Skip to content

[release-1.20] Update golang toolchain - #2024

Closed
github-actions[bot] wants to merge 25 commits into
release-1.20from
backport-2018-to-release-1.20
Closed

[release-1.20] Update golang toolchain#2024
github-actions[bot] wants to merge 25 commits into
release-1.20from
backport-2018-to-release-1.20

Conversation

@github-actions

Copy link
Copy Markdown

🤖 Automated backport of #2018 to release-1.20

⚠️ This PR has merge conflicts that need manual resolution.

Original PR: #2018
Original Author: @henry118

Cherry-picked commits (3):

  • a1f8e3a Update minimum go toolchain to 1.26
  • 234c295 Fix linting issues after golang update
  • 7c30ede Bump CI golang version to 1.27

Next Steps:

  1. Review the conflicts in the "Files changed" tab
  2. Check out this branch locally: git fetch origin backport-2018-to-release-1.20 && git checkout backport-2018-to-release-1.20
  3. Resolve conflicts manually
  4. Push the resolution: git push --force-with-lease origin backport-2018-to-release-1.20

Instructions for resolving conflicts
git fetch origin backport-2018-to-release-1.20
git checkout backport-2018-to-release-1.20
# Resolve conflicts in your editor
git add .
git commit
git push --force-with-lease origin backport-2018-to-release-1.20

cdesiniotis and others added 9 commits August 13, 2026 09:26
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
[no-relnote] update maintenance branch to release-1.20
Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>
[no-relnote] fix typo in OCI label for base image
Avoid notice-file churn when dependency versions change without corresponding license changes.

Signed-off-by: Aryan Gorwade <agorwade@nvidia.com>
  - use trap to ensure temp key file cleanup on exit
  - use printf instead of echo for safer secret handling

Signed-off-by: luojiyin <luojiyin@hotmail.com>
…om-tpn

[ci] remove go-module versions from the rendered TPN doc and regenerate TPN doc
Signed-off-by: Henry Wang <henrwang@nvidia.com>
@copy-pr-bot

copy-pr-bot Bot commented Aug 24, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@henry118 henry118 self-assigned this Aug 28, 2026
@henry118
henry118 force-pushed the backport-2018-to-release-1.20 branch from f2322bf to 3121efc Compare August 31, 2026 20:44
vyncint and others added 13 commits August 31, 2026 13:51
The root transformer used a plain string prefix comparison to determine
whether a path is contained in the (from) root. A path that shares a
textual prefix with the root but lies outside it was therefore treated as
being under the root and rewritten, corrupting the path.

For a root of /run/nvidia/driver and a target root of /host:

	/run/nvidia/driver-backup/lib.so -> /host/-backup/lib.so
	/run/nvidia/driverfoo            -> /host/foo

Both paths are outside the root and must be left unchanged.

The prefix match is now required to end at a path component boundary. A
path equal to the root, and a root with a trailing separator (including a
root of /), are handled as before.

This applies to both the host and container root transformers since they
share transformPath, and is reachable from
'nvidia-ctk cdi transform root --from/--to' as well as from the driver
root transform applied during CDI spec generation.

Signed-off-by: Vyncint Ng <115854244+vyncint@users.noreply.github.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Bumps nvidia/distroless/go from v4.0.9 to v4.1.1.

---
updated-dependencies:
- dependency-name: nvidia/distroless/go
  dependency-version: v4.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Branch protection requires verified commit signatures, but commits made
via `git push` from a workflow are never signed. Re-create each new
commit through the Git Data API instead: GitHub automatically signs
commits created this way, so the resulting chain shows as "Verified"
without needing to manage a GPG/SSH key for the bot.

Signed-off-by: Henry Wang <henrwang@nvidia.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Signed-off-by: Seungmin Kim <8457324+ehfd@users.noreply.github.com>
Signed-off-by: Seungmin Kim <8457324+ehfd@users.noreply.github.com>
Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Signed-off-by: Seungmin Kim <8457324+ehfd@users.noreply.github.com>
Signed-off-by: Arjun <agadiyar@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
Signed-off-by: Henry Wang <henrwang@nvidia.com>
@henry118
henry118 force-pushed the backport-2018-to-release-1.20 branch from 3121efc to b86cbdb Compare August 31, 2026 20:52
@henry118

Copy link
Copy Markdown
Member

let me backport this manually

@henry118 henry118 closed this Aug 31, 2026
@henry118
henry118 deleted the backport-2018-to-release-1.20 branch August 31, 2026 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants