[github-actions]

Security Update (Python)

This is an automated PR triggered by the nightly OSV-Scanner security scan.

The following Python dependencies were updated to resolve known vulnerabilities:

Package & Version	Advisory Link

• aiohttp==3.14.5 (upgraded) | GHSA-2g87-pp6c-29x5
• aiohttp==3.14.5 (upgraded) | GHSA-494j-54xm-rwp3
• aiohttp==3.14.5 (upgraded) | GHSA-5wr8-gcqf-gqf3
• aiohttp==3.14.5 (upgraded) | GHSA-6cjc-53gc-5rqm
• aiohttp==3.14.5 (upgraded) | GHSA-9xw5-w5jj-pvcg
• aiohttp==3.14.5 (upgraded) | GHSA-f9xw-jh8m-3mwq
• aiohttp==3.14.5 (upgraded) | GHSA-gx76-c99x-2c96
• aiohttp==3.14.5 (upgraded) | GHSA-pqxq-w44r-73xw
• certifi==2026.10.23 (upgraded) | GHSA-6q48-6c7w-9gw2
• certifi==2026.10.23 (upgraded) | PYSEC-2026-4320
• filelock==4.2.4 (upgraded) | GHSA-567q-5qvw-pf92
• filelock==4.2.4 (upgraded) | GHSA-567q-5qvw-pf92
• filelock==4.2.4 (upgraded) | GHSA-9vhv-jxww-xfm5
• filelock==4.2.4 (upgraded) | GHSA-9vhv-jxww-xfm5
• filelock==4.2.4 (upgraded) | GHSA-v4x8-3wr5-3wq8
• filelock==4.2.4 (upgraded) | GHSA-v4x8-3wr5-3wq8

Verification: Updated via uv lock --upgrade-package.

Note: This PR was created with GITHUB_TOKEN, which does not trigger pull_request workflows.
CI checks will not run automatically. Push an empty commit (git commit --allow-empty -m "trigger CI")
to kick off CI before merging.

[coderabbitai]

_{Comment @coderabbitai help to get the list of available commands.}

[ckhordiasma]

@github-actions[bot]: The following test has Succeeded:

