Pin onnx/tf2onnx for ml CI to avoid onnx sdist and protobuf clashes

Author: aIbrahiim

sdks/python/setup.py

@@ -168,6 +168,10 @@ def cythonize(*args, **kwargs):
 ml_base_core = [
     'embeddings>=0.0.4', # 0.0.3 crashes setuptools
     'onnxruntime',
+    # onnx 1.12–1.13 cap protobuf in ways that trigger huge backtracking with
+    # Beam[gcp]+ml_test; pip can fall back to onnx 1.11 sdist which needs cmake.
+    # 1.14.1+ matches tf2onnx>=1.16 and ships manylinux wheels for py3.10.
+    'onnx>=1.14.1,<2',
     'langchain',
     'sentence-transformers>=2.2.2',
     'skl2onnx',
@@ -176,7 +180,6 @@ def cythonize(*args, **kwargs):
     # tensorflow transitive dep, lower versions not compatible with Python3.10+
     'absl-py>=0.12.0',
     'tensorflow-hub',
-    'tf2onnx',
     'torch',
     'transformers',
 ]
@@ -186,6 +189,8 @@ def cythonize(*args, **kwargs):
     'opentelemetry-api==1.37.0',
     'opentelemetry-sdk==1.37.0',
     'opentelemetry-exporter-otlp-proto-http==1.37.0',
+    # protobuf>=5 (ADK/OTel); tf2onnx 1.16.x pins protobuf~=3.20 only.
+    'tf2onnx>=1.17.0,<1.18',
 ]
 
 ml_base = ml_base_core + ml_adk_dependency
@@ -564,6 +569,8 @@ def get_portability_package_data():
               # tests due to tag check introduced since pip 24.2
               # https://github.com/apache/beam/issues/31285
               # 'xgboost<2.0',  # https://github.com/apache/beam/issues/31252
+              # tft needs protobuf<5; tf2onnx 1.17+ allows protobuf 5 (ADK only).
+              'tf2onnx>=1.16.1,<1.17',
           ] + ml_base_core,
           'p310_ml_test': [
             'datatable',