Merge pull request #263 from metwork-framework/mergify/bp/release_2.3/pr-262

feat: bump onnx from 1.20.1 to 1.21.0 (fix CVE-2026-34445/28500) (backport #262)

Author: thebaptiste

.metwork-framework/components.md

@@ -47,7 +47,7 @@
 | [nvidia-nvtx-cu12](https://developer.nvidia.com/cuda-zone) | 12.6.77 | python3_ia |
 | [oauthlib](https://github.com/oauthlib/oauthlib) | 3.2.2 | python3_ia |
 | [omegaconf](https://github.com/omry/omegaconf) | 2.3.0 | python3_ia |
-| [onnx](https://onnx.ai/) | 1.17.0 | python3_ia |
+| [onnx](https://onnx.ai/) | 1.21.0 | python3_ia |
 | [onnxruntime](https://onnxruntime.ai) | 1.22.0 | python3_ia |
 | [onnxscript](https://microsoft.github.io/onnxscript/) | 0.2.5 | python3_ia |
 | [opt_einsum](https://pypi.org/project/opt_einsum) | 3.4.0 | python3_ia |

layers/layer5_python3_ia/0500_extra_packages/requirements3.txt

@@ -45,7 +45,7 @@ nvidia-nvjitlink-cu12==12.6.85
 nvidia-nvtx-cu12==12.6.77
 oauthlib==3.2.2
 omegaconf==2.3.0
-onnx==1.17.0
+onnx==1.21.0
 onnxruntime==1.22.0
 onnxscript==0.2.5
 opt-einsum==3.4.0