# 4.15.0-ec.2

Created: 2023-11-14 15:10:25 +0000 UTC

Image Digest: `sha256:dbde9e6350b02ac366e7504ade02d8609b57c1c2e14e0c829acf2060c44d5bee`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.15.0-0.nightly-s390x-2023-11-08-010126


## Changes from 4.15.0-ec.1

### Components

* Kubernetes upgraded from 1.28.2 to 1.28.3
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202310161140-0 to 415.92.202311061558-0


### New images

* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [6fdfd82f](https://github.com/openshift/cluster-api-provider-openstack/commit/6fdfd82f7ad435fb03fe59a8b838ef4e7d76f019) `sha256:8610ce7844fc0f39bb4a957f100febfca67ad82fffa76ab53e0a1d72cb935eef`


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [9d47246b](https://github.com/openshift/agent-installer-utils/commit/9d47246ba13b188a8108c959f9bf6930145b2694) `sha256:5536e1e46319cfb827e6d88459e29f0b3352139e5e7fb0b8f14e4c16c3abda13`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a7956af6](https://github.com/openshift/cluster-olm-operator/commit/a7956af630d892e350e78be90615ee48426cadd1) `sha256:35283d29a8ee5d171bae9ce48edf06aa781be147ec3f98948506a1cb37074646`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [804dfece](https://github.com/openshift/cluster-update-keys/commit/804dfeceb7caa41a6212fb405bbcd3f3139b8a6f) `sha256:7a88a537dac623b06ca4a4be1d558a624525fbb068a7d625c0cff275bee958c7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [4b2efe5c](https://github.com/openshift/configmap-reload/commit/4b2efe5ce6af3f345b56194baabddb83083df577) `sha256:602e51836df4e63f4cb02f0ef94541cbc34d0c942bb993662a4ee56acac06aa0`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6745e86f](https://github.com/openshift/csi-external-attacher/commit/6745e86fb53f74793b8fe422182b19b212b0c0d9) `sha256:b55072f96171aa1163d251f8cb9c3ef9d41c7355d09ea1b824cfa80c93d713df`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [3b4236d3](https://github.com/openshift/csi-external-resizer/commit/3b4236d382e4593ca41ecc6f394775be467b1a0d) `sha256:e5d0304e4b7227dda84f6eca15b62be604b81df88b39687b55de7949ed47ae30`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [11bb38ff](https://github.com/openshift/csi-external-snapshotter/commit/11bb38ff1192d6b4e7b9f5f0db0bd24a7536b1c5) `sha256:eb039fe8206faf5d7a7aefa286350e491fd2a0baf1181a9191e7ee5034182eac`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [ba09f280](https://github.com/openshift/csi-node-driver-registrar/commit/ba09f2807de7bdb9607f6510c541913c53a5e011) `sha256:e745f345ffce1014028b462e2d7ec57045ce6e724c5d0cb1bf5fc8821c3f0285`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [11bb38ff](https://github.com/openshift/csi-external-snapshotter/commit/11bb38ff1192d6b4e7b9f5f0db0bd24a7536b1c5) `sha256:b62e6ca3a56f9d3acac85ed36adcad2426805a7d0ce95ffc5147ac6a53245f24`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [11bb38ff](https://github.com/openshift/csi-external-snapshotter/commit/11bb38ff1192d6b4e7b9f5f0db0bd24a7536b1c5) `sha256:8b38fdb55dcfcc675f20300bf10e51599f621c5a1681612a978eaa78d06f6c0b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [c410e9f5](https://github.com/openshift/driver-toolkit/commit/c410e9f598a3860737aecce9dba29882d3f2ca5c) `sha256:ff5dbe71242645693a7c424e324580d7b0bdea8fc03bda36a898def7e5ffcf19`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [39ea8ee1](https://github.com/openshift/egress-router-cni/commit/39ea8ee1d8299b9052be76bd4b50c79d731c9e38) `sha256:09febc4b7155cac99c5369d8414b7920348a40271de721cfd92d2219144e1b6b`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [9417a246](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/9417a246f9f95266df0e47497a353a3ddab4a0dc) `sha256:b5324ee6bd35f3a6f1cb726c20a0638a9edd20618eb4a67c03c95582041593ed`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [862a5c82](https://github.com/openshift/ibm-vpc-node-label-updater/commit/862a5c8262ec99b9f8e1f3a3d829e9e172c602ea) `sha256:390c9b20a912239947375bfbc60c97e3a5473cae682df9c9a861c0bf6e256919`
* [keepalived-ipfailover](https://github.com/openshift/images) git [16dbf5ee](https://github.com/openshift/images/commit/16dbf5ee78a8e007a17c53568a0655f7e10ec794) `sha256:939dd96e59dae05130a7923bf943c1ba7cf1a9b6c166c325aaa83b4f09babf77`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [6a797ce8](https://github.com/openshift/kubernetes-metrics-server/commit/6a797ce811e68d47a4e63a2c53dedd1f405d029a) `sha256:98ee9a3015f9ca9e53dbf09bb09b4955f13a39f259f6d69b818d2a8adf7832ac`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [e465e606](https://github.com/openshift/cloud-provider-kubevirt/commit/e465e606e7d17c64392cdeba099f9382580e44b0) `sha256:0c8b8c3460a748ac29abab57a6272cfaa11110b23a74c0d3914c5769a7d025d4`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [aea7be8e](https://github.com/openshift/kubevirt-csi-driver/commit/aea7be8e2213a74d1945d39eba4d1efec0369c36) `sha256:0c9b8f06f2911205020fc03d72bea069c1440fcc6332db6d6b2c7303aa448fed`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [43b2b820](https://github.com/openshift/cluster-api-provider-libvirt/commit/43b2b82069d4752609f91049d580df2756e570b9) `sha256:fa61f20ba215ee00896efdac381a97f18051d46c33f8425bf3081bc677700709`
* machine-os-content `sha256:68a86686a240a91dffa197a4a436323af35ceb9d1a1a927c7ff26676f73da6f8`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [a5b755b5](https://github.com/openshift/route-override-cni/commit/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5) `sha256:fabbfda5c21f0c31eb4586fb22e50cfc8d2573903a660a9b4ff116b28c8dd978`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [7478bebe](https://github.com/openshift/whereabouts-cni/commit/7478bebe4c037fda4c1a95a42009fca36b730e30) `sha256:404c8d7d2f63ae3713caaa71203cc62199a466ff1824f8e9cfb60813996155f8`
* [must-gather](https://github.com/openshift/must-gather) git [c7f5e3f4](https://github.com/openshift/must-gather/commit/c7f5e3f4ecd86e018f8a60c455ac95442344262b) `sha256:1a5e00851a59d266939bd39e33ebef122ef22c034f4f525b5c59c46952190d0e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:ad110935e56632766af618522d319a4abb80c707554d49e2f451a4af69c921ef`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [a87bd939](https://github.com/openshift/oauth-apiserver/commit/a87bd939d5c94392745fd52a784633476f5ddd13) `sha256:9d1e13be403b78b1342e4d82ace32640cf597976ac7ce583ebe6fce2dd0829f3`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3fcbacd6](https://github.com/openshift/oauth-proxy/commit/3fcbacd6e79223b707a9883c4d74cd81667b9b50) `sha256:425b7ab72389130b7fde1f7561726d3dd737aa9044a643f33b324a94d6d7eff9`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [1d4fb5b0](https://github.com/openshift/openshift-controller-manager/commit/1d4fb5b041da1728a0ce499088abc339579b302f) `sha256:d4a766e9021c029d21d7b44577b97a0deef4c854216a13184f5f1b9455a41233`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:a2daf46407f3ea8fcf01a3059752c36f1fec160f4cca904b52dca5a42b6f2d41`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f3f1f5d1](https://github.com/openshift/prom-label-proxy/commit/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) `sha256:7920d7e5f030b5c2d71f9dd03634c1d690adbfdc425fa185f6121aa8aae33a22`
* rhel-coreos `sha256:79070c0eec2712cd909b0f21ebcb68dc48af8c04a2613b41c053bcd663911156`
* rhel-coreos-extensions `sha256:85f3d30e0dc708b652b3f8d208364fdf4963530b4a303a8b1b32309e58a486cc`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/3c86431e598ee6a0b152ff9518ab045dd485167c)

