From c2d3cc002a3a80985d0830a746f66602b82643dd Mon Sep 17 00:00:00 2001
From: laurenspriem <git@lrns.me>
Date: Wed, 12 Aug 2026 17:23:31 +0530
Subject: [PATCH] Prepare ONNX Runtime 1.29.0-r1 release

---
 CHANGELOG.md |  7 +++++++
 README.md    | 10 +++++-----
 versions.env |  6 +++---
 3 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1277298..562b460 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.29.0-r1 — 2026-08-12
+
+- Update the pinned upstream runtime to ONNX Runtime `v1.29.0` (`2e2543fbe9fae542f921d47a72d21d5a4ef0b710`).
+- Include the upstream 1.29 security hardening, runtime fixes, and WebGPU execution-provider improvements.
+- Revalidate the CoreML runtime-availability and public-vcpkg patches against the new upstream tag.
+- Build every supported target from source for the first stable 1.29 packaging revision.
+
 ## 1.28.0-r1 — 2026-07-28
 
 - Update the pinned upstream runtime to ONNX Runtime `v1.28.0` (`da9b5e364c465de65c49d91e696cd6485270757f`).
diff --git a/README.md b/README.md
index 22376c9..3102106 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
 # Custom ONNX Runtime Packaging
 
-Builds pinned, self-contained ONNX Runtime runtime packages for Android, iOS, Linux, macOS, and Windows without consuming Microsoft-provided ONNX Runtime binaries. The current upstream base is **ONNX Runtime 1.28.0** from `v1.28.0`; package-channel and toolchain pins live in [`versions.env`](versions.env).
+Builds pinned, self-contained ONNX Runtime runtime packages for Android, iOS, Linux, macOS, and Windows without consuming Microsoft-provided ONNX Runtime binaries. The current upstream base is **ONNX Runtime 1.29.0** from `v1.29.0`; package-channel and toolchain pins live in [`versions.env`](versions.env).
 
-This repository's release tags describe a **custom packaging** of upstream ONNX Runtime, not an upstream Microsoft release. A stable package revision is named `ort-<upstream-version>-r<revision>`; the first stable 1.28 release is therefore `ort-1.28.0-r1`.
+This repository's release tags describe a **custom packaging** of upstream ONNX Runtime, not an upstream Microsoft release. A stable package revision is named `ort-<upstream-version>-r<revision>`; the first stable 1.29 release is therefore `ort-1.29.0-r1`.
 
 ## Packages
 
@@ -52,7 +52,7 @@ Dispatch every release from `main` with the computed tag and prerelease setting.
 gh workflow run release.yml \
   --repo ente/ort-packaging \
   --ref main \
-  -f tag=ort-1.28.0-r2 \
+  -f tag=ort-1.29.0-r1 \
   -f prerelease=false
 ```
 
@@ -67,8 +67,8 @@ Custom-built binaries are stripped of or packaged without debug-symbol data. Lin
 Example:
 
 ```sh
-tag=ort-1.28.0-r1
-asset=onnxruntime-webgpu-android-1.28.0-r1.aar
+tag=ort-1.29.0-r1
+asset=onnxruntime-webgpu-android-1.29.0-r1.aar
 base=https://github.com/ente/ort-packaging/releases/download/$tag
 
 curl -fL -o "$asset" "$base/$asset"
diff --git a/versions.env b/versions.env
index 2f31e01..a05a502 100644
--- a/versions.env
+++ b/versions.env
@@ -1,7 +1,7 @@
-ORT_REF=v1.28.0
-ORT_VERSION=1.28.0
+ORT_REF=v1.29.0
+ORT_VERSION=1.29.0
 PACKAGE_CHANNEL=stable
-PACKAGE_REVISION=3
+PACKAGE_REVISION=1
 PYTHON_VERSION=3.12
 NODE_VERSION=20
 ANDROID_NDK_VERSION=28.0.13004108