build(deps): bump onnxruntime from 1.24.1 to 1.24.2

[dependabot]

Bumps onnxruntime from 1.24.1 to 1.24.2.

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.24.2

This is a patch release for ONNX Runtime 1.24, containing several bug fixes, security improvements, and execution provider updates.

Bug Fixes

• NuGet: Fixed native library loading issues in the ONNX Runtime NuGet package on Linux and macOS. (#27266)
• macOS: Fixed Java support and Jar testing on macOS ARM64. (#27271)
• Core: Enable Robust Symlink Support for External Data for Huggingface Hub Cache. (#27374)
• Core: Added boundary checks for SparseTensorProtoToDenseTensorProto to improve robustness. (#27323)
• Security: Fixed an out-of-bounds read vulnerability in ArrayFeatureExtractor. (#27275)

Execution Provider Updates

• MLAS: Fixed flakiness and accuracy issues in Lut GEMM (MatMulNBitsLutGemm). (#27216)
• QNN: Enabled 64-bit UDMA mode for HTP target v81 or above. (#26677)
• WebGPU:
  • Used LazyRelease for prepack allocator. (#27077)
  • Fixed ConvTranspose bias validation in both TypeScript and C++ implementations. (#27213)
• OpenVINO (OVEP): Patch to reduce resident memory by reusing weight files across shared contexts. (#27238)
• DNNL: Fixed DNNL build error by including missing files. (#27334)

Build and Infrastructure

• CUDA:
  • Added support for CUDA architecture family codes (suffix 'f') introduced in CUDA 12.9. (#27278)
  • Fixed build errors and warnings for various CUDA versions (12.8, 13.0, 13.1.1). (#27276)
  • Applied patches for Abseil CUDA warnings. (#27096, #27126)
• Pipelines:
  • Fixed Python packaging pipeline for Windows ARM64 and release. (#27339, #27350, #27299)
  • Fixed DirectML NuGet pipeline to correctly bundle x64 and ARM64 binaries for release. (#27349)
  • Updated Microsoft.ML.OnnxRuntime.Foundry package for Windows ARM64 support and NuGet signing. (#27294)
• Testing: Updated BaseTester to support plugin EPs with both compiled nodes and registered kernels. (#27176)
• Telemetry: Added service name and framework name to telemetry events for better usage understanding on Windows. (#27252, #27256)

Full Changelog: v1.24.1...v1.24.2

Contributors

@​tianleiwu, @​hariharans29, @​edgchen1, @​xiaofeihan1, @​adrianlizarraga, @​angelser, @​angelserMS, @​ankitm3k, @​baijumeswani, @​bmehta001, @​ericcraw, @​eserscor, @​fs-eire, @​guschmue, @​mc-nv, @​qjia7, @​qti-monumeen, @​titaiwangms, @​yuslepukhin

Commits

• 058787c ORT 1.24.2 Release cherry pick round 4 (#27388)
• 6fc7ee3 ORT 1.24.2 release cherry pick round 3 (#27378)
• 9871182 ORT 1.24.2 release cherry-pick round 2 (#27343)
• f34d11d ORT 1.24.2 release cherry pick round 1 (#27330)
• 8ba51c7 update version to 1.24.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)