backport: #3769, #3779, #3781 to release/v2.0

[abvarshney-nv]

Backport of three fixes from main to release/v2.0:

PR	Title
#3769	fix (dpf): Update SoftwareInventory details for the DPF ingested nodes
#3779	fix: Use states to manage reboot operation to avoid race condition
#3781	fix: Add URL in SoftwareInventory in UI/cli

Backport notes

Two v2.0 compatibility fixups were needed (not present in the original PRs):

• BlueFieldSoftwareParams and DpuDeploymentType removed from dpf import lists — these types were introduced after v2.0 by feat(dpf): support BlueFieldSoftware (BF4) provisioning with per-PSID. #3361 and feat: Dpf: Support for multiple DpuDeployments to handle BF3, BF4 and other deployment strategy  #3084 and do not exist on this branch.
• Machine.dpf.used_for_ingestion used instead of Machine.config.dpf.used_for_ingestion — the Machine struct layout differs between main and v2.0.

Related issues

#3769, #3779, #3781

Type of Change

• Add - New feature or capability
• Change - Changes in existing functionality
• Fix - Bug fixes
• Remove - Removed features or deprecated functionality
• Internal - Internal changes (refactoring, tests, docs, etc.)

Breaking Changes

• This PR contains breaking changes

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing performed
• No testing required (docs, internal refactor, etc.)

Additional Notes

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 7e954f62-ba4f-4d17-9de7-0477b37f42db

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🔐 TruffleHog Secret Scan

✅ No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

_{🕐 Last updated: 2026-07-23 06:35:22 UTC | Commit: 439af9b}

[github-actions]

🔍 Container Scan Summary

Service	Total	Critical	High	Medium	Low	Other
boot-artifacts-aarch64	3	0	0	3	0	0
boot-artifacts-x86_64	3	0	0	3	0	0
forge-admin-cli-x86_64	259	16	29	79	7	128
machine-validation-runner	547	41	117	191	17	181
machine_validation	547	41	117	191	17	181
machine_validation-aarch64	547	41	117	191	17	181
nvmetal-carbide	547	41	117	191	17	181
TOTAL	2453	180	497	849	75	852

Per-CVE detail lives in the per-service grype-* artifacts (JSON + SARIF). Severity counts only — no CVE IDs published here.