Update requirements-ci.txt to use upstream's pin of onnx

Author: ethanwee1

.ci/docker/requirements-ci.txt

@@ -333,13 +333,14 @@ sympy==1.13.3
 #Pinned versions:
 #test that import:
 
-onnx==1.16.1 ; python_version <= "3.12"
-onnx==1.18.0 ; python_version == "3.13"
-#Description: Required by mypy and test_public_bindings.py when checking torch.onnx._internal
+onnx==1.19.1 ; python_version < "3.14"
+# Unpin once Python 3.14 is supported. See  onnxruntime issue 26309.
+onnx==1.18.0 ; python_version == "3.14"
+#Description: Required by onnx tests, and mypy and test_public_bindings.py when checking torch.onnx._internal
 #Pinned versions:
 #test that import:
 
-onnxscript==0.4.0
+onnxscript==0.5.4
 #Description: Required by mypy and test_public_bindings.py when checking torch.onnx._internal
 #Pinned versions:
 #test that import: