chore(deps): update dependency nvidia/nvidia-container-toolkit to v1.18.1

[renovate]

This PR contains the following updates:

Package	Update	Change
NVIDIA/nvidia-container-toolkit	minor	1.17.8 → 1.18.1

---

Release Notes

NVIDIA/nvidia-container-toolkit (NVIDIA/nvidia-container-toolkit)

v1.18.1

Compare Source

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.18.1
• nvidia-container-toolkit 1.18.1

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

• Fix update of ldcache for non-matching host and container distros
• Use enable-cuda-compat hook when ldcache does not exist
• Fix update of ldcache if container does not have an ld.so.conf file
• Switch to go 1.25 os.Root
• Filter already tracked directories from ldcache update
• Fix duplicate specs for jit-cdi mode
• Correct typo in nvsandboxutils feature flag
• Allow nvcdi FeatureFlags to be configured for jit-cdi mode
• Fix trigger of CDI refresh service
• Update rpm package to have 256bit digests
• Fix containerd drop-in config path
• Redirect log message to stderr in nvidia runtime wrapper script
• Fix handling of existing imports in containerd
• Don't read cdi generate mode from runtime mode
• Fix bug in create-dev-char-symlinks command

Changes in the Toolkit Container

• Bump nvidia/distroless/go to v3.2.1-dev in /deployments/container

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.18.0...v1.18.1

v1.18.0

Compare Source

• Fix bug in device selection in jit-cdi mode
• Make list of explicit driver libraries opt-in

Changes in the Toolkit Container

• Invoke the actual default low-level runtime in the nvidia-ctk wrapper script
• Remove default_runtime from cri-o config on cleanup
• Do not remove cri-o drop-in file on shutdown.

v1.17.9

Compare Source

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container-tools and libnvidia-container1 v1.17.9
• nvidia-container-toolkit and nvidia-container-toolkit-base v1.17.9

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

• Don't inject enable-cuda-compat hook in CSV mode
• Use securejoin to resolve /proc

Changes in the Toolkit Container

• Bump nvidia/cuda to 12.9.1 in /deployments/container

Changes in libnvidia-container

• Add clock_gettime to allowed syscalls
• Add libnvidia-gpucomp.so to the list of compute libs

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.17.8...v1.17.9

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.