build(deps): bump the go_modules group across 1 directory with 3 updates

[dependabot]

Bumps the go_modules group with 1 update in the / directory: golang.org/x/net.

Updates github.com/NVIDIA/nvidia-container-toolkit from 1.15.0 to 1.17.8

Release notes

Sourced from github.com/NVIDIA/nvidia-container-toolkit's releases.

v1.17.8

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container-tools and libnvidia-container1 v1.17.8
• nvidia-container-toolkit and nvidia-container-toolkit-base v1.17.8

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

• Updated the ordering of Mounts in CDI to have a deterministic output. This makes testing more consistent.
• Added NVIDIA_CTK_DEBUG envvar to hooks as a placeholder for enabling debugging output.

Changes in libnvidia-container

• Fixed bug in setting default for --cuda-compat-mode flag. This caused failures in use cases invoking the nvidia-container-cli directly or when the v1.17.7 version of the nvidia-container-cli was used with an older nvidia-container-runtime-hook.
• Added additional logging to the nvidia-container-cli.
• Fixed variable initialisation when updating the ldcache. This caused failures on Arch linux or other platforms where the nvidia-container-cli was built from source.

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.17.7...v1.17.8

v1.17.7

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.17.7
• nvidia-container-toolkit 1.17.7

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

• Fix mode detection on Thor-based systems. This correctly resolves auto mode to csv.
• Fix resolution of libs in LDCache on ARM. This fixes CDI spec generation on ARM-based systems using NVML.
• Added a nvidia-container-runtime-modes.legacy.cuda-compat-mode option to provide finer control of how CUDA Forward Compatibility is handled. The default value (ldconfig) fixes CUDA Compatibility Support in cases where only the NVIDIA Container Runtime Hook is used (e.g. the Docker --gpus command line flag).
• Run update-ldcache hook in isolated namespaces.

Changes in the Toolkit Container

• Bump CUDA base image version to 12.9.0

Changes in libnvidia-container

• Add --cuda-compat-mode flag to the nvidia-container-cli configure command.

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.17.6...v1.17.7

v1.17.6

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.17.6
• nvidia-container-toolkit 1.17.6

... (truncated)

Changelog

Sourced from github.com/NVIDIA/nvidia-container-toolkit's changelog.

v1.17.8

• Updated the ordering of Mounts in CDI to have a deterministic output. This makes testing more consistent.
• Added NVIDIA_CTK_DEBUG envvar to hooks.

Changes in libnvidia-container

• Fixed bug in setting default for --cuda-compat-mode flag. This caused failures in use cases invoking the nvidia-container-cli directly.
• Added additional logging to the nvidia-container-cli.
• Fixed variable initialisation when updating the ldcache. This caused failures on Arch linux or other platforms where the nvidia-container-cli was built from source.

v1.17.7

• Fix mode detection on Thor-based systems. This correctly resolves auto mode to csv.
• Fix resolution of libs in LDCache on ARM. This fixes CDI spec generation on ARM-based systems using NVML.
• Run update-ldcache hook in isolated namespaces.

Changes in the Toolkit Container

• Bump CUDA base image version to 12.9.0

Changes in libnvidia-container

• Add --cuda-compat-mode flag to the nvidia-container-cli configure command.

v1.17.6

Changes in the Toolkit Container

• Allow container runtime executable path to be specified when configuring containerd.
• Bump CUDA base image version to 12.8.1

Changes in libnvidia-container

• Skip files when user has insufficient permissions. This prevents errors when discovering IPC sockets when the nvidia-container-cli is run as a non-root user.
• Fix building with Go 1.24
• Fix some typos in text.

v1.17.5

• Allow the enabled-cuda-compat hook to be skipped when generating CDI specifications. This improves compatibility with older NVIDIA Container Toolkit installations. The hook is explicitly ignored for management CDI specifications.
• Add IMEX binaries to CDI discovery. This includes the IMEX Daemon and IMEX Control binaries in containers.
• Fix bug that may overwrite docker feature flags when configuring CDI from the nvidia-ctk runtime configure command.
• Remove the unused Set() function from engine config API.
• Add an EnableCDI() method to engine config API.
• Add an ignore-imex-channel-requests feature flag. This ensures that the NVIDIA Container Runtime can be configured to ignore IMEX channel requests when these should be managed by another component.
• Update the update-ldcache hook to run the host ldconfig from a MEMFD.
• Add support for CUDA Forward Compatibility (removed by default in v1.17.4) using a dedicated enable-cuda-compat hook. This can be disabled using a disable-cuda-compat-lib-hook feature flag.
• Disable nvsandboxutils in the nvcdi API. This prevents a segmentation violation with NVIDIA GPU Drivers from the 565 branch.
• Fix a bug where cdi mode would not work with the --gpus flag even if the NVIDIA Container Runtime was used.

... (truncated)

Commits

• f202b80 Merge pull request #1117 from elezar/fix-unit-tests
• 54af66f [no-relnotes] Fix missed unit tests
• d6f6107 Merge commit from fork
• 007faf8 Add envvar to control debug logging in CDI hooks
• d7f498a Merge pull request #1115 from elezar/bump-release-v1.17.8
• e34b8ce Update CHANGELOG for v1.17.8 release
• 76bb848 Bump version for v1.17.8 release
• 02000c0 Merge pull request #1114 from elezar/bump-libnvidia-container-6eda4d7
• b3b6b82 Bump third_party/libnvidia-container from caf057b to 6eda4d7
• 1aed5f4 Merge pull request #1104 from ArangoGutierrez/bp/1102
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.35.0 to 0.38.0

Commits

• e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
• ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
• 1f1fa29 publicsuffix: regenerate table
• 1215081 http2: improve error when server sends HTTP/1
• 312450e html: ensure <search> tag closes <p> and update tests
• 09731f9 http2: improve handling of lost PING in Server
• 55989e2 http2/h2c: use ResponseController for hijacking connections
• 2914f46 websocket: re-recommend gorilla/websocket
• 99b3ae0 go.mod: update golang.org/x dependencies
• 85d1d54 go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.17.0 to 0.27.0

Commits

• 681b4d8 jws: split token into fixed number of parts
• 3f78298 all: upgrade go directive to at least 1.23.0 [generated]
• 109dabf endpoints: add links/provider for Discord
• ac571fa oauth2: fix docs for Config.DeviceAuth
• 314ee5b endpoints: add patreon endpoint
• b9c813b google: add warning about externally-provided credentials
• 49a531d all: make method and struct comments match the names
• 22134a4 README: don't recommend go get
• 3e64809 x/oauth2: add Token.ExpiresIn
• 16a9973 jwt: rename example to avoid vet error
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.