chore(deps): update jax2onnx requirement from ==0.15.* to >=0.15,<0.17

[dependabot]

Updates the requirements on jax2onnx to permit the latest version.

Release notes

Sourced from jax2onnx's releases.

0.16.1

jax2onnx 0.16.1 — trustworthy model provenance, hardened CI supply chain, controlled dependency updates

• Recorded trustworthy model provenance: Populated exported ONNX models with the active jax2onnx producer version, with safe handling for source checkouts where installed package metadata may be unavailable. Generated artifacts now identify the converter build without changing graph structure or runtime semantics.

• Hardened and modernized GitHub Actions: Pinned third-party actions to immutable commit SHAs, declared least-privilege token permissions for CI and nightly workflows, and upgraded to the Node 24-based actions/checkout 7.0.1 and actions/setup-python 7.0.0 releases.

• Automated dependency maintenance with bounded noise: Grouped minor and patch updates for GitHub Actions and npm, rate-limited update traffic across Actions, Python, npm, and pre-commit dependencies, and kept major upgrades isolated for explicit review. Deferred separate uv automation until lockfile synchronization has a defined policy.

• Protected both supported JAX stacks: Retained JAX and JAXLIB 0.10.2 for Python 3.11 and 3.12 and 0.11.0 for Python 3.13 and 3.14 in the Poetry lockfile, with a CI guard that verifies the modern stack remains present.

• Refreshed the validation and tooling stack: Updated validation coverage to ONNX Runtime and onnxruntime-web 1.29.0, Playwright 1.62.1, pytest 9.1.1, and Ruff 0.16.4, and made the intended E4, E7, E9, and F lint baseline explicit.

Commits

• dc48957 release preparation
• d4f9785 Bump ruff from 0.9.10 to 0.16.4 (#253)
• 3a38d24 Bump pytest from 8.4.2 to 9.1.1 (#252)
• 6a6235e Bump onnxruntime from 1.28.0 to 1.29.0 (#254)
• 69961a5 Bump playwright from 1.60.0 to 1.62.1 in the minor-and-patch group (#250)
• d97a1c7 Bump actions/checkout from 6.1.0 to 7.0.1 (#251)
• 59bc3ef Bump actions/setup-python from 6.3.0 to 7.0.0 (#248)
• f7cbef4 docs: plan 0.16.1 hardening updates (#246)
• e5824d7 ci: pin GitHub Actions to commit SHAs (#242)
• 946cee5 ci: bump docs.yml actions/checkout and setup-python to v6 (#245)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)