From 87ed1e3e3fd71bb251119c91acc8b2760f2e4c4a Mon Sep 17 00:00:00 2001
From: Jian Chen <cjian@microsoft.com>
Date: Tue, 14 May 2024 20:15:15 -0400
Subject: [PATCH] Component governance fix round 2  (#20679)

---
 .../tools/transformers/models/llama/requirements.txt      | 2 +-
 .../tools/transformers/models/phi2/requirements.txt       | 2 +-
 .../transformers/models/stable_diffusion/requirements.txt | 2 +-
 .../tools/transformers/models/whisper/requirements.txt    | 2 +-
 .../component-governance-component-detection-steps.yml    | 8 ++++++--
 5 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/onnxruntime/python/tools/transformers/models/llama/requirements.txt b/onnxruntime/python/tools/transformers/models/llama/requirements.txt
index e991c2f27a1a3..989a3aeeaeaf3 100644
--- a/onnxruntime/python/tools/transformers/models/llama/requirements.txt
+++ b/onnxruntime/python/tools/transformers/models/llama/requirements.txt
@@ -1,7 +1,7 @@
 optimum>=1.14.1
 transformers>=4.33.2,<= 4.37.2
 torch>=2.2.0
-onnx>=1.14.0
+onnx>=1.16.0
 datasets>=2.8.0
 protobuf==3.20.2
 psutil
\ No newline at end of file
diff --git a/onnxruntime/python/tools/transformers/models/phi2/requirements.txt b/onnxruntime/python/tools/transformers/models/phi2/requirements.txt
index af6f441c149d0..45789a8f52d94 100644
--- a/onnxruntime/python/tools/transformers/models/phi2/requirements.txt
+++ b/onnxruntime/python/tools/transformers/models/phi2/requirements.txt
@@ -1,3 +1,3 @@
-onnx>=1.15.0
+onnx>=1.16.0
 transformers>=4.36.2
 onnxscript>=0.1.0.dev20240126
diff --git a/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt b/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt
index 0798b659306b5..c4b1b68199200 100644
--- a/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt
+++ b/onnxruntime/python/tools/transformers/models/stable_diffusion/requirements.txt
@@ -2,7 +2,7 @@ diffusers==0.24.0
 transformers==4.38.0
 numpy>=1.24.1
 accelerate
-onnx==1.14.1
+onnx>=1.14.1
 coloredlogs
 packaging
 # Use newer version of protobuf might cause crash
diff --git a/onnxruntime/python/tools/transformers/models/whisper/requirements.txt b/onnxruntime/python/tools/transformers/models/whisper/requirements.txt
index 4773b0cdac516..46851dd268401 100644
--- a/onnxruntime/python/tools/transformers/models/whisper/requirements.txt
+++ b/onnxruntime/python/tools/transformers/models/whisper/requirements.txt
@@ -7,7 +7,7 @@ soundfile
 librosa
 optimum
 onnxruntime-extensions>=0.9.0
-onnx>=1.15.0
+onnx>=1.16.0
 protobuf==3.20.2
 numpy==1.23.3
 psutil
diff --git a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
index de67eaeb1772e..279cf40d471c5 100644
--- a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
@@ -17,8 +17,12 @@ steps:
           and(eq('${{parameters.condition}}', 'always'), always())),
           and(eq('${{parameters.condition}}', 'succeeded'), succeeded()))
     inputs:
-      # ignore dmlc-core tracker for its CI, which is not used in onnxruntime build
       # ignore unit tests in emscripten. emscripten unit tests are not used in onnxruntime build
+      # ignore onnx third_party directory. onnx third_party directory is not responsible for onnxruntime build
+      # ignore react_native e2e node_modules directory. react_native e2e node_modules directory is generated by react_native e2e tests
+        # ignore github directory. github directory is used for github actions, not for onnxruntime package
       ignoreDirectories:
         '$(Build.SourcesDirectory)/cmake/external/emsdk/upstream/emscripten/tests,
-        $(Build.SourcesDirectory)/cmake/external/onnx/third_party'
\ No newline at end of file
+        $(Build.SourcesDirectory)/cmake/external/onnx/third_party,
+        $(Build.SourcesDirectory)/js/react_native/e2e/node_modules,
+        $(Build.SourcesDirectory)/tools/ci_build/github'
\ No newline at end of file