625cc4b3eba65a9...644c7134e44dad29e47747c67aa2d50138d8f316)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/3fbfe3d9acf714040782d4c1adc966191c3e42cd)

* [OCPBUGS-53198](https://issues.redhat.com/browse/OCPBUGS-53198): Sync 25-03-2025 [#177](https://github.com/openshift/containernetworking-plugins/pull/177)
* [OCPBUGS-45272](https://issues.redhat.com/browse/OCPBUGS-45272): Ds merge 3/7/25 [#175](https://github.com/openshift/containernetworking-plugins/pull/175)
* [OCPBUGS-48190](https://issues.redhat.com/browse/OCPBUGS-48190): Ds merge 2/5/2025 [#173](https://github.com/openshift/containernetworking-plugins/pull/173)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...3fbfe3d9acf714040782d4c1adc966191c3e42cd)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/a1c393c21b7fe2403f83a87236107001e804c555)

* [OCPBUGS-41719](https://issues.redhat.com/browse/OCPBUGS-41719): UPSTREAM: 624: Reorder API calls after successful detach [#82](https://github.com/openshift/csi-external-attacher/pull/82)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/4d70cd88c65643e7c55f9be4f1e50f37e4e80772...a1c393c21b7fe2403f83a87236107001e804c555)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/c7877067921023cdf43697a69221e1c9a245c8c7)

* [OCPBUGS-51561](https://issues.redhat.com/browse/OCPBUGS-51561): bump golang.org/x/crypto to v0.36.0 [#112](https://github.com/openshift/csi-external-provisioner/pull/112)
* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#113](https://github.com/openshift/csi-external-provisioner/pull/113)
* [OCPBUGS-49805](https://issues.redhat.com/browse/OCPBUGS-49805): Fix the managed-by-label getting populated with invalid value [#110](https://github.com/openshift/csi-external-provisioner/pull/110)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/7e8d9a02781931f9cb99d5000181eafb2ca684bc...c7877067921023cdf43697a69221e1c9a245c8c7)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/cca04e3957d4732fd1775e0dc2f757b78ae113a8)

* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-resizer to upstream v1.13.2 for OCP 4.19 [#169](https://github.com/openshift/csi-external-resizer/pull/169)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/82e58855d4e3d8b6cab92da2f89ce00279313809...cca04e3957d4732fd1775e0dc2f757b78ae113a8)


### [docker-builder](https://github.com/openshift/builder/tree/3ea943befbd7bf15979186ac23d17405dbf63274)

* [OCPBUGS-43812](https://issues.redhat.com/browse/OCPBUGS-43812): Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 [#458](https://github.com/openshift/builder/pull/458)
* [Full changelog](https://github.com/openshift/builder/compare/f980274a6976bed3dc70547062d60aa5fff019cb...3ea943befbd7bf15979186ac23d17405dbf63274)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/686fdac595884ade83fef7b2b9c41169bf3fcb21)

* test/e2e: adapt for layered node image (#167) [#167](https://github.com/openshift/driver-toolkit/pull/167)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/81c6fa20373889d59fe6af38fa9b05f4817800bf...686fdac595884ade83fef7b2b9c41169bf3fcb21)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/85353bb936a289b8b817f7b437afacdf7458c667)

* [OCPBUGS-53096](https://issues.redhat.com/browse/OCPBUGS-53096): Build openshift container based on 4.19 image [#89](https://github.com/openshift/egress-router-cni/pull/89)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/3193a756d60e14f7139992e2e42b7036955652e7...85353bb936a289b8b817f7b437afacdf7458c667)


### [etcd](https://github.com/openshift/etcd/tree/2f703d6792c6f60b89f5b51d8018ba70a24d6472)

* [OCPBUGS-52181](https://issues.redhat.com/browse/OCPBUGS-52181): Ensure cluster id changes during force-new-cluster [#313](https://github.com/openshift/etcd/pull/313)
* [OCPBUGS-50510](https://issues.redhat.com/browse/OCPBUGS-50510): Add configurable option for hardware-related timeout delay [#311](https://github.com/openshift/etcd/pull/311)
* [OCPBUGS-45488](https://issues.redhat.com/browse/OCPBUGS-45488): Updating ose-etcd-container image to be consistent with ART for 4.19 [#306](https://github.com/openshift/etcd/pull/306)
* [ETCD-717](https://issues.redhat.com/browse/ETCD-717): Rebase etcd 3.5.19 openshift 4.19 [#315](https://github.com/openshift/etcd/pull/315)
* [Full changelog](https://github.com/openshift/etcd/compare/e9234c8be833630785710e02700ffbffb63b7952...2f703d6792c6f60b89f5b51d8018ba70a24d6472)


