feat: bump onnx from 1.20.1 to 1.21.0 (fix CVE-2026-34445/28500) (backport #262)

[mergify]

fix other moderate and high CVEs

---

This is an automatic backport of pull request #262 done by Mergify.

[mergify]

Cherry-pick of 4935a34 has failed:

On branch mergify/bp/release_2.3/pr-262
Your branch is up to date with 'origin/release_2.3'.

You are currently cherry-picking commit 4935a34.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   .metwork-framework/components.md
	both modified:   layers/layer5_python3_ia/0500_extra_packages/requirements3.txt

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud