Update Dockerfile and Tekton to use requirements.<flavor>.txt

Align with the renamed requirements file (requirements.cpu.txt):
- Dockerfile.cpu: COPY requirements.${PYLOCK_FLAVOR}.txt as requirements.txt
  (in both whl-cache and codeserver stages)
- Dockerfile.vath: same COPY update
- Tekton pull-request.yaml: requirements_files: ["requirements.cpu.txt"]
- Tekton push.yaml: same update

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ysok

.tekton/odh-workbench-codeserver-datascience-cpu-py312-ubi9-pull-request.yaml

@@ -66,7 +66,7 @@ spec:
       type: pip
       binary:
         arch: "x86_64,aarch64,ppc64le"
-      requirements_files: ["requirements.txt"]
+      requirements_files: ["requirements.cpu.txt"]
     - path: codeserver/ubi9-python-3.12/prefetch-input/code-server/lib/vscode/.vscode/extensions/vscode-selfhost-import-aid
       type: npm
     - path: codeserver/ubi9-python-3.12/prefetch-input/code-server/lib/vscode/.vscode/extensions/vscode-selfhost-test-provider

.tekton/odh-workbench-codeserver-datascience-cpu-py312-ubi9-push.yaml

@@ -56,7 +56,7 @@ spec:
       type: pip
       binary:
         arch: "x86_64,aarch64,ppc64le"
-      requirements_files: ["requirements.txt"]
+      requirements_files: ["requirements.cpu.txt"]
     - path: codeserver/ubi9-python-3.12/prefetch-input/code-server/lib/vscode/.vscode/extensions/vscode-selfhost-import-aid
       type: npm
     - path: codeserver/ubi9-python-3.12/prefetch-input/code-server/lib/vscode/.vscode/extensions/vscode-selfhost-test-provider

codeserver/ubi9-python-3.12/Dockerfile.cpu

@@ -204,9 +204,9 @@ COPY ${CODESERVER_SOURCE_CODE}/pylock.toml ./
 # copy requirements and scripts
 COPY ${CODESERVER_SOURCE_CODE}/uv.lock.d/pylock.${PYLOCK_FLAVOR}.toml ./pylock.toml
 
-# [HERMETIC] requirements.txt is generated by cachi2 from pyproject.toml with pinned hashes.
+# [HERMETIC] requirements.<flavor>.txt is generated by create-requirements-lockfile.sh with pinned hashes.
 # Previously we used pylock.toml directly; now cachi2 needs requirements.txt format.
-COPY ${CODESERVER_SOURCE_CODE}/requirements.txt ./
+COPY ${CODESERVER_SOURCE_CODE}/requirements.${PYLOCK_FLAVOR}.txt ./requirements.txt
 COPY ${CODESERVER_SOURCE_CODE}/devel_env_setup.sh ./
 
 # [HERMETIC] Install uv + install all Python packages from cachi2 pip cache.
@@ -484,9 +484,9 @@ ENV PYTHONPATH=/opt/app-root/bin/python3
 # Install useful packages from pylock file
 COPY ${CODESERVER_SOURCE_CODE}/uv.lock.d/pylock.${PYLOCK_FLAVOR}.toml ./pylock.toml
 
-# [HERMETIC] Install Python packages from cachi2 pip cache (requirements.txt format).
+# [HERMETIC] Install Python packages from cachi2 pip cache (requirements.<flavor>.txt format).
 # Previously used pylock.toml; cachi2 prefetch generates requirements.txt with hashes.
-COPY ${CODESERVER_SOURCE_CODE}/requirements.txt ./
+COPY ${CODESERVER_SOURCE_CODE}/requirements.${PYLOCK_FLAVOR}.txt ./requirements.txt
 
 # Wait for whl-cache stage (builds/caches Python wheels).
 COPY --from=whl-cache /tmp/control /dev/null

codeserver/ubi9-python-3.12/Dockerfile.vath

@@ -49,9 +49,9 @@ COPY ${CODESERVER_SOURCE_CODE}/pylock.toml ./
 # copy requirements and scripts
 COPY ${CODESERVER_SOURCE_CODE}/uv.lock.d/pylock.${PYLOCK_FLAVOR}.toml ./pylock.toml
 
-# [HERMETIC] requirements.txt is generated by cachi2 from pyproject.toml with pinned hashes.
+# [HERMETIC] requirements.<flavor>.txt is generated by create-requirements-lockfile.sh with pinned hashes.
 # Previously we used pylock.toml directly; now cachi2 needs requirements.txt format.
-COPY ${CODESERVER_SOURCE_CODE}/requirements.txt ./
+COPY ${CODESERVER_SOURCE_CODE}/requirements.${PYLOCK_FLAVOR}.txt ./requirements.txt
 COPY ${CODESERVER_SOURCE_CODE}/devel_env_setup.sh ./
 
 # [HERMETIC] Install uv + install all Python packages (--network=none).

codeserver/ubi9-python-3.12/pylock.toml

@@ -6,11 +6,6 @@
 #   - Upgraded feast ~=0.59.0 (pinned for RHOAI 3.4 compatibility)
 #   - Excluded py-spy on ppc64le (maturin can't fetch crates.io in --network=none)
 #   - Added urllib3>=2.6.0 override (CVE-2025-66418)
-#   - Upgraded feast ~=0.59.0 (pinned for RHOAI 3.4 compatibility)
-#   - Excluded py-spy on ppc64le (maturin can't fetch crates.io in --network=none)
-#   - Expanded environments[] to list each arch separately (needed for per-arch resolution)
-#   - Added numpy version cap override (scikit-learn build-system.requires: numpy<2.4.0)
-#   - Added onnx version pin to 1.20.0 (RHOAI provides pre-built wheels for all arches)
 #   - Added local path source for the meta-package
 [project]
 name = "notebooks"