### [hypershift](https://github.com/openshift/hypershift/tree/c1e9d412acb276c021e8d1c645dc8d4423ead75d)

* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Authenticate to Azure only once in CPO [#5862](https://github.com/openshift/hypershift/pull/5862)
* [OCPBUGS-52190](https://issues.redhat.com/browse/OCPBUGS-52190): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#5876](https://github.com/openshift/hypershift/pull/5876)
* NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed [#5859](https://github.com/openshift/hypershift/pull/5859)
* [OCPBUGS-53263](https://issues.redhat.com/browse/OCPBUGS-53263): Fixed cpov2 reconciliation making no-op calls to api-server [#5861](https://github.com/openshift/hypershift/pull/5861)
* [OCPBUGS-53462](https://issues.redhat.com/browse/OCPBUGS-53462): Check for availability of individual catalog images [#5881](https://github.com/openshift/hypershift/pull/5881)
* NO-JIRA: Improve error output msg for Azure CLI role cmds [#5877](https://github.com/openshift/hypershift/pull/5877)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove csi-snapshot-validation-webhook [#5776](https://github.com/openshift/hypershift/pull/5776)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix KMS Azure credentials mount path [#5857](https://github.com/openshift/hypershift/pull/5857)
* [CNTRLPLANE-348](https://issues.redhat.com/browse/CNTRLPLANE-348): Konflux tagged releases [#5869](https://github.com/openshift/hypershift/pull/5869)
* [OCPBUGS-53407](https://issues.redhat.com/browse/OCPBUGS-53407): chore(deps): update konflux references [#5846](https://github.com/openshift/hypershift/pull/5846)
* NO-JIRA: feat(builds): Add area labels and OWNERS [#5872](https://github.com/openshift/hypershift/pull/5872)
* [OCPBUGS-52424](https://issues.redhat.com/browse/OCPBUGS-52424): Set shutdown watch termination grace period on kube-apiserver [#5760](https://github.com/openshift/hypershift/pull/5760)
* NO-JIRA: Add Azure scheduler doc to mkdocs [#5865](https://github.com/openshift/hypershift/pull/5865)
* [CNTRLPLANE-342](https://issues.redhat.com/browse/CNTRLPLANE-342): Add missing area for support [#5864](https://github.com/openshift/hypershift/pull/5864)
* [OCPBUGS-53050](https://issues.redhat.com/browse/OCPBUGS-53050): Handle multiple mirror entries for source [#5827](https://github.com/openshift/hypershift/pull/5827)
* [OCPBUGS-52331](https://issues.redhat.com/browse/OCPBUGS-52331): CPO v2: rollout workloads on any changes to mounted configmaps/secrets [#5767](https://github.com/openshift/hypershift/pull/5767)
* NO-JIRA: openstack: revert `OpenStackImageRetentionPolicy` + use a unique image name per Hosted Cluster [#5853](https://github.com/openshift/hypershift/pull/5853)
* Revert "CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure" [#5860](https://github.com/openshift/hypershift/pull/5860)
* [OCPBUGS-53083](https://issues.redhat.com/browse/OCPBUGS-53083): e2e: detect leader election failure in restarted pods [#5830](https://github.com/openshift/hypershift/pull/5830)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Enable MIv3 for CNO/CNCC on managed Azure [#5837](https://github.com/openshift/hypershift/pull/5837)
* [METAL-1240](https://issues.redhat.com/browse/METAL-1240): Fix kube-controller-manager and openshift-route-controller-manager services' ipFamilies wrt PreferDualStack policy [#5829](https://github.com/openshift/hypershift/pull/5829)
* [OSASINFRA-3492](https://issues.redhat.com/browse/OSASINFRA-3492): feat(openstack): leverage ORC to manage the release image [#5139](https://github.com/openshift/hypershift/pull/5139)
* [CNTRLPLANE-325](https://issues.redhat.com/browse/CNTRLPLANE-325): rootless containerized builds [#5835](https://github.com/openshift/hypershift/pull/5835)
* [CNTRLPLANE-265](https://issues.redhat.com/browse/CNTRLPLANE-265): Enable gosimple, govet, and errcheck in golangci-lint [#5759](https://github.com/openshift/hypershift/pull/5759)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix Azure KMS SecretProviderClass volume name [#5820](https://github.com/openshift/hypershift/pull/5820)
* NO-JIRA: Bump msi-dataplane dependency [#5796](https://github.com/openshift/hypershift/pull/5796)
* [OCPBUGS-52985](https://issues.redhat.com/browse/OCPBUGS-52985): filter watch events for HO AWSEndpointService reconciler [#5818](https://github.com/openshift/hypershift/pull/5818)
* NO-JIRA: Update Konflux references [#5799](https://github.com/openshift/hypershift/pull/5799)
* [ARO-14354](https://issues.redhat.com/browse/ARO-14354), [ARO-14355](https://issues.redhat.com/browse/ARO-14355), [ARO-14356](https://issues.redhat.com/browse/ARO-14356): introduce image registry capability behind feature gate [#5456](https://github.com/openshift/hypershift/pull/5456)
