Component governance fix round 2 (#20679)

microsoft · May 15, 2024 · 87ed1e3 · 87ed1e3
1 parent 113aa29
commit 87ed1e3
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 6 deletions.
diff --git a/onnxruntime/python/tools/transformers/models/llama/requirements.txt b/onnxruntime/python/tools/transformers/models/llama/requirements.txt
@@ -1,7 +1,7 @@
 optimum>=1.14.1
 transformers>=4.33.2,<= 4.37.2
 torch>=2.2.0
-onnx>=1.14.0
+onnx>=1.16.0
 datasets>=2.8.0
 protobuf==3.20.2
 psutil
diff --git a/onnxruntime/python/tools/transformers/models/phi2/requirements.txt b/onnxruntime/python/tools/transformers/models/phi2/requirements.txt
@@ -1,3 +1,3 @@
-onnx>=1.15.0
+onnx>=1.16.0
 transformers>=4.36.2
 onnxscript>=0.1.0.dev20240126
diff --git a/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt b/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt
@@ -2,7 +2,7 @@ diffusers==0.24.0
 transformers==4.38.0
 numpy>=1.24.1
 accelerate
-onnx==1.14.1
+onnx>=1.14.1
 coloredlogs
 packaging
 # Use newer version of protobuf might cause crash

diff --git a/onnxruntime/python/tools/transformers/models/whisper/requirements.txt b/onnxruntime/python/tools/transformers/models/whisper/requirements.txt
@@ -7,7 +7,7 @@ soundfile
 librosa
 optimum
 onnxruntime-extensions>=0.9.0
-onnx>=1.15.0
+onnx>=1.16.0
 protobuf==3.20.2
 numpy==1.23.3
 psutil

diff --git a/...build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml b/...build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
@@ -17,8 +17,12 @@ steps:
           and(eq('${{parameters.condition}}', 'always'), always())),
           and(eq('${{parameters.condition}}', 'succeeded'), succeeded()))
     inputs:
-      # ignore dmlc-core tracker for its CI, which is not used in onnxruntime build
       # ignore unit tests in emscripten. emscripten unit tests are not used in onnxruntime build
+      # ignore onnx third_party directory. onnx third_party directory is not responsible for onnxruntime build
+      # ignore react_native e2e node_modules directory. react_native e2e node_modules directory is generated by react_native e2e tests
+        # ignore github directory. github directory is used for github actions, not for onnxruntime package
       ignoreDirectories:
         '$(Build.SourcesDirectory)/cmake/external/emsdk/upstream/emscripten/tests,
-        $(Build.SourcesDirectory)/cmake/external/onnx/third_party'
+        $(Build.SourcesDirectory)/cmake/external/onnx/third_party,
+        $(Build.SourcesDirectory)/js/react_native/e2e/node_modules,
+        $(Build.SourcesDirectory)/tools/ci_build/github'