2025b-v1.36.0

What's Changed

• RHAIENG-540, RHAIENG-580: add dnf upgrade to base images to mitigate fixable vulnerabilities by @jiridanek in #1909
• NO-JIRA: fix notify-team-to-review-pr.yml by using on: pull_request_target: to resolve 403 error by @jiridanek in #1914
• NO-JIRA: bump actions/checkout to version 5 across workflows by @jiridanek in #1917
• chore(ci): add concurrency control to update-commit-latest-env workflow by @atheo89 in #1910
• RHAIENG-540: Bump mongocli to 2.0.4 across all Dockerfiles by @atheo89 in #1970
• #1595: chore: pin micropipenv and uv versions in Dockerfile pip install commands for reproducible builds by @jiridanek in #1998
• RHAIENG-406: tests(manual): add detailed documentation for testing Elyra notebook runtime images in RHOAI by @jiridanek in #1997
• tekton: factor out pipelines to use pipelineRef with singlearch-push-pipeline in the -push.yaml tekton files by @jiridanek in #2004
• RHAIENG-332: (feat): update LLMCompressor image for 3.12 and ImageStream by @atheo89 in #1972
• RHAIENG-540: bump Jupyter Core to 5.8.1 Across All Runtime Images by @dibryant in #2000
• RHOAIENG-27434: create ROCm Tensorflow Python 3.12 Image by @dibryant in #1259
• NO-JIRA: comment out even more pytorch-llmcompressor entries in kustomization.yaml because we're not ready to release it yet by @jiridanek in #2079
• NO-JIRA: Add missing jupyter config to Python 3.12 images by @daniellutz in #2080
• RHAIENG-568: remove unused cuda-nvprof environment variables from Dockerfiles by @jiridanek in #2078
• NO-JIRA: fix update-commit-latest-env.py to work with multiarch manifests by @jiridanek in #2107
• RHAIENG-444: Add tekton pipeline files for the new PyTorch LLM Compressor image by @atheo89 in #1973
• NO-JIRA: sort environment variables alphabetically in update-commit-latest-env.py by @jiridanek in #2109
• NO-JIRA: initial stab at removing Workbenches 2025a from the codebase by @jiridanek in #2114
• NO-JIRA: update pr-merge-image-delete workflow to remove Python 3.11 images and add 3.12 versions by @jiridanek in #2143
• RHAIENG-304: add uv pyproject.tomls for multiple notebooks and runtimes across Jupyter, RStudio, and VSCode by @jiridanek in #2145
• NO-JIRA: fix(ci): escape special characters in tabular data printouts by @jiridanek in #2177
• #2166: chore(typofix): update Dockerfile to use CUDA cudnn9 and correct documentation link by @jiridanek in #2176
• #2178: fix(ci): add missing cri-tools dependency in build-notebooks workflow by @jiridanek in #2179
• #2178: fix(ci): add dependency versions pins in build-notebooks workflow by @jiridanek in #2183
• Issue #2153, #2171: fix(pylock): remove misguided requires-dist = [] from rocm tensorflow images by @jiridanek in #2184
• NO-JIRA: resume testing of cuda-based rstudio images in GitHub Actions by @jiridanek in #2174
• RHAIENG-304, RHAIENG-785: remove all requirements.txt and Pipfile.lock by @jiridanek in #2182
• Issue #2157: chore(Dockerfiles): replace yum with dnf consistently across UBI9 Dockerfiles by @jiridanek in #2185
• Re-enable llmCompressor for ODH availability by @atheo89 in #2195
• Issue #2201, RHAIENG-304, RHAIENG-785: we now don't have any **/Pipfile.lock files, adjust check for it by @jiridanek in #2200
• NO-JIRA: bump default Python version in refresh-pipfilelock-files Makefile task from 3.11 to 3.12 by @jiridanek in #2175
• Create cuda and rocm base images by @atheo89 in #2180
• RHAIENG-304, RHAIENG-786: chore(ci): update Trivy scan to handle pyproject.toml using uv lock by @jiridanek in #2217
• RHAIENG-304, RHAIENG-787: chore(scripts): update sync-requirements-txt.sh to support pylock.toml generation using uv pip compile instead of Pipfile.lock by @jiridanek in #2220
• NO-JIRA: fix(scripts): skip non-file Dockerfiles and those in base-images/ directory in dockerfile_fragments.py by @jiridanek in #2221
• RHAIENG-304, RHAIENG-786: chore(ci): don't activate the uv env in security.yaml, turns out rabbit was on the right track by @jiridanek in #2223
• Issue #2199: chore(ci): change build-notebooks workflow to use activation key for Red Hat subscription registration instead of storing entitlement certificates by @jiridanek in #2224
