build(deps): Bump github.com/NVIDIA/nvidia-container-toolkit from 1.20.1-0.20260914195404-24761af0847d to 1.20.1

[dependabot]

Bumps github.com/NVIDIA/nvidia-container-toolkit from 1.20.1-0.20260914195404-24761af0847d to 1.20.1.

Changelog

Sourced from github.com/NVIDIA/nvidia-container-toolkit's changelog.

v1.20.1

• Add ucode_*.bin firmware files to CDI spec introduced in R615
• fix: preserve Docker feature flags when enabling CDI
• feat: add new CDI hook to set CUDA memory limits
• Adding missing cdi-hooks in readme
• build(deps): Bump golang.org/x/sys from 0.47.0 to 0.48.0
• Fix intermittent EBADF in create-symlinks hook
• build(deps): Bump github.com/NVIDIA/go-nvml from 0.13.3-1 to 0.13.4-0
• internal/dxcore: Fix build on 32-bit targets
• build(deps): Bump github.com/opencontainers/cgroups from 0.0.7 to 0.0.9
• update-ldcache hook: exec ldconfig from a sealed memfd
• fix malformed hookscratch dir names
• bump runc to v1.5.1 and remove deprecated methods
• build(deps): Bump tags.cncf.io/container-device-interface
• build(deps): Bump github.com/containerd/nri from 0.12.1 to 0.12.3
• Remove Go module versions from rendered TPN document
• build(deps): Bump golang to 1.27.1 in /deployments/devel
• Enable JIT-CDI to inject MIG management capability devices
• build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.1
• Update minimum go toolchain to 1.26
• fix: Order container engines after nvidia-cdi-refresh.service
• wsl: honor none value for NVIDIA_VISIBLE_DEVICES envvar
• fix: Create NVIDIA control device nodes in nvidia-cdi-refresh.service
• fix: NVIDIA X.Org driver modules mount fixes
• Try parsing rootfs from container state JSON

Changes in the Toolkit Container

• build(deps): Bump nvidia/distroless/go to v4.1.3 in /deployments/container

v1.20.0

• Add enable-cuda-compat hook to management CDI specs
• Add update-application-profile CDI hook for EGL/Vulkan use case
• Use xz compression when building rpm packages
• fix: populate runtime_type field in containerd runtime config if not present

v1.20.0-rc.1

• Validate imex channels for CDI/JIT-CDI mode
• [wsl2] discover all .so, .bin, and .dll files at nvidia driver store path
• [nri plugin] move cdi inject info log to debug level
• [CDI Hooks] add ability to specify OCI hook type
• [cudacompat] use Masterminds/semver for parsing/comparing versions
• Expand cudacompat hook to always inspect libcuda.so ELF header if available
• Add libnvidia-nvvm70.so library to CDI spec
• fix: prevent config option from reverting modified configurations
• [nri-plugin] support injection of management CDI devices in multiple namespaces
• docker.mk: Add Podman support and fix volume/artifact handling
• Only generate update-ldcache hook if libraries are discovered
• Mount nvidia.icd file needed by OpenCL
• Update SECURITY.md

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[rahulait]

/ok to test e14edf6

[tariq1890]

/cherry-pick release-26.7

[rahulait]

/cherry-pick release-26.7

[coveralls]

coverage: 44.49%. remained the same — dependabot/go_modules/main/github.com/NVIDIA/nvidia-container-toolkit-1.20.1 into main

[github-actions]

🤖 Backport PR created for release-26.7: #2934 ✅