kubeflow-pipelines/2.15.0 package update (#73172)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>
<!--ci-cve-scan:fail-any-->


**Commit**: 8fe8d7bdd88f027bde080f619762a0b3294796db

<!--staging-update-bot-pr-data-->
<!--
{
  "PackageName": "kubeflow-pipelines",
  "Version": "2.15.0",
  "Commit": "8fe8d7bdd88f027bde080f619762a0b3294796db",
  "BumpEpoch": false,
  "Manual": false
}
-->
<!--/staging-update-bot-pr-data-->

---------

Co-authored-by: staging-update-bot <[email protected]>
Co-authored-by: Debasish Biswas <[email protected]>

Author: 3 people

kubeflow-pipelines.yaml

@@ -1,7 +1,7 @@
 package:
   name: kubeflow-pipelines
-  version: "2.14.4"
-  epoch: 1 # GHSA-j5w8-q4qc-rx2x
+  version: "2.15.0"
+  epoch: 0 # GHSA-j5w8-q4qc-rx2x
   description: Machine Learning Pipelines for Kubeflow
   checks:
     disabled:
@@ -40,30 +40,13 @@ pipeline:
     with:
       repository: https://github.com/kubeflow/pipelines
       tag: ${{package.version}}
-      expected-commit: 417091dceddb1f35f26203f9779cb18ee260d6ad
+      expected-commit: 8fe8d7bdd88f027bde080f619762a0b3294796db
 
   - uses: go/bump
     with:
       deps: |-
-        github.com/go-viper/mapstructure/[email protected]
-        github.com/argoproj/argo-workflows/[email protected]
         golang.org/x/[email protected]
 
-  - name: Fix Build issue by removing the version constraints from requirements.in
-    uses: patch
-    with:
-      patches: fix-build-Removing-version-constraint-kfp.patch
-
-  - name: Fix CVE releted to urllib3
-    uses: patch
-    with:
-      patches: fix-CVE-urllib3.patch
-
-  - name: Fix CVE in backend by updating
-    uses: patch
-    with:
-      patches: fix-CVE-GHSA-9wx4-h78v-vm56.patch
-
   - uses: patch
     with:
       patches: add-samples.patch
@@ -199,8 +182,7 @@ subpackages:
       - uses: patch
         with:
           patches: |
-            GHSA-952p-6rrq-rcjv.patch
-            GHSA-4hjh-wcwx-xvwj.patch
+            GHSA-72xf-g2v4-qvf3.patch
       - runs: |
           mkdir -p ${{targets.subpkgdir}}/server
           mkdir -p ${{targets.subpkgdir}}/client

kubeflow-pipelines/GHSA-4hjh-wcwx-xvwj.patch

@@ -0,0 +1,14 @@
+diff --git a/frontend/server/package.json b/frontend/server/package.json
+index 4dbe2b296..345402675 100644
+--- a/frontend/server/package.json
++++ b/frontend/server/package.json
+@@ -51,7 +51,8 @@
+     "json-schema": "0.4.0",
+     "jsonpath-plus": "10.3.0",
+     "date-and-time": "0.14.2",
+-    "form-data@>=2.0.0 <2.5.4": "2.5.4"
++    "form-data@>=2.0.0 <2.5.4": "2.5.4",
++    "tough-cookie": "^4.1.3"
+   },
+   "scripts": {
+     "build": "tsc --project .",