chore(deps-dev): bump onnxruntime from 1.15.1 to 1.20.1

[dependabot]

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Bumps onnxruntime from 1.15.1 to 1.20.1.

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.20.1

What's new?

Python Quantization Tool

• Prevent int32 quantized bias from clipping by adjusting the weight's scale (#22020) - @​adrianlizarraga
• Update QDQ Pad, Slice, Softmax (#22676) - @​adrianlizarraga
• Introduce get_qdq_config() helper to get QDQ configurations (#22677) - @​adrianlizarraga
• Add reduce_range option to get_qdq_config() (#22782) - @​adrianlizarraga
• Flaky test due to Pad reflect bug (#22798) - @​adrianlizarraga

CPU EP

• Refactor SkipLayerNorm implementation to address issues (#22719, #22862) - @​amarin16, @​liqunfu

QNN EP

• Add QNN SDK v2.28.2 support (#22724, #22844) - @​HectorSVC, @​adrianlizarraga

TensorRT EP

• Exclude DDS ops from running on TRT (#22875) - @​chilo-ms

Packaging

• Rework the native library usage so that a pre-built ORT native package can be easily used (#22345) - @​skottmckay
• Fix Maven Sha256 Checksum Issue (#22600) - @​idiskyle

Contributions

Big thank you to the release manager @​yf711, along with @​adrianlizarraga, @​HectorSVC, @​jywu-msft, and everyone else who helped to make this patch release process a smooth one!

ONNX Runtime v1.20.0

Release Manager: @​apsonawane

Announcements

• All ONNX Runtime Training packages have been deprecated. ORT 1.19.2 was the last release for which onnxruntime-training (PyPI), onnxruntime-training-cpu (PyPI), Microsoft.ML.OnnxRuntime.Training (Nuget), onnxruntime-training-c (CocoaPods), onnxruntime-training-objc (CocoaPods), and onnxruntime-training-android (Maven Central) were published.
• ONNX Runtime packages will stop supporting Python 3.8 and Python 3.9. This decision aligns with NumPy Python version support. To continue using ORT with Python 3.8 and Python 3.9, you can use ORT 1.19.2 and earlier.
• ONNX Runtime 1.20 CUDA packages will include new dependencies that were not required in 1.19 packages. The following dependencies are new: libcudnn_adv.so.9, libcudnn_cnn.so.9, libcudnn_engines_precompiled.so.9, libcudnn_engines_runtime_compiled.so.9, libcudnn_graph.so.9, libcudnn_heuristic.so.9, libcudnn_ops.so.9, libnvrtc.so.12, and libz.so.1.

Build System & Packages

• Python 3.13 support is included in PyPI packages.
• ONNX 1.17 support will be delayed until a future release, but the ONNX version used by ONNX Runtime has been patched to include a shape inference change to the Einsum op.
• DLLs in the Maven build are now digitally signed (fix for issue reported here).
• (Experimental) vcpkg support added for the CPU EP. The DML EP does not yet support vcpkg, and other EPs have not been tested.

Core

• MultiLoRA support.
• Reduced memory utilization.
  • Fixed alignment that was causing mmap to fail for external weights.
  • Eliminated double allocations when deserializing external weights.
  • Added ability to serialize pre-packed weights so that they don’t cause an increase in memory utilization when the model is loaded.
• Support bfloat16 and float8 data types in python I/O binding API.

Performance

• INT4 quantized embedding support on CPU and CUDA EPs.

... (truncated)

Commits

• 5c1b7cc [ORT 1.20.1 Release] Cherry pick 2nd round (#22845)
• c6156c1 [ORT 1.20.1 Release] Cherry pick 1st round (#22785)
• c4fb724 ORT 1.20.0 release preparation: Cherry pick round 2 (#22643)
• 2d00351 ORT 1.20.0 Release: Cherry pick round 1 (#22526)
• f9e623e Update CMake to 3.31.0rc1 (#22433)
• 691de83 Enable BrowserStack tests (#22457)
• bf60442 [ROCm] Update ROCm Nuget pipeline to ROCm 6.2 (#22461)
• 2b8fc55 Enable RunMatMulTest all test cases support FP16 (#22440)
• af00a20 Change ORT nightly python packages' name (#22450)
• a5e85a9 Fix training artifacts for 2GB+ models and MSELoss (#22414)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)