Test Results

47 passed, 0 failed, 4 skipped

View test details

Test	Result	Duration
[BeforeSuite]	✅ PASS	0.001122157s
[It] TrainJob e2e when Creating TrainJob to perform the PyTorch workload should create TrainJob with PyTorch runtime reference	✅ PASS	336.156395749s
[It] TrainJob e2e when Creating TrainJob to perform OpenMPI workload should create TrainJob with DeepSpeed runtime reference	⏭️ SKIP	0.047602467s
[It] TrainJob e2e when Creating TrainJob to perform JAX workload should create TrainJob with JAX runtime reference	✅ PASS	138.489822993s
[It] TrainJob e2e when Creating TrainJob to perform XGBoost workload should create TrainJob with XGBoost runtime reference	✅ PASS	44.246673645s
[It] TrainJob e2e when Creating TrainJob to perform Flux workload should create TrainJob with Flux runtime reference	✅ PASS	30.637330986s
[It] TrainJob e2e when Creating a TrainJob with RuntimePatches should preserve user-provided manager fields	✅ PASS	0.119313276s
[It] TrainJob e2e when Creating a TrainJob with RuntimePatches should update Time only for the changed patch on update	✅ PASS	1.200608415s
[It] TrainJob e2e when Creating a TrainJob managed by an external controller should not be reconciled by the built-in controller	✅ PASS	15.131728314s
[It] TrainJob e2e when Creating a TrainJob with Resource Timeouts should fail the TrainJob with DeadlineExceeded when active timeout expires	✅ PASS	9.675521662s
[It] TrainJob e2e when Creating TrainJob with runtime status server instrumentation should inject runtime configuration which allows the runtime status endpoint to be called	⏭️ SKIP	0s
[It] TrainJob e2e when Updating a runtime a suspended TrainJob should use the original runtime configuration and not pick up the new configuration TrainingRuntime	✅ PASS	1.255411499s
[It] TrainJob e2e when Updating a runtime a suspended TrainJob should use the original runtime configuration and not pick up the new configuration ClusterTrainingRuntime	✅ PASS	1.253479572s
[It] OptimizationJob e2e when Creating OptimizationJob with random search algorithm should provision algorithm service, run trials to completion, record best result, and perform cleanup	⏭️ SKIP	0s
[It] OptimizationJob e2e when Creating OptimizationJob with random search algorithm should fail if unsupported search algorithm is configured	⏭️ SKIP	0s
[BeforeSuite]	✅ PASS	0.126584085s
[It] RHAI Progression Tracking E2E Tests When progression tracking is enabled should poll metrics and update trainerStatus annotation during training	✅ PASS	82.824753429s
[It] RHAI Progression Tracking E2E Tests When progression tracking is NOT enabled should NOT create trainerStatus annotation	✅ PASS	35.128904536s
[It] RHAI Progression Tracking E2E Tests When progression tracking annotation has invalid value should NOT enable progression tracking for non-'true' values	✅ PASS	15.117275368s
[It] RHAI Progression Tracking E2E Tests When metrics polling configuration is customized should honor custom metrics port and poll interval	✅ PASS	4.17941684s
[It] RHAI Progression Tracking E2E Tests When metrics polling configuration is customized should handle minimum SDK-recommended poll interval (5s)	✅ PASS	0.131004052s
[It] RHAI Progression Tracking E2E Tests When metrics polling configuration is customized should handle maximum SDK-recommended poll interval (300s)	✅ PASS	0.129196938s
[It] RHAI Progression Tracking E2E Tests When metrics polling configuration is customized should use default interval when annotation is missing	✅ PASS	0.127058507s
[It] RHAI Progression Tracking E2E Tests When TrainJob fails during training should capture final status even when job fails	✅ PASS	72.79046315s
[It] RHAI Progression Tracking E2E Tests When metrics endpoint is unreachable should handle connection errors gracefully without crashing	✅ PASS	10.518628847s
[AfterSuite]	✅ PASS	0.01817562s
TestOpenMPICudaClusterTrainingRuntime	✅ PASS	0.090000s
TestDefaultTrainingHubRuntimesMatchDefaultClusterRuntimes	✅ PASS	0.030000s
TestDraFieldsOnTrainJobReachPods	✅ PASS	1.210000s
TestRunTrainJobWithDefaultClusterTrainingRuntimes	✅ PASS	428.160000s
TestJobSetWorkflow	✅ PASS	116.200000s
TestKubeflowSdk	✅ PASS	102.190000s
TestKubeflowSdkKueueIntegration	✅ PASS	45.540000s
TestKueueWorkloadPreemptionSuspendsTrainJob	✅ PASS	335.570000s
TestKueueSchedulingReachesTrainJobPods	✅ PASS	1.510000s
TestMultiNodeOpenMPICpuTrainJob	✅ PASS	32.900000s
TestFailedJobSetWorkflow	✅ PASS	11.500000s
TestRhaiTrainingProgressionCPU	✅ PASS	453.990000s
TestRhaiJitCheckpointingCPU	✅ PASS	537.760000s
TestRhaiFeaturesCPU	✅ PASS	533.950000s
TestRhaiS3CheckpointingCPU	✅ PASS	533.590000s
TestPyTorchDDPMultiNodeMultiCPUWithTorchCuda28	✅ PASS	64.970000s
TestKueueWorkloadInadmissibleWithNonExistentLocalQueue	✅ PASS	1.240000s
TestTrainerSecureServing	✅ PASS	0.670000s
TestTrainerPrometheusScrape	✅ PASS	0.390000s
TestTrainerNetworkPolicyBlocksIngressFromOtherNamespacesToMetrics	✅ PASS	8.410000s
TestTrainerNetworkPolicyBlocksIngressFromOtherNamespacesToHealth	✅ PASS	8.370000s
TestTrainerNetworkPolicyBlocksIngressFromOtherNamespacesToStatusServer	✅ PASS	8.380000s
TestTrainerNetworkPolicyBlocksIngressFromOtherNamespacesToUnpublishedPort	✅ PASS	6.280000s
TestTrainerNetworkPolicyBlocksIngressFromOtherNamespacesToWorkloadPort	✅ PASS	11.590000s
TestTrainerNetworkPolicyBlocksIngressFromOtherWorkloadsToWorkloadPort	✅ PASS	9.430000s

OCI Artifact Browser URL

View in Artifact Browser

Inspecting Test Artifacts Manually

To inspect your test artifacts manually, follow these steps:

1. Install ORAS (see the ORAS installation guide).
2. Download artifacts with the following commands:

mkdir -p oras-artifacts
cd oras-artifacts
oras pull quay.io/opendatahub/odh-ci-artifacts:odh-pr-test-trainer-j8bcg