* [MGMT-16077](https://issues.redhat.com/browse/MGMT-16077): Add 4.15 release and OS images (#5673) [#5673](https://github.com/openshift/assisted-service/pull/5673)
* [AGENT-723](https://issues.redhat.com/browse/AGENT-723): Use json.Marshal to correctly process vSphere credentials (#5592) [#5592](https://github.com/openshift/assisted-service/pull/5592)
* NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) [#5670](https://github.com/openshift/assisted-service/pull/5670)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger reboots for node event when day2 node moves to done (#5648) [#5648](https://github.com/openshift/assisted-service/pull/5648)
* NO-JIRA:  Allow the command in wait_for_cmd_amount to receive arguments (#5668) [#5668](https://github.com/openshift/assisted-service/pull/5668)
* [MGMT-16164](https://issues.redhat.com/browse/MGMT-16164): Install 4.14 redhat-operators catalog for LSO (#5669) [#5669](https://github.com/openshift/assisted-service/pull/5669)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Ensure that hosts emit event showing why preparation failed. (#5521) [#5521](https://github.com/openshift/assisted-service/pull/5521)
* [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Add a condition to show the last preparation failure (#5524) [#5524](https://github.com/openshift/assisted-service/pull/5524)
* [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): change default envoy sidecar timeout value (#5667) [#5667](https://github.com/openshift/assisted-service/pull/5667)
* [MGMT-16114](https://issues.redhat.com/browse/MGMT-16114): Update 4.14 release image to use GA version (#5651) [#5651](https://github.com/openshift/assisted-service/pull/5651)
* [MGMT-16052](https://issues.redhat.com/browse/MGMT-16052): Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) [#5659](https://github.com/openshift/assisted-service/pull/5659)
* Bump OCP versions: 4.14, 4.12 (#5661) [#5661](https://github.com/openshift/assisted-service/pull/5661)
* [MGMT-15405](https://issues.redhat.com/browse/MGMT-15405): Add a URL to infraenv to show download link from static network config (#5638) [#5638](https://github.com/openshift/assisted-service/pull/5638)
* [OCPBUGS-19823](https://issues.redhat.com/browse/OCPBUGS-19823): Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) [#5565](https://github.com/openshift/assisted-service/pull/5565)
* [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Add the boot command line to the host inventory (#5649) [#5649](https://github.com/openshift/assisted-service/pull/5649)
* [MGMT-15680](https://issues.redhat.com/browse/MGMT-15680): Adds InfraEnv ctrl watch for pull secret changes (#5589) [#5589](https://github.com/openshift/assisted-service/pull/5589)
* NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) [#5653](https://github.com/openshift/assisted-service/pull/5653)
* [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) [#5613](https://github.com/openshift/assisted-service/pull/5613)
* NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) [#5647](https://github.com/openshift/assisted-service/pull/5647)
* Update RHTAP references (#5637) [#5637](https://github.com/openshift/assisted-service/pull/5637)
* Bump OCP versions: 4.13 (#5645) [#5645](https://github.com/openshift/assisted-service/pull/5645)
* NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) [#5644](https://github.com/openshift/assisted-service/pull/5644)
* [MGMT-15683](https://issues.redhat.com/browse/MGMT-15683): Ensure that manifest filename has valid name part (#5635) [#5635](https://github.com/openshift/assisted-service/pull/5635)
* NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) [#5641](https://github.com/openshift/assisted-service/pull/5641)
* NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) [#5619](https://github.com/openshift/assisted-service/pull/5619)
* Update RHTAP references (#5624) [#5624](https://github.com/openshift/assisted-service/pull/5624)
* [MGMT-15684](https://issues.redhat.com/browse/MGMT-15684): Return appropriate HTTP error code for invalid manifest file path (#5634) [#5634](https://github.com/openshift/assisted-service/pull/5634)
* Bump OCP versions: 4.14 (#5633) [#5633](https://github.com/openshift/assisted-service/pull/5633)
* NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) [#5632](https://github.com/openshift/assisted-service/pull/5632)
* [MGMT-16037](https://issues.redhat.com/browse/MGMT-16037): fix messaging errors on big clusters (#5628) [#5628](https://github.com/openshift/assisted-service/pull/5628)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#5616) [#5616](https://github.com/openshift/assisted-service/pull/5616)
* NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) [#5622](https://github.com/openshift/assisted-service/pull/5622)
* Revert "NO-ISSUE: use kubectl 1.28.2 (#5572)" (#5618) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Bump OCP versions: 4.12 (#5615) [#5615](https://github.com/openshift/assisted-service/pull/5615)
* [MGMT-16045](https://issues.redhat.com/browse/MGMT-16045): mitigate CVE-2023-44487 (#5614) [#5614](https://github.com/openshift/assisted-service/pull/5614)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Add event that shows the number of reboots for a node before completing installation (#5591) [#5591](https://github.com/openshift/assisted-service/pull/5591)
* Add skopeo to OCP build (#5558) [#5558](https://github.com/openshift/assisted-service/pull/5558)
* NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) [#5601](https://github.com/openshift/assisted-service/pull/5601)
* NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) [#5600](https://github.com/openshift/assisted-service/pull/5600)
* NO-ISSUE: vendor current master (#5594) [#5594](https://github.com/openshift/assisted-service/pull/5594)
* NO-ISSUE: fixing dependabot issues (#5595) [#5595](https://github.com/openshift/assisted-service/pull/5595)
* Bump OCP versions: 4.13, 4.14 (#5593) [#5593](https://github.com/openshift/assisted-service/pull/5593)
* Update RHTAP references (#5590) [#5590](https://github.com/openshift/assisted-service/pull/5590)
* [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim daemonset name (#5579) [#5579](https://github.com/openshift/assisted-service/pull/5579)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5586) [#5586](https://github.com/openshift/assisted-service/pull/5586)
* [MGMT-13198](https://issues.redhat.com/browse/MGMT-13198): Add API endpoint to create assisted installer event (#5578) [#5578](https://github.com/openshift/assisted-service/pull/5578)
* [MGMT-15980](https://issues.redhat.com/browse/MGMT-15980): added missing Create op to infraenvs Webhook (#5569) [#5569](https://github.com/openshift/assisted-service/pull/5569)
* Update RHTAP references (#5573) [#5573](https://github.com/openshift/assisted-service/pull/5573)
* NO-ISSUE: use kubectl 1.28.2 (#5572) [#5572](https://github.com/openshift/assisted-service/pull/5572)
* Update RHTAP references (#5570) [#5570](https://github.com/openshift/assisted-service/pull/5570)
* [MGMT-15949](https://issues.redhat.com/browse/MGMT-15949): fix missing ImageSetRef validation (#5552) [#5552](https://github.com/openshift/assisted-service/pull/5552)
* Revert "NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)" (#5566) [#5560](https://github.com/openshift/assisted-service/pull/5560)
* MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) [#5549](https://github.com/openshift/assisted-service/pull/5549)
* NO-ISSUE: Fix console output in ZTP jobs (#5562) [#5562](https://github.com/openshift/assisted-service/pull/5562)
* NO-ISSUE: add console output for ztp (#5550) [#5550](https://github.com/openshift/assisted-service/pull/5550)
* Bump OCP versions: 4.14 (#5559) [#5559](https://github.com/openshift/assisted-service/pull/5559)
* [Full changelog](https://github.com/openshift/assisted-service/compare/27da6ce3e1479928edd30dcc8b8275b3cc24353d...3c86431e598ee6a0b152ff9518ab045dd485167c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/f1bb9042423cc51cf3e524e8fc4247cb1ddb903b)

* NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) [#747](https://github.com/openshift/assisted-installer/pull/747)
* [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger event that notifies the number of reboots once the node installation is completed (#744) [#744](https://github.com/openshift/assisted-installer/pull/744)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#745) [#745](https://github.com/openshift/assisted-installer/pull/745)
* NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) [#743](https://github.com/openshift/assisted-installer/pull/743)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) [#742](https://github.com/openshift/assisted-installer/pull/742)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#741) [#741](https://github.com/openshift/assisted-installer/pull/741)
* NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) [#738](https://github.com/openshift/assisted-installer/pull/738)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): Update dependencies to remove goproxy dependency (#701) [#701](https://github.com/openshift/assisted-installer/pull/701)
* [MGMT-15984](https://issues.redhat.com/browse/MGMT-15984): Assisted installer doesn't freeze and unmount file systems used for overwriting os image (#737) [#737](https://github.com/openshift/assisted-installer/pull/737)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/10f468167fc1b79953f5bf061c2510f99cf263f3...f1bb9042423cc51cf3e524e8fc4247cb1ddb903b)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/faecd2a152fc63e7ac64a2d6c55401d94fa28c72)

* NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) [#623](https://github.com/openshift/assisted-installer-agent/pull/623)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) [#621](https://github.com/openshift/assisted-installer-agent/pull/621)
* [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#619) [#619](https://github.com/openshift/assisted-installer-agent/pull/619)
* [MGMT-16011](https://issues.redhat.com/browse/MGMT-16011): Reduce agent image size (#617) [#617](https://github.com/openshift/assisted-installer-agent/pull/617)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#618) [#618](https://github.com/openshift/assisted-installer-agent/pull/618)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ad4d28e53f4056a92bea620f324033429494ad39...faecd2a152fc63e7ac64a2d6c55401d94fa28c72)


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, machine-os-images, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/4cbdd29250f42f7294c94d5ba60f4b168f6d58a2)

* [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790)
* Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788)
* [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771)
* Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769)
* UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685)
* [Full changelog](https://github.com/openshift/kubernetes/compare/481304af1da9b2376ebb1ddefa2ca665e1e1ae40...4cbdd29250f42f7294c94d5ba60f4b168f6d58a2)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f0caebbab59ca8e8907f3eb8eb48f15c2a341228)

* [HOSTEDCP-1242](https://issues.redhat.com/browse/HOSTEDCP-1242), [HOSTEDCP-1243](https://issues.redhat.com/browse/HOSTEDCP-1243): Rebase to latest upstream master [#43](https://github.com/openshift/apiserver-network-proxy/pull/43)
* [OCPBUGS-16488](https://issues.redhat.com/browse/OCPBUGS-16488): rebase to latest upstream master [#42](https://github.com/openshift/apiserver-network-proxy/pull/42)
* Revert "OCPBUGS-16488: rebase to latest upstream master" [#37](https://github.com/openshift/apiserver-network-proxy/pull/37)
* [OCPBUGS-16488](https://issues.redhat.com/browse/OCPBUGS-16488): rebase to latest upstream master [#35](https://github.com/openshift/apiserver-network-proxy/pull/35)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f1e6d94ca51afe169bc038acb0b06cedea16d617...f0caebbab59ca8e8907f3eb8eb48f15c2a341228)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/2596e5d46c7b8f2c4907c7c6d80beaf768ff9953)

