chore: update xpu vllm base image to v0.24.0 and update sbom

[VincyZhang]

Overview

Update the XPU vLLM base image to v0.24.0 and refresh the generated SBOM artifacts.

Details

• Bump the XPU vLLM base image reference in container/context.yaml to v0.24.0.
• Regenerate the corresponding SBOM artifact under container/compliance/base_sboms/.
• Update container/compliance/base_sboms/manifest.json to point at the refreshed SBOM.

Where should the reviewer start?

• Start with container/context.yaml and container/compliance/base_sboms/manifest.json, then inspect the generated SBOM artifact.

Related Issues

• Confirmed — no related issue

---

Summary by CodeRabbit

• Bug Fixes
  • Updated container baseline metadata for Linux/amd64 to reflect the latest approved image and SBOM references.
  • Refreshed the XPU container configuration with newer image tags and SBOM digest values.
  • Updated the generated timestamp in compliance records to match the latest build output.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[dynamo-ops]

/ok to test 5af0bf4

[datadog-official]

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 39.91% (-2.98%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: cdaf2ab | Docs | Give us feedback!}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[dynamo-ops]

/ok to test 5229fda

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: bd280fec-603f-455b-bea4-dd0d7ca2d1b6

📥 Commits

Reviewing files that changed from the base of the PR and between 302f4d5 and 5229fda.

📒 Files selected for processing (3)

• container/compliance/base_sboms/manifest.json
• container/compliance/base_sboms/vllm-ci-test-repo@b15b9f69-amd64.cdx.json
• container/context.yaml

---

Walkthrough

This PR updates the vllm.xpu container image digests (base and runtime tags, plus baseline SBOM reference) in context.yaml, and adds a corresponding baseline/from SBOM manifest entry for linux/amd64 along with an updated generation timestamp.

Changes

Image digest and SBOM manifest update

Layer / File(s)	Summary
Update vllm.xpu image digests container/context.yaml	Replaces base_image_tag, runtime_image_tag, and baseline_sbom digest values for vllm.xpu.
Add corresponding SBOM manifest entry container/compliance/base_sboms/manifest.json	Adds a new linux/amd64 baseline/from entry for vllm-ci-test-repo with updated digests, tags, and SBOM filename, and updates generated_at timestamp.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Related PRs: None identified.

Suggested labels: dependencies, container

Suggested reviewers: None identified.

Poem
A rabbit hops through digest trails,
New tags replace the older mails,
SBOM entries neatly filed,
Timestamps freshly reconciled,
Container images, digest-sealed. 🐇

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: updating the XPU vLLM base image and refreshing the SBOM.
Description check	✅ Passed	The description follows the template well, covering overview, details, reviewer start points, and the no-related-issue path.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[dynamo-ops]

/ok to test b85e3ec

[dynamo-ops]

/ok to test 98a4b30

[dynamo-ops]

/ok to test cdaf2ab