Update skl2onnx requirement from ~=1.16.0 to ~=1.17.0 in /enterprise/redhat/openshift-ai/gaudi/docker

[dependabot]

Updates the requirements on skl2onnx to permit the latest version.

Release notes

Sourced from skl2onnx's releases.

1.17.0

• Upgrade the maximum supported opset to 21, update requirements to scikit-learn>=1.1, older versions are not tested anymore, #1098
• Support infrequent categories for OneHotEncoder #1029
• Support kernel Matern in Gaussian Process #978
• Fix for multidimensional gaussian process #1097
• Minor fixes to support scikit-learn==1.5.0 #1095
• Fix the conversion of pipeline including pipelines, issue #1069, #1072
• Fix unexpected type for intercept in PoissonRegressor and GammaRegressor #1070
• Add support for scikit-learn 1.4.0, #1058, fixes issues Many examples in the gallery are showing "broken", TFIDF vectorizer target_opset issue, Tfidfvectorizer with sublinear_tf fails, despite opset version set to greater than 11.

Changelog

Sourced from skl2onnx's changelog.

1.17.0 (development)

• Upgrade the maximum supported opset to 21, update requirements to scikit-learn>=1.1, older versions are not tested anymore, #1098
• Support infrequent categories for OneHotEncoder #1029
• Support kernel Matern in Gaussian Process #978
• Fix for multidimensional gaussian process #1097
• Minor fixes to support scikit-learn==1.5.0 #1095
• Fix the conversion of pipeline including pipelines, issue #1069, #1072
• Fix unexpected type for intercept in PoissonRegressor and GammaRegressor #1070
• Add support for scikit-learn 1.4.0, #1058, fixes issues Many examples in the gallery are showing "broken", TFIDF vectorizer target_opset issue, Tfidfvectorizer with sublinear_tf fails, despite opset version set to greater than 11.

1.16.0

• Supports cosine distance (LocalOutlierFactor, ...) #1050,
• Supports multiple columns for OrdinalEncoder #1044 (by @​max-509)
• Add an example on how to handle FunctionTransformer #1042, Versions of scikit-learn < 1.0 are not tested any more.
• Supports lists of strings as inputs for FeatureHasher #1025, #1036
• skl2onnx works with onnx==1.15.0, #1034
• fix OneHotEncoder when categories indices to drop are not None #1028
• fix converter for AdaBoost estimators in scikit-learn==1.3.1 #1027
• add function 'add_onnx_graph' to insert onnx graph coming from other converting,
  libraries within the converter mapped to a custom estimator #1023, #1024
• add option 'language' to converters of CountVectorizer, TfIdfVectorizer #1020

Commits

• 4dad29e Upgrade max supported opset version (#1098)
• c4a9de3 Add kernel Matern for gaussian process (#978)
• 8a09ebc [WIP] Supports infrequent category with OneHotEncoder (#1029)
• a63f71f Fix for multidimensional gaussian process (#1097)
• 80a5d14 StringNormalizer drops strings when they only contain stop words (#1031)
• 9511028 Fix the converters for scikit-learn==1.5.0 (#1095)
• 0785722 Increase last supported opset to 19 in readme (#1087)
• 49473d6 Extend CI to test with onnxruntime==1.18.0 (#1093)
• d2029c1 Investigate issue 1069 (#1072)
• 26447bc typo (#1085)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/skl2onnx	~> 1.17.0	🟢 4.8	Details Check Score Reason Code-Review ⚠️ 2 Found 6/30 approved changesets -- score normalized to 2 Maintained 🟢 10 5 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 7 3 existing vulnerabilities detected SAST 🟢 9 SAST tool detected but not run on all commits

Scanned Manifest Files

enterprise/redhat/openshift-ai/gaudi/docker/requirements.txt

• skl2onnx@~> 1.17.0
• skl2onnx@~> 1.16.0

[dependabot]

Superseded by #384.