* [CORS-2835](https://issues.redhat.com/browse/CORS-2835): use build tags to produce installer with alternate infrastructure providers [#7656](https://github.com/openshift/installer/pull/7656)
* [CORS-2877](https://issues.redhat.com/browse/CORS-2877): Install Config Feature Gate Validation [#7413](https://github.com/openshift/installer/pull/7413)
* [OCPBUGS-22772](https://issues.redhat.com/browse/OCPBUGS-22772): return Terraform statefile on error [#7671](https://github.com/openshift/installer/pull/7671)
* NO-JIRA: destroy/aws: replaced deprecated sets syntax [#7680](https://github.com/openshift/installer/pull/7680)
* [OCPBUGS-19398](https://issues.redhat.com/browse/OCPBUGS-19398): IBMCloud: Add eu-es region [#7668](https://github.com/openshift/installer/pull/7668)
* [OCPBUGS-22830](https://issues.redhat.com/browse/OCPBUGS-22830): fix google cli verson to 447.0.0 [#7663](https://github.com/openshift/installer/pull/7663)
* [OCPBUGS-22113](https://issues.redhat.com/browse/OCPBUGS-22113): Do not generate azure-cloud-provider in manual mode for aro builds [#7608](https://github.com/openshift/installer/pull/7608)
* [OCPBUGS-22757](https://issues.redhat.com/browse/OCPBUGS-22757): update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 [#7654](https://github.com/openshift/installer/pull/7654)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce pkg/clusterapi, system, and local control plane [#7630](https://github.com/openshift/installer/pull/7630)
* [OCPBUGS-20403](https://issues.redhat.com/browse/OCPBUGS-20403): OpenStack: add SG rules for compact clusters on UPI [#7576](https://github.com/openshift/installer/pull/7576)
* [OCPBUGS-17866](https://issues.redhat.com/browse/OCPBUGS-17866): check GOOGLE_APPLICATION_CREDENTIALS env var [#6863](https://github.com/openshift/installer/pull/6863)
* [OCPBUGS-22773](https://issues.redhat.com/browse/OCPBUGS-22773): PowerVS: fix removeFromLoadBalancers [#7653](https://github.com/openshift/installer/pull/7653)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7650](https://github.com/openshift/installer/pull/7650)
* Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap [#7638](https://github.com/openshift/installer/pull/7638)
* [OCPBUGS-18387](https://issues.redhat.com/browse/OCPBUGS-18387): Add Azure ConfidentialVM capability and DiskEncryptionSet validations [#7469](https://github.com/openshift/installer/pull/7469)
* [OCPBUGS-22489](https://issues.redhat.com/browse/OCPBUGS-22489): destroy: gcp: fix destroying regional disks [#7643](https://github.com/openshift/installer/pull/7643)
* [OCPBUGS-22058](https://issues.redhat.com/browse/OCPBUGS-22058): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7590](https://github.com/openshift/installer/pull/7590)
* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Skip the deletion of instance profiles marked shared [#7537](https://github.com/openshift/installer/pull/7537)
* hack/go-lint: update golanci-lint to v1.53.1 [#7635](https://github.com/openshift/installer/pull/7635)
* [OCPBUGS-22655](https://issues.redhat.com/browse/OCPBUGS-22655): Bump Fedora CoreOS to latest stable [#7644](https://github.com/openshift/installer/pull/7644)
* bootkube.sh: drop final mention of `machine-os-content` [#7636](https://github.com/openshift/installer/pull/7636)
* update tested x86 instance type on 4.14 [#7639](https://github.com/openshift/installer/pull/7639)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Skip gatewayd units only on OKD agent-installer [#7629](https://github.com/openshift/installer/pull/7629)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Build and package Cluster API and providers [#7620](https://github.com/openshift/installer/pull/7620)
* [AGENT-713](https://issues.redhat.com/browse/AGENT-713): Use BM hosts in install-config if not defined in agent-config [#7531](https://github.com/openshift/installer/pull/7531)
* [MIXEDARCH-353](https://issues.redhat.com/browse/MIXEDARCH-353): Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage's manifest-list image [#7567](https://github.com/openshift/installer/pull/7567)
* openstack: dual stack UPI - create security group rules for IPv6 [#7552](https://github.com/openshift/installer/pull/7552)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): bump openshift/api [#7613](https://github.com/openshift/installer/pull/7613)
* [AGENT-718](https://issues.redhat.com/browse/AGENT-718): Add vSphere credentials to install-config overrides [#7593](https://github.com/openshift/installer/pull/7593)
* Revert #7428 "OCPBUGS-13664: Add KMS encryption keys if provided" [#7625](https://github.com/openshift/installer/pull/7625)
* [OCPBUGS-10906](https://issues.redhat.com/browse/OCPBUGS-10906): check extracted base iso coreos version is in sync [#7030](https://github.com/openshift/installer/pull/7030)
* [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Enable gatewayd units only on RHCOS [#7580](https://github.com/openshift/installer/pull/7580)
* [OCPBUGS-21720](https://issues.redhat.com/browse/OCPBUGS-21720): images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 [#6813](https://github.com/openshift/installer/pull/6813)
* [CORS-2836](https://issues.redhat.com/browse/CORS-2836): Refactor Stages, encapsulate terraform [#7488](https://github.com/openshift/installer/pull/7488)
* [OCPBUGS-20356](https://issues.redhat.com/browse/OCPBUGS-20356): update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 [#7616](https://github.com/openshift/installer/pull/7616)
* [OCPBUGS-20364](https://issues.redhat.com/browse/OCPBUGS-20364): azure: validation: validate defaultMachinePlatform [#7584](https://github.com/openshift/installer/pull/7584)
* [OCPBUGS-20525](https://issues.redhat.com/browse/OCPBUGS-20525): aws: use security groups from defaultMachinePlatform [#7589](https://github.com/openshift/installer/pull/7589)
* [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7428](https://github.com/openshift/installer/pull/7428)
* [OCPBUGS-5471](https://issues.redhat.com/browse/OCPBUGS-5471): Try to select rendezvousIP among non-worker hosts [#7443](https://github.com/openshift/installer/pull/7443)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Rectify GCP label key validation check [#7596](https://github.com/openshift/installer/pull/7596)
* Revert skipping integration test agent sno arm [#7561](https://github.com/openshift/installer/pull/7561)
* [OCPBUGS-20350](https://issues.redhat.com/browse/OCPBUGS-20350): vSphere,segfault on version check [#7575](https://github.com/openshift/installer/pull/7575)
* [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093): skip agent-tui on OCI [#7512](https://github.com/openshift/installer/pull/7512)
* [OCPVE-675](https://issues.redhat.com/browse/OCPVE-675): feat: bump api to add OLM capability [#7495](https://github.com/openshift/installer/pull/7495)
* [Full changelog](https://github.com/openshift/installer/compare/e84ee39789563c0c7ae0283ede529013fe17a805...2596e5d46c7b8f2c4907c7c6d80beaf768ff9953)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2adf4799b2b92e1536158231fc73bc5c4e4ec5e8)

* NO-ISSUE: Log when applying updates to BareMetalHost [#203](https://github.com/openshift/cluster-api-provider-baremetal/pull/203)
* [OCPBUGS-21794](https://issues.redhat.com/browse/OCPBUGS-21794): Uplift x/net to v0.17.0 [#197](https://github.com/openshift/cluster-api-provider-baremetal/pull/197)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/43617f25e9edcb5ee73d76d54495755bc7ec89e6...2adf4799b2b92e1536158231fc73bc5c4e4ec5e8)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/749609dd0fb858be72a783c5d87853cad2d303db)

* [OCPBUGS-8764](https://issues.redhat.com/browse/OCPBUGS-8764): Merge upstream [#315](https://github.com/openshift/baremetal-operator/pull/315)
* Merge upstream [#314](https://github.com/openshift/baremetal-operator/pull/314)
* [OCPBUGS-21736](https://issues.redhat.com/browse/OCPBUGS-21736): Uplift x/net to v0.17.0 [#313](https://github.com/openshift/baremetal-operator/pull/313)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/755bd1d88f04d3adebe6a8d5b2910fe4cb17ab80...749609dd0fb858be72a783c5d87853cad2d303db)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d82b9441f4e0e3379dba4f30482877cfceebeddb)

* [OCPBUGS-22204](https://issues.redhat.com/browse/OCPBUGS-22204): deps: upgrade x/sys [#280](https://github.com/openshift/baremetal-runtimecfg/pull/280)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/eeddb73cba2a629398f1aac01a843c86cba6825a...d82b9441f4e0e3379dba4f30482877cfceebeddb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7bce4b95745afecbbe31b5921828fdc9796090d0)

* NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594)
* Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591)
* [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588)
* moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532)
* [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586)
* pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583)
* oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585)
* create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582)
* pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554)
* [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581)
* [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557)
* [Full changelog](https://github.com/openshift/oc/compare/c365b47f538bd8d3bd9b498d179a360959ff69ff...7bce4b95745afecbbe31b5921828fdc9796090d0)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2fb6be056561a0a13ed7a072f04308f37898df8b)

* [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611)
* snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613)
* [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610)
* Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609)
* [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607)
* Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ed9ef94ad31a1ca32ca9365e7c2dae99ff9affbd...2fb6be056561a0a13ed7a072f04308f37898df8b)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/81ab2a17f2886bccd90dddf3deb213ed368c5be2)

* Kube 1.28 rebase for cloud-network-config-controller [#124](https://github.com/openshift/cloud-network-config-controller/pull/124)
* Bump CI image [#123](https://github.com/openshift/cloud-network-config-controller/pull/123)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/62f4d3052f200073f19bdc2353a8f0b12150fa84...81ab2a17f2886bccd90dddf3deb213ed368c5be2)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/d57f7c99ac4060ce9c05aabf3c1409890a40c40a)

* [OCPBUGS-21719](https://issues.redhat.com/browse/OCPBUGS-21719): go.mod: bump golang.org/x/net to v0.17.0 [#635](https://github.com/openshift/cluster-authentication-operator/pull/635)
* [OCPBUGS-17987](https://issues.redhat.com/browse/OCPBUGS-17987): generate only >=0 number of random bits [#629](https://github.com/openshift/cluster-authentication-operator/pull/629)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/7ae04d4e2b21ed244ba349d0e609b82e010db7b2...d57f7c99ac4060ce9c05aabf3c1409890a40c40a)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/f7e7200c6a7120f6218db586ecf0264f22441f1b)

* [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265)
* Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4c298e4ba4718bdd92e43eea85245373effd18df...f7e7200c6a7120f6218db586ecf0264f22441f1b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/809eb41097c8965837ead50e600e08d523f55130)

* [OCPBUGS-21791](https://issues.redhat.com/browse/OCPBUGS-21791): Bump x/net package to v0.17.0 [#295](https://github.com/openshift/cluster-autoscaler-operator/pull/295)
* Update OWNERS [#296](https://github.com/openshift/cluster-autoscaler-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/e32f004f2aef44ff96750a311782cf6c705b6728...809eb41097c8965837ead50e600e08d523f55130)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fb99dea6dc3fb8c74c90fb5407a32697e6d9c56c)

* [OCPBUGS-20563](https://issues.redhat.com/browse/OCPBUGS-20563): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#374](https://github.com/openshift/cluster-baremetal-operator/pull/374)
* [OCPBUGS-17003](https://issues.redhat.com/browse/OCPBUGS-17003): Trigger reconcile on service-ca CO [#365](https://github.com/openshift/cluster-baremetal-operator/pull/365)
* [OCPBUGS-21741](https://issues.redhat.com/browse/OCPBUGS-21741): Uplift x/net to v0.17.0 [#368](https://github.com/openshift/cluster-baremetal-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/d41c284de89607c6f25fe55bf92535a5a61e17fe...fb99dea6dc3fb8c74c90fb5407a32697e6d9c56c)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/68b3168fbb4a1e5ce19e2233ee05f5a53db20f51)

* [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/93fba13f576831ba0953190663ab26aaf5766984...68b3168fbb4a1e5ce19e2233ee05f5a53db20f51)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/689b4ffaf6ebb30d4a39cf781a06d1d0e2e31550)

* Update OWNERS [#183](https://github.com/openshift/cluster-api/pull/183)
* [Full changelog](https://github.com/openshift/cluster-api/compare/8402ee96c18712db500ad770b28cea49c328b4ff...689b4ffaf6ebb30d4a39cf781a06d1d0e2e31550)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/8e5ab9915fefd19b32a5248a29197d189197a6e3)

* [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Bump CAPG to v1.5.0 [#142](https://github.com/openshift/cluster-capi-operator/pull/142)
* [OCPBUGS-22403](https://issues.redhat.com/browse/OCPBUGS-22403): Disable CAPI Azure Infrastructure Provider [#141](https://github.com/openshift/cluster-capi-operator/pull/141)
* Update OWNERS [#133](https://github.com/openshift/cluster-capi-operator/pull/133)
* [OCPBUGS-17287](https://issues.redhat.com/browse/OCPBUGS-17287), [OCPBUGS-21642](https://issues.redhat.com/browse/OCPBUGS-21642), [OCPCLOUD-2214](https://issues.redhat.com/browse/OCPCLOUD-2214): Bump capi/capi providers/k8s 1.27 [#132](https://github.com/openshift/cluster-capi-operator/pull/132)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/bee466cfe4a1cfac2963aab0a3cbb2dc242e2a35...8e5ab9915fefd19b32a5248a29197d189197a6e3)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/d5b14bb7aa5debc7db57e98ea733ef5a817807b6)

* [OSASINFRA-3284](https://issues.redhat.com/browse/OSASINFRA-3284): Add Events to OpenStack's RBAC [#292](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/292)
* [OCPBUGS-20213](https://issues.redhat.com/browse/OCPBUGS-20213): Add azure cloud config transformer [#291](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/291)
* Update OWNERS [#290](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/290)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/b448757b69c821981d82c530aec2ecd794a12b61...d5b14bb7aa5debc7db57e98ea733ef5a817807b6)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/1b6bf28c54bd0308788aced1f9737f8e7de3d7bf)

* [SPLAT-1127](https://issues.redhat.com/browse/SPLAT-1127): bring in vSphere CPMSO API updates [#342](https://github.com/openshift/cluster-config-operator/pull/342)
* [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Update openshift/api package to latest version [#365](https://github.com/openshift/cluster-config-operator/pull/365)
* [OCPBUGS-21744](https://issues.redhat.com/browse/OCPBUGS-21744): bump library-go to include switch to HTTP/1.1 [#366](https://github.com/openshift/cluster-config-operator/pull/366)
* [CFE-887](https://issues.redhat.com/browse/CFE-887): Bump openshift/api to add DNSNameResolver. [#364](https://github.com/openshift/cluster-config-operator/pull/364)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/adae20acc44c09416aca7b7256f62ea2ddfaef76...1b6bf28c54bd0308788aced1f9737f8e7de3d7bf)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/6bcb8f1b6692eac883ef9c84efdbe42e65017d5d)

* Revert #239 "OCPCLOUD-2167: Test unhealthy node cases" [#262](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/262)
* OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices [#255](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/255)
* [OCPCLOUD-2167](https://issues.redhat.com/browse/OCPCLOUD-2167): Test unhealthy node cases [#239](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/239)
* [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Reimplement "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#234](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/234)
* [SPLAT-1211](https://issues.redhat.com/browse/SPLAT-1211): recognize topology and failure domains represented by the infrastructure resource [#250](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/250)
* Update OWNERS [#253](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/253)
* [OCPBUGS-21863](https://issues.redhat.com/browse/OCPBUGS-21863): webhooks: set min version TLS 1.2 [#252](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/252)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/3e718d1ea1ba1fee6ffd7efbe6ecd085a42238b6...6bcb8f1b6692eac883ef9c84efdbe42e65017d5d)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/0929c76c5d2ed00b8175c95435586908a27c6495)

* [OCPBUGS-22569](https://issues.redhat.com/browse/OCPBUGS-22569): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#173](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/173)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#172](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/172)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#166](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/166)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/809d4caef5ba829e1951985128f5bef29c2be560...0929c76c5d2ed00b8175c95435586908a27c6495)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/25020f49f5ad8aa0f2409e0ac26738b52a9dc2e4)

* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Ignore max unavailable for status [#386](https://github.com/openshift/cluster-dns-operator/pull/386)
* [OCPBUGS-22018](https://issues.redhat.com/browse/OCPBUGS-22018): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#387](https://github.com/openshift/cluster-dns-operator/pull/387)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5e1233474d5652de8b37add803a031dd30873619...25020f49f5ad8aa0f2409e0ac26738b52a9dc2e4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a060517d1452b3756b230de1d1393e3573de4f45)

* [OCPBUGS-21922](https://issues.redhat.com/browse/OCPBUGS-21922): fixing CVE-2023-39325 by updating dependencies [#1141](https://github.com/openshift/cluster-etcd-operator/pull/1141)
* [OCPBUGS-17199](https://issues.redhat.com/browse/OCPBUGS-17199): remove revision stability check from bootstrap complet… [#1087](https://github.com/openshift/cluster-etcd-operator/pull/1087)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b1e04b1b9549963bbf77d13dacabf19e0f02727c...a060517d1452b3756b230de1d1393e3573de4f45)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/06dfe471e15f6a54640b363747fd45afa5111052)

* [OCPBUGS-2889](https://issues.redhat.com/browse/OCPBUGS-2889): accept user/pass OR application credentials on Swift UPI secret [#924](https://github.com/openshift/cluster-image-registry-operator/pull/924)
* [IR-406](https://issues.redhat.com/browse/IR-406), [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): bump k8s and openshift packages [#936](https://github.com/openshift/cluster-image-registry-operator/pull/936)
* [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): disable http2 for metrics endpoint [#938](https://github.com/openshift/cluster-image-registry-operator/pull/938)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f474164e3bf850b2f3e3014812c761d2f5fb1442...06dfe471e15f6a54640b363747fd45afa5111052)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/9e775905596fbfcbce19ff0018ea8398693da714)

* [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Revert "OCPBUGS-16762: Bump openshift/api for container.maxLength fix" [#982](https://github.com/openshift/cluster-ingress-operator/pull/982)
* [OCPBUGS-14994](https://issues.redhat.com/browse/OCPBUGS-14994): Don't add clientca-configmap finalizer if deleting [#948](https://github.com/openshift/cluster-ingress-operator/pull/948)
* [OCPBUGS-22020](https://issues.redhat.com/browse/OCPBUGS-22020): Bump golang.org/x/net for CVE-2023-44487 [#985](https://github.com/openshift/cluster-ingress-operator/pull/985)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): test/e2e: Add test case for 2000000 maxConnections [#983](https://github.com/openshift/cluster-ingress-operator/pull/983)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e27d0004b5d560e57abc3e0217e4cb01d548d4c4...9e775905596fbfcbce19ff0018ea8398693da714)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/13bd0c1f2f2697b09966bc19093f79094e965046)

* [OCPBUGS-19160](https://issues.redhat.com/browse/OCPBUGS-19160): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1550](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1550)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules [#1566](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1566)
* [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests: rename API performance dashboard [#1565](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1565)
* [OCPBUGS-21729](https://issues.redhat.com/browse/OCPBUGS-21729): bump library-go to include switch to HTTP/1.1 [#1567](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1567)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/c1fb42cb128d60386aabde57bb62cc7fc626a980...13bd0c1f2f2697b09966bc19093f79094e965046)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/4c6b685796e38a41debaa5a6d810f65291bc89b7)

* Update OWNERS [#26](https://github.com/openshift/cluster-api-operator/pull/26)
* [OCPBUGS-17289](https://issues.redhat.com/browse/OCPBUGS-17289), [OCPBUGS-21650](https://issues.redhat.com/browse/OCPBUGS-21650), [OCPCLOUD-2215](https://issues.redhat.com/browse/OCPCLOUD-2215): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main [#25](https://github.com/openshift/cluster-api-operator/pull/25)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/df8c67eca258f39a5fe3cbf301e0933912416aa0...4c6b685796e38a41debaa5a6d810f65291bc89b7)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/839167b47a547bc10658fda1d89f2f80b8b66cb2)

* bump(k8s) [#763](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/763)
* [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): bump(openshift/api|client-go|library-go) to pick up http2 disablement [#762](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/762)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/18f73fe6f9d1f9d5a44d36b3ca2e607ae0856998...839167b47a547bc10658fda1d89f2f80b8b66cb2)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/00304850028f5e65c9d6eea1dc7be04b85cb09e0)

* [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump openshift/library-go to disable http/2 by default [#503](https://github.com/openshift/cluster-kube-scheduler-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/573243056eec1e3462c7282a88e49f327782a8f2...00304850028f5e65c9d6eea1dc7be04b85cb09e0)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7)

* [OCPBUGS-21738](https://issues.redhat.com/browse/OCPBUGS-21738): bump library-go to include switch to HTTP/1.1 [#95](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/95)
* [OCPBUGS-19253](https://issues.redhat.com/browse/OCPBUGS-19253): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#94](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/94)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/332cb1cd0f9a00c03e3f9d400ae8483abd03036c...e55e78a941daa4f3ac10aec8faf68caef7f4d8b7)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/fe6c5561a4b4bbb6cd2e93e372956f0adac66e67)

* [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204)
* Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/4add2887d6a4b99750e30fc0b8123c20c5242d90...fe6c5561a4b4bbb6cd2e93e372956f0adac66e67)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5a4cfa95bdddf69c6bdd7bc649305660370de286)

* [OCPBUGS-22742](https://issues.redhat.com/browse/OCPBUGS-22742): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2138](https://github.com/openshift/cluster-monitoring-operator/pull/2138)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2145](https://github.com/openshift/cluster-monitoring-operator/pull/2145)
* [MON-3398](https://issues.redhat.com/browse/MON-3398): Add RHACM telemetry metric [#2100](https://github.com/openshift/cluster-monitoring-operator/pull/2100)
* Synchronize versions of the downstream components [#2135](https://github.com/openshift/cluster-monitoring-operator/pull/2135)
* Fix UWM alert access permissions [#2131](https://github.com/openshift/cluster-monitoring-operator/pull/2131)
* Synchronize versions of the downstream components [#2133](https://github.com/openshift/cluster-monitoring-operator/pull/2133)
* [OCPBUGS-4069](https://issues.redhat.com/browse/OCPBUGS-4069): Prometheus Adatper takes metrics from kubelet job only. [#2117](https://github.com/openshift/cluster-monitoring-operator/pull/2117)
* [MON-3422](https://issues.redhat.com/browse/MON-3422): Remove temporary no more needed code [#2132](https://github.com/openshift/cluster-monitoring-operator/pull/2132)
* fix: force HTTP/1.1 connections [#2128](https://github.com/openshift/cluster-monitoring-operator/pull/2128)
* [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2105](https://github.com/openshift/cluster-monitoring-operator/pull/2105)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b47d7cf6a7042251b8ac48f4589bd4223ca67349...5a4cfa95bdddf69c6bdd7bc649305660370de286)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d25562d4a52220b7ed3be76bc848ba26eae068f2)

* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060)
* [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084)
* two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052)
* [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047)
* [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048)
* [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795)
* multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010)
* [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986)
* [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074)
* [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819)
* Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/457336f3513f35b097a1c934b4489dbcd688b177...d25562d4a52220b7ed3be76bc848ba26eae068f2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/12b9a12c1cf6892b36464c26d6198d2211f28a14)

* [OCPBUGS-22519](https://issues.redhat.com/browse/OCPBUGS-22519): bump opentelemetry package (#840) [#840](https://github.com/openshift/cluster-node-tuning-operator/pull/840)
* Disable HTTP/2 for webhook and metrics servers (#834) [#834](https://github.com/openshift/cluster-node-tuning-operator/pull/834)
* Remove obsolete protocols and weak ciphers (#827) [#827](https://github.com/openshift/cluster-node-tuning-operator/pull/827)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ee568b85cc913de676a898d9ae076ab713a832f8...12b9a12c1cf6892b36464c26d6198d2211f28a14)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ad9febd4ed1dbb28380d78e3c3a8ae50eb1906db)

* [OCPBUGS-19231](https://issues.redhat.com/browse/OCPBUGS-19231): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#548](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/548)
* [OCPBUGS-21733](https://issues.redhat.com/browse/OCPBUGS-21733): bump library-go to include switch to HTTP/1.1 [#552](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/00f7e4cc95063ba5aba1992568088d924cfbf516...ad9febd4ed1dbb28380d78e3c3a8ae50eb1906db)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/e6f885abcd9923abf87c3b96908e69393b06efef)

* Revert "Revert #300 "API-1666: add image pull secret cleanup controller"" [#314](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/314)
* Revert #300 "API-1666: add image pull secret cleanup controller" [#313](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/313)
* [API-1642](https://issues.redhat.com/browse/API-1642): add image pull secret cleanup controller [#300](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/300)
* [API-1642](https://issues.redhat.com/browse/API-1642): Do not generate image pull secrets for internal registry when internal registry is disabled. [#298](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/298)
* [OCPBUGS-21830](https://issues.redhat.com/browse/OCPBUGS-21830): bump(k8s,openshift) to address CVE-2023-44487 [#308](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/308)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/bec461cc84f32d2898c8888cfb4fec0855e75bc4...e6f885abcd9923abf87c3b96908e69393b06efef)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/25dbb307143ea9576fc977f737c0331a9b8e879f)

* manifests: Simplify filenames for default runlevel [#101](https://github.com/openshift/platform-operators/pull/101)
* Makefile: Drop yq prerequisite from 'manifests' target [#103](https://github.com/openshift/platform-operators/pull/103)
* [OCPBUGS-22457](https://issues.redhat.com/browse/OCPBUGS-22457): manifests/0000_50_cluster-platform-operator-manager_07-aggregated-clusteroperator: Drop namespace [#100](https://github.com/openshift/platform-operators/pull/100)
* [Full changelog](https://github.com/openshift/platform-operators/compare/8d050ee365cdab7b5ea67f30a46e3a0f2598ab7b...25dbb307143ea9576fc977f737c0331a9b8e879f)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/50c2a8337f08856bbae4cd419bb8ffcbdf92567c)

* go.mod: remove replaces [#138](https://github.com/openshift/cluster-policy-controller/pull/138)
* [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): bump(k8s,openshift) to address CVE-2023-44487 [#137](https://github.com/openshift/cluster-policy-controller/pull/137)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/adaa98fca9c663789f287c42a9a875706c6e392b...50c2a8337f08856bbae4cd419bb8ffcbdf92567c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/05e9bb907a82490a52a04afb76adb3bdb80b0342)

* [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/3ceae6f636231e9ba26ddc76b1edb6e7b0e796d1...05e9bb907a82490a52a04afb76adb3bdb80b0342)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/813fcbe37e3ad47521601763641999fec920cefa)

* [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/f22dec9923b169c02bd7662427cce36a09ab82e8...813fcbe37e3ad47521601763641999fec920cefa)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/52b7f32cc1703bd56b6ef6ea7b465870d8af66ad)

* [OCPBUGS-8079](https://issues.redhat.com/browse/OCPBUGS-8079): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#992](https://github.com/openshift/cluster-version-operator/pull/992)
* [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): vendor: bump openshift/api [#984](https://github.com/openshift/cluster-version-operator/pull/984)
* [OCPBUGS-21933](https://issues.redhat.com/browse/OCPBUGS-21933): Bump http-related deps [#983](https://github.com/openshift/cluster-version-operator/pull/983)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/80e7bbda9dadd86c067e09458a9a828d0cc3a1c2...52b7f32cc1703bd56b6ef6ea7b465870d8af66ad)


### [console](https://github.com/openshift/console/tree/1560e631708e3035ee0555e6dd9f06f2fbd325d0)

* [CONSOLE-3614](https://issues.redhat.com/browse/CONSOLE-3614): Remove multicluster code from Bridge [#13244](https://github.com/openshift/console/pull/13244)
* [CONSOLE-3822](https://issues.redhat.com/browse/CONSOLE-3822): Update obsolete deps [#13294](https://github.com/openshift/console/pull/13294)
* [OCPBUGS-22930](https://issues.redhat.com/browse/OCPBUGS-22930): remove expandable toggle for conditional update risk d… [#13306](https://github.com/openshift/console/pull/13306)
* [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name by using unique-names-generator [#13263](https://github.com/openshift/console/pull/13263)
* [CONSOLE-3781](https://issues.redhat.com/browse/CONSOLE-3781): remove cypress.config comments [#13301](https://github.com/openshift/console/pull/13301)
* [CONSOLE-3819](https://issues.redhat.com/browse/CONSOLE-3819): change Cypress' default browser to Electron [#13300](https://github.com/openshift/console/pull/13300)
* [OCPBUGS-19916](https://issues.redhat.com/browse/OCPBUGS-19916): Fix MachineSetList capacity logic [#13259](https://github.com/openshift/console/pull/13259)
* [CNV-30298](https://issues.redhat.com/browse/CNV-30298): Add UI for OVN Secondary Localnet Network [#13293](https://github.com/openshift/console/pull/13293)
* [OCPBUGS-19875](https://issues.redhat.com/browse/OCPBUGS-19875): Fix plugin proxy handler [#13272](https://github.com/openshift/console/pull/13272)
* [CONSOLE-3808](https://issues.redhat.com/browse/CONSOLE-3808): Remove Protactor from console-plugin-sdk [#13283](https://github.com/openshift/console/pull/13283)
* [OCPBUGS-22747](https://issues.redhat.com/browse/OCPBUGS-22747): Display "With Data upload form" in Create PVC drop down once [#13292](https://github.com/openshift/console/pull/13292)
* [CONSOLE-3811](https://issues.redhat.com/browse/CONSOLE-3811): remove shared Protractor files [#13282](https://github.com/openshift/console/pull/13282)
* [ODC-7409](https://issues.redhat.com/browse/ODC-7409): Use @kubernetes-models/shipwright types in shipwright-plugin [#13267](https://github.com/openshift/console/pull/13267)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove local-storage-operator-plugin Protractor tests [#13291](https://github.com/openshift/console/pull/13291)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove network-attachment-definition-plugin Protractor … [#13286](https://github.com/openshift/console/pull/13286)
* [ODC-7386](https://issues.redhat.com/browse/ODC-7386): Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed [#13145](https://github.com/openshift/console/pull/13145)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): migrate console Protractor tests to Cypress [#13257](https://github.com/openshift/console/pull/13257)
* [OCPBUGS-22419](https://issues.redhat.com/browse/OCPBUGS-22419): Fix the forms when BC is not installed in the cluster [#13241](https://github.com/openshift/console/pull/13241)
* [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove cnv console tests [#13280](https://github.com/openshift/console/pull/13280)
* [OCPBUGS-10562](https://issues.redhat.com/browse/OCPBUGS-10562): fix operator uninstall test [#13214](https://github.com/openshift/console/pull/13214)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): remove references to removed packages [#13281](https://github.com/openshift/console/pull/13281)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13274](https://github.com/openshift/console/pull/13274)
* [CONSOLE-3816](https://issues.redhat.com/browse/CONSOLE-3816): Goodbye! [#13255](https://github.com/openshift/console/pull/13255)
* [OCPBUGS-19458](https://issues.redhat.com/browse/OCPBUGS-19458), [OU-241](https://issues.redhat.com/browse/OU-241): Remove unused Observe > Metrics page code [#13114](https://github.com/openshift/console/pull/13114)
* [OCPBUGS-20295](https://issues.redhat.com/browse/OCPBUGS-20295): clarify Operator installMode error message [#13232](https://github.com/openshift/console/pull/13232)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): fix bug where renamed tests weren't updated [#13275](https://github.com/openshift/console/pull/13275)
* [OCPBUGS-22284](https://issues.redhat.com/browse/OCPBUGS-22284): updating doc links for 4.14 GA [#13266](https://github.com/openshift/console/pull/13266)
* [OCPBUGS-22199](https://issues.redhat.com/browse/OCPBUGS-22199): Save also the location.search and .hash values in localStorage to restore them after login [#13268](https://github.com/openshift/console/pull/13268)
* [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13265](https://github.com/openshift/console/pull/13265)
* [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Workloads-AddPage: upload JAR file's i18n misses [#13264](https://github.com/openshift/console/pull/13264)
* [OCPBUGS-16756](https://issues.redhat.com/browse/OCPBUGS-16756): Cluster dropdown items are not marked for i18n when ACM/MCE installed [#13238](https://github.com/openshift/console/pull/13238)
* [OCPBUGS-20362](https://issues.redhat.com/browse/OCPBUGS-20362): Delete results.tekton.dev annotations before rerun the pipelineRun [#13230](https://github.com/openshift/console/pull/13230)
* [OCPBUGS-9422](https://issues.redhat.com/browse/OCPBUGS-9422): Telemetry- Current page was sometimes not tracked when reloading the current page [#13088](https://github.com/openshift/console/pull/13088)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): check that user dropdown is present to verify logged in [#13260](https://github.com/openshift/console/pull/13260)
* [CONSOLE-3812](https://issues.redhat.com/browse/CONSOLE-3812): remove packages/ceph-storage-plugin/integration-tests [#13249](https://github.com/openshift/console/pull/13249)
* [CONSOLE-3809](https://issues.redhat.com/browse/CONSOLE-3809): remove orphaned OLM Protractor views [#13248](https://github.com/openshift/console/pull/13248)
* [OCPBUGS-19783](https://issues.redhat.com/browse/OCPBUGS-19783): Channel page shows "Required" message for the default name when navigate to create channel page [#13222](https://github.com/openshift/console/pull/13222)
* [OCPBUGS-20229](https://issues.redhat.com/browse/OCPBUGS-20229): Service details page shows revisions and routes from other service also [#13221](https://github.com/openshift/console/pull/13221)
* [CONSOLE-3766](https://issues.redhat.com/browse/CONSOLE-3766): Update i18next-parser dev dependency in console [#13197](https://github.com/openshift/console/pull/13197)
* [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): follow-on fixes and cleanup for Cypress upgrade [#13242](https://github.com/openshift/console/pull/13242)
* [OCPBUGS-20305](https://issues.redhat.com/browse/OCPBUGS-20305): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13236](https://github.com/openshift/console/pull/13236)
* [OCPBUGS-19714](https://issues.redhat.com/browse/OCPBUGS-19714): hide page-specific doc links for ROSA and OSD [#13229](https://github.com/openshift/console/pull/13229)
* chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 [#13201](https://github.com/openshift/console/pull/13201)
* [OCPBUGS-21616](https://issues.redhat.com/browse/OCPBUGS-21616): Fix empty editor error [#13176](https://github.com/openshift/console/pull/13176)
* [Full changelog](https://github.com/openshift/console/compare/6f9fc57edf189dafa7dc8a2915e7844f7f213b00...1560e631708e3035ee0555e6dd9f06f2fbd325d0)


### [console-operator](https://github.com/openshift/console-operator/tree/7dfdcf9c317b29c4a84738cca34198d33c7847dc)

* [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Remove multicluster code from console operator [#799](https://github.com/openshift/console-operator/pull/799)
* [OCPBUGS-21972](https://issues.redhat.com/browse/OCPBUGS-21972): Disable HTTP/2 for webhook [#802](https://github.com/openshift/console-operator/pull/802)
* [OCPVE-719](https://issues.redhat.com/browse/OCPVE-719): feat: add support for olm capability [#795](https://github.com/openshift/console-operator/pull/795)
* [HOSTEDCP-1250](https://issues.redhat.com/browse/HOSTEDCP-1250): remove redundant cert check [#801](https://github.com/openshift/console-operator/pull/801)
* [Full changelog](https://github.com/openshift/console-operator/compare/78ff4b8ee4340e23ced51d93ff0159c0ac3d9a3b...7dfdcf9c317b29c4a84738cca34198d33c7847dc)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/8f26066eb4418174775b89d3c37292a5f6d4b482)

* [OCPBUGS-21906](https://issues.redhat.com/browse/OCPBUGS-21906): Bumps x/net + upstream sync november 2023 [#128](https://github.com/openshift/containernetworking-plugins/pull/128)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/80a8df0501fb11fc20369196b3a89011eed77d60...8f26066eb4418174775b89d3c37292a5f6d4b482)


### [coredns](https://github.com/openshift/coredns/tree/68ef945a78841a4a1be007fcefa929cc30eb9553)

* [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101)
* [Full changelog](https://github.com/openshift/coredns/compare/ac051aa4594463c262d2a479af01065ef08b02d0...68ef945a78841a4a1be007fcefa929cc30eb9553)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/8c61107d0c547d48d7878398de1d9760750dd708)

* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource images to be consistent with ART [#143](https://github.com/openshift/csi-driver-shared-resource/pull/143)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/e09424ac135c78c15ddef0cbcb6600e1cdbf6f1f...8c61107d0c547d48d7878398de1d9760750dd708)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/4339ee9b25f4bb27c7736809fd59fee34fb69411)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/408fddbd0e82948b61c6c82a59bc1654893d921c...4339ee9b25f4bb27c7736809fd59fee34fb69411)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/e0e329fbb19fd7bdea04ea33758bcd6f46861f70)

* [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528): UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#77](https://github.com/openshift/csi-external-provisioner/pull/77)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/7463ccfe5747f3a9de41d834be5ffdde5b2ade16...e0e329fbb19fd7bdea04ea33758bcd6f46861f70)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/csi-livenessprobe/pull/49)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/76366f99cfc23ea3765bc881cd628bf6bd01056d...240bb8c0c7b24d0b18831be4ace39bcbc8d599e3)


### [docker-builder](https://github.com/openshift/builder/tree/ecc924cc84946be012e591cbcedcd99f099b4f65)

* [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369)
* [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361)
* [Full changelog](https://github.com/openshift/builder/compare/32ac97fe402cb729e2c5ba56397b32b122c623c7...ecc924cc84946be012e591cbcedcd99f099b4f65)


### [docker-registry](https://github.com/openshift/image-registry/tree/855b24b7a2c5b493fb83968a6515b1b218e96c83)

* [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378)
* [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377)
* [Full changelog](https://github.com/openshift/image-registry/compare/742343bb0aff14f2f987847baf2a83075ef06d68...855b24b7a2c5b493fb83968a6515b1b218e96c83)


### [etcd](https://github.com/openshift/etcd/tree/9651438be519d3d4f1b34b4f8d166778aaa3e5ce)

* [OCPBUGS-20560](https://issues.redhat.com/browse/OCPBUGS-20560): [4.15] Rebase openshift/etcd to 3.5.10 [#224](https://github.com/openshift/etcd/pull/224)
* [Full changelog](https://github.com/openshift/etcd/compare/6fc69d5d835662c88d21fe2ebed024d87b245f88...9651438be519d3d4f1b34b4f8d166778aaa3e5ce)


### [haproxy-router](https://github.com/openshift/router/tree/fb70ac4d547954e7f96c12b4bc329917f1695d35)

* [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529)
* [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527)
* [Full changelog](https://github.com/openshift/router/compare/f142a3a4f2890527d6b22c211faf04f34ed86625...fb70ac4d547954e7f96c12b4bc329917f1695d35)


### [hypershift](https://github.com/openshift/hypershift/tree/c19a677f7302f6f7d4890c8bb864118a6aa2f0e6)

* [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150)
* [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088)
* [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164)
* [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148)
* [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141)
* [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149)
* [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067)
* [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157)
* [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132)
* Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147)
* Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134)
* [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081)
* Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136)
* [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113)
* [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072)
* [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135)
* [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086)
* contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140)
* [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138)
* run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137)
* [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115)
* [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097)
* Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092)
* [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108)
* Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093)
* Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062)
* [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103)
* [Full changelog](https://github.com/openshift/hypershift/compare/32309b12ae6c5d4952357f4ad17519cf2424805a...c19a677f7302f6f7d4890c8bb864118a6aa2f0e6)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/6195e22a9e13e980390153bad395e2a70c7d17d2)

* Update OWNERS [#54](https://github.com/openshift/cloud-provider-ibm/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/b1208c395a194e25d4a2c623056486c4bfa4a81c...6195e22a9e13e980390153bad395e2a70c7d17d2)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/be13e0241e089afc912ab8329101b8d2214cc159)

* [OCPBUGS-22924](https://issues.redhat.com/browse/OCPBUGS-22924): Removing unncessary imagePullSecrets [#87](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/87)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#77](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/77)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#86](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/86)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/eaaa874ecd9c90682a25f5cee5a277916350a8d2...be13e0241e089afc912ab8329101b8d2214cc159)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/fd847cb757eb555a17095b96ac429caf1b3c1985)

* [OCPBUGS-22054](https://issues.redhat.com/browse/OCPBUGS-22054): Bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/62)
* [OCPBUGS-22107](https://issues.redhat.com/browse/OCPBUGS-22107): Bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/61)
* Update OWNERS [#60](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/60)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/52f54e98113c69ff4fc576b71a2532fd756585fd...fd847cb757eb555a17095b96ac429caf1b3c1985)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/33aef566a3277848bba8468a2d6110e817913fbb)

* Update OWNERS [#26](https://github.com/openshift/machine-api-provider-ibmcloud/pull/26)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/24fe194fca24063adaefabb97856ac0266013130...33aef566a3277848bba8468a2d6110e817913fbb)


### [insights-operator](https://github.com/openshift/insights-operator/tree/249263ce49b88e151f9f82b99846651ac00e6149)

* docs(openshift_apiserver_operator_logs): explicit namespace at archive path (#834) [#834](https://github.com/openshift/insights-operator/pull/834)
* [OCPBUGS-22958](https://issues.redhat.com/browse/OCPBUGS-22958): adds cluster storageclasses gather (#858) [#858](https://github.com/openshift/insights-operator/pull/858)
* extends obfuscation options in the configmap (#844) [#844](https://github.com/openshift/insights-operator/pull/844)
* Revert the previous revert and fix (#851) [#851](https://github.com/openshift/insights-operator/pull/851)
* Fix lint, pin its version and other minor fixes (#852) [#852](https://github.com/openshift/insights-operator/pull/852)
* add retry logic to the DVO metrics gatherer (#847) [#847](https://github.com/openshift/insights-operator/pull/847)
* Revert "fix the reverted configmap PR (#846)" (#849) [#846](https://github.com/openshift/insights-operator/pull/846)
* fix the reverted configmap PR (#846) [#846](https://github.com/openshift/insights-operator/pull/846)
* Revert "First minimal PoC version for moving the configuration to configmap (#827)" (#845) [#827](https://github.com/openshift/insights-operator/pull/827)
* First minimal PoC version for moving the configuration to configmap (#827) [#827](https://github.com/openshift/insights-operator/pull/827)
* [OCPBUGS-21797](https://issues.redhat.com/browse/OCPBUGS-21797): remove username & password config options (#842) [#842](https://github.com/openshift/insights-operator/pull/842)
* [OCPBUGS-21613](https://issues.redhat.com/browse/OCPBUGS-21613): update ependencies (#838) [#838](https://github.com/openshift/insights-operator/pull/838)
* [Full changelog](https://github.com/openshift/insights-operator/compare/f6c7583e6ed72bd58145afe9b76222e215abcc4b...249263ce49b88e151f9f82b99846651ac00e6149)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/07b7bf748ea9d1d191be93e57a8078c8886760a6)

* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88)
* add `machine424` and `rexagod`  to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/0f2248766a827c81b829786e5f0596ead70b39b4...07b7bf748ea9d1d191be93e57a8078c8886760a6)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/58379a0c9ff5a3aa8a9edd193794fd10fe4f1373)

* [OCPBUGS-16788](https://issues.redhat.com/browse/OCPBUGS-16788): Create IPAM files with 0600 permissions [#584](https://github.com/openshift/sdn/pull/584)
* [SDN-4123](https://issues.redhat.com/browse/SDN-4123): rebase sdn to kube 1.28.3 [#580](https://github.com/openshift/sdn/pull/580)
* [Full changelog](https://github.com/openshift/sdn/compare/b91af7011c551cf60ee82477168348cdcaad0aaa...58379a0c9ff5a3aa8a9edd193794fd10fe4f1373)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/e8e8c84bcc6d4419970726f3028df4b178c0b1c9)

* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/688b36e681b21a6a88522629b87991d7279df1b9...e8e8c84bcc6d4419970726f3028df4b178c0b1c9)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/3653218b1a73f6b5d75529b429663e9705f826d2)

* [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100)
* add `machine424` and `rexagod`  to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/48568abdaaf4088aef46a3caba158280801c7b93...3653218b1a73f6b5d75529b429663e9705f826d2)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/95ad20fc390cd34e0e5ba5135d5048bc0f008c0d)

* [OCPBUGS-19227](https://issues.redhat.com/browse/OCPBUGS-19227): Updating ose-kube-storage-version-migrator images to be consistent with ART [#199](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/199)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...95ad20fc390cd34e0e5ba5135d5048bc0f008c0d)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/efda8d50967a00210f2147abdfc794c6bd015080)

* [OCPCLOUD-2138](https://issues.redhat.com/browse/OCPCLOUD-2138): Add module to work with scale from zero annotations for MachineSet [#1169](https://github.com/openshift/machine-api-operator/pull/1169)
* [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Use docs URL instead of KCS article [#1172](https://github.com/openshift/machine-api-operator/pull/1172)
* [OCPBUGS-21815](https://issues.redhat.com/browse/OCPBUGS-21815): Bump golang.org/x/net to v0.17.0 [#1170](https://github.com/openshift/machine-api-operator/pull/1170)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/2cc7fcf262f3b7679c2752a0319c78aea1abb699...efda8d50967a00210f2147abdfc794c6bd015080)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f41e20d6ba3951ac9ce9411f0511558c34e60e53)

* [OCPBUGS-18414](https://issues.redhat.com/browse/OCPBUGS-18414), [OCPBUGS-18456](https://issues.redhat.com/browse/OCPBUGS-18456), [OCPBUGS-18458](https://issues.redhat.com/browse/OCPBUGS-18458): Configures SSH Keys and Password for core, fixes config drift degradation [#3946](https://github.com/openshift/machine-config-operator/pull/3946)
* Use the bridge interface name for ofport request [#3998](https://github.com/openshift/machine-config-operator/pull/3998)
* [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): typo s/iface_default_hint_file/default_bridge_file/ [#4004](https://github.com/openshift/machine-config-operator/pull/4004)
* [OCPBUGS-16871](https://issues.redhat.com/browse/OCPBUGS-16871): MCO - currentConfig missing on the filesystem [#3963](https://github.com/openshift/machine-config-operator/pull/3963)
* [OCPBUGS-20369](https://issues.redhat.com/browse/OCPBUGS-20369): Require a hostname override for AWS [#3979](https://github.com/openshift/machine-config-operator/pull/3979)
* [OCPBUGS-21814](https://issues.redhat.com/browse/OCPBUGS-21814): bump library-go and k8s dependencies to most recent version [#3988](https://github.com/openshift/machine-config-operator/pull/3988)
* [OCPBUGS-19736](https://issues.redhat.com/browse/OCPBUGS-19736): configure-ovs: handle SIGINT and SIGTERM [#3982](https://github.com/openshift/machine-config-operator/pull/3982)
* Add kernel-64k kernelType [#3903](https://github.com/openshift/machine-config-operator/pull/3903)
* [MCO-593](https://issues.redhat.com/browse/MCO-593): Consume MCO API and CRDs from openshift/api [#3747](https://github.com/openshift/machine-config-operator/pull/3747)
* Get the nmstate pinned package from kojihub when building on top of a CentOS base image [#3954](https://github.com/openshift/machine-config-operator/pull/3954)
* CRI-O: Use `127.0.0.1` for stream server with random port [#3853](https://github.com/openshift/machine-config-operator/pull/3853)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d14938550422f1cd437bdfcae25c12a7dcecdd40...f41e20d6ba3951ac9ce9411f0511558c34e60e53)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/86d23df14c72a829f4a95fc7b14e6d049547b52d)

* Upgrade Node.js from v16 to v18 in images [#79](https://github.com/openshift/monitoring-plugin/pull/79)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/fc4303cfbfd430e6b7a6d15bb2115e1c70ef431c...86d23df14c72a829f4a95fc7b14e6d049547b52d)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0cc54f701ae2dce684180798d43b0f882d9c7e93)

* [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76)
* [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/5e7b7b2448c2304487f769bd5caf809c7ed02dbc...0cc54f701ae2dce684180798d43b0f882d9c7e93)


### [multus-cni](https://github.com/openshift/multus-cni/tree/2121697f1a12b943e21206c1f22991b5d8ef6d75)

* [OCPBUGS-21915](https://issues.redhat.com/browse/OCPBUGS-21915): Upstream sync with go.mod update [#193](https://github.com/openshift/multus-cni/pull/193)
* [Full changelog](https://github.com/openshift/multus-cni/compare/720c514fba01d43c281e507b7b21ebc437116f74...2121697f1a12b943e21206c1f22991b5d8ef6d75)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/dc64637063de1bb1a338ff7165184dd813c68268)

* [OCPBUGS-22833](https://issues.redhat.com/browse/OCPBUGS-22833): Vendor package update (#39) [#39](https://github.com/openshift/multus-networkpolicy/pull/39)
* [OCPBUGS-21779](https://issues.redhat.com/browse/OCPBUGS-21779): Sync upstream + Fix CVE (#32) [#32](https://github.com/openshift/multus-networkpolicy/pull/32)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/176e9983ae9d8980dee7886f83271b7bef268376...dc64637063de1bb1a338ff7165184dd813c68268)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/561753e45714485e1056bd2f6a09a5b77e1b97b2)

* Update the k8s dependencies to 1.28.3 (#81) [#81](https://github.com/openshift/network-metrics-daemon/pull/81)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/024b56b755e2e93cdd142b736c2b6b289aca63cf...561753e45714485e1056bd2f6a09a5b77e1b97b2)


### [network-tools](https://github.com/openshift/network-tools/tree/e222bde150213e729ece93749aec1f175b4d54e8)

* [OCPBUGS-22166](https://issues.redhat.com/browse/OCPBUGS-22166): Move commands to the function to avoid them being executed on -h. [#93](https://github.com/openshift/network-tools/pull/93)
* [Full changelog](https://github.com/openshift/network-tools/compare/df85e45b06ca4b7dbb0e7b2db590cdc3dde47a2c...e222bde150213e729ece93749aec1f175b4d54e8)


### [oauth-server](https://github.com/openshift/oauth-server/tree/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5)

* [OCPBUGS-21671](https://issues.redhat.com/browse/OCPBUGS-21671): go.mod: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/oauth-server/pull/137)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a06e5302aa7cfc99bd3ab003e3790c36873a181c...8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c4d2a8d81c5514c717921d72e556311147c3d6df)

* Fix --from being set to default value in mirrorToDisk workflow (#727) [#727](https://github.com/openshift/oc-mirror/pull/727)
* [OCPBUGS-22947](https://issues.redhat.com/browse/OCPBUGS-22947): Should not generate graph with prepare subcommand (#725) [#725](https://github.com/openshift/oc-mirror/pull/725)
* Cancel community office hours: none for the moment (#726) [#726](https://github.com/openshift/oc-mirror/pull/726)
* [CFE-965](https://issues.redhat.com/browse/CFE-965): [V2] Enable signature verification (#709) [#709](https://github.com/openshift/oc-mirror/pull/709)
* [CFE-971](https://issues.redhat.com/browse/CFE-971): Generate OSUS graph image - uses go-containerregistry implementation (#722) [#722](https://github.com/openshift/oc-mirror/pull/722)
* Pr template change (#719) [#719](https://github.com/openshift/oc-mirror/pull/719)
* [CFE-899](https://issues.redhat.com/browse/CFE-899), [CFE-958](https://issues.redhat.com/browse/CFE-958): feat: removes the registry dns (#718) [#718](https://github.com/openshift/oc-mirror/pull/718)
* Remove Dockerfile.integration - not used - reduce confusion (#716) [#716](https://github.com/openshift/oc-mirror/pull/716)
* [OCPBUGS-21864](https://issues.redhat.com/browse/OCPBUGS-21864): fix: CVE-2023-39325 and CVE-2023-44487 (#712) [#712](https://github.com/openshift/oc-mirror/pull/712)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/71ffce47333962987f179215ba6ffe11e2ebf4e3...c4d2a8d81c5514c717921d72e556311147c3d6df)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/d9fa05d7a2881e7cd93d2f13630dfdcec8f65afd)

* [OPRUN-3079](https://issues.redhat.com/browse/OPRUN-3079): UPSTREAM: <carry>: Drop commitchecker [#32](https://github.com/openshift/operator-framework-catalogd/pull/32)
* Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-catalogd/pull/31)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/418c7694184acdfc9bacc18868877e0f90dee00b...d9fa05d7a2881e7cd93d2f13630dfdcec8f65afd)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/7c403f822c670e4b31dee1aef6d1a55a1f2ae458)

* [OPRUN-3081](https://issues.redhat.com/browse/OPRUN-3081): UPSTREAM: <carry>: Drop commitchecker [#37](https://github.com/openshift/operator-framework-operator-controller/pull/37)
* [OPRUN-3075](https://issues.redhat.com/browse/OPRUN-3075): Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-operator-controller/pull/31)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/a95d216e44dee849c34d1ce5363c5cdb9338a0f6...7c403f822c670e4b31dee1aef6d1a55a1f2ae458)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/9129b242eedce8ddf07a1849212edb8967a7c171)

* [OPRUN-3080](https://issues.redhat.com/browse/OPRUN-3080): UPSTREAM: <carry>: Drop commitchecker [#51](https://github.com/openshift/operator-framework-rukpak/pull/51)
* [OPRUN-3078](https://issues.redhat.com/browse/OPRUN-3078): Update to Upstream v0.15.0 [#50](https://github.com/openshift/operator-framework-rukpak/pull/50)
* Update to Upstream v0.14.0 [#44](https://github.com/openshift/operator-framework-rukpak/pull/44)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/9dbd2888c90d87ff89170b735a6ca34b8de5ee4b...9129b242eedce8ddf07a1849212edb8967a7c171)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6026659fa4d754180c949b4a6fa7cd08cdc91e86)

* [OCPBUGS-19145](https://issues.redhat.com/browse/OCPBUGS-19145): Updating ose-openshift-apiserver images to be consistent with ART [#390](https://github.com/openshift/openshift-apiserver/pull/390)
* [API-1644](https://issues.redhat.com/browse/API-1644): add TokenRequest to pull-secret controller's cluster role [#403](https://github.com/openshift/openshift-apiserver/pull/403)
* Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled [#395](https://github.com/openshift/openshift-apiserver/pull/395)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/9573998170f3bb7ae7e946c11b7e9fc414120df4...6026659fa4d754180c949b4a6fa7cd08cdc91e86)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/899188df28b0e495026833c606e16f8fc6b239cf)

* [OCPBUGS-21754](https://issues.redhat.com/browse/OCPBUGS-21754): bump `x/net` to v0.17.0 [#103](https://github.com/openshift/openshift-state-metrics/pull/103)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/40336b020d209d2a48cf2ea22d6f70ab09b0a34a...899188df28b0e495026833c606e16f8fc6b239cf)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/9d12badbfebf3c87e84c0af4b7be97a8c33c3a42)

* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/5cc63c002333e9d7510941305bb2458f630a8d33...9d12badbfebf3c87e84c0af4b7be97a8c33c3a42)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/58bc9a3f245c4a2931a3589d5dedfaa27c1896be)