* [OCPBUGS-52819](https://issues.redhat.com/browse/OCPBUGS-52819): CPO Overrides for OCPBUGS-48519 [#5808](https://github.com/openshift/hypershift/pull/5808)
* [PODAUTO-324](https://issues.redhat.com/browse/PODAUTO-324): PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests [#5680](https://github.com/openshift/hypershift/pull/5680)
* [OCPBUGS-51364](https://issues.redhat.com/browse/OCPBUGS-51364): fix oc patch command on doc [#5807](https://github.com/openshift/hypershift/pull/5807)
* NO-JIRA: Fix-dependabot-bumps [#5797](https://github.com/openshift/hypershift/pull/5797)
* [OCPBUGS-52655](https://issues.redhat.com/browse/OCPBUGS-52655): Add flag to set etcd storage size [#5795](https://github.com/openshift/hypershift/pull/5795)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Fix KMS MIv3 Issues [#5793](https://github.com/openshift/hypershift/pull/5793)
* NO-JIRA: Disable GitHub Actions [#5812](https://github.com/openshift/hypershift/pull/5812)
* [OCPBUGS-52821](https://issues.redhat.com/browse/OCPBUGS-52821): stop using dev mode for loggers [#5801](https://github.com/openshift/hypershift/pull/5801)
* [HOSTEDCP-2237](https://issues.redhat.com/browse/HOSTEDCP-2237): Auto approve Karpenter serving CSRs [#5708](https://github.com/openshift/hypershift/pull/5708)
* [OLS-1370](https://issues.redhat.com/browse/OLS-1370): Add full aws permission list and point to it from "getting started" [#5746](https://github.com/openshift/hypershift/pull/5746)
* NO-JIRA: CPOv2 token-minter abstraction [#5769](https://github.com/openshift/hypershift/pull/5769)
* NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases [#5778](https://github.com/openshift/hypershift/pull/5778)
* [OCPBUGS-52323](https://issues.redhat.com/browse/OCPBUGS-52323): Make managed-trust-bundle optional [#5763](https://github.com/openshift/hypershift/pull/5763)
* [CNV-57648](https://issues.redhat.com/browse/CNV-57648): document how to configure descheduler [#5779](https://github.com/openshift/hypershift/pull/5779)
* NO-JIRA: Remove WI step for cluster-image-registry-operator [#5777](https://github.com/openshift/hypershift/pull/5777)
* [OTA-1405](https://issues.redhat.com/browse/OTA-1405): Add the ClusterVersionOperator API [#5569](https://github.com/openshift/hypershift/pull/5569)
* [OCPBUGS-52419](https://issues.redhat.com/browse/OCPBUGS-52419): e2e: don't call `WaitForImageRollout` in `executeNodePoolTest` [#5771](https://github.com/openshift/hypershift/pull/5771)
* [OCPBUGS-50518](https://issues.redhat.com/browse/OCPBUGS-50518): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5475](https://github.com/openshift/hypershift/pull/5475)
* [CNTRLPLANE-263](https://issues.redhat.com/browse/CNTRLPLANE-263): Remove unused CAPZ CRDs from HyperShift install [#5756](https://github.com/openshift/hypershift/pull/5756)
* NO-JIRA: speed up image builds [#5766](https://github.com/openshift/hypershift/pull/5766)
* NO-JIRA: go.mod updates from Konflux [#5761](https://github.com/openshift/hypershift/pull/5761)
* [OSASINFRA-3733](https://issues.redhat.com/browse/OSASINFRA-3733): (follow-up) deploy ORC on release payload &gt;= 4.19 [#5749](https://github.com/openshift/hypershift/pull/5749)
* [OCPBUGS-52223](https://issues.redhat.com/browse/OCPBUGS-52223): refactor aws identity health check into new controller [#5751](https://github.com/openshift/hypershift/pull/5751)
* [OCPBUGS-50523](https://issues.redhat.com/browse/OCPBUGS-50523): Fix audit-logs container to properly handle SIGTERM [#5491](https://github.com/openshift/hypershift/pull/5491)
* NO-JIRA: Remove issues-exit flag for golangci-lint [#5762](https://github.com/openshift/hypershift/pull/5762)
* [CNTRLPLANE-111](https://issues.redhat.com/browse/CNTRLPLANE-111): Enable MIv3 for CP/CCM in managed Azure HCP [#5755](https://github.com/openshift/hypershift/pull/5755)
* NO-JIRA: Add CPO container sync check to GitHub Actions [#5753](https://github.com/openshift/hypershift/pull/5753)
* [OCPBUGS-52226](https://issues.redhat.com/browse/OCPBUGS-52226), [OCPBUGS-52227](https://issues.redhat.com/browse/OCPBUGS-52227): CVE Fix for potential denial of service in upstream libs [#5750](https://github.com/openshift/hypershift/pull/5750)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 [#5719](https://github.com/openshift/hypershift/pull/5719)
* [HOSTEDCP-2242](https://issues.redhat.com/browse/HOSTEDCP-2242): [CPOv2 Refactor] Refactor image-registry-operator [#5676](https://github.com/openshift/hypershift/pull/5676)
* [Full changelog](https://github.com/openshift/hypershift/compare/04a2b4cf9f094abd20d4bdc8ab2ad9e1e5c6e6aa...c1e9d412acb276c021e8d1c645dc8d4423ead75d)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/d63c0129240c268f22a23785cf2c9d9f4cedc5e6)

* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#140](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/140)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#137](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/137)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/4b8f2ce0a4e7f38759e8a92489950bbec5e7f181...d63c0129240c268f22a23785cf2c9d9f4cedc5e6)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/989bd87446d6fcbb2d7db20c90224621fac6ddb4)

* [OCPBUGS-51864](https://issues.redhat.com/browse/OCPBUGS-51864): IBMCloud: MAPI replacing unhealthy CP nodes [#61](https://github.com/openshift/machine-api-provider-ibmcloud/pull/61)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/ebd0127ce2afc68a5eebb050154104a2e3e2bcec...989bd87446d6fcbb2d7db20c90224621fac6ddb4)


### [insights-operator](https://github.com/openshift/insights-operator/tree/de2dee5a73eebcbe6cec7e340d00d81471029ea3)

* NO-JIRA: refactor gather commands (#1076) [#1076](https://github.com/openshift/insights-operator/pull/1076)
* NO-JIRA: feat: add gatherer name validation to gendocs (#1075) [#1075](https://github.com/openshift/insights-operator/pull/1075)
* fix: allow running enabled functions from disabled gatherer (#1077) [#1077](https://github.com/openshift/insights-operator/pull/1077)
* [Full changelog](https://github.com/openshift/insights-operator/compare/fff5851035e9b5263f0b368705830ee8bd5d76c4...de2dee5a73eebcbe6cec7e340d00d81471029ea3)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3342e1e93f9b287e091089d42a44de10f7a78a36)

* New runtimes tests [#40](https://github.com/openshift/insights-runtime-extractor/pull/40)
* SB 3.4.3 test app and 3.1.4 app simplified [#39](https://github.com/openshift/insights-runtime-extractor/pull/39)
* plain-java runtime sample [#38](https://github.com/openshift/insights-runtime-extractor/pull/38)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/9a254cce44b998c4c7b46fe481a85a52309894ed...3342e1e93f9b287e091089d42a44de10f7a78a36)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e4bd10f78bada4cc8b36236e9b0b1c1332e5ef88)

* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#1346](https://github.com/openshift/machine-api-operator/pull/1346)
* [SPLAT-2060](https://issues.redhat.com/browse/SPLAT-2060): Create e2e tests for vSphere Data Disk feature [#1338](https://github.com/openshift/machine-api-operator/pull/1338)
* [OCPCLOUD-2882](https://issues.redhat.com/browse/OCPCLOUD-2882), [OCPCLOUD-2889](https://issues.redhat.com/browse/OCPCLOUD-2889): support AMD SEV_SNP and TDX confidential computing machines on GCP [#1326](https://github.com/openshift/machine-api-operator/pull/1326)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/57f828a67de95fac942304722b2cf696539f7151...e4bd10f78bada4cc8b36236e9b0b1c1332e5ef88)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dadb5688c841aa042f279729d3789309325ef1fe)

* NO-ISSUE: MCN changes for API validation [#4949](https://github.com/openshift/machine-config-operator/pull/4949)
* [OCPNODE-2340](https://issues.redhat.com/browse/OCPNODE-2340): update (Cluster)Imagepolicy PKI  config to policy.json [#4886](https://github.com/openshift/machine-config-operator/pull/4886)
* [OCPBUGS-52827](https://issues.redhat.com/browse/OCPBUGS-52827): Fixing typos for MachineConfigNode [#4914](https://github.com/openshift/machine-config-operator/pull/4914)
* [OCPBUGS-51130](https://issues.redhat.com/browse/OCPBUGS-51130): In OCL. Cannot install extensions [#4870](https://github.com/openshift/machine-config-operator/pull/4870)
* [OCPBUGS-52280](https://issues.redhat.com/browse/OCPBUGS-52280), [SDN-5330](https://issues.redhat.com/browse/SDN-5330): Add ipsec connect wait service [#4854](https://github.com/openshift/machine-config-operator/pull/4854)
* [OCPNODE-2842](https://issues.redhat.com/browse/OCPNODE-2842): Set Upgradeable=False when cluster is on cgroup v1 [#4822](https://github.com/openshift/machine-config-operator/pull/4822)
* "NO-ISSUE: ensure that client configs are not mutable" [#4915](https://github.com/openshift/machine-config-operator/pull/4915)
* [MCO-1501](https://issues.redhat.com/browse/MCO-1501): Add support for custom MCPs in MCN [#4876](https://github.com/openshift/machine-config-operator/pull/4876)
* [OCPBUGS-53085](https://issues.redhat.com/browse/OCPBUGS-53085): Add scc label to arbitor crio-metrics-proxy [#4912](https://github.com/openshift/machine-config-operator/pull/4912)
* [OCPBUGS-51150](https://issues.redhat.com/browse/OCPBUGS-51150): daemon: ensure ostree-finalize-staged is started before rebooting [#4907](https://github.com/openshift/machine-config-operator/pull/4907)
* [OCPBUGS-44185](https://issues.redhat.com/browse/OCPBUGS-44185): Race in configure-ovs.sh affects bonding interface configuration. [#4609](https://github.com/openshift/machine-config-operator/pull/4609)
* [OCPBUGS-52213](https://issues.redhat.com/browse/OCPBUGS-52213): Update ObservedGeneration in KubeletConfig [#4900](https://github.com/openshift/machine-config-operator/pull/4900)
* [RHEL-79554](https://issues.redhat.com/browse/RHEL-79554): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4866](https://github.com/openshift/machine-config-operator/pull/4866)
* [MCO-1485](https://issues.redhat.com/browse/MCO-1485): MCO:1486: MCO-1324: Attempt stub Ignition upgrade [#4885](https://github.com/openshift/machine-config-operator/pull/4885)
* [MCO-1537](https://issues.redhat.com/browse/MCO-1537): Add MCDRebootError runbook to prometheus rules [#4895](https://github.com/openshift/machine-config-operator/pull/4895)
* NO-JIRA: Update the MCS iptables debug command in docs [#4896](https://github.com/openshift/machine-config-operator/pull/4896)
* [OCPBUGS-43896](https://issues.redhat.com/browse/OCPBUGS-43896): add revert logic to OCL path in MCD [#4825](https://github.com/openshift/machine-config-operator/pull/4825)
* [MCO-1515](https://issues.redhat.com/browse/MCO-1515): Kube bump to 1.32 [#4797](https://github.com/openshift/machine-config-operator/pull/4797)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/07ba85e326d5777452d555e179b99309c6aa4a6b...dadb5688c841aa042f279729d3789309325ef1fe)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/c4497f31c2ac8059a80fb812c1a478ef5f3c1833)

* NO-JIRA: Change to new host [#54](https://github.com/openshift/machine-os-images/pull/54)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/dbd41b1d837058debeb976f36ffbb12d91795f8e...c4497f31c2ac8059a80fb812c1a478ef5f3c1833)


### [metallb-frr](https://github.com/openshift/frr/tree/c4cf8929b2e1daae3ecfe0baedffe7643842a6f1)

* Align to upstream [#79](https://github.com/openshift/frr/pull/79)
* Syncoperator03032025 [#78](https://github.com/openshift/frr/pull/78)
* [Full changelog](https://github.com/openshift/frr/compare/648bf5dd718368490468b8a2e4338002024c1d3b...c4cf8929b2e1daae3ecfe0baedffe7643842a6f1)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ddbb86f75f59dbdea1cf1d91b947f28392f3e7de)

* [OU-700](https://issues.redhat.com/browse/OU-700): don't show metrics links in acm perspective [#367](https://github.com/openshift/monitoring-plugin/pull/367)
* [COO-768](https://issues.redhat.com/browse/COO-768): add plugin proxy to perses proxy path [#365](https://github.com/openshift/monitoring-plugin/pull/365)
* [COO-759](https://issues.redhat.com/browse/COO-759): update datasource whenerver the csrf token changes [#363](https://github.com/openshift/monitoring-plugin/pull/363)
* [RHINENG-12634](https://issues.redhat.com/browse/RHINENG-12634): incident utils typescript conversion [#359](https://github.com/openshift/monitoring-plugin/pull/359)
* [CNV-55987](https://issues.redhat.com/browse/CNV-55987): Aggregated alerts [#348](https://github.com/openshift/monitoring-plugin/pull/348)
* [COO-684](https://issues.redhat.com/browse/COO-684): add mui/material as is required as peer dependency [#360](https://github.com/openshift/monitoring-plugin/pull/360)
* [OU-681](https://issues.redhat.com/browse/OU-681): fix typo in the predefined metrics list [#358](https://github.com/openshift/monitoring-plugin/pull/358)
* [OU-499](https://issues.redhat.com/browse/OU-499): remove deprecated components [#356](https://github.com/openshift/monitoring-plugin/pull/356)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c1cd4ce52a14a4d5a160edd0c66d010aedce2b62...ddbb86f75f59dbdea1cf1d91b947f28392f3e7de)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/722e5aa092480087542900e1cfc1e8c691c36ea8)

* [TRT-2057](https://issues.redhat.com/browse/TRT-2057): Properly structure empty CNI result [#267](https://github.com/openshift/multus-cni/pull/267)
* [OCPBUGS-54153](https://issues.redhat.com/browse/OCPBUGS-54153): Ds merge 3/24 [#264](https://github.com/openshift/multus-cni/pull/264)
* [OCPBUGS-53087](https://issues.redhat.com/browse/OCPBUGS-53087): Tolerate issues writing network status annotation on CNI ADD [#263](https://github.com/openshift/multus-cni/pull/263)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c5f6b694cdfd1c4ce7f0b06012dd24c4bf36731b...722e5aa092480087542900e1cfc1e8c691c36ea8)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/6fffe5d78f52e01e51110d178b433788ef98c8ae)

* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) [#67](https://github.com/openshift/multus-networkpolicy/pull/67)
* [OCPBUGS-44354](https://issues.redhat.com/browse/OCPBUGS-44354): Sync 20250204 (#66) [#66](https://github.com/openshift/multus-networkpolicy/pull/66)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/e0c65b80229a262080e0b79a60eb5344e575ea14...6fffe5d78f52e01e51110d178b433788ef98c8ae)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/c1529301c310ab0eb433ab31b38c219e0b833ed5)

* [OCPBUGS-52415](https://issues.redhat.com/browse/OCPBUGS-52415): replace entrypoint [#349](https://github.com/openshift/whereabouts-cni/pull/349)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/8fc3aa216046994bc8f61d5692af3810f16d03b3...c1529301c310ab0eb433ab31b38c219e0b833ed5)


### [network-tools](https://github.com/openshift/network-tools/tree/d7c9fb23fba9da6a8fff6beb331c1aff3e664049)

* NO-JIRA: Add Peng [#138](https://github.com/openshift/network-tools/pull/138)
* [Full changelog](https://github.com/openshift/network-tools/compare/982767d958f3d5551a81afe40d0647b78f1a9b09...d7c9fb23fba9da6a8fff6beb331c1aff3e664049)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/85b1231324af39cfe62f877052461310c9dd7af3)

* add adam to the approves [#223](https://github.com/openshift/networking-console-plugin/pull/223)
* [CNV-56305](https://issues.redhat.com/browse/CNV-56305): upgrade Network UI to PatternFly 6 [#221](https://github.com/openshift/networking-console-plugin/pull/221)
* [CNV-58015](https://issues.redhat.com/browse/CNV-58015): fix delete label row [#224](https://github.com/openshift/networking-console-plugin/pull/224)
* Upgrade dockerfile for node 18 and 4.19 [#222](https://github.com/openshift/networking-console-plugin/pull/222)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/e8a088c118898075f0c6ae01476630833c33da97...85b1231324af39cfe62f877052461310c9dd7af3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/cebda881256083837127077bf467fd882d6c8582)

* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1109) [#1109](https://github.com/openshift/oc-mirror/pull/1109)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1115) [#1115](https://github.com/openshift/oc-mirror/pull/1115)
* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1110) [#1110](https://github.com/openshift/oc-mirror/pull/1110)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1105) [#1105](https://github.com/openshift/oc-mirror/pull/1105)
* [OCPBUGS-50680](https://issues.redhat.com/browse/OCPBUGS-50680): v2/operator: refactor operator FilteredCollector (#1093) [#1093](https://github.com/openshift/oc-mirror/pull/1093)
* no-jira:  v2/manifest/oci-manifest: refactor and dedup the code (#1098) [#1098](https://github.com/openshift/oc-mirror/pull/1098)
* v2: filter wrapcheck warnings for oc-mirror (#1104) [#1104](https://github.com/openshift/oc-mirror/pull/1104)
* [OCPBUGS-51328](https://issues.redhat.com/browse/OCPBUGS-51328): Fix CVE-2025-27144 (#1097) [#1097](https://github.com/openshift/oc-mirror/pull/1097)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1100) [#1100](https://github.com/openshift/oc-mirror/pull/1100)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/52622ef0842bfbc8039b7338f378074a18ebc8ff...cebda881256083837127077bf467fd882d6c8582)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/e371ec5ffa0b08d31abae6daaf130db4e1cad8b5)

* NO-ISSUE: Synchronize From Upstream Repositories [#299](https://github.com/openshift/operator-framework-operator-controller/pull/299)
* NO-ISSUE: Synchronize From Upstream Repositories [#298](https://github.com/openshift/operator-framework-operator-controller/pull/298)
* NO-ISSUE: Synchronize From Upstream Repositories through PR1871 [#294](https://github.com/openshift/operator-framework-operator-controller/pull/294)
* [OCPBUGS-23055](https://issues.redhat.com/browse/OCPBUGS-23055): Synchronize From Upstream Repositories through PR1811 [#290](https://github.com/openshift/operator-framework-operator-controller/pull/290)
* NO-ISSUE: Synchronize From Upstream Repositories [#285](https://github.com/openshift/operator-framework-operator-controller/pull/285)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/4966e0b230c20b525e0f1f0b9ecdbae63551f0df...e371ec5ffa0b08d31abae6daaf130db4e1cad8b5)


### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/352562dda630fbf3ed6b56e7d83970e82e05664e)

* NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master [#311](https://github.com/openshift/cloud-provider-openstack/pull/311)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1be630810cd50e6162d8c4ec7c644b78b280fc07...352562dda630fbf3ed6b56e7d83970e82e05664e)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ef6c98a43953f182f9fb405128c91d3c1c6144ef)

* [STOR-1877](https://issues.redhat.com/browse/STOR-1877): Run operators without root user control [#368](https://github.com/openshift/csi-operator/pull/368)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#367](https://github.com/openshift/csi-operator/pull/367)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#357](https://github.com/openshift/csi-operator/pull/357)
* NO-JIRA: Fixed typo in README.md [#348](https://github.com/openshift/csi-operator/pull/348)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#361](https://github.com/openshift/csi-operator/pull/361)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#363](https://github.com/openshift/csi-operator/pull/363)
* [CFE-1132](https://issues.redhat.com/browse/CFE-1132): EFS Access Point Tags Update DAY2 [#313](https://github.com/openshift/csi-operator/pull/313)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): AWS Tags DAY2 Update [#297](https://github.com/openshift/csi-operator/pull/297)
* [Full changelog](https://github.com/openshift/csi-operator/compare/481b21980a5379f6568258fba9db9d650155e468...ef6c98a43953f182f9fb405128c91d3c1c6144ef)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/cc76099b58e9780ba00623973565b564ea4be034)

* Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main [#361](https://github.com/openshift/cluster-api-provider-openstack/pull/361)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main [#360](https://github.com/openshift/cluster-api-provider-openstack/pull/360)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/ad13014433be013c902bc42cc97ec6ba65f8632b...cc76099b58e9780ba00623973565b564ea4be034)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/84b340e84ff53899465eed6ddb6d790a6297be2d)

* NO-ISSUE: Synchronize From Upstream Repositories [#986](https://github.com/openshift/operator-framework-olm/pull/986)
* NO-ISSUE: Synchronize From Upstream Repositories [#984](https://github.com/openshift/operator-framework-olm/pull/984)
* NO-ISSUE: Synchronize From Upstream Repositories [#966](https://github.com/openshift/operator-framework-olm/pull/966)
* NO-ISSUE: Update DOWNSTREAM owners files [#973](https://github.com/openshift/operator-framework-olm/pull/973)
* [OCPBUGS-42526](https://issues.redhat.com/browse/OCPBUGS-42526): Ensure that PSA label is latest instead of pinning versions [#972](https://github.com/openshift/operator-framework-olm/pull/972)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6dd1017cdc814695820aeeb95be6cc28d6c411b5...84b340e84ff53899465eed6ddb6d790a6297be2d)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/e7b5daea08d5ef47f004d39a326fe255e5385ce6)

* [OPRUN-3818](https://issues.redhat.com/browse/OPRUN-3818): Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 [#611](https://github.com/operator-framework/operator-marketplace/pull/611)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 [#605](https://github.com/operator-framework/operator-marketplace/pull/605)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 [#608](https://github.com/operator-framework/operator-marketplace/pull/608)
* NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 =&gt; v1.21.1 [#598](https://github.com/operator-framework/operator-marketplace/pull/598)
* NO-ISSUE: Add dependabot to help keep the project maintained [#599](https://github.com/operator-framework/operator-marketplace/pull/599)
* [OCPBUGS-52340](https://issues.redhat.com/browse/OCPBUGS-52340): Ensure that PSA label is latest instead of pinning versions [#600](https://github.com/operator-framework/operator-marketplace/pull/600)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/dfb5669ca51c649e613a1e7692c5cc3fbb2efe38...e7b5daea08d5ef47f004d39a326fe255e5385ce6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/12b33c120f3240ed9df2bdfcc01d3bd0a313b3c7)

* [OCPBUGS-48678](https://issues.redhat.com/browse/OCPBUGS-48678): Update OVN to FDP25.A.1 24.09.2-41 [#2493](https://github.com/openshift/ovn-kubernetes/pull/2493)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/66faee9937abbd9abc8e72e160c6fb2f4e606e9b...12b33c120f3240ed9df2bdfcc01d3bd0a313b3c7)


### [prometheus](https://github.com/openshift/prometheus/tree/fe57e14c675c76b45368ffdf0a8b98970c19d9de)

* [OCPBUGS-53025](https://issues.redhat.com/browse/OCPBUGS-53025): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#245](https://github.com/openshift/prometheus/pull/245)
* [Full changelog](https://github.com/openshift/prometheus/compare/7bdc617ceabaa65eeb31c769033d81d1d615cecd...fe57e14c675c76b45368ffdf0a8b98970c19d9de)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/fdd9502ff3446725b4f1fbf6902547dba9266061)

* [OCPBUGS-48171](https://issues.redhat.com/browse/OCPBUGS-48171): Update go 1.23 and ocp 4.19 [#254](https://github.com/openshift/service-ca-operator/pull/254)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1e65678429c82df5ae97da4dde8dbe03d75062e6...fdd9502ff3446725b4f1fbf6902547dba9266061)


### [tests](https://github.com/openshift/origin/tree/41461572c947dc93ab84c52bc5c99786656edaed)

* [OCPBUGS-52358](https://issues.redhat.com/browse/OCPBUGS-52358): Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com [#29618](https://github.com/openshift/origin/pull/29618)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Fix decoding of CBOR data in etcd test [#29614](https://github.com/openshift/origin/pull/29614)
* [SDN-5768](https://issues.redhat.com/browse/SDN-5768): virt, udn: use l2bridge binding [#29439](https://github.com/openshift/origin/pull/29439)
* [OCPBUGS-52358](https://issues.redhat.com/browse/OCPBUGS-52358): Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration [#29604](https://github.com/openshift/origin/pull/29604)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Decode CBOR data in etcd test [#29601](https://github.com/openshift/origin/pull/29601)
* [MCO-1594](https://issues.redhat.com/browse/MCO-1594): updates for ManagedBootImageStatus [#29598](https://github.com/openshift/origin/pull/29598)
* [SDN-4168](https://issues.redhat.com/browse/SDN-4168): Fix IPsec tests for monitor failures [#29437](https://github.com/openshift/origin/pull/29437)
* [TRT-2026](https://issues.redhat.com/browse/TRT-2026): validate that the binary extraction was successful via existence check [#29595](https://github.com/openshift/origin/pull/29595)
* [OSD-26270](https://issues.redhat.com/browse/OSD-26270): re-enabled managed-upgrade-operator test by removing exclusion [#29585](https://github.com/openshift/origin/pull/29585)
* NO-ISSUE: Automated - Update synthetic test data [#29570](https://github.com/openshift/origin/pull/29570)
* NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests [#29577](https://github.com/openshift/origin/pull/29577)
* [TRT-1575](https://issues.redhat.com/browse/TRT-1575): Fail the test when an expected operator goes to degraded [#29566](https://github.com/openshift/origin/pull/29566)
* [OCPBUGS-52578](https://issues.redhat.com/browse/OCPBUGS-52578): Use payload pullspec for image info test [#29586](https://github.com/openshift/origin/pull/29586)
* [OCPBUGS-51373](https://issues.redhat.com/browse/OCPBUGS-51373): use non-fake boot image for patch [#29574](https://github.com/openshift/origin/pull/29574)
* [Full changelog](https://github.com/openshift/origin/compare/b19e263eee5cb749943ed48c4bcc2fa5172e0096...41461572c947dc93ab84c52bc5c99786656edaed)


### [thanos](https://github.com/openshift/thanos/tree/95f7bb216c27bea9c8001a7b49fbd66d23286f80)

* [MON-4139](https://issues.redhat.com/browse/MON-4139): feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 [#158](https://github.com/openshift/thanos/pull/158)
* [Full changelog](https://github.com/openshift/thanos/compare/73a8770d3a8a174b076b9420a5c04b074f888489...95f7bb216c27bea9c8001a7b49fbd66d23286f80)