chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Update	Change
flannel-io/cni-plugin	patch	v1.9.0-flannel1 → v1.9.1-flannel1
hailo-ai/hailort-drivers	major	4.23.0 → 5.3.0
tenstorrent/tt-kmd	minor	2.7.0 → 2.8.0

---

Release Notes

flannel-io/cni-plugin (flannel-io/cni-plugin)

v1.9.1-flannel1

Compare Source

What's Changed

• Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @​dependabot[bot] in #​147
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 by @​dependabot[bot] in #​148
• Bump alpine from 3.23.0 to 3.23.2 by @​dependabot[bot] in #​149
• Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @​dependabot[bot] in #​150
• Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5 by @​dependabot[bot] in #​152
• Bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 by @​dependabot[bot] in #​154
• Bump alpine from 3.23.2 to 3.23.3 by @​dependabot[bot] in #​155
• Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @​dependabot[bot] in #​156
• Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 by @​dependabot[bot] in #​157
• Bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 by @​dependabot[bot] in #​158
• Bump google.golang.org/grpc from 1.69.0 to 1.79.3 by @​dependabot[bot] in #​162
• Bump github.com/containernetworking/plugins from 1.9.0 to 1.9.1 by @​dependabot[bot] in #​163
• Pin GH Actions to commit sha by @​cwayne18 in #​164
• Add checksum verification for third-party curl downloads by @​Copilot in #​166
• Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @​dependabot[bot] in #​165

New Contributors

• @​cwayne18 made their first contribution in #​164
• @​Copilot made their first contribution in #​166

Full Changelog: flannel-io/cni-plugin@v1.9.0-flannel1...v1.9.1-flannel1

hailo-ai/hailort-drivers (hailo-ai/hailort-drivers)

v5.3.0

Compare Source

v5.2.0

Compare Source

v5.1.1

Compare Source

v5.1.0

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

tenstorrent/tt-kmd (tenstorrent/tt-kmd)

v2.8.0

Compare Source

Tenstorrent PCIe Driver Version 2.8.0 Release Notes

This release suppresses kernel hotplug processing on Galaxy systems to prevent PCIe link speed degradation, adds stable device ordinals for Galaxy, and fixes user-pinned DMA on Thunderbolt-connected devices. The minimum supported kernel version is now 5.4.

[!IMPORTANT]
Galaxy users: upgrade to tt-smi v5.0.0 or greater. This driver release changes how Galaxy hotplug events are handled. BMC-initiated resets (ipmitool) require the full reset sequence to avoid leaving devices in an unusable state. tt-smi v5.0.0 implements this sequence.

---

New Features

Stable Device Ordinals for Galaxy Systems

Galaxy systems (32 devices across 4 UBBs) now receive deterministic device ordinals derived from PCI bus topology rather than probe order. The ordinal encodes the physical UBB and chip position.

• Eliminates device identity shuffling after hotplug-triggered resets.
• Applies to both Wormhole Galaxy and Blackhole Galaxy.
• Falls back to dynamic allocation for non-Galaxy systems or if the target slot is transiently occupied.

Thunderbolt DMA Support

The driver now clears the kernel's untrusted flag on Thunderbolt-connected devices when IOMMU is active. The kernel marks external-facing devices as untrusted, forcing a DMA mode that is incompatible with PIN_PAGES. With IOMMU enabled the device is already restricted to explicitly-mapped addresses, so the untrusted flag is unnecessary.

• Only applies when IOMMU is active and the device is behind an external-facing root port.
• Includes fix-tt-hotplug-bars, a helper script for BAR allocation failures on Thunderbolt hotplug (requires pci=realloc on the kernel command line).

---

Galaxy Hotplug Suppression

The driver now calls pci_ignore_hotplug() at probe time for all Galaxy subsystem IDs. This prevents the kernel from running hotplug processing on these devices.

Background. On Linux kernels 6.5 through 6.12, kernel hotplug processing during Galaxy reset can interfere with PCIe link training, sometimes resulting in degraded link speed and unstable device behavior. Suppressing hotplug at probe time avoids this on all kernel versions and covers both Wormhole and Blackhole Galaxy.

With hotplug suppressed, a standalone BMC reset (e.g. ipmitool) will leave the device in an unusable state. The correct sequence is USER_RESET, trigger the reset via BMC, then POST_RESET.

---

Compatibility Notes

Minimum Kernel Version: 5.4

The minimum supported kernel version is now Linux 5.4 (Ubuntu 20.04 LTS). Building against older kernels produces a compile-time error. Pre-5.4 compatibility shims have been removed.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.