Ruigao/security update jan 2026#151

Open

hippogr wants to merge 42 commits intodevfrom

ruigao/security_update_jan_2026

Commits on Feb 10, 2026

update node.js apckages for alert-handler and job-status-change-notification & also update kube-scheduler and model-proxy
Rui Gao
committed
update node.js package for rest-server
Rui Gao
committed
update node.js package for database controller
Rui Gao
committed
update kube-scheduler version to 1.33.7
Rui Gao
committed
use homebrew gosu to replace the public build
Rui Gao
committed
update golang toolchain to 1.24.11 for frameworkcontroller, hivedscheduler and watchdog
Rui Gao
committed
update model-proxy go version and reverseproxy binary version
Rui Gao
committed
update nerdctl version for job exporter
Rui Gao
committed
update rdma device plugin with updated package and Go toolchain version
Rui Gao
committed
reove the patch and move the update toolchain logic to docker file
Rui Gao
committed
remove the host device plugin patch and update go package and toolchain in dockerfile for k8s host device plugin
Rui Gao
committed
update nvidia device plugin dockerfile to use homebrew version
Rui Gao
committed
add TARGETOS for multiple platforms
Rui Gao
committed
update docker pull policy for device-plugin
Rui Gao
committed
update pip out of venv
Rui Gao
committed
update nvidia plugin base image version
Rui Gao
committed
update go package version for rdma device plugin
Rui Gao
committed
update docker version for webportal-dind
Rui Gao
committed
update node.js package for rest-server
Rui Gao
committed
update hivedscheduler and webportal-dind to fix security issues reported by Azure
Rui Gao
committed
update runc version to latest for webportal-dind
Rui Gao
committed
update reverseproxy to use homebrew version to update GO packages
Rui Gao
committed
use own build runc to replace the official build
Rui Gao
committed
update Nginx version to 1.26.3 from 1.26.0
Rui Gao
committed
update buildx to 0.31.1 for webportal-dind
Rui Gao
committed
remove unused binaries for webportal-dind
Rui Gao
committed
update lodash to 4.17.23 for alert-handler and job-status-change-notification
Rui Gao
committed
update lodash version to 4.17.23 for database-controller
Rui Gao
committed
update lodash to 4.17.23 for rest server
Rui Gao
committed
update go toolchain version to 1.24.12 for frameworkcontroller
Rui Gao
committed
update go version to 1.24.12 for hivedscheduler
Rui Gao
committed
update go version for device plugin
Rui Gao
committed
update go version for model-proxy
Rui Gao
committed
update go version for watchdog
Rui Gao
committed
use official nginx to replace the fixed own-build version for pylon
Rui Gao
committed

Commits on Feb 24, 2026

update go version to 1.24.13 for frameworkcontroller
Rui Gao
committed
update GO version for k8s-host-device-plugin and k8s-rdma-shared-dev-plugin
Rui Gao
committed
update go version for hivedscheduler
Rui Gao
committed
update go version to 1.25.7 for model-proxy
Rui Gao
committed
update go version to 1.24.13 for watchdog
Rui Gao
committed

Commits on Mar 2, 2026

update golang version to 1.24.13 for device plugin
Rui Gao
committed
update go package for reverseproxy
Rui Gao
committed