chore(deps): bump tensorflow from 2.6.3 to 2.9.2

[dependabot[bot]]

Bumps tensorflow from 2.6.3 to 2.9.2.

Release notes

Sourced from tensorflow's releases.

TensorFlow 2.9.2

Release 2.9.2

This releases introduces several vulnerability fixes:

• Fixes a CHECK failure in tf.reshape caused by overflows (CVE-2022-35934)
• Fixes a CHECK failure in SobolSample caused by missing validation (CVE-2022-35935)
• Fixes an OOB read in Gather_nd op in TF Lite (CVE-2022-35937)
• Fixes a CHECK failure in TensorListReserve caused by missing validation (CVE-2022-35960)
• Fixes an OOB write in Scatter_nd op in TF Lite (CVE-2022-35939)
• Fixes an integer overflow in RaggedRangeOp (CVE-2022-35940)
• Fixes a CHECK failure in AvgPoolOp (CVE-2022-35941)
• Fixes a CHECK failures in UnbatchGradOp (CVE-2022-35952)
• Fixes a segfault TFLite converter on per-channel quantized transposed convolutions (CVE-2022-36027)
• Fixes a CHECK failures in AvgPool3DGrad (CVE-2022-35959)
• Fixes a CHECK failures in FractionalAvgPoolGrad (CVE-2022-35963)
• Fixes a segfault in BlockLSTMGradV2 (CVE-2022-35964)
• Fixes a segfault in LowerBound and UpperBound (CVE-2022-35965)
• Fixes a segfault in QuantizedAvgPool (CVE-2022-35966)
• Fixes a segfault in QuantizedAdd (CVE-2022-35967)
• Fixes a CHECK fail in AvgPoolGrad (CVE-2022-35968)
• Fixes a CHECK fail in Conv2DBackpropInput (CVE-2022-35969)
• Fixes a segfault in QuantizedInstanceNorm (CVE-2022-35970)
• Fixes a CHECK fail in FakeQuantWithMinMaxVars (CVE-2022-35971)
• Fixes a segfault in Requantize (CVE-2022-36017)
• Fixes a segfault in QuantizedBiasAdd (CVE-2022-35972)
• Fixes a CHECK fail in FakeQuantWithMinMaxVarsPerChannel (CVE-2022-36019)
• Fixes a segfault in QuantizedMatMul (CVE-2022-35973)
• Fixes a segfault in QuantizeDownAndShrinkRange (CVE-2022-35974)
• Fixes segfaults in QuantizedRelu and QuantizedRelu6 (CVE-2022-35979)
• Fixes a CHECK fail in FractionalMaxPoolGrad (CVE-2022-35981)
• Fixes a CHECK fail in RaggedTensorToVariant (CVE-2022-36018)
• Fixes a CHECK fail in QuantizeAndDequantizeV3 (CVE-2022-36026)
• Fixes a segfault in SparseBincount (CVE-2022-35982)
• Fixes a CHECK fail in Save and SaveSlices (CVE-2022-35983)
• Fixes a CHECK fail in ParameterizedTruncatedNormal (CVE-2022-35984)
• Fixes a CHECK fail in LRNGrad (CVE-2022-35985)
• Fixes a segfault in RaggedBincount (CVE-2022-35986)
• Fixes a CHECK fail in DenseBincount (CVE-2022-35987)
• Fixes a CHECK fail in tf.linalg.matrix_rank (CVE-2022-35988)
• Fixes a CHECK fail in MaxPool (CVE-2022-35989)
• Fixes a CHECK fail in Conv2DBackpropInput (CVE-2022-35999)
• Fixes a CHECK fail in EmptyTensorList (CVE-2022-35998)
• Fixes a CHECK fail in tf.sparse.cross (CVE-2022-35997)
• Fixes a floating point exception in Conv2D (CVE-2022-35996)
• Fixes a CHECK fail in AudioSummaryV2 (CVE-2022-35995)
• Fixes a CHECK fail in CollectiveGather (CVE-2022-35994)
• Fixes a CHECK fail in SetSize (CVE-2022-35993)
• Fixes a CHECK fail in TensorListFromTensor (CVE-2022-35992)
• Fixes a CHECK fail in TensorListScatter and TensorListScatterV2 (CVE-2022-35991)

... (truncated)

Changelog

Sourced from tensorflow's changelog.

Release 2.9.2

This releases introduces several vulnerability fixes:

• Fixes a CHECK failure in tf.reshape caused by overflows (CVE-2022-35934)
• Fixes a CHECK failure in SobolSample caused by missing validation (CVE-2022-35935)
• Fixes an OOB read in Gather_nd op in TF Lite (CVE-2022-35937)
• Fixes a CHECK failure in TensorListReserve caused by missing validation (CVE-2022-35960)
• Fixes an OOB write in Scatter_nd op in TF Lite (CVE-2022-35939)
• Fixes an integer overflow in RaggedRangeOp (CVE-2022-35940)
• Fixes a CHECK failure in AvgPoolOp (CVE-2022-35941)
• Fixes a CHECK failures in UnbatchGradOp (CVE-2022-35952)
• Fixes a segfault TFLite converter on per-channel quantized transposed convolutions (CVE-2022-36027)
• Fixes a CHECK failures in AvgPool3DGrad (CVE-2022-35959)
• Fixes a CHECK failures in FractionalAvgPoolGrad (CVE-2022-35963)
• Fixes a segfault in BlockLSTMGradV2 (CVE-2022-35964)
• Fixes a segfault in LowerBound and UpperBound (CVE-2022-35965)
• Fixes a segfault in QuantizedAvgPool (CVE-2022-35966)
• Fixes a segfault in QuantizedAdd (CVE-2022-35967)
• Fixes a CHECK fail in AvgPoolGrad (CVE-2022-35968)
• Fixes a CHECK fail in Conv2DBackpropInput (CVE-2022-35969)
• Fixes a segfault in QuantizedInstanceNorm (CVE-2022-35970)
• Fixes a CHECK fail in FakeQuantWithMinMaxVars (CVE-2022-35971)
• Fixes a segfault in Requantize (CVE-2022-36017)
• Fixes a segfault in QuantizedBiasAdd (CVE-2022-35972)
• Fixes a CHECK fail in FakeQuantWithMinMaxVarsPerChannel (CVE-2022-36019)
• Fixes a segfault in QuantizedMatMul (CVE-2022-35973)
• Fixes a segfault in QuantizeDownAndShrinkRange (CVE-2022-35974)
• Fixes segfaults in QuantizedRelu and QuantizedRelu6 (CVE-2022-35979)
• Fixes a CHECK fail in FractionalMaxPoolGrad (CVE-2022-35981)
• Fixes a CHECK fail in RaggedTensorToVariant (CVE-2022-36018)
• Fixes a CHECK fail in QuantizeAndDequantizeV3 (CVE-2022-36026)
• Fixes a segfault in SparseBincount (CVE-2022-35982)
• Fixes a CHECK fail in Save and SaveSlices (CVE-2022-35983)
• Fixes a CHECK fail in ParameterizedTruncatedNormal (CVE-2022-35984)
• Fixes a CHECK fail in LRNGrad (CVE-2022-35985)
• Fixes a segfault in RaggedBincount (CVE-2022-35986)
• Fixes a CHECK fail in DenseBincount (CVE-2022-35987)
• Fixes a CHECK fail in tf.linalg.matrix_rank (CVE-2022-35988)
• Fixes a CHECK fail in MaxPool (CVE-2022-35989)
• Fixes a CHECK fail in Conv2DBackpropInput (CVE-2022-35999)
• Fixes a CHECK fail in EmptyTensorList (CVE-2022-35998)
• Fixes a CHECK fail in tf.sparse.cross (CVE-2022-35997)
• Fixes a floating point exception in Conv2D (CVE-2022-35996)
• Fixes a CHECK fail in AudioSummaryV2 (CVE-2022-35995)
• Fixes a CHECK fail in CollectiveGather (CVE-2022-35994)
• Fixes a CHECK fail in SetSize (CVE-2022-35993)
• Fixes a CHECK fail in TensorListFromTensor (CVE-2022-35992)
• Fixes a CHECK fail in TensorListScatter and TensorListScatterV2 (CVE-2022-35991)
• Fixes a CHECK fail in FakeQuantWithMinMaxVarsPerChannelGradient (CVE-2022-35990)

... (truncated)

Commits

• 18960c4 Merge pull request #57596 from tensorflow/fix-r2.9
• 850d5c0 Fix conflict resolution error
• 5a9ae6b Merge pull request #57572 from tensorflow/fix-r2.9
• 646ebe5 Fix invalid conflict resolution
• 8665d94 Merge pull request #57559 from tensorflow/cherrypick-4a6-on-r2.9
• 483bc53 Add ordered sparse index validation.
• 647d576 Merge pull request #57556 from tensorflow/cherrypick-e863eed-on-r2.9
• a03a5cd Add index check to ValidateSparseTensor.
• 85efe4b Merge pull request #57538 from tensorflow/r2.9-5c089662eb7
• 0468e56 Add ValidateSparseTensor function to sparse_utils.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #106.