• NO-JIRA: chore(ci): introduce a make test target by @jiridanek in #2228
• RHAIENG-304: tests(pytests): update the pyproject.toml integrity test since we no longer have Pipfiles anymore by @jiridanek in #2229
• RHAIENG-304: tests(pytests): add check for the pylock.toml integrity with respect to pyproject.toml by @jiridanek in #2233
• Move cuda repos and license file to a common directory and use ARGs and call it on the Dockerfile by @atheo89 in #2236
• RHAIENG-304, RHAIENG-787: ci(gha): relock from the ground up and force --upgrades, uv by default prefers to change as little as possible to satisfy current pyproject.toml by @jiridanek in #2238
• RHAIENG-581: filter out and remove from the release notes the automated PR titles generated by Konflux by @jiridanek in #2244
• #1924: skip expensive GHA for updates related to Konflux branches by @jiridanek in #2243
• RHAIENG-308: tests(pytests): add check for the imagestream manifests integrity with respect to pylock.toml by @jiridanek in #2235
• update SA for components by @MohammadiIram in #2257
• NO-JIRA: only show crio debug info if we actually managed to install crio packages by @jiridanek in #2256
• NO-JIRA: sudo apt-get install -y --allow-downgrades "cri-o=${CRIO_VERSION}.*" by @jiridanek in #2258
• RHAIENG-308, #2242: tests(make): enforce version parity validation between imagest by @jiridanek in #2254
• A sync between stable-2.x and main by @atheo89 in #2255
• Make cuda base images available for amd and arm archs by @atheo89 in #2263
• Issue #2081: Use install -D for robust file copying by @pramodtoraskar in #2112
• Add multiarch-push-pipeline config by @atheo89 in #2270
• RHAIENG-308, #2242: tests(make): enforce version parity validation between imagestreams by @jiridanek in #2260
• Add missing matrix for multiplatform builds by @atheo89 in #2273
• Replace yum with dnf to have better consistency among the Dockerfiles by @atheo89 in #2272
• Fix build matrix by @atheo89 in #2274
• Update odh-base-image-cuda-py312-ubi9-push.yaml by @atheo89 in #2275
• RHAIENG-308, #2242: tests(make): add pyproject version alignment test and handle allowed specifier divergences by @jiridanek in #2276
• RHAIENG-308, #2242: tests(make): handle rstudio in a rhds-compatible manner by @jiridanek in #2277
• RHAIENG-816: fix(jupyter/rocm/tensorflow/ubi9-python-3.12): image has outdated jupyterlab and jupyterlab-git packages by @jiridanek in #2278
• Refactor Dockerfiles to Use Config Files via ARG by @atheo89 in #2271
• RHOAIENG-5114: feat(ppc64le): skip the latex installation to allow to build jupyter-minimal workbench images for Power by @Shafi-Hussain in #1966
• RHOAIENG-31406: enable Runtime Datascience Images for IBM Z[s390x] (Python 3.12) by @Nash-123 in #1513
• feat(ppc64le): build runtime datascience image on ppc64le by @AaruniAggarwal in #2215
• Add logic on the build_image function to filter out the comments by @atheo89 in #2321
• RHOAIENG-30943: feat(ppc64le): codeserver workbench image build on power by @jiridanek in #2317
• RHOAIENG-33169: remove MSSQL Client installation and related configurations from Dockerfiles by @jiridanek in #2324
• feat(ppc64le): remove unnecessary build dependency packages and a stray pip install ml-dtypes by @AaruniAggarwal in #2330
• NO-JIRA: add TARGETARCH argument on top of various CUDA Dockerfiles for multi-architecture support by @jiridanek in #2334
• RHAIENG-308: ref(tests): refactor tests to replace pytest.fail with assertions for clearer error reporting in test_main.py by @jiridanek in #2342
• RHAIENG-726: add ROCm-based TensorFlow and pipeline runtime images to manifests by @jiridanek in #2346
• RHAIENG-332: update dependencies for pytorch+llmcompressor/ubi9-python-3.12 and align on numpy by @jiridanek in #2343
• #1994: remove unnecessary ROCm dependencies across Dockerfiles by @jiridanek in #1995
• RHOAIENG-31964: Add trash-cleanup 0.1.0 by @ada333 in #2357
• RHAIENG-608: update manifest files for 2025b by @atheo89 in #2385
