Update dependency com.microsoft.onnxruntime:onnxruntime to v1.23.1

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
com.microsoft.onnxruntime:onnxruntime (source)	dependencies	patch	1.23.0 -> 1.23.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

microsoft/onnxruntime (com.microsoft.onnxruntime:onnxruntime)

v1.23.1: ONNX Runtime v1.23.1

What's Changed

• Fix Attention GQA implementation on CPU (#​25966)
• Address edge GetMemInfo edge cases (#​26021)
• Implement new Python APIs (#​25999)
• MemcpyFromHost and MemcpyToHost support for plugin EPs (#​26088)
• [TRT RTX EP] Fix bug for generating the correct subgraph in GetCapability (#​26132)
• add session_id_ to LogEvaluationStart/Stop, LogSessionCreationStart (#​25590)
• [build] fix WebAssembly build on macOS/arm64 (#​25653)
• [CPU] MoE Kernel (#​25958)
• [CPU] Block-wise QMoE kernel for CPU (#​26009)
• [C#] Implement missing APIs (#​26101)
• Regenerate test model with ONNX IR < 12 (#​26149)
• [CPU] Fix compilation errors because of unused variables (#​26147)
• [EP ABI] Check if nodes specified in GetCapability() have already been assigned (#​26156)
• [QNN EP] Add dynamic option to set HTP performance mode (#​26135)

Full Changelog: microsoft/onnxruntime@v1.23.0...v1.23.1

---

Configuration

📅 Schedule: Branch creation - Every minute ( * * * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[epugh]

Just realized this needs back port to 10x branches

[dsmiley]

Why would a renovate bot, setting out to update onnxruntime (this is in the title), touch a cuvs sha1? Even if that sha1 update needs to happen for separate reasons, I don't think a renovate bot should be modifying sha1s. I'm okay with it creating ones for new dependency versions but not modifying any. Modifications should be exclusively done by us humans.

CC @janhoy @chatman
Coincidentally, @aruggero tells me that this fixed her checkout from having wrong/bad sha1s for CUVS... okay great but what I said above stands nonetheless.

[epugh]

ugh, i didn't see that change in the licenses... I tend to focus on the lockfile chnages. I'm going to revert this as I don't want to mess up solr 10, and it's not yet an important fix for me.

[epugh]

Okay, reverted this and we can tackle things once the cuvs stuff settles out...