[github.com/gardener/gardener:v1.152.2]

🐛 Bug Fixes

• [OPERATOR] The owner role assignment to the owner as project member is moved to PrepareFor(Create|Update) strategy methods because Canonicalize should not add or remove data. by @vpnachev [#16052]
• [OPERATOR] An issue has been fixed that caused a hibernated Shoot's status.hibernated field to be incorrectly set to false at the end of a successful migrate phase of control plane migration. This would then cause the restore phase to get stuck until an operator manually intervened to set the status.hibernated field back to true. by @plkokanov [#16036]
• [OPERATOR] With IstioTLSTermination feature gate, requests from established connections which use client certificate authentication are now rejected when their client certificate expires. by @oliver-goetz [#16057]

🏃 Others

• [OPERATOR] The gardener user is now recreated with its original UID/GID after a wipe-based in-place OS upgrade (where /etc is reset but /home survives), preventing /home/gardener and other files owned by the gardener user from becoming orphaned. by @acumino [#16068]
• [DEPENDENCY] The following dependencies have been updated:
• gardener/dashboard from 1.85.1 to 1.85.2. Release Notes by @petersutter [#16076]

Helm Charts

• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.152.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.152.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.152.2

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.152.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.152.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.152.2
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.152.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.152.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.152.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.152.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.152.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.152.2