Merge remote-tracking branch 'nm-fork/main' into upstream-v0.8.5

Author: heyselbi

.github/workflows/snyk-security-scan.yml

@@ -0,0 +1,24 @@
+name: snyk security scan
+run-name: SNYK security scan for '${{ github.ref }}'
+
+on: [push]
+
+env:
+  SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+
+jobs:
+
+  SNYK:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+
+    steps:
+      - uses: actions/checkout@master
+
+      - uses: snyk/actions/setup@master
+
+      - name: Generate code vulnerability report
+        id: run_snyk
+        run: |
+          snyk code test --project-name="${{ github.repository }}" --report ${{ github.workspace }}
+        continue-on-error: true

Dockerfile.rocm.ubi

@@ -45,9 +45,9 @@ gpgkey=https://repo.radeon.com/rocm/rocm.gpg.key" > /etc/yum.repos.d/amdgpu.repo
 RUN --mount=type=cache,target=/root/.cache/uv \
     export version="$(awk -F. '{print $1"."$2}' <<< $ROCM_VERSION)" && \
     uv pip install --pre \
-        --index-url "https://download.pytorch.org/whl/nightly/rocm${version}" \
-        torch==2.7.0.dev20250308+rocm${version}\
-        torchvision==0.22.0.dev20250308+rocm${version} && \
+        --index-url "https://download.pytorch.org/whl/rocm${version}" \
+        torch==2.7.0+rocm${version}\
+        torchvision==0.22.0+rocm${version} && \
     # Install libdrm-amdgpu to avoid errors when retrieving device information (amdgpu.ids: No such file or directory)
     microdnf install -y --nodocs libdrm-amdgpu && \
     microdnf clean all