• RHAIENG-661: Edit packages on jupyter-tensorflow-rocm-py312 imagestream by @daniellutz in #2355
• RHOAIENG-33414: replace dnf with rpm2cpio in codeserver/ubi9-python-3.12 to handle unsigned RPM errors in Konflux by @jiridanek in #2356
• speed up checkout when fetching code-server sources using shallow cloning by @jiridanek in #2405
• fix(codeserver): the builder rpm stage also needs to have ubi9.repo file installed if missing on aipcc by @jiridanek in #2408
• fix(codeserver/Dockerfile): with the AIPCC ppc64le base, installing patch explicitly is required, amd64 and arm64 bases already seem to have it by @jiridanek in #2410
• fix(codeserver): seems to need krb5-devel by @jiridanek in #2411
• NO-JIRA: fix(gha): add concurrency group to GitHub Actions workflows for PR builds by @jiridanek in #2412
• fix(tests): update manifest path determination logic for test cases after 2025b reorg by @jiridanek in #2415
• NO-JIRA: fix(codeserver): build needs rsync at some point which is absent from aipcc bases by @jiridanek in #2413
• chore(manifests): update package versions in Jupyter TrustyAI notebook imagestream to align with the lock file for the image by @jiridanek in #2416
• chore(deps): update package version of Codeflare-SDK (0.31) and lock dependencies by @jiridanek in #2418
• NO-JIRA: fix(codeserver): build needs envsubst at some point which is absent from aipcc bases by @jiridanek in #2419
• RHOAIENG-33887: Update Elyra to latest version (4.2.4) by @jesuino in #2430
• RHAIENG-987: remove skopeo and OpenShift client installation from RStudio Dockerfiles to address CVE-2025-4674 by @jiridanek in #2384
• chore(gha): combine multiple apt-get remove patterns into a single command in GitHub Actions workflow by @jiridanek in #2407
• s390x(jupyter/datascience): make image buildable on s390x by @jiridanek in #2432
• A sync between stable-2.x and main by @jiridanek in #2265
• (chore) Building Excellence Together: Enhanced Contribution Workflows and AI Agent Integration by @atheo89 in #2437
• Add cuda folder under rhel repo as removed after the restructuring of the base odh-images by @atheo89 in #2440
• RHAIENG-670: feat(pyproject): add feast~=0.53.0 dependency across various runtimes and environments by @jiridanek in #2441
• RHAIENG-722: bump boto3, kfp, requests, and urllib3 across all Pipfiles to allow for CVE update to urllib3 2.5.0 by @jiridanek in #1875
• #2222: tidyup(pyproject.toml): standardize quote style for dependencies in pyproject.toml files by @jiridanek in #2448
• Remove revision from output-image opt by @atheo89 in #2458
• Revert changes on output-image by @atheo89 in #2459
• RHAIENG-286: Add base images for CUDA 12.8 and Tekton files for ROCm 6.4 by @daniellutz in #2455
• NO-JIRA: fix(dockerfiles): allow skipping some packages if full upgrade cannot be performed by @jiridanek in #2462
• Add a gha that updates and commits the image tags automatically by @atheo89 in #2461
• RHAIENG-1057: (chore): open PR while image tag update by @atheo89 in #2464
• chore: update Tekton Image tag 2025a-v1.35 → 2025b-v1.36 by @github-actions[bot] in #2468
• ppc64le: implement datascience jupyter image build on ppc64le (#2406) by @jiridanek in #2460
• fixup, failing ruff pre-commit check in gen_gha_matrix_jobs.py by @jiridanek in #2487
• #2102: konflux(params.env): use the release tag in odh-io/notebooks params-latest.env so that we avoid dealing with the constant Konflux nudges by @jiridanek in #2103
• NO-JIRA: remove the empty lines introduced in PR #1730 in params-latest.env by @jiridanek in #2489
• Remove single quotes from revision by @atheo89 in #2490
• RHAIENG-406: tests(manual): add tensorflow-test.ipynb by @jiridanek in #1975
• ppc64le(runtime/datascience): fix pyarrow installation (brought in by feast) by adding a dedicated builder stage by @AaruniAggarwal in #2488
• fix .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ubi9-push pipeline's service account name to match the component by @atheo89 in #2492
• NO-JIRA: tests(fix): remove unused tensorboard import (fixes #2077) by @pramodtoraskar in #2111
• chore: bump codeflare-sdk to v0.31.1 across all pyproject.toml files by @jiridanek in #2493
• RHAIENG-1083: fix(codeserver): build libxkbfile with meson instead of autotools by @Shafi-Hussain in #2475
• Fix path on the build-arg-file field by @atheo89 in #2496
• fix(codeserver): build pyarrow from source for ppc64le by @Shafi-Hussain in #2495
• refactor(tests/scripts): modularize _get_notebook_id for testability and add pytest coverage for manifest file validation by @jiridanek in #2497
• ppc64le(jupyter/trustyai): create multiarch build for ppc64le by @Shafi-Hussain in #2465
• Extend the update-tags GitHub Action to also update the params-latest.env file. by @atheo89 in #2500
• RHAIENG-287: chore(manifests): undo the changes from #1518 since we don't have additional/ manifests any more by @jiridanek in #2499
• chore(dockerignore): update .dockerignore to include common exclusions for IDEs, caches, logs, OS-specific files, and Docker-related patterns by @jiridanek in #2501
• s390x(runtime-datascience): fix pyarrow build in Dockerfile.cpu by @Nash-123 in #2503
• Replace supervisord and fcgi and supervisord with httpd by @atheo89 in #2498
• RHAIENG-1161: test(dockerfile): add test for probe logic and notebook args in codeserver by @jiridanek in #2504
• RHAIENG-974: enable missing module mod_mime.so by @atheo89 in #2508
• RHOAIENG-34309: fix(jupyterlab-extension): remove gio command call and manually delete files by @jesuino in #2510
• #1271: fix(scripts): posix noncompliance in nginx/root/usr/share/container-scripts/nginx/common.sh and duplicates of thereof by @satnam72 in #1628
• RHAIENG-1186: chore(dockerfile): bump code-server version to v4.104.0 in UBI9 Python 3.12 image by @jiridanek in #2512
• RHAIENG-1023: fix(rstudio): update the esbuild inside of rstudio's installation as it was done in the poc by @jiridanek in #2513
• RHAIENG-608: Update all runtimes imagestream names with new naming format by @dibryant in #2505
• Fix typos by @atheo89 in #2517
• Issue #1789: chore(repo): set up lfs for vscode extensions vendored into the repo by @jiridanek in #2516
• RHAIENG-286: 2025b images package upgrade by @daniellutz in #2414
• RHAIENG-1193: codeserver(repo): update vscode extensions for 2025b release from Open VSX Registry by @jiridanek in #2518
• Make codeserver multiarch supported and change the vm by @atheo89 in #2528
• Issue #2521: fix(scripts/buildinputs): fix build input detection to deal with mounts by @jiridanek in #2522
• Add ppc64le changes back which are overwritten by some commits by @jiridanek in #2531
• Standardize string quotes in pyproject.toml dependencies across multiple projects by @jiridanek in #2532
• Use m2xlarge/arm64 vm to build that image by @atheo89 in #2533
• NO-JIRA: fix(ci): remove the microsoft deb repo to install genuine upstream kubelet by @jiridanek in #2537
• NO-JIRA: chore(ci): extract k8s setup into a composite action by @jiridanek in #2538
• NO-JIRA: upd(ci): use latest k8s 1.34 and cri-o 1.34 by @jiridanek in #2540
• Add tekton pipelines for rstudio py312 by @atheo89 in #2543
• RHAIENG-1277: fix(ci): restrict the protobuf unpin with "protobuf==6.31.1" and monkypatch methods missing in 6.x by @jiridanek in #2542
• RHAIENG-287: fix(manifests): replace commonLabels with labels in kustomization.yaml to avoid a warning by @jiridanek in #2545
• RHAIENG-287: fix(Dockerfiles): split up an ENV block to avoid hadolint DL3044 error by @jiridanek in #2546
• RHAIENG-1284: fix(Dockerfiles) libcrypt.so.1 not found in runtime-datascience-rocm-tensorflow-ubi9-python-3.12 image by @jiridanek in #2544
• RHAIENG-347: fix(manifests): consistency in accelerator info display on workbenches by @jiridanek in #2536
• RHAIENG-1284: fix(Dockerfiles) libcrypt.so.1 not found in runtime-datascience-cuda-pytorch-llmcompressor-ubi9-python-3.12 image by @jiridanek in #2549

New Contributors

• @MohammadiIram made their first contribution in #2257
• @pramodtoraskar made their first contribution in #2112
• @Shafi-Hussain made their first contribution in #1966
• @ada333 made their first contribution in #2357

Full Changelog: v1.35.0...v1.36.0