DRAFT: Kubeflow pipeline 2.15.0 upgrade fix

kubeflow-pipelines.yaml

@@ -1,7 +1,7 @@
 package:
   name: kubeflow-pipelines
-  version: "2.14.4"
-  epoch: 1 # GHSA-j5w8-q4qc-rx2x
+  version: "2.15.0"
+  epoch: 0 # GHSA-j5w8-q4qc-rx2x
   description: Machine Learning Pipelines for Kubeflow
   checks:
     disabled:
@@ -40,30 +40,13 @@ pipeline:
     with:
       repository: https://github.com/kubeflow/pipelines
       tag: ${{package.version}}
-      expected-commit: 417091dceddb1f35f26203f9779cb18ee260d6ad
+      expected-commit: 8fe8d7bdd88f027bde080f619762a0b3294796db
 
   - uses: go/bump
     with:
       deps: |-
-        github.com/go-viper/mapstructure/[email protected]
-        github.com/argoproj/argo-workflows/[email protected]
         golang.org/x/[email protected]
 
-  - name: Fix Build issue by removing the version constraints from requirements.in
-    uses: patch
-    with:
-      patches: fix-build-Removing-version-constraint-kfp.patch
-
-  - name: Fix CVE releted to urllib3
-    uses: patch
-    with:
-      patches: fix-CVE-urllib3.patch
-
-  - name: Fix CVE in backend by updating
-    uses: patch
-    with:
-      patches: fix-CVE-GHSA-9wx4-h78v-vm56.patch
-
   - uses: patch
     with:
       patches: add-samples.patch
@@ -196,11 +179,6 @@ subpackages:
         - nodejs
         - wget
     pipeline:
-      - uses: patch
-        with:
-          patches: |
-            GHSA-952p-6rrq-rcjv.patch
-            GHSA-4hjh-wcwx-xvwj.patch
       - runs: |
           mkdir -p ${{targets.subpkgdir}}/server
           mkdir -p ${{targets.subpkgdir}}/client