* [OSASINFRA-3283](https://issues.redhat.com/browse/OSASINFRA-3283): convert: add missing port profile [#93](https://github.com/openshift/machine-api-provider-openstack/pull/93)
* [OSASINFRA-3243](https://issues.redhat.com/browse/OSASINFRA-3243): add ephemeral storage support [#88](https://github.com/openshift/machine-api-provider-openstack/pull/88)
* [OCPBUGS-22319](https://issues.redhat.com/browse/OCPBUGS-22319): fix MachineToInstanceSpec when SG are nil [#91](https://github.com/openshift/machine-api-provider-openstack/pull/91)
* [OSASINFRA-3272](https://issues.redhat.com/browse/OSASINFRA-3272): Move to CAPO v1alpha7 [#87](https://github.com/openshift/machine-api-provider-openstack/pull/87)
* [OCPBUGS-22069](https://issues.redhat.com/browse/OCPBUGS-22069): Update dependencies [#89](https://github.com/openshift/machine-api-provider-openstack/pull/89)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/4213f61e1a93569efc0edd4b114c7a9e65130461...58bc9a3f245c4a2931a3589d5dedfaa27c1896be)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2ff0c6731160ed93ae9d356e1d1c50e2bafaa06a)

* NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602)
* Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581)
* scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599)
* Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597)
* [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596)
* [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595)
* [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592)
* [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565)
* Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588)
* [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585)
* scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593)
* scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e98b8f0ee89736709fc8058525c8e07604c142e4...2ff0c6731160ed93ae9d356e1d1c50e2bafaa06a)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/07d998369f4e7f1e48455067ae62df7963bc7b89)

* [OCPBUGS-21592](https://issues.redhat.com/browse/OCPBUGS-21592): [release-4.15] bump golang.org/x/net to 0.17.0 [#546](https://github.com/operator-framework/operator-marketplace/pull/546)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/42a5f19ffb33829c73be66c4803557ee142baa27...07d998369f4e7f1e48455067ae62df7963bc7b89)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/b8d25ad6d140a198e96527b46a9dbde65aae41ce)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...b8d25ad6d140a198e96527b46a9dbde65aae41ce)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e9b0fa233d75a97e6d29106265938b42bc16d677)

* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/ovirt-csi-driver-operator/pull/125)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/2fa33aa7f05da8640a8695372364f2367febd12a...e9b0fa233d75a97e6d29106265938b42bc16d677)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/814535a6dbae0124d34a6461355055108aa4e54d)

* [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1cf6c0376bf03a13d7c6a6ee91a98699df2aaa5c...814535a6dbae0124d34a6461355055108aa4e54d)


### [prometheus](https://github.com/openshift/prometheus/tree/9cb8c56136e1da5541eeb6a89ab3f735cb1e4bd7)

* Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181)
* Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180)
* Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179)
* [Full changelog](https://github.com/openshift/prometheus/compare/880c8e19b9a7453947d460d1f6d3f3a91878a44e...9cb8c56136e1da5541eeb6a89ab3f735cb1e4bd7)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/870ade52a6097bc55cec29c1a9cc028967c5d23c)

* [OCPBUGS-21771](https://issues.redhat.com/browse/OCPBUGS-21771): Bump golang.org/x/net to v0.17.0 [#79](https://github.com/openshift/prometheus-alertmanager/pull/79)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/0051413cfd4c248eddbe4386d001e2563d3911d9...870ade52a6097bc55cec29c1a9cc028967c5d23c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/3eeb33252714289a4e1ddf0a09ca645a1908b962)

* [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255)
* [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3ebd503f9ca1a13de0006c5556af54ad9b0a410d...3eeb33252714289a4e1ddf0a09ca645a1908b962)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c236fffeb5f61a3c9baa1ae96268759682b70d6c)

* [OCPBUGS-21635](https://issues.redhat.com/browse/OCPBUGS-21635): upgrade golang.org/x/net v0.17.0 [#133](https://github.com/openshift/node_exporter/pull/133)
* [Full changelog](https://github.com/openshift/node_exporter/compare/6d732ddb4f2bf7072ba72d0006622ac1d75b5b56...c236fffeb5f61a3c9baa1ae96268759682b70d6c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c5cc7a73705e4086759e2a36811b055b7716def4)

* [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include ingress's namespace in ingress without class metric [#35](https://github.com/openshift/route-controller-manager/pull/35)
* go.mod: remove replaces [#33](https://github.com/openshift/route-controller-manager/pull/33)
* [OCPBUGS-21823](https://issues.redhat.com/browse/OCPBUGS-21823): bump(k8s,openshift) to address CVE-2023-44487 [#32](https://github.com/openshift/route-controller-manager/pull/32)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/b1399340162be837615609c172bbee297ef478cb...c5cc7a73705e4086759e2a36811b055b7716def4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/fe887613d031435fb0c76eb397764ba68fe09014)

* add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220)
* [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/bbf914e4df0f60617b8480c1dc87f5f0cde1f82c...fe887613d031435fb0c76eb397764ba68fe09014)


### [telemeter](https://github.com/openshift/telemeter/tree/8f091e8e7ecd3052566bd9dd20eb6991abf762c5)

* [OCPBUGS-22744](https://issues.redhat.com/browse/OCPBUGS-22744): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#493](https://github.com/openshift/telemeter/pull/493)
* rhelemeter: Parse org and cn with regex [#492](https://github.com/openshift/telemeter/pull/492)
* rhelemeter: Validation of incoming metrics [#491](https://github.com/openshift/telemeter/pull/491)
* add `machine424` and `rexagod`  to OWNERS [#478](https://github.com/openshift/telemeter/pull/478)
* [Full changelog](https://github.com/openshift/telemeter/compare/69d6b3268130958f082d7039e5a4d185745896f6...8f091e8e7ecd3052566bd9dd20eb6991abf762c5)


### [tests](https://github.com/openshift/origin/tree/01db63c731f94404ab818cb98fc767fe919c79c1)

* "TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest" [#28372](https://github.com/openshift/origin/pull/28372)
* trt-1340: update run-upgrade to use ginkgorunsuiteoptions [#28380](https://github.com/openshift/origin/pull/28380)
* [TRT-1339](https://issues.redhat.com/browse/TRT-1339): Revert #28233 "ignore repeated TopologyAwareHintsDisabled events" [#28381](https://github.com/openshift/origin/pull/28381)
* trt-1344: remove msg assertion [#28379](https://github.com/openshift/origin/pull/28379)
* Add test which verifies every certificate has necessary annotations [#28305](https://github.com/openshift/origin/pull/28305)
* [OCPBUGS-19527](https://issues.redhat.com/browse/OCPBUGS-19527): retry Prometheus client creation [#28323](https://github.com/openshift/origin/pull/28323)
* [OCPBUGS-20479](https://issues.redhat.com/browse/OCPBUGS-20479): Add pod sandbox failures to e2e charts [#28366](https://github.com/openshift/origin/pull/28366)
* skip revisioned certificates in raw info [#28370](https://github.com/openshift/origin/pull/28370)
* [TRT-1340](https://issues.redhat.com/browse/TRT-1340): Increase cmd support for ExactMonitorTests and DisableMonitorTests [#28371](https://github.com/openshift/origin/pull/28371)
* [OCPBUGS-22703](https://issues.redhat.com/browse/OCPBUGS-22703): tolerate AWS edge nodes on monitor tests [#28363](https://github.com/openshift/origin/pull/28363)
* Revert "OCPBUGS-22413: Use Centos 8 Stream mysql image in tests" [#28367](https://github.com/openshift/origin/pull/28367)
* Skip FailedScheduling intervals when masters are in NodeUpdate [#28358](https://github.com/openshift/origin/pull/28358)
* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Use Centos 8 Stream mysql image in tests [#28357](https://github.com/openshift/origin/pull/28357)
* Allow the unknown alerts test to fail as it looks stable [#28345](https://github.com/openshift/origin/pull/28345)
* add hack/update-tls-ownership.sh [#28359](https://github.com/openshift/origin/pull/28359)
* Drop not-used pulledInvalidImages method [#28330](https://github.com/openshift/origin/pull/28330)
* start adding raw tls info [#28334](https://github.com/openshift/origin/pull/28334)
* Restore APIServer graceful shutdown windows [#28354](https://github.com/openshift/origin/pull/28354)
* Fix intervals mistakenly showing mass node NotReady [#28351](https://github.com/openshift/origin/pull/28351)
* Remove timelines command reprocessing intervals [#28348](https://github.com/openshift/origin/pull/28348)
* [OCPBUGS-22358](https://issues.redhat.com/browse/OCPBUGS-22358): fix: increase upper bounds for samples operator [#28353](https://github.com/openshift/origin/pull/28353)
* put back previous Interval Slice algorithm [#28344](https://github.com/openshift/origin/pull/28344)
* [OCPBUGS-22276](https://issues.redhat.com/browse/OCPBUGS-22276): Remove all docker.io images due to access denied [#28347](https://github.com/openshift/origin/pull/28347)
* Restore Node NotReady intervals [#28349](https://github.com/openshift/origin/pull/28349)
* trt-1320: update trt approvers [#28343](https://github.com/openshift/origin/pull/28343)
* Port remaining clusteroperator monitor intervals to structured [#28341](https://github.com/openshift/origin/pull/28341)
* Improvements and Additions to Alert Testing Stack [#28332](https://github.com/openshift/origin/pull/28332)
* Automated - Update synthetic test data [#28237](https://github.com/openshift/origin/pull/28237)
* prune the system CAs from proxy-ca in rawTLSInfo json [#28336](https://github.com/openshift/origin/pull/28336)
* add test tracking raw cert data [#28321](https://github.com/openshift/origin/pull/28321)
* [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Require http 1.1 or earlier when using curl [#28301](https://github.com/openshift/origin/pull/28301)
* Port Node and Pod State to Structured Intervals [#28299](https://github.com/openshift/origin/pull/28299)
* Extract the cluster operator name from Down/Degraded Alerts [#28331](https://github.com/openshift/origin/pull/28331)
* fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities [#28329](https://github.com/openshift/origin/pull/28329)
* [Full changelog](https://github.com/openshift/origin/compare/ffb7a7ad4f12b18bb4b46ee72e783721f74970e8...01db63c731f94404ab818cb98fc767fe919c79c1)


### [thanos](https://github.com/openshift/thanos/tree/66161ad4e03e5593f5a3a33aaaffbcd41555d62a)

* [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131)
* Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129)
* [Full changelog](https://github.com/openshift/thanos/compare/7ef6dd0e4f901beb351f7888bc5125093c6cf698...66161ad4e03e5593f5a3a33aaaffbcd41555d62a)