From a6b2a29c4c23deb7e23b4dcd8f3311c270342f5d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 29 Oct 2026 14:04:22 -0500 Subject: [PATCH] Bump protobuf from 3.20.3 to 5.29.6 in /docker/tensorrt in the pip-trt-security group across 1 directory (#24825) * Bump protobuf Bumps the pip-trt-security group with 1 update in the /docker/tensorrt directory: [protobuf](https://developers.google.com/protocol-buffers/). Updates `protobuf` from 3.20.3 to 5.29.6 --- updated-dependencies: - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip-trt-security ... Signed-off-by: dependabot[bot] * keep amd64 tensorrt protobuf on 7.36 Dependabot moved every protobuf pin in docker/tensorrt to 5.29, but the security alerts only cover the aarch64 pin. On amd64 that would downgrade protobuf below what TensorFlow 2.21 requires (>=6.31.1), and the image would build with a pip warning and fail at import tensorflow. This keeps the aarch64 change to 5.29.6, which is the same change verified on #24350 (onnx 1.14.0 and TensorFlow 2.19 both work on it). --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com> --- docker/tensorrt/requirements-models-arm64.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/tensorrt/requirements-models-arm64.txt b/docker/tensorrt/requirements-models-arm64.txt index fe89b47547..e9577da07c 100644 --- a/docker/tensorrt/requirements-models-arm64.txt +++ b/docker/tensorrt/requirements-models-arm64.txt @@ -1,2 +1,2 @@ onnx == 1.14.0; platform_machine == 'aarch64' -protobuf == 3.20.3; platform_machine == 'aarch64' +protobuf == 5.29.6; platform_machine == 'aarch64'