{"id":1539,"name":"keras","ecosystem":"pip","repository_url":"https://github.com/keras-team/keras","issues_count":597,"created_at":"2025-06-06T15:01:45.666Z","updated_at":"2025-06-06T15:01:45.666Z","purl":"pkg:pypi/keras","metadata":{"id":2778788,"name":"keras","ecosystem":"pypi","description":"Multi-backend Keras","homepage":"https://keras.io/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/keras-team/keras","keywords_array":[],"namespace":null,"versions_count":109,"first_release_published_at":"2017-07-07T21:25:47.000Z","latest_release_published_at":"2025-05-19T22:58:28.000Z","latest_release_number":"3.10.0","last_synced_at":"2025-06-06T03:31:27.224Z","created_at":"2022-04-10T11:24:38.213Z","updated_at":"2025-06-06T03:31:27.224Z","registry_url":"https://pypi.org/project/keras/","install_command":"pip install keras --index-url https://pypi.org/simple","documentation_url":"https://keras.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 4 - Beta","Intended Audience :: Science/Research","Operating System :: MacOS","Operating System :: Unix","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.9","Topic :: Scientific/Engineering","Topic :: Software Development"],"normalized_name":"keras"},"repo_metadata":{"id":29478592,"uuid":"33015583","full_name":"keras-team/keras","owner":"keras-team","description":"Deep Learning for humans","archived":false,"fork":false,"pushed_at":"2024-04-14T15:28:21.000Z","size":41132,"stargazers_count":60873,"open_issues_count":203,"forks_count":19334,"subscribers_count":1906,"default_branch":"master","last_synced_at":"2024-04-14T15:33:17.733Z","etag":null,"topics":["data-science","deep-learning","jax","machine-learning","neural-networks","python","pytorch","tensorflow"],"latest_commit_sha":null,"homepage":"http://keras.io/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/keras-team.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2015-03-28T00:35:42.000Z","updated_at":"2024-04-15T17:52:57.175Z","dependencies_parsed_at":"2024-01-08T17:22:14.978Z","dependency_job_id":"61f53731-1e71-4a08-9c12-8a8a4b5c70c9","html_url":"https://github.com/keras-team/keras","commit_stats":{"total_commits":9080,"total_committers":1289,"mean_commits":"7.0442203258339795","dds":0.7068281938325991,"last_synced_commit":"5bc8488c0ea3f43c70c70ebca919093cd56066eb"},"previous_names":["fchollet/keras"],"tags_count":91,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/keras-team","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":217590801,"owners_count":16201401,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"keras-team","name":"Keras","uuid":"34455048","kind":"organization","description":"Deep Learning for humans","email":"keras-users@googlegroups.com","website":"https://keras.io/","location":"Worldwide","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/34455048?v=4","repositories_count":19,"last_synced_at":"2024-03-25T20:24:13.957Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/keras-team","funding_links":[],"total_stars":83823,"followers":1718,"following":0,"created_at":"2022-11-02T16:31:56.560Z","updated_at":"2024-03-25T20:24:14.561Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/keras-team","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/keras-team/repositories"},"tags":[{"name":"v3.2.1","sha":"29130d3a14d4b673339cbdaddb464359b84ba9c7","kind":"commit","published_at":"2024-04-10T20:30:34.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.2.1","html_url":"https://github.com/keras-team/keras/releases/tag/v3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.2.1/manifests"},{"name":"v3.2.0","sha":"f77b020e497a353b644df3aeebc97c831c8057fc","kind":"commit","published_at":"2024-04-08T19:45:17.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.2.0","html_url":"https://github.com/keras-team/keras/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.2.0/manifests"},{"name":"v3.1.1","sha":"42a1535ed7d3d75711a11d295f58a2dc9a59fdae","kind":"commit","published_at":"2024-03-19T18:20:34.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.1.1","html_url":"https://github.com/keras-team/keras/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"0d0be6aadb7d9bfafaf8bea895789f4aa3b0abf7","kind":"commit","published_at":"2024-03-11T13:54:49.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.1.0","html_url":"https://github.com/keras-team/keras/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.1.0/manifests"},{"name":"v3.0.5","sha":"e6e62405fa1b4444102601636d871610d91e5783","kind":"commit","published_at":"2024-02-14T21:50:35.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.5","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.5/manifests"},{"name":"v3.0.4","sha":"19187d89b4e1cdf716269cf9142f805afae5541e","kind":"commit","published_at":"2024-01-20T19:40:40.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.4","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.4/manifests"},{"name":"v3.0.3","sha":"096b848e63072328f8812a45061a239f52ba303c","kind":"commit","published_at":"2024-01-20T01:36:07.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.3","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.3/manifests"},{"name":"v3.0.2","sha":"fe2f54aa5bc42fb23a96449cf90434ab9bb6a2cd","kind":"commit","published_at":"2023-12-21T06:10:45.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.2","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.2/manifests"},{"name":"v3.0.1","sha":"037ec9f5fc61a53c6e1f4c02b7bf1443429dcd45","kind":"commit","published_at":"2023-12-06T19:41:01.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.1","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"9c675a9a45e5e8244163fea82efc6066722608a1","kind":"commit","published_at":"2023-11-27T23:53:15.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v3.0.0","html_url":"https://github.com/keras-team/keras/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v3.0.0/manifests"},{"name":"v2.15.0","sha":"601488fd4c1468ae7872e132e0f1c9843df54182","kind":"commit","published_at":"2023-11-06T23:55:08.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.15.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.15.0/manifests"},{"name":"v2.14.0","sha":"68f9af408a1734704746f7e6fa9cfede0d6879d8","kind":"commit","published_at":"2023-09-11T17:01:28.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.14.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.14.0/manifests"},{"name":"v2.14.0-rc0","sha":"bb9d7ff6b857736e72daee3b1fbece585bb26583","kind":"commit","published_at":"2023-08-02T22:27:22.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.14.0-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.14.0-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.14.0-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.14.0-rc0/manifests"},{"name":"v2.13.1-rc1","sha":"b3ffea6602dbbb481e82312baa24fe657de83e11","kind":"commit","published_at":"2023-06-27T17:22:22.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.13.1-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.13.1-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1-rc1/manifests"},{"name":"v2.13.1","sha":"b3ffea6602dbbb481e82312baa24fe657de83e11","kind":"commit","published_at":"2023-06-27T17:22:22.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.13.1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1/manifests"},{"name":"v2.13.1-rc0","sha":"87db506b70e52398801bc9ee38a1d32c21a01d2e","kind":"commit","published_at":"2023-05-02T18:00:30.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.13.1-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.13.1-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.13.1-rc0/manifests"},{"name":"v2.12.0-rc1","sha":"f9336cc5114b4a9429a242deb264b707379646b7","kind":"commit","published_at":"2023-02-23T18:12:17.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.12.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.12.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.12.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.12.0-rc1/manifests"},{"name":"v2.12.0","sha":"f9336cc5114b4a9429a242deb264b707379646b7","kind":"commit","published_at":"2023-02-23T18:12:17.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.12.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.12.0/manifests"},{"name":"v2.11.0-rc3","sha":"e6784e4302c7b8cd116b74a784f4b78d60e83c26","kind":"commit","published_at":"2022-11-08T22:37:12.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.11.0-rc3","html_url":"https://github.com/keras-team/keras/releases/tag/v2.11.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc3/manifests"},{"name":"v2.11.0","sha":"e6784e4302c7b8cd116b74a784f4b78d60e83c26","kind":"commit","published_at":"2022-11-08T22:37:12.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.11.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0/manifests"},{"name":"v2.11.0-rc2","sha":"7411db0765b64970ed32e6123efcf007c005be0c","kind":"commit","published_at":"2022-10-24T18:53:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.11.0-rc2","html_url":"https://github.com/keras-team/keras/releases/tag/v2.11.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc2/manifests"},{"name":"v2.11.0-rc1","sha":"b12b9a1a905b58a26468443022c10686079b1e8e","kind":"commit","published_at":"2022-10-17T21:18:54.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.11.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.11.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.11.0-rc1/manifests"},{"name":"v2.10.0-rc1","sha":"b80dd12da9c0bc3f569eca3455e77762cf2ee8ef","kind":"commit","published_at":"2022-08-02T17:50:20.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.10.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.10.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.10.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.10.0-rc1/manifests"},{"name":"v2.10.0","sha":"b80dd12da9c0bc3f569eca3455e77762cf2ee8ef","kind":"commit","published_at":"2022-08-02T17:50:20.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.10.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.10.0/manifests"},{"name":"v2.9.0","sha":"07e13740fd181fc3ddec7d9a594d8a08666645f6","kind":"commit","published_at":"2022-04-22T17:34:55.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.9.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0/manifests"},{"name":"v2.9.0-rc2","sha":"07e13740fd181fc3ddec7d9a594d8a08666645f6","kind":"commit","published_at":"2022-04-22T17:34:55.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.9.0-rc2","html_url":"https://github.com/keras-team/keras/releases/tag/v2.9.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc2/manifests"},{"name":"v2.9.0-rc1","sha":"27e39663c53729b9e1c8cb6cf12c4f717c83b61d","kind":"commit","published_at":"2022-04-07T23:23:08.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.9.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.9.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc1/manifests"},{"name":"v2.9.0-rc0","sha":"55476a86ed482d2e1f473dc629848d2068225c73","kind":"commit","published_at":"2022-03-31T17:39:27.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.9.0-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.9.0-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.9.0-rc0/manifests"},{"name":"v2.8.0","sha":"d8fcb9d4d4dad45080ecfdd575483653028f8eda","kind":"commit","published_at":"2022-01-06T18:16:11.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.8.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0/manifests"},{"name":"v2.8.0-rc1","sha":"d8fcb9d4d4dad45080ecfdd575483653028f8eda","kind":"commit","published_at":"2022-01-06T18:16:11.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.8.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.8.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0-rc1/manifests"},{"name":"v2.8.0-rc0","sha":"e812c17f6ab32e6cc8229d502a6b13c4eedd08c0","kind":"commit","published_at":"2021-12-21T22:02:18.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.8.0-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.8.0-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.8.0-rc0/manifests"},{"name":"v2.7.0-rc2","sha":"2c48a3b38b6b6139be2da501982fd2f61d7d48fe","kind":"commit","published_at":"2021-10-27T00:56:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.7.0-rc2","html_url":"https://github.com/keras-team/keras/releases/tag/v2.7.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc2/manifests"},{"name":"v2.7.0","sha":"2c48a3b38b6b6139be2da501982fd2f61d7d48fe","kind":"commit","published_at":"2021-10-27T00:56:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.7.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0/manifests"},{"name":"v2.7,0","sha":"2c48a3b38b6b6139be2da501982fd2f61d7d48fe","kind":"commit","published_at":"2021-10-27T00:56:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.7,0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.7,0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7,0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7,0/manifests"},{"name":"v2.7.0-rc1","sha":"87c5f615f58f4e0a5e2b6b728e76cca995cd70cd","kind":"commit","published_at":"2021-10-05T17:33:28.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.7.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.7.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc1/manifests"},{"name":"v2.7.0-rc0","sha":"89fd0f5bd1595e2697faa427f2c7485b10e7cc02","kind":"commit","published_at":"2021-09-23T18:18:08.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.7.0-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.7.0-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.7.0-rc0/manifests"},{"name":"v2.6.0-rc3","sha":"3a33d53ea4aca312c5ad650b4883d9bac608a32e","kind":"commit","published_at":"2021-08-04T03:40:32.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.6.0-rc3","html_url":"https://github.com/keras-team/keras/releases/tag/v2.6.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc3/manifests"},{"name":"v2.6.0","sha":"3a33d53ea4aca312c5ad650b4883d9bac608a32e","kind":"commit","published_at":"2021-08-04T03:40:32.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.6.0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0/manifests"},{"name":"v2.6.0-rc2","sha":"433eaa00677c08bf01bc14f9767af365bd2a03fc","kind":"commit","published_at":"2021-07-08T18:20:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.6.0-rc2","html_url":"https://github.com/keras-team/keras/releases/tag/v2.6.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc2/manifests"},{"name":"v2.6.0-rc1","sha":"d1e258965e662f2524c9ca4e9af9379b96763a08","kind":"commit","published_at":"2021-06-30T17:27:58.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.6.0-rc1","html_url":"https://github.com/keras-team/keras/releases/tag/v2.6.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc1/manifests"},{"name":"v2.6.0-rc0","sha":"71d6d6eb0412f4c66ff40cf2393bb157cec281e0","kind":"commit","published_at":"2021-06-25T08:48:31.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/v2.6.0-rc0","html_url":"https://github.com/keras-team/keras/releases/tag/v2.6.0-rc0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/v2.6.0-rc0/manifests"},{"name":"2.4.0","sha":"b5cb82c689eac0e50522be9d2f55093dadfba24c","kind":"commit","published_at":"2020-06-17T21:32:46.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.4.0","html_url":"https://github.com/keras-team/keras/releases/tag/2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.4.0/manifests"},{"name":"2.3.1","sha":"f295e8ee39d4ba841ac281a9337d69c7bc5e0eb6","kind":"commit","published_at":"2019-10-07T20:03:26.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.3.1","html_url":"https://github.com/keras-team/keras/releases/tag/2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.3.1/manifests"},{"name":"2.3.0","sha":"a0335a321c866ac1412b6cb5924fadf748ea2345","kind":"commit","published_at":"2019-09-17T17:01:48.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.3.0","html_url":"https://github.com/keras-team/keras/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.3.0/manifests"},{"name":"2.2.5","sha":"fb7f49ef5b07f2ceee1d2d6c45f273df6672734c","kind":"commit","published_at":"2019-08-22T00:58:08.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.5","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.5/manifests"},{"name":"2.2.4","sha":"1931e2186843ad3ca2507a3b16cb09a7a3db5285","kind":"commit","published_at":"2018-10-03T20:58:20.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.4","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.4/manifests"},{"name":"2.2.3","sha":"ecbf73f72b59f8f5c8746de63270aa1fb3ad7524","kind":"commit","published_at":"2018-10-01T19:00:01.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.3","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.3/manifests"},{"name":"2.2.2","sha":"54386efa549f850dff13f79fc3af67799a4e5d4f","kind":"commit","published_at":"2018-07-28T19:32:13.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.2","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.2/manifests"},{"name":"2.2.1","sha":"eb2c1fdc2d5f841e328993e3bd0e1a3de268fe20","kind":"commit","published_at":"2018-07-27T22:06:51.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.1","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.1/manifests"},{"name":"2.2.0","sha":"632560d91286bf278228de72e7ce64f6c5aa530c","kind":"commit","published_at":"2018-06-06T18:53:18.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.2.0","html_url":"https://github.com/keras-team/keras/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.2.0/manifests"},{"name":"2.1.6","sha":"b09ec1c9bf827622a5eebb94ba0af5bf202ca359","kind":"commit","published_at":"2018-04-23T19:43:48.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.6","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.6/manifests"},{"name":"2.1.5","sha":"2fae46169239287796d44523deb5e2ac38712ba3","kind":"commit","published_at":"2018-03-06T22:05:39.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.5","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.5/manifests"},{"name":"2.1.4","sha":"5d54eeb3967f3364955478c9520ed9ba05c4f9f2","kind":"commit","published_at":"2018-02-13T22:52:55.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.4","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.4/manifests"},{"name":"2.1.3","sha":"13402f1d2d55c55087d84d80769cefe8b890c48f","kind":"commit","published_at":"2018-01-16T04:55:08.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.3","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.3/manifests"},{"name":"2.1.2","sha":"26d5e100148272166868da8f817e1a4fb49e34cc","kind":"commit","published_at":"2017-12-01T18:12:33.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.2","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.2/manifests"},{"name":"2.1.1","sha":"018e55be7c77f168abaea898233ccec035bb39d0","kind":"commit","published_at":"2017-11-14T21:40:18.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.1","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.1/manifests"},{"name":"2.1.0","sha":"e3e97c401aa8251e957b73fba8ed4d108c106f12","kind":"commit","published_at":"2017-11-13T19:52:31.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.1.0","html_url":"https://github.com/keras-team/keras/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.1.0/manifests"},{"name":"2.0.9","sha":"c25e06f05a245ebf127ed3856eea19a7c73a9ab9","kind":"commit","published_at":"2017-11-01T20:03:25.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.9","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.9/manifests"},{"name":"2.0.8","sha":"c7dd36a1bab362de478f528078261439b803aaa7","kind":"commit","published_at":"2017-08-25T19:01:46.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.8","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.8/manifests"},{"name":"2.0.7","sha":"14a12e94c8edb683ae0c85d7d2db54724e902a6f","kind":"commit","published_at":"2017-08-21T22:13:50.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.7","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.7/manifests"},{"name":"2.0.6","sha":"f120a56009606f4f07711511d1d7df2f85dfbc08","kind":"commit","published_at":"2017-07-07T20:48:29.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.6","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.6/manifests"},{"name":"2.0.5","sha":"d4b618bf23d83b1a7306bc6816bd509c23bba15d","kind":"commit","published_at":"2017-06-12T18:46:21.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.5","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.5/manifests"},{"name":"2.0.4","sha":"c627fa5bbdb37d9f196486b27b5cec7445ab7704","kind":"commit","published_at":"2017-04-29T23:18:54.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.4","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.4/manifests"},{"name":"2.0.3","sha":"0fb0c22f3998c7c92f47837b8cd54009a3a19f75","kind":"tag","published_at":"2017-04-09T22:26:30.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.3","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.3/manifests"},{"name":"2.0.2","sha":"576f8fe8e6a21b7094316d36c315c2f6bdb487cc","kind":"tag","published_at":"2017-03-21T15:38:38.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.2","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.2/manifests"},{"name":"2.0.1","sha":"9cf7f816f28a6ac7d7a4264ae015addd72e57321","kind":"tag","published_at":"2017-03-16T18:40:34.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.1","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.1/manifests"},{"name":"2.0.0","sha":"f78d417f948cdfaaca22fabf90e01a76db126237","kind":"tag","published_at":"2017-03-14T15:34:11.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/2.0.0","html_url":"https://github.com/keras-team/keras/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/2.0.0/manifests"},{"name":"1.2.2","sha":"4fa7e5d454dd4f3f33f1d756a2a8659f2e789141","kind":"tag","published_at":"2017-02-10T17:00:33.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.2.2","html_url":"https://github.com/keras-team/keras/releases/tag/1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.2/manifests"},{"name":"1.2.1","sha":"262e5751f474f51197ea13e3457bf348c7d6ff13","kind":"tag","published_at":"2017-01-19T23:59:17.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.2.1","html_url":"https://github.com/keras-team/keras/releases/tag/1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.1/manifests"},{"name":"1.2.0","sha":"12d068f67554f49707e34cca62981d1196c76aff","kind":"tag","published_at":"2016-12-19T23:34:44.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.2.0","html_url":"https://github.com/keras-team/keras/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.2.0/manifests"},{"name":"1.1.2","sha":"2ddd2bd557bd20e2f6856621bf22e8da8cb6acc8","kind":"tag","published_at":"2016-11-26T04:53:33.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.1.2","html_url":"https://github.com/keras-team/keras/releases/tag/1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.2/manifests"},{"name":"1.1.1","sha":"c6d2ccd453bc71144ba891abc6876772144985c4","kind":"tag","published_at":"2016-10-31T20:13:35.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.1.1","html_url":"https://github.com/keras-team/keras/releases/tag/1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.1/manifests"},{"name":"1.1.0","sha":"b2e3780e8cf864508d29df554d1cd26aa44824cd","kind":"tag","published_at":"2016-09-19T20:19:03.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.1.0","html_url":"https://github.com/keras-team/keras/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.1.0/manifests"},{"name":"1.0.8","sha":"d0659327bd2d70e47d8608ea9a48a9b9f4cd4a3d","kind":"tag","published_at":"2016-08-28T00:05:34.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.8","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.8/manifests"},{"name":"1.0.7","sha":"447445388ea934f991eaef033beba5c512c5945c","kind":"tag","published_at":"2016-08-08T18:24:22.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.7","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.7/manifests"},{"name":"1.0.6","sha":"892d9fae846b2e15e73de075e7290a8bfcfeb145","kind":"tag","published_at":"2016-07-16T19:25:26.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.6","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.6/manifests"},{"name":"1.0.5","sha":"4d404d1a5472bde5bef703bf8976022505d04ce9","kind":"tag","published_at":"2016-06-27T19:01:48.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.5","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.5/manifests"},{"name":"1.0.4","sha":"97e31b6090b809cc1987f7d16a1dc55379edaf42","kind":"tag","published_at":"2016-06-06T18:54:58.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.4","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"8c2a573ebfef0fce5061c611bacbcae4dd5adc73","kind":"tag","published_at":"2016-05-15T20:13:40.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.3","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"5467107fc910d516c516b2b838624da376c1ba0d","kind":"tag","published_at":"2016-04-29T17:40:11.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.2","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"7a12fd0f8597760cf8e1238a9b021e247693517b","kind":"tag","published_at":"2016-04-16T21:13:05.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.1","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"df42e997b7d0f7c5e417c6a5a452c6ddd51e4c24","kind":"tag","published_at":"2016-04-11T16:34:41.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/1.0.0","html_url":"https://github.com/keras-team/keras/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/1.0.0/manifests"},{"name":"0.3.3","sha":"bdd70d06d3590828deeaa6e41c08bba1e6c74abc","kind":"tag","published_at":"2016-03-31T18:15:51.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.3.3","html_url":"https://github.com/keras-team/keras/releases/tag/0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.3/manifests"},{"name":"0.3.2","sha":"657b9fb48e93b59083d2e0b8a5e4daf237179dbc","kind":"tag","published_at":"2016-02-09T21:56:48.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.3.2","html_url":"https://github.com/keras-team/keras/releases/tag/0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.2/manifests"},{"name":"0.3.1","sha":"3f623df0209ef591a3c49626bdd83e5043484e31","kind":"tag","published_at":"2016-01-03T17:39:59.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.3.1","html_url":"https://github.com/keras-team/keras/releases/tag/0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.1/manifests"},{"name":"0.3.0","sha":"df860fdb94c63cf7898315277fe951d1c0ba16a9","kind":"tag","published_at":"2015-12-01T17:44:45.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.3.0","html_url":"https://github.com/keras-team/keras/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.3.0/manifests"},{"name":"0.2.0","sha":"d2189fef32470b3dce05b4765a40b501174bd0d4","kind":"tag","published_at":"2015-10-11T00:53:43.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.2.0","html_url":"https://github.com/keras-team/keras/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.2.0/manifests"},{"name":"0.1.3","sha":"2c30d503eada5cb5429b6f6d8ced0e996760e40e","kind":"tag","published_at":"2015-08-27T22:56:14.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.1.3","html_url":"https://github.com/keras-team/keras/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.3/manifests"},{"name":"0.1.2","sha":"6a4aab453f42bda2368e51bc707c22c40c384b34","kind":"tag","published_at":"2015-07-18T02:44:24.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.1.2","html_url":"https://github.com/keras-team/keras/releases/tag/0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.2/manifests"},{"name":"0.1.1","sha":"fabfdb868eb5d6b032dcaa9f71844743e57f69ca","kind":"tag","published_at":"2015-06-14T00:53:48.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.1.1","html_url":"https://github.com/keras-team/keras/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"161d47b4b8b181eb2cb201e6fbcb6ea59b71afd8","kind":"tag","published_at":"2015-06-14T00:20:53.000Z","download_url":"https://codeload.github.com/keras-team/keras/tar.gz/0.1.0","html_url":"https://github.com/keras-team/keras/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/keras-team%2Fkeras/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2024-09-07T16:05:37.861Z","dependent_packages_count":587,"downloads":15542576,"downloads_period":"last-month","dependent_repos_count":24558,"rankings":{"downloads":0.0671304660431726,"dependent_repos_count":0.04768830921099692,"dependent_packages_count":0.05154005726265437,"stargazers_count":0.036133065056024594,"forks_count":0.029896901543817304,"docker_downloads_count":0.2613686177910408,"average":0.0822929028179511},"purl":"pkg:pypi/keras","advisories":[{"uuid":"GSA_kwCzR0hTQS14NHdmLTY3OGgtMnBtcc4AA7DW","url":"https://github.com/advisories/GHSA-x4wf-678h-2pmq","title":"Keras code injection vulnerability","description":"A arbitrary code injection vulnerability in TensorFlow's Keras framework (\u003c2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-04-16T21:31:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-3660","https://kb.cert.org/vuls/id/253266","https://www.kb.cert.org/vuls/id/253266","https://github.com/keras-team/keras/compare/r2.12...r2.13","https://github.com/advisories/GHSA-x4wf-678h-2pmq"],"source_kind":"github","identifiers":["GHSA-x4wf-678h-2pmq","CVE-2024-3660"],"repository_url":"https://github.com/keras-team/keras","blast_radius":40.8287948537689,"packages":[{"versions":[{"first_patched_version":"2.13.1rc0","vulnerable_version_range":"\u003c 2.13.1rc0"}],"ecosystem":"pypi","package_name":"keras"}],"created_at":"2024-08-02T17:05:30.810Z","updated_at":"2024-08-02T16:07:46.000Z","epss_percentage":0.00296,"epss_percentile":0.52404},{"uuid":"GSA_kwCzR0hTQS01NDc4LXYydzYtYzZxN84ABFRo","url":"https://github.com/advisories/GHSA-5478-v2w6-c6q7","title":"Duplicate Advisory: Keras arbitrary code execution vulnerability","description":"# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-48g7-3x6r-xfhp. This link is maintained to preserve external references.\n\n# Original Description\n\nThe Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-03-11T09:30:30.000Z","withdrawn_at":"2025-03-11T20:07:23.000Z","classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-1550","https://github.com/keras-team/keras/pull/20751","https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903","https://github.com/keras-team/keras/releases/tag/v3.9.0","https://github.com/advisories/GHSA-5478-v2w6-c6q7"],"source_kind":"github","identifiers":["GHSA-5478-v2w6-c6q7"],"repository_url":"https://github.com/keras-team/keras","blast_radius":32.04840886371107,"packages":[{"versions":[{"first_patched_version":"3.9.0","vulnerable_version_range":"\u003c 3.9.0"}],"ecosystem":"pypi","package_name":"keras"}],"created_at":"2025-03-11T17:08:27.287Z","updated_at":"2025-03-11T20:07:24.000Z","epss_percentage":null,"epss_percentile":null},{"uuid":"GSA_kwCzR0hTQS1jamdxLTVxbXctcmNqNs4ABDGI","url":"https://github.com/advisories/GHSA-cjgq-5qmw-rcj6","title":"keras Path Traversal vulnerability","description":"An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-01-08T18:30:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-55459","https://github.com/keras-team/keras","https://keras.io","https://river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32","https://github.com/keras-team/keras/blob/8f5592bcb61ff48c96560c8923e482db1076b54a/keras/src/utils/file_utils.py#L115","https://github.com/advisories/GHSA-cjgq-5qmw-rcj6"],"source_kind":"github","identifiers":["GHSA-cjgq-5qmw-rcj6","CVE-2024-55459"],"repository_url":"https://github.com/keras-team/keras","blast_radius":24.146061472659024,"packages":[{"versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 3.7.0"}],"ecosystem":"pypi","package_name":"keras"}],"created_at":"2025-01-08T20:08:06.397Z","updated_at":"2025-05-15T01:08:51.878Z","epss_percentage":0.00038,"epss_percentile":0.10517},{"uuid":"GSA_kwCzR0hTQS00OGc3LTN4NnIteGZocM4ABFUc","url":"https://github.com/advisories/GHSA-48g7-3x6r-xfhp","title":"Arbitrary Code Execution via Crafted Keras Config for Model Loading","description":"### Impact\n\nThe Keras `Model.load_model` function permits arbitrary code execution, even with `safe_mode=True`, through a manually constructed, malicious `.keras` archive. By altering the `config.json` file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.\n\n### Patches\n\nThis problem is fixed starting with version `3.9`.\n\n### Workarounds\n\nOnly load models from trusted sources and model archives created with Keras.\n\n### References\n\n- https://www.cve.org/cverecord?id=CVE-2025-1550\n- https://github.com/keras-team/keras/pull/20751","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-03-11T20:07:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":["https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp","https://nvd.nist.gov/vuln/detail/CVE-2025-1550","https://github.com/keras-team/keras/pull/20751","https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903","https://github.com/keras-team/keras/releases/tag/v3.9.0","https://github.com/advisories/GHSA-48g7-3x6r-xfhp"],"source_kind":"github","identifiers":["GHSA-48g7-3x6r-xfhp","CVE-2025-1550"],"repository_url":"https://github.com/keras-team/keras","blast_radius":32.04840886371107,"packages":[{"versions":[{"first_patched_version":"3.9.0","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.9.0"}],"ecosystem":"pypi","package_name":"keras"}],"created_at":"2025-03-11T21:08:03.026Z","updated_at":"2025-03-11T20:07:33.000Z","epss_percentage":0.00009,"epss_percentile":0.00658}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/keras","docker_dependents_count":1476,"docker_downloads_count":1152731159,"usage_url":"https://repos.ecosyste.ms/usage/pypi/keras","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/keras/dependencies","status":null,"funding_links":[],"critical":false,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/keras/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/keras/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/keras/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/keras/related_packages","maintainers":[{"uuid":"tf-nightly","login":"tf-nightly","name":null,"email":null,"url":null,"packages_count":24,"html_url":"https://pypi.org/user/tf-nightly/","role":null,"created_at":"2022-12-12T16:20:01.163Z","updated_at":"2022-12-12T16:20:01.163Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/tf-nightly/packages"},{"uuid":"fchollet","login":"fchollet","name":null,"email":null,"url":null,"packages_count":19,"html_url":"https://pypi.org/user/fchollet/","role":null,"created_at":"2022-12-12T16:20:00.559Z","updated_at":"2022-12-12T16:20:00.559Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/fchollet/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":690322,"maintainers_count":292759,"namespaces_count":0,"keywords_count":228590,"github":"pypi","metadata":{"funded_packages_count":48950},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-06-06T05:32:09.692Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},"unique_repositories_count":407,"unique_repositories_count_past_30_days":5,"recent_issues":[{"uuid":"4448778454","node_id":"PR_kwDOKgWbms7bqAmp","number":171,"state":"open","title":"build(deps): update keras requirement from \u003e=3.14.0 to \u003e=3.14.1","user":"dependabot[bot]","labels":["🤖 Dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T19:44:01.000Z","updated_at":"2026-05-14T19:45:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): update","packages":[{"name":"keras","old_version":"\u003e=3.14.0","new_version":"\u003e=3.14.1","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.14.1\u003c/h2\u003e\n\u003ch2\u003eSaving \u0026amp; Reloading\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHarden path and link resolution when extracting files from archives (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22839\"\u003e#22839\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eFixed link resolution bug when validating links extracted from TAR archives.\u003c/li\u003e\n\u003cli\u003eFixed path confusion bug when validating files extracted from ZIP and TAR archives (including \u003ccode\u003e.keras\u003c/code\u003e files).\u003c/li\u003e\n\u003cli\u003eAdded path validation when extracting assets from Orbax checkpoints.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHarden H5 validation code and apply it to legacy .h5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22801\"\u003e#22801\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eDisallow external links and virtual datasets in H5 files.\u003c/li\u003e\n\u003cli\u003eAlso apply all the validation to the legacy .h5 file extraction.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eImprove validation and error reporting in functional model deserialization (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22800\"\u003e#22800\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eDetect loops in the graph when deserializing a functional model.\u003c/li\u003e\n\u003cli\u003eImprove error reporting for missing nodes in the graph.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFix data sharding logic in \u003ccode\u003eModelParallel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22179\"\u003e#22179\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix regression with metrics passed to \u003ccode\u003ecompile\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22663\"\u003e#22663\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a regression introduced in \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22308\"\u003e#22308\u003c/a\u003e where \u003ccode\u003ey_pred\u003c/code\u003e (as a list) and \u003ccode\u003ey_true\u003c/code\u003e (as a dict with keys matching Functional model output names) were not ordered identically and could be paired incorrectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix regression preventing compilation with the \u003ccode\u003eL1L2\u003c/code\u003e regularizer (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22629\"\u003e#22629\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix test compatibility with JAX 0.10.0 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22694\"\u003e#22694\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/b7f0905d8ae5076ec501fe58f8b8c85fa7d22d43\"\u003e\u003ccode\u003eb7f0905\u003c/code\u003e\u003c/a\u003e Patch release 3.14.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22846\"\u003e#22846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Smartappli/IA-CLASSIFICATION/pull/171","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Smartappli%2FIA-CLASSIFICATION/issues/171","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/171/packages"},{"uuid":"4415880216","node_id":"PR_kwDOSZO7R87aAQUL","number":2,"state":"closed","title":"chore(deps): bump keras from 3.12.2 to 3.13.2 in the uv group across 1 directory","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-10T14:40:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-10T14:32:12.000Z","updated_at":"2026-05-10T14:40:28.000Z","time_to_close":487,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"keras","old_version":"3.12.2","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"the uv group across 1 directory","ecosystem":"pip"},"body":"Bumps the uv group with 1 update in the / directory: [keras](https://github.com/keras-team/keras).\n\nUpdates `keras` from 3.12.2 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.12.2...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=uv\u0026previous-version=3.12.2\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gandli/data-annotation-course/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/gandli/data-annotation-course/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gandli%2Fdata-annotation-course/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"4375537989","node_id":"PR_kwDOSTyfL87X9DJ7","number":4,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T09:49:14.000Z","updated_at":"2026-05-04T09:49:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/tanakahiroshi92/AI_Object_Detection_Yolov5/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/tanakahiroshi92%2FAI_Object_Detection_Yolov5/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"4345172837","node_id":"PR_kwDOJ5EiO87Wb62X","number":297,"state":"closed","title":"Bump the pip group across 3 directories with 3 updates","user":"dependabot[bot]","labels":["dependencies","Stale","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-22T06:06:37.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-28T17:51:15.000Z","updated_at":"2026-05-22T06:06:47.000Z","time_to_close":2031322,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":3,"packages":[{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the / directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\nBumps the pip group with 3 updates in the /docs/docs/book/src directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\nBumps the pip group with 3 updates in the /pkscreener directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pkjmesra/PKScreener/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/pkjmesra/PKScreener/pull/297","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pkjmesra%2FPKScreener/issues/297","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/297/packages"},{"uuid":"4319178817","node_id":"PR_kwDOSK8tTs7VI9k2","number":10,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-23T22:10:12.000Z","updated_at":"2026-04-23T22:10:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jramir7254/yolo/pull/10","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jramir7254%2Fyolo/issues/10","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10/packages"},{"uuid":"4280110154","node_id":"PR_kwDORyPdLs7TL7U2","number":5,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-17T04:28:33.000Z","updated_at":"2026-04-17T04:28:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/maheshchandracipet-stack/yolov5/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/maheshchandracipet-stack%2Fyolov5/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"4265444270","node_id":"PR_kwDOD_V1dM7SeagC","number":2059,"state":"open","title":"Bump keras from 3.8.0 to 3.13.2 in /public_dropin_environments_sandbox/fips_python3_keras","user":"dependabot[bot]","labels":["Ready for Review","dependencies","python","Needs Review: GenAI Systems"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:10:06.000Z","updated_at":"2026-04-15T00:10:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.8.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/public_dropin_environments_sandbox/fips_python3_keras","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.8.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.8.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.8.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/datarobot/datarobot-user-models/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- CURSOR_SUMMARY --\u003e\n---\n\n\u003e [!NOTE]\n\u003e **Medium Risk**\n\u003e Upgrading a core ML dependency (`keras`) may introduce runtime/serialization behavior changes that could affect model loading or training in this environment.\n\u003e \n\u003e **Overview**\n\u003e Updates the `public_dropin_environments_sandbox/fips_python3_keras` pinned dependencies by bumping `keras` from `3.8.0` to `3.13.2` in `requirements.txt`.\n\u003e \n\u003e \u003csup\u003eReviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 92a626366aeb13661811fea55e82fe4a2dfe350e. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).\u003c/sup\u003e\n\u003c!-- /CURSOR_SUMMARY --\u003e","html_url":"https://github.com/datarobot/datarobot-user-models/pull/2059","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/datarobot%2Fdatarobot-user-models/issues/2059","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2059/packages"},{"uuid":"4265442637","node_id":"PR_kwDOMRzff87SeaMK","number":1051,"state":"open","title":"Bump keras from 3.6.0 to 3.13.2 in /sugarcane-disease-api","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:09:30.000Z","updated_at":"2026-04-15T00:09:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/sugarcane-disease-api","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.6.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.6.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/manikumarreddyu/AgroTech-AI/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/manikumarreddyu/AgroTech-AI/pull/1051","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/manikumarreddyu%2FAgroTech-AI/issues/1051","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1051/packages"},{"uuid":"4265433368","node_id":"PR_kwDORPaGtc7SeYcI","number":59,"state":"open","title":"Bump keras from 3.11.3 to 3.13.2 in /wandb/run-20251212_092456-qc7gti9l/files","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:06:15.000Z","updated_at":"2026-04-15T00:06:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.11.3","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/wandb/run-20251212_092456-qc7gti9l/files","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.11.3 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.11.3...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.11.3\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/arthrod/NerGuard/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/arthrod/NerGuard/pull/59","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/arthrod%2FNerGuard/issues/59","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/59/packages"},{"uuid":"4265413299","node_id":"PR_kwDOL5R9Yc7SeUfY","number":1933,"state":"open","title":"Bump keras from 2.7.0 to 3.13.2 in /blockchain_integration/pi_network/pibrain","user":"dependabot[bot]","labels":["python","dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-14T23:59:05.000Z","updated_at":"2026-04-14T23:59:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"2.7.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/blockchain_integration/pi_network/pibrain","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 2.7.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v2.7.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=2.7.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/KOSASIH/pi-nexus-autonomous-banking-network/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/KOSASIH/pi-nexus-autonomous-banking-network/pull/1933","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/KOSASIH%2Fpi-nexus-autonomous-banking-network/issues/1933","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1933/packages"},{"uuid":"4265374616","node_id":"PR_kwDOD0QF687SeMp4","number":14,"state":"closed","title":"Bump keras from 2.2.4 to 3.13.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-15T00:48:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-14T23:47:06.000Z","updated_at":"2026-04-15T00:48:17.000Z","time_to_close":3669,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"2.2.4","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 2.2.4 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/2.2.4...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=2.2.4\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Taehyung93/tacoton2_wavenet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Taehyung93/tacoton2_wavenet/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Taehyung93%2Ftacoton2_wavenet/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"},{"uuid":"4265315131","node_id":"PR_kwDOAOyKIc7SeAfe","number":64,"state":"closed","title":"Bump keras from 3.9.0 to 3.13.2 in /docker","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-15T02:58:42.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-14T23:29:08.000Z","updated_at":"2026-04-15T02:58:48.000Z","time_to_close":12574,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.9.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/docker","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.9.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.9.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.9.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/awsteiner/o2scl/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/awsteiner/o2scl/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/awsteiner%2Fo2scl/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"},{"uuid":"4257736688","node_id":"PR_kwDOLCvp4s7SHFMy","number":126,"state":"closed","title":"chore(deps): bump the pip group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-13T21:59:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-13T20:39:55.000Z","updated_at":"2026-04-13T21:59:04.000Z","time_to_close":4746,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"pip","update_count":3,"packages":[{"name":"keras","old_version":"2.15.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"pillow","old_version":"10.4.0","new_version":"12.2.0","repository_url":"https://github.com/python-pillow/Pillow"},{"name":"pymongo","old_version":"4.6.1","new_version":"4.6.3","repository_url":"https://github.com/mongodb/mongo-python-driver"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the /API directory: [keras](https://github.com/keras-team/keras), [pillow](https://github.com/python-pillow/Pillow) and [pymongo](https://github.com/mongodb/mongo-python-driver).\n\nUpdates `keras` from 2.15.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v2.15.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 10.4.0 to 12.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.2.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate 12.2.0 release notes \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9482\"\u003e#9482\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Python versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9515\"\u003e#9515\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eJeffrey A. Clark -\u0026gt; Jeffrey 'Alex' Clark \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9513\"\u003e#9513\u003c/a\u003e [\u003ca href=\"https://github.com/aclark4life\"\u003e\u003ccode\u003e@​aclark4life\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd release notes for \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9394\"\u003e#9394\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9419\"\u003e#9419\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9456\"\u003e#9456\u003c/a\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9467\"\u003e#9467\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd Amiga Workbench .info loader to 3rd party plugins list \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9459\"\u003e#9459\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMerge PFM documentation into PPM \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9434\"\u003e#9434\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eFix CVE number \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9430\"\u003e#9430\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate xz to 5.8.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9523\"\u003e#9523\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libjpeg-turbo to 3.1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9507\"\u003e#9507\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libpng to 1.6.56 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9499\"\u003e#9499\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9485\"\u003e#9485\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libavif to 1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9479\"\u003e#9479\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated harfbuzz to 13.2.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9461\"\u003e#9461\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate harfbuzz to 13.0.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9453\"\u003e#9453\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libavif to 1.4.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9460\"\u003e#9460\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.2 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9449\"\u003e#9449\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate actions/download-artifact action to v8 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9451\"\u003e#9451\u003c/a\u003e [@\u003ca href=\"https://github.com/apps/renovate\"\u003erenovate[bot]\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libpng to 1.6.55 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9425\"\u003e#9425\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTesting\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleanup .spider extension in the same test where it is added \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9517\"\u003e#9517\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRun tests in parallel via tox for 3.5x speedup \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9516\"\u003e#9516\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eEnable colour in CI logs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9486\"\u003e#9486\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSimplify TGA test code \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9477\"\u003e#9477\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate tests to check for ValueError when encoding an empty image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9464\"\u003e#9464\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpgrade CI from \u003ccode\u003emacos-15-intel\u003c/code\u003e to \u003ccode\u003emacos-26-intel\u003c/code\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9454\"\u003e#9454\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd check-case-conflict hook \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9446\"\u003e#9446\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSpecify platform when pulling docker image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9440\"\u003e#9440\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eGHA: Cache libavif and webp builds for Ubuntu \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9437\"\u003e#9437\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck calloc return value \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eCheck all allocs in the Arrow tree \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e [\u003ca href=\"https://github.com/wiredfool\"\u003e\u003ccode\u003e@​wiredfool\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eReject non-numeric elements inside list coords \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMove variable declaration inside define \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst\"\u003epillow's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog (Pillow)\u003c/h1\u003e\n\u003ch2\u003e11.1.0 and newer\u003c/h2\u003e\n\u003cp\u003eSee GitHub Releases:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003ehttps://github.com/python-pillow/Pillow/releases\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e11.0.0 (2024-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpdate licence to MIT-CMU \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8460\"\u003e#8460\u003c/a\u003e\n[hugovk]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eConditionally define ImageCms type hint to avoid requiring core \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8197\"\u003e#8197\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport writing LONG8 offsets in AppendingTiffWriter \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8417\"\u003e#8417\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse ImageFile.MAXBLOCK when saving TIFF images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8461\"\u003e#8461\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDo not close provided file handles with libtiff when saving \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8458\"\u003e#8458\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport ImageFilter.BuiltinFilter for I;16* images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8438\"\u003e#8438\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse ImagingCore.ptr instead of ImagingCore.id \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8341\"\u003e#8341\u003c/a\u003e\n[homm, radarhere, hugovk]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated EPS mode when opening images without transparency \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8281\"\u003e#8281\u003c/a\u003e\n[Yay295, radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse transparency when combining P frames from APNGs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8443\"\u003e#8443\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport all resampling filters when resizing I;16* images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8422\"\u003e#8422\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFree memory on early return \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8413\"\u003e#8413\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCast int before potentially exceeding INT_MAX \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8402\"\u003e#8402\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/3c41c095064200a02672d89cc5ff629eaf4b0d4f\"\u003e\u003ccode\u003e3c41c09\u003c/code\u003e\u003c/a\u003e 12.2.0 version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cdaa29eb520291c4f1fb50fb71ae46502d41e460\"\u003e\u003ccode\u003ecdaa29e\u003c/code\u003e\u003c/a\u003e Check calloc return value (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/585b2f5a780722c8a5bfffb3a40f7f42e8a205be\"\u003e\u003ccode\u003e585b2f5\u003c/code\u003e\u003c/a\u003e Check calloc return value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ecf011ea15991d4cebacd946e58270cc30b0f2c1\"\u003e\u003ccode\u003eecf011e\u003c/code\u003e\u003c/a\u003e Check all allocs in the Arrow tree (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cf6de8ca9b23e714aa5310e1c791eda66fc0b670\"\u003e\u003ccode\u003ecf6de8c\u003c/code\u003e\u003c/a\u003e Reject non-numeric elements inside list coords (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ffdcede6516b28d9667c92929854023d17048b64\"\u003e\u003ccode\u003effdcede\u003c/code\u003e\u003c/a\u003e Update 12.2.0 release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/7929d7760fe5a307ba5ae6eabdf70ae4486b147c\"\u003e\u003ccode\u003e7929d77\u003c/code\u003e\u003c/a\u003e Added security release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/c4f7aa5dfb4dbd1242978ac235e01b9934ec6d3c\"\u003e\u003ccode\u003ec4f7aa5\u003c/code\u003e\u003c/a\u003e Added security release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/22cdb5f2e4b15250c06563b1124ac1667342712f\"\u003e\u003ccode\u003e22cdb5f\u003c/code\u003e\u003c/a\u003e Move variable declaration inside define (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/fc15b3b01899408ec989d7804c5283e13802d057\"\u003e\u003ccode\u003efc15b3b\u003c/code\u003e\u003c/a\u003e Resize tall images vertically first (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9524\"\u003e#9524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-pillow/Pillow/compare/10.4.0...12.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pymongo` from 4.6.1 to 4.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-python-driver/releases\"\u003epymongo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ePyMongo 4.6.3\u003c/h2\u003e\n\u003cp\u003eCommunity notes: \u003ca href=\"https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348\"\u003ehttps://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePyMongo 4.6.2\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404\"\u003ehttps://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst\"\u003epymongo's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChanges in Version 4.6.3 (2024/03/27)\u003c/h2\u003e\n\u003cp\u003ePyMongo 4.6.3 fixes the following bug:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential memory access violation when decoding invalid bson.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIssues Resolved\n...............\u003c/p\u003e\n\u003cp\u003eSee the \u003ccode\u003ePyMongo 4.6.3 release notes in JIRA\u003c/code\u003e_ for the list of resolved issues\nin this release.\u003c/p\u003e\n\u003cp\u003e.. _PyMongo 4.6.3 release notes in JIRA: \u003ca href=\"https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=38360\"\u003ehttps://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=38360\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eChanges in Version 4.6.2 (2024/02/21)\u003c/h2\u003e\n\u003cp\u003ePyMongo 4.6.2 fixes the following bug:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug appearing in Python 3.12 where \u0026quot;RuntimeError: can't create new thread at interpreter shutdown\u0026quot;\ncould be written to stderr when a MongoClient's thread starts as the python interpreter is shutting down.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIssues Resolved\n...............\u003c/p\u003e\n\u003cp\u003eSee the \u003ccode\u003ePyMongo 4.6.2 release notes in JIRA\u003c/code\u003e_ for the list of resolved issues\nin this release.\u003c/p\u003e\n\u003cp\u003e.. _PyMongo 4.6.2 release notes in JIRA: \u003ca href=\"https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=37906\"\u003ehttps://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=37906\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/8da192f9ca2d4f6464897b22b3029c227043f0cb\"\u003e\u003ccode\u003e8da192f\u003c/code\u003e\u003c/a\u003e BUMP 4.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2\"\u003e\u003ccode\u003e56b6b6d\u003c/code\u003e\u003c/a\u003e PYTHON-4305 Fix bson size check (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1564\"\u003e#1564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/449d0f316cbcdea59d8b69b5e4fc34ac07949dc6\"\u003e\u003ccode\u003e449d0f3\u003c/code\u003e\u003c/a\u003e BUMP to 4.6.3.dev0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/e04576de22c06a4609b16db0f6e10e86ad5c8dad\"\u003e\u003ccode\u003ee04576d\u003c/code\u003e\u003c/a\u003e DEVPROD-3871 Use teardown_task when there is one function/command (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1533\"\u003e#1533\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/cf1c6a11f76861fd6150b0df79a7ed70f2b2fea5\"\u003e\u003ccode\u003ecf1c6a1\u003c/code\u003e\u003c/a\u003e PYTHON-4219 Prep for 4.6.2 Release (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1530\"\u003e#1530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/d29b2b7cf405901a801591e475574b63aa81ac5c\"\u003e\u003ccode\u003ed29b2b7\u003c/code\u003e\u003c/a\u003e PYTHON-4147 [v4.6]: Silence noisy thread.start() RuntimeError at shutdown (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/0477b9bc0c59de311fbb6d6a157b97a4af8d0a23\"\u003e\u003ccode\u003e0477b9b\u003c/code\u003e\u003c/a\u003e PYTHON-4077 [v4.6]: Ensure there is a MacOS wheel for Python 3.7 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1527\"\u003e#1527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/ecad17d24e8aafa374ab5fd194ce79b6861efcad\"\u003e\u003ccode\u003eecad17d\u003c/code\u003e\u003c/a\u003e BUMP 4.6.2.dev0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mongodb/mongo-python-driver/compare/4.6.1...4.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/devansh-shah-11/FaceRec/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/devansh-shah-11/FaceRec/pull/126","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/devansh-shah-11%2FFaceRec/issues/126","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/126/packages"},{"uuid":"4251301427","node_id":"PR_kwDOR0f1R87R3dnZ","number":13,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T04:38:01.000Z","updated_at":"2026-04-13T04:38:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Mufasa-PJ/My_yolov5/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Mufasa-PJ%2FMy_yolov5/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"},{"uuid":"4251300652","node_id":"PR_kwDOR6x4oM7R3dfx","number":4,"state":"closed","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-21T08:56:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-13T04:37:50.000Z","updated_at":"2026-04-21T08:57:00.000Z","time_to_close":706740,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Aditya3815/DASwin-YOLO/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Aditya3815%2FDASwin-YOLO/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"4251295036","node_id":"PR_kwDORuAi_87R3cqV","number":11,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T04:36:34.000Z","updated_at":"2026-04-13T04:36:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Aniketh-Srivathsa/mini_proj/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Aniketh-Srivathsa%2Fmini_proj/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"},{"uuid":"4246462814","node_id":"PR_kwDORQ68t87Run1w","number":8,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-12T04:03:58.000Z","updated_at":"2026-04-12T04:04:30.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/liqianqi/yolov5_fourpoints/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/liqianqi%2Fyolov5_fourpoints/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"4221456698","node_id":"PR_kwDOMpA0VM7QqXkn","number":348,"state":"open","title":"Bump the dependabot group with 2 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-08T01:07:49.000Z","updated_at":"2026-04-08T06:51:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"dependabot","update_count":2,"packages":[{"name":"keras","old_version":"3.13.2","new_version":"3.14.0","repository_url":"https://github.com/keras-team/keras"},{"name":"pillow","old_version":"12.1.1","new_version":"12.2.0","repository_url":"https://github.com/python-pillow/Pillow"}],"path":null,"ecosystem":"pip"},"body":"Bumps the dependabot group with 2 updates: [keras](https://github.com/keras-team/keras) and [pillow](https://github.com/python-pillow/Pillow).\n\nUpdates `keras` from 3.13.2 to 3.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.14.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eOrbax Checkpoint Integration\u003c/strong\u003e: Full support for Orbax checkpoints, including sharding, remote paths, and step recovery.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eQuantization Upgrades\u003c/strong\u003e: Added support for Activation-aware Weight Quantization (AWQ) and Asymmetric INT4 Sub-Channel Quantization.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBatch Renormalization in BatchNorm\u003c/strong\u003e: Added batch renormalization feature to the \u003ccode\u003eBatchRenormalization\u003c/code\u003e layer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew Optimizer\u003c/strong\u003e: Added \u003ccode\u003eScheduleFreeAdamW\u003c/code\u003e optimizer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eGated Attention\u003c/strong\u003e: Introduced optional Gated Attention support in \u003ccode\u003eMultiHeadAttention\u003c/code\u003e and \u003ccode\u003eGroupedQueryAttention\u003c/code\u003e layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eNew Features and Operations\u003c/h2\u003e\n\u003ch3\u003eMulti-Backend Operations\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNaN-aware NumPy Operations\u003c/strong\u003e: Added support for \u003ccode\u003enanmin\u003c/code\u003e, \u003ccode\u003enanmax\u003c/code\u003e, \u003ccode\u003enanmean\u003c/code\u003e, \u003ccode\u003enanmedian\u003c/code\u003e, \u003ccode\u003enanvar\u003c/code\u003e, \u003ccode\u003enanstd\u003c/code\u003e, \u003ccode\u003enanprod\u003c/code\u003e, \u003ccode\u003enanargmin\u003c/code\u003e, \u003ccode\u003enanargmax\u003c/code\u003e, and \u003ccode\u003enanquantile\u003c/code\u003e in \u003ccode\u003ekeras.ops.numpy\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew Math \u0026amp; Linear Algebra Operators\u003c/strong\u003e: Added \u003ccode\u003enextafter\u003c/code\u003e, \u003ccode\u003eptp\u003c/code\u003e, \u003ccode\u003eview\u003c/code\u003e, \u003ccode\u003esinc\u003c/code\u003e, \u003ccode\u003efmod\u003c/code\u003e, \u003ccode\u003ei0\u003c/code\u003e, \u003ccode\u003efliplr\u003c/code\u003e, \u003ccode\u003eflipud\u003c/code\u003e, \u003ccode\u003erad2deg\u003c/code\u003e, \u003ccode\u003egeomspace\u003c/code\u003e, \u003ccode\u003edepth_to_space\u003c/code\u003e, \u003ccode\u003espace_to_depth\u003c/code\u003e, and \u003ccode\u003efold\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreprocessing and Layers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCLAHE Layer\u003c/strong\u003e: Added Contrast Limited Adaptive Histogram Equalization preprocessing layer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAdapt Support for Iterables\u003c/strong\u003e: Preprocessing layers now support Python iterables in the \u003ccode\u003eadapt()\u003c/code\u003e method, which allows the direct use of Grain datasets.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eOpenVINO Backend Support\u003c/h2\u003e\n\u003cp\u003eThe OpenVINO backend received a massive update, implementing a wide array of NumPy and Neural Network operations to achieve feature parity with other backends:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNumPy Operations\u003c/strong\u003e: \u003ccode\u003evander\u003c/code\u003e, \u003ccode\u003etrapezoid\u003c/code\u003e, \u003ccode\u003ecorrcoef\u003c/code\u003e, \u003ccode\u003ecorrelate\u003c/code\u003e, \u003ccode\u003eflip\u003c/code\u003e, \u003ccode\u003ediagonal\u003c/code\u003e, \u003ccode\u003ecbrt\u003c/code\u003e, \u003ccode\u003ehypot\u003c/code\u003e, \u003ccode\u003etrace\u003c/code\u003e, \u003ccode\u003ekron\u003c/code\u003e, \u003ccode\u003eargpartition\u003c/code\u003e, \u003ccode\u003elogaddexp2\u003c/code\u003e, \u003ccode\u003eldexp\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e, \u003ccode\u003eround\u003c/code\u003e, \u003ccode\u003evstack\u003c/code\u003e, \u003ccode\u003ehsplit\u003c/code\u003e, \u003ccode\u003evsplit\u003c/code\u003e, \u003ccode\u003etile\u003c/code\u003e, \u003ccode\u003enansum\u003c/code\u003e, \u003ccode\u003etensordot\u003c/code\u003e, \u003ccode\u003eexp2\u003c/code\u003e, \u003ccode\u003etrunc\u003c/code\u003e, \u003ccode\u003egcd\u003c/code\u003e, \u003ccode\u003eunravel_index\u003c/code\u003e, \u003ccode\u003einner\u003c/code\u003e, \u003ccode\u003ecumprod\u003c/code\u003e, \u003ccode\u003esearchsorted\u003c/code\u003e, \u003ccode\u003ehanning\u003c/code\u003e, \u003ccode\u003ediagflat\u003c/code\u003e, \u003ccode\u003enorm\u003c/code\u003e, \u003ccode\u003ehistogram\u003c/code\u003e, \u003ccode\u003elcm\u003c/code\u003e, \u003ccode\u003eallclose\u003c/code\u003e, \u003ccode\u003ereal\u003c/code\u003e, \u003ccode\u003eimag\u003c/code\u003e, \u003ccode\u003eisreal\u003c/code\u003e, \u003ccode\u003ekaiser\u003c/code\u003e, \u003ccode\u003eshuffle\u003c/code\u003e, \u003ccode\u003eeinsum\u003c/code\u003e, \u003ccode\u003equantile\u003c/code\u003e, \u003ccode\u003econj\u003c/code\u003e, \u003ccode\u003erandint\u003c/code\u003e, \u003ccode\u003ein_top_k\u003c/code\u003e, \u003ccode\u003esignbit\u003c/code\u003e, \u003ccode\u003egamma\u003c/code\u003e, \u003ccode\u003eheaviside\u003c/code\u003e, \u003ccode\u003evar\u003c/code\u003e, \u003ccode\u003estd\u003c/code\u003e, \u003ccode\u003einv\u003c/code\u003e, \u003ccode\u003esolve\u003c/code\u003e, \u003ccode\u003echolesky_inverse\u003c/code\u003e, \u003ccode\u003efft\u003c/code\u003e, \u003ccode\u003efft2\u003c/code\u003e, \u003ccode\u003eifft2\u003c/code\u003e, \u003ccode\u003erfft\u003c/code\u003e, \u003ccode\u003eirfft\u003c/code\u003e, \u003ccode\u003estft\u003c/code\u003e, \u003ccode\u003eistft\u003c/code\u003e, \u003ccode\u003escatter\u003c/code\u003e, \u003ccode\u003ebinomial\u003c/code\u003e, \u003ccode\u003eunfold\u003c/code\u003e, \u003ccode\u003eQR decomposition\u003c/code\u003e, \u003ccode\u003eview\u003c/code\u003e, and more.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNeural Network Operations\u003c/strong\u003e: Added support for \u003ccode\u003eseparable_conv\u003c/code\u003e, \u003ccode\u003econv_transpose\u003c/code\u003e, \u003ccode\u003eadaptive_average_pool\u003c/code\u003e, \u003ccode\u003eadaptive_max_pool\u003c/code\u003e, \u003ccode\u003eRNN\u003c/code\u003e, \u003ccode\u003eLSTM\u003c/code\u003e, and \u003ccode\u003eGRU\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eControl Flow Operations\u003c/strong\u003e: Implemented \u003ccode\u003econd\u003c/code\u003e, \u003ccode\u003escan\u003c/code\u003e, \u003ccode\u003eassociative_scan\u003c/code\u003e, \u003ccode\u003emap\u003c/code\u003e, \u003ccode\u003eswitch\u003c/code\u003e, \u003ccode\u003efori_loop\u003c/code\u003e, and \u003ccode\u003evectorized_map\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eBug Fixes and Improvements\u003c/h2\u003e\n\u003ch3\u003eBackend Specific Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePyTorch\u003c/strong\u003e: Dynamic shapes support in export, device selection improvements, and bug fixes to the CuDNN based LSTM and GRU implementation.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eJAX\u003c/strong\u003e: Improved RNG handling in \u003ccode\u003eFlaxLayer\u003c/code\u003e and \u003ccode\u003eJaxLayer\u003c/code\u003e, variable jitting improvements, and direct JAX-to-ONNX export.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNumPy\u003c/strong\u003e: Enabled masking support for the NumPy backend.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed multiple symbolic shape bugs across layers like \u003ccode\u003eConv1DTranspose\u003c/code\u003e, \u003ccode\u003eIndexLookup\u003c/code\u003e, and \u003ccode\u003eTextVectorization\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed activity regularizer normalization by batch size.\u003c/li\u003e\n\u003cli\u003eImproved \u003ccode\u003eSequential\u003c/code\u003e error messages for incompatible layers.\u003c/li\u003e\n\u003cli\u003eMinimized memory usage issues in \u003ccode\u003esparse_categorical_crossentropy\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cp\u003eWe would like to thank our new contributors for making their first contribution to the Keras project:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/050671c8cfa58cd288bcc1f4ad21e83991bfdf9f\"\u003e\u003ccode\u003e050671c\u003c/code\u003e\u003c/a\u003e Keras Automations : Refine auto fix to add unit tests (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22624\"\u003e#22624\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/05bbdae31bdff7cf519d587310760e453cf7440e\"\u003e\u003ccode\u003e05bbdae\u003c/code\u003e\u003c/a\u003e Keras Automations:  Refine Auto fix (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22623\"\u003e#22623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/9708582efe976040ec0ca322fdae88924c5afe81\"\u003e\u003ccode\u003e9708582\u003c/code\u003e\u003c/a\u003e Implement nanmedian function in keras.ops (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22585\"\u003e#22585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e0baba4546c252caf84aaf404f28d680ea4e2061\"\u003e\u003ccode\u003ee0baba4\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Pass the \u003ccode\u003eshape\u003c/code\u003e when creating a \u003ccode\u003etf.Variable\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22460\"\u003e#22460\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22609\"\u003e#22609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/b8ba027f4ffcabf564f040c62da21fb666ee2ae8\"\u003e\u003ccode\u003eb8ba027\u003c/code\u003e\u003c/a\u003e Keras Automations: Auto fix improve (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22613\"\u003e#22613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/d1e5f1c6d57b4c00ac09ef1cd3b13c53f2bd394b\"\u003e\u003ccode\u003ed1e5f1c\u003c/code\u003e\u003c/a\u003e Keras automation: fix label name (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22611\"\u003e#22611\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/a44d76e7cb06f6e627c248bbd618b3e46fdaa308\"\u003e\u003ccode\u003ea44d76e\u003c/code\u003e\u003c/a\u003e auto fix updates (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22610\"\u003e#22610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/838b7e32a5ea3271bb26140d76de838e9b17b6b6\"\u003e\u003ccode\u003e838b7e3\u003c/code\u003e\u003c/a\u003e Fix TPU test broken in master. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22605\"\u003e#22605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/6c5956d837f87aa89225c962f9f23dcc423dbec2\"\u003e\u003ccode\u003e6c5956d\u003c/code\u003e\u003c/a\u003e [Fix] MelSpectrogram skips fft_length \u0026gt;= sequence_length validation for symbo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/99dda4c45485aab6e95e4def1042680c4c52c958\"\u003e\u003ccode\u003e99dda4c\u003c/code\u003e\u003c/a\u003e [OpenVINO] Fix float16 dtype promotion in OpenVINOKerasTensor binary operator...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.2...v3.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 12.1.1 to 12.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.2.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate 12.2.0 release notes \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9482\"\u003e#9482\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Python versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9515\"\u003e#9515\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eJeffrey A. Clark -\u0026gt; Jeffrey 'Alex' Clark \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9513\"\u003e#9513\u003c/a\u003e [\u003ca href=\"https://github.com/aclark4life\"\u003e\u003ccode\u003e@​aclark4life\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd release notes for \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9394\"\u003e#9394\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9419\"\u003e#9419\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9456\"\u003e#9456\u003c/a\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9467\"\u003e#9467\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd Amiga Workbench .info loader to 3rd party plugins list \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9459\"\u003e#9459\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMerge PFM documentation into PPM \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9434\"\u003e#9434\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eFix CVE number \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9430\"\u003e#9430\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate xz to 5.8.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9523\"\u003e#9523\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libjpeg-turbo to 3.1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9507\"\u003e#9507\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libpng to 1.6.56 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9499\"\u003e#9499\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9485\"\u003e#9485\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libavif to 1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9479\"\u003e#9479\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated harfbuzz to 13.2.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9461\"\u003e#9461\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate harfbuzz to 13.0.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9453\"\u003e#9453\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libavif to 1.4.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9460\"\u003e#9460\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.2 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9449\"\u003e#9449\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate actions/download-artifact action to v8 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9451\"\u003e#9451\u003c/a\u003e [@\u003ca href=\"https://github.com/apps/renovate\"\u003erenovate[bot]\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libpng to 1.6.55 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9425\"\u003e#9425\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTesting\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleanup .spider extension in the same test where it is added \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9517\"\u003e#9517\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRun tests in parallel via tox for 3.5x speedup \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9516\"\u003e#9516\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eEnable colour in CI logs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9486\"\u003e#9486\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSimplify TGA test code \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9477\"\u003e#9477\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate tests to check for ValueError when encoding an empty image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9464\"\u003e#9464\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpgrade CI from \u003ccode\u003emacos-15-intel\u003c/code\u003e to \u003ccode\u003emacos-26-intel\u003c/code\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9454\"\u003e#9454\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd check-case-conflict hook \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9446\"\u003e#9446\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSpecify platform when pulling docker image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9440\"\u003e#9440\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eGHA: Cache libavif and webp builds for Ubuntu \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9437\"\u003e#9437\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck calloc return value \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eCheck all allocs in the Arrow tree \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e [\u003ca href=\"https://github.com/wiredfool\"\u003e\u003ccode\u003e@​wiredfool\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eReject non-numeric elements inside list coords \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMove variable declaration inside define \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/3c41c095064200a02672d89cc5ff629eaf4b0d4f\"\u003e\u003ccode\u003e3c41c09\u003c/code\u003e\u003c/a\u003e 12.2.0 version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cdaa29eb520291c4f1fb50fb71ae46502d41e460\"\u003e\u003ccode\u003ecdaa29e\u003c/code\u003e\u003c/a\u003e Check calloc return value (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/585b2f5a780722c8a5bfffb3a40f7f42e8a205be\"\u003e\u003ccode\u003e585b2f5\u003c/code\u003e\u003c/a\u003e Check calloc return value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ecf011ea15991d4cebacd946e58270cc30b0f2c1\"\u003e\u003ccode\u003eecf011e\u003c/code\u003e\u003c/a\u003e Check all allocs in the Arrow tree (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cf6de8ca9b23e714aa5310e1c791eda66fc0b670\"\u003e\u003ccode\u003ecf6de8c\u003c/code\u003e\u003c/a\u003e Reject non-numeric elements inside list coords (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ffdcede6516b28d9667c92929854023d17048b64\"\u003e\u003ccode\u003effdcede\u003c/code\u003e\u003c/a\u003e Update 12.2.0 release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/7929d7760fe5a307ba5ae6eabdf70ae4486b147c\"\u003e\u003ccode\u003e7929d77\u003c/code\u003e\u003c/a\u003e Added security release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/c4f7aa5dfb4dbd1242978ac235e01b9934ec6d3c\"\u003e\u003ccode\u003ec4f7aa5\u003c/code\u003e\u003c/a\u003e Added security release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/22cdb5f2e4b15250c06563b1124ac1667342712f\"\u003e\u003ccode\u003e22cdb5f\u003c/code\u003e\u003c/a\u003e Move variable declaration inside define (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/fc15b3b01899408ec989d7804c5283e13802d057\"\u003e\u003ccode\u003efc15b3b\u003c/code\u003e\u003c/a\u003e Resize tall images vertically first (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9524\"\u003e#9524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-pillow/Pillow/compare/12.1.1...12.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/google/sedpack/pull/348","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fsedpack/issues/348","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/348/packages"},{"uuid":"4192895366","node_id":"PR_kwDOR3gtKM7PfYbx","number":1,"state":"closed","title":"Bump the pip group across 2 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-14T23:53:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-02T08:38:34.000Z","updated_at":"2026-04-14T23:53:52.000Z","time_to_close":1091716,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":12,"packages":[{"name":"setuptools","old_version":"77.0.3","new_version":"78.1.1","repository_url":"https://github.com/pypa/setuptools"},{"name":"nltk","old_version":"3.9.1","new_version":"3.9.4","repository_url":"https://github.com/nltk/nltk"},{"name":"certifi","old_version":"2018.11.29","new_version":"2024.7.4","repository_url":"https://github.com/certifi/python-certifi"},{"name":"grpcio","old_version":"1.19.0","new_version":"1.53.2","repository_url":"https://github.com/grpc/grpc"},{"name":"idna","old_version":"2.8","new_version":"3.7","repository_url":"https://github.com/kjd/idna"},{"name":"keras","old_version":"2.2.4","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"protobuf","old_version":"3.7.0","new_version":"5.29.6","repository_url":"https://github.com/protocolbuffers/protobuf"},{"name":"requests","old_version":"2.21.0","new_version":"2.33.0","repository_url":"https://github.com/psf/requests"},{"name":"scikit-learn","old_version":"0.20.3","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"tensorflow","old_version":"1.13.1","new_version":"2.12.1","repository_url":"https://github.com/tensorflow/tensorflow"},{"name":"urllib3","old_version":"1.24.1","new_version":"2.6.3","repository_url":"https://github.com/urllib3/urllib3"},{"name":"werkzeug","old_version":"0.14.1","new_version":"3.1.6","repository_url":"https://github.com/pallets/werkzeug"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 2 updates in the /legacy_thesis directory: [setuptools](https://github.com/pypa/setuptools) and [nltk](https://github.com/nltk/nltk).\nBumps the pip group with 12 updates in the /legacy_classifiers directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [setuptools](https://github.com/pypa/setuptools) | `77.0.3` | `78.1.1` |\n| [nltk](https://github.com/nltk/nltk) | `3.9.1` | `3.9.4` |\n| [certifi](https://github.com/certifi/python-certifi) | `2018.11.29` | `2024.7.4` |\n| [grpcio](https://github.com/grpc/grpc) | `1.19.0` | `1.53.2` |\n| [idna](https://github.com/kjd/idna) | `2.8` | `3.7` |\n| [keras](https://github.com/keras-team/keras) | `2.2.4` | `3.13.2` |\n| [protobuf](https://github.com/protocolbuffers/protobuf) | `3.7.0` | `5.29.6` |\n| [requests](https://github.com/psf/requests) | `2.21.0` | `2.33.0` |\n| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `0.20.3` | `1.5.0` |\n| [tensorflow](https://github.com/tensorflow/tensorflow) | `1.13.1` | `2.12.1` |\n| [urllib3](https://github.com/urllib3/urllib3) | `1.24.1` | `2.6.3` |\n| [werkzeug](https://github.com/pallets/werkzeug) | `0.14.1` | `3.1.6` |\n\n\nUpdates `setuptools` from 77.0.3 to 78.1.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/setuptools/blob/main/NEWS.rst\"\u003esetuptools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev78.1.1\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMore fully sanitized the filename in PackageIndex._download. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4946\"\u003e#4946\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.1.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore access to _get_vc_env with a warning. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4874\"\u003e#4874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.2\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePostponed removals of deprecated dash-separated and uppercase fields in \u003ccode\u003esetup.cfg\u003c/code\u003e.\nAll packages with deprecated configurations are advised to move before 2026. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4911\"\u003e#4911\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.1\u003c/h1\u003e\n\u003ch2\u003eMisc\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4909\"\u003e#4909\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.0\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReverted distutils changes that broke the monkey patching of command classes. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4902\"\u003e#4902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDeprecations and Removals\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSetuptools no longer accepts options containing uppercase or dash characters in \u003ccode\u003esetup.cfg\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8e4868a036b7fae3208d16cb4e5fe6d63c3752df\"\u003e\u003ccode\u003e8e4868a\u003c/code\u003e\u003c/a\u003e Bump version: 78.1.0 → 78.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/100e9a61ad24d5a147ada57357425a8d40626d09\"\u003e\u003ccode\u003e100e9a6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8faf1d7e0ca309983252e4f21837b73ee12e960f\"\u003e\u003ccode\u003e8faf1d7\u003c/code\u003e\u003c/a\u003e Add news fragment.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/2ca4a9fe4758fcd39d771d3d3a5b4840aacebdf7\"\u003e\u003ccode\u003e2ca4a9f\u003c/code\u003e\u003c/a\u003e Rely on re.sub to perform the decision in one expression.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/e409e8002932f2b86aae7b1abc8f8c2ebf96df2c\"\u003e\u003ccode\u003ee409e80\u003c/code\u003e\u003c/a\u003e Extract _sanitize method for sanitizing the filename.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b\"\u003e\u003ccode\u003e250a6d1\u003c/code\u003e\u003c/a\u003e Add a check to ensure the name resolves relative to the tmpdir.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d8390feaa99091d1ba9626bec0e4ba7072fc507a\"\u003e\u003ccode\u003ed8390fe\u003c/code\u003e\u003c/a\u003e Extract _resolve_download_filename with test.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/4e1e89392de5cb405e7844cdc8b20fc2755dbaba\"\u003e\u003ccode\u003e4e1e893\u003c/code\u003e\u003c/a\u003e Merge \u003ca href=\"https://github.com/jaraco/skeleton\"\u003ehttps://github.com/jaraco/skeleton\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/3a3144f0d2887fa37c06550f42a101e9eebd953a\"\u003e\u003ccode\u003e3a3144f\u003c/code\u003e\u003c/a\u003e Fix typo: \u003ccode\u003epyproject.license\u003c/code\u003e -\u0026gt; \u003ccode\u003eproject.license\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4931\"\u003e#4931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d751068fd2627d6d8f1729e39cbcd8119049998f\"\u003e\u003ccode\u003ed751068\u003c/code\u003e\u003c/a\u003e Fix typo: pyproject.license -\u0026gt; project.license\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/setuptools/compare/v77.0.3...v78.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nltk` from 3.9.1 to 3.9.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nltk/nltk/blob/develop/ChangeLog\"\u003enltk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eVersion 3.9.4 2026-03-24\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Python 3.14\u003c/li\u003e\n\u003cli\u003eFix bug in Levenshtein distance when substitution_cost \u0026gt; 2\u003c/li\u003e\n\u003cli\u003eFix bug in Treebank detokeniser re quote ordering\u003c/li\u003e\n\u003cli\u003eFix bug in Jaro similarity for empty strings\u003c/li\u003e\n\u003cli\u003eSeveral security enhancements\u003c/li\u003e\n\u003cli\u003eFix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder\u003c/li\u003e\n\u003cli\u003eImplement TextTiling vocabulary introduction method (Hearst 1997)\u003c/li\u003e\n\u003cli\u003eFix ALINE feature matrix errors and add comprehensive tests\u003c/li\u003e\n\u003cli\u003eSupport multiple VerbNet versions, fix longid/shortid regex for VerbNet ids\u003c/li\u003e\n\u003cli\u003eLet downloader fallback to md5 when sha256 is unavailable\u003c/li\u003e\n\u003cli\u003eSeveral other minor bugfixes and code cleanups\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.4:\nMin-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01,\njancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,\u003c/p\u003e\n\u003cp\u003eVersion 3.9.3 2026-02-21\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix CVE-2025-14009: secure ZIP extraction in nltk.downloader (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/arbitrary reads in nltk.data for protocol-less refs (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3467\"\u003e#3467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/abs paths in corpus readers and FS pointers (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3479\"\u003e#3479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate external StanfordSegmenter JARs using SHA256 (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd optional sandbox enforcement for filestring() (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3485\"\u003e#3485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMaintenance: downloader/zipped models, CI/tooling updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.3:\nChris Clauss, Eric Kafe, HyperPS, purificant, Shivansh-Game, Christopher Smith\u003c/p\u003e\n\u003cp\u003eVersion 3.9.2 2025-10-01\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate download checksums to use SHA256 in built index\u003c/li\u003e\n\u003cli\u003eFix percentage escape in new-style string formatting\u003c/li\u003e\n\u003cli\u003ereplace shortened URLs using goo.gl\u003c/li\u003e\n\u003cli\u003eMake Wordnet interoperable with various taggers and tagged corpora\u003c/li\u003e\n\u003cli\u003eFix saving PerceptronTagger\u003c/li\u003e\n\u003cli\u003eDocument how to reproduce old Wordnet studies\u003c/li\u003e\n\u003cli\u003eproperly initialize Portuguese corpus reader\u003c/li\u003e\n\u003cli\u003esupport for mixed rules conversion into Chomsky Normal Form\u003c/li\u003e\n\u003cli\u003eonly import tkinter if a GUI is needed\u003c/li\u003e\n\u003cli\u003eissue \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/2112\"\u003e#2112\u003c/a\u003e with Corenlp\u003c/li\u003e\n\u003cli\u003enew environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL\u003c/li\u003e\n\u003cli\u003eLesk defaults to most frequent sense in case of ties\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.2:\nJose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu,\nSamer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq,\nChristopher Smith, Ryan Mannion\u003c/p\u003e\n\u003cp\u003eVersion 3.9.1 2024-08-19\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/ad9c96ba00a16923ffe917eacf63f1707bfa2d08\"\u003e\u003ccode\u003ead9c96b\u003c/code\u003e\u003c/a\u003e Update copyright year\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/7edcddfda566627b897397397cc4d10ae91cb86d\"\u003e\u003ccode\u003e7edcddf\u003c/code\u003e\u003c/a\u003e Updates for 3.9.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/67a2736f89b286b028db08bd247134f17a11fc6b\"\u003e\u003ccode\u003e67a2736\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3180\"\u003e#3180\u003c/a\u003e from yzhaoinuw/bug-on-edit_distance_align\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/2b17ac5358a1c8d4b97455766efde0b786e6cdb2\"\u003e\u003ccode\u003e2b17ac5\u003c/code\u003e\u003c/a\u003e Fix edit_distance_align backtrace for high substitution costs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/4b72976a6ff3d180ed4012f11843e611a8f89516\"\u003e\u003ccode\u003e4b72976\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3018\"\u003e#3018\u003c/a\u003e from JuanIMartinezB/bug/shortid-longid\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/8a5619f53a281149e5342b1a00fe05fe2fc6517f\"\u003e\u003ccode\u003e8a5619f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3222\"\u003e#3222\u003c/a\u003e from Syzygy2048/feature/texttiling-vocabulary-introd...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/c6574d755e02b6163d9cd1d0b407076940e08864\"\u003e\u003ccode\u003ec6574d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3289\"\u003e#3289\u003c/a\u003e from ihitamandal/codeflash/optimize-windowdiff-2024-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/98ff5d9eaa1a81511873b9aef857944519c28dc4\"\u003e\u003ccode\u003e98ff5d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3435\"\u003e#3435\u003c/a\u003e from Hrudhai01/fix-3260-detokenize-quotes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/aec4fce1b84ad725b8975f7365b23a4f626572a9\"\u003e\u003ccode\u003eaec4fce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3522\"\u003e#3522\u003c/a\u003e from ekaf/pathsec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/eec4ee3591cb9cb8b8c2989f08012608c841d532\"\u003e\u003ccode\u003eeec4ee3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3526\"\u003e#3526\u003c/a\u003e from nltk/update-contributing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nltk/nltk/compare/3.9.1...3.9.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `setuptools` from 77.0.3 to 78.1.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/setuptools/blob/main/NEWS.rst\"\u003esetuptools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev78.1.1\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMore fully sanitized the filename in PackageIndex._download. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4946\"\u003e#4946\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.1.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore access to _get_vc_env with a warning. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4874\"\u003e#4874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.2\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePostponed removals of deprecated dash-separated and uppercase fields in \u003ccode\u003esetup.cfg\u003c/code\u003e.\nAll packages with deprecated configurations are advised to move before 2026. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4911\"\u003e#4911\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.1\u003c/h1\u003e\n\u003ch2\u003eMisc\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4909\"\u003e#4909\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.0\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReverted distutils changes that broke the monkey patching of command classes. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4902\"\u003e#4902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDeprecations and Removals\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSetuptools no longer accepts options containing uppercase or dash characters in \u003ccode\u003esetup.cfg\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8e4868a036b7fae3208d16cb4e5fe6d63c3752df\"\u003e\u003ccode\u003e8e4868a\u003c/code\u003e\u003c/a\u003e Bump version: 78.1.0 → 78.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/100e9a61ad24d5a147ada57357425a8d40626d09\"\u003e\u003ccode\u003e100e9a6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8faf1d7e0ca309983252e4f21837b73ee12e960f\"\u003e\u003ccode\u003e8faf1d7\u003c/code\u003e\u003c/a\u003e Add news fragment.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/2ca4a9fe4758fcd39d771d3d3a5b4840aacebdf7\"\u003e\u003ccode\u003e2ca4a9f\u003c/code\u003e\u003c/a\u003e Rely on re.sub to perform the decision in one expression.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/e409e8002932f2b86aae7b1abc8f8c2ebf96df2c\"\u003e\u003ccode\u003ee409e80\u003c/code\u003e\u003c/a\u003e Extract _sanitize method for sanitizing the filename.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b\"\u003e\u003ccode\u003e250a6d1\u003c/code\u003e\u003c/a\u003e Add a check to ensure the name resolves relative to the tmpdir.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d8390feaa99091d1ba9626bec0e4ba7072fc507a\"\u003e\u003ccode\u003ed8390fe\u003c/code\u003e\u003c/a\u003e Extract _resolve_download_filename with test.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/4e1e89392de5cb405e7844cdc8b20fc2755dbaba\"\u003e\u003ccode\u003e4e1e893\u003c/code\u003e\u003c/a\u003e Merge \u003ca href=\"https://github.com/jaraco/skeleton\"\u003ehttps://github.com/jaraco/skeleton\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/3a3144f0d2887fa37c06550f42a101e9eebd953a\"\u003e\u003ccode\u003e3a3144f\u003c/code\u003e\u003c/a\u003e Fix typo: \u003ccode\u003epyproject.license\u003c/code\u003e -\u0026gt; \u003ccode\u003eproject.license\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4931\"\u003e#4931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d751068fd2627d6d8f1729e39cbcd8119049998f\"\u003e\u003ccode\u003ed751068\u003c/code\u003e\u003c/a\u003e Fix typo: pyproject.license -\u0026gt; project.license\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/setuptools/compare/v77.0.3...v78.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nltk` from 3.9.1 to 3.9.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nltk/nltk/blob/develop/ChangeLog\"\u003enltk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eVersion 3.9.4 2026-03-24\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Python 3.14\u003c/li\u003e\n\u003cli\u003eFix bug in Levenshtein distance when substitution_cost \u0026gt; 2\u003c/li\u003e\n\u003cli\u003eFix bug in Treebank detokeniser re quote ordering\u003c/li\u003e\n\u003cli\u003eFix bug in Jaro similarity for empty strings\u003c/li\u003e\n\u003cli\u003eSeveral security enhancements\u003c/li\u003e\n\u003cli\u003eFix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder\u003c/li\u003e\n\u003cli\u003eImplement TextTiling vocabulary introduction method (Hearst 1997)\u003c/li\u003e\n\u003cli\u003eFix ALINE feature matrix errors and add comprehensive tests\u003c/li\u003e\n\u003cli\u003eSupport multiple VerbNet versions, fix longid/shortid regex for VerbNet ids\u003c/li\u003e\n\u003cli\u003eLet downloader fallback to md5 when sha256 is unavailable\u003c/li\u003e\n\u003cli\u003eSeveral other minor bugfixes and code cleanups\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.4:\nMin-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01,\njancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,\u003c/p\u003e\n\u003cp\u003eVersion 3.9.3 2026-02-21\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix CVE-2025-14009: secure ZIP extraction in nltk.downloader (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/arbitrary reads in nltk.data for protocol-less refs (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3467\"\u003e#3467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/abs paths in corpus readers and FS pointers (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3479\"\u003e#3479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate external StanfordSegmenter JARs using SHA256 (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd optional sandbox enforcement for filestring() (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3485\"\u003e#3485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMaintenance: downloader/zipped models, CI/tooling updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.3:\nChris Clauss, Eric Kafe, HyperPS, purificant, Shivansh-Game, Christopher Smith\u003c/p\u003e\n\u003cp\u003eVersion 3.9.2 2025-10-01\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate download checksums to use SHA256 in built index\u003c/li\u003e\n\u003cli\u003eFix percentage escape in new-style string formatting\u003c/li\u003e\n\u003cli\u003ereplace shortened URLs using goo.gl\u003c/li\u003e\n\u003cli\u003eMake Wordnet interoperable with various taggers and tagged corpora\u003c/li\u003e\n\u003cli\u003eFix saving PerceptronTagger\u003c/li\u003e\n\u003cli\u003eDocument how to reproduce old Wordnet studies\u003c/li\u003e\n\u003cli\u003eproperly initialize Portuguese corpus reader\u003c/li\u003e\n\u003cli\u003esupport for mixed rules conversion into Chomsky Normal Form\u003c/li\u003e\n\u003cli\u003eonly import tkinter if a GUI is needed\u003c/li\u003e\n\u003cli\u003eissue \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/2112\"\u003e#2112\u003c/a\u003e with Corenlp\u003c/li\u003e\n\u003cli\u003enew environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL\u003c/li\u003e\n\u003cli\u003eLesk defaults to most frequent sense in case of ties\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.2:\nJose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu,\nSamer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq,\nChristopher Smith, Ryan Mannion\u003c/p\u003e\n\u003cp\u003eVersion 3.9.1 2024-08-19\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/ad9c96ba00a16923ffe917eacf63f1707bfa2d08\"\u003e\u003ccode\u003ead9c96b\u003c/code\u003e\u003c/a\u003e Update copyright year\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/7edcddfda566627b897397397cc4d10ae91cb86d\"\u003e\u003ccode\u003e7edcddf\u003c/code\u003e\u003c/a\u003e Updates for 3.9.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/67a2736f89b286b028db08bd247134f17a11fc6b\"\u003e\u003ccode\u003e67a2736\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3180\"\u003e#3180\u003c/a\u003e from yzhaoinuw/bug-on-edit_distance_align\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/2b17ac5358a1c8d4b97455766efde0b786e6cdb2\"\u003e\u003ccode\u003e2b17ac5\u003c/code\u003e\u003c/a\u003e Fix edit_distance_align backtrace for high substitution costs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/4b72976a6ff3d180ed4012f11843e611a8f89516\"\u003e\u003ccode\u003e4b72976\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3018\"\u003e#3018\u003c/a\u003e from JuanIMartinezB/bug/shortid-longid\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/8a5619f53a281149e5342b1a00fe05fe2fc6517f\"\u003e\u003ccode\u003e8a5619f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3222\"\u003e#3222\u003c/a\u003e from Syzygy2048/feature/texttiling-vocabulary-introd...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/c6574d755e02b6163d9cd1d0b407076940e08864\"\u003e\u003ccode\u003ec6574d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3289\"\u003e#3289\u003c/a\u003e from ihitamandal/codeflash/optimize-windowdiff-2024-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/98ff5d9eaa1a81511873b9aef857944519c28dc4\"\u003e\u003ccode\u003e98ff5d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3435\"\u003e#3435\u003c/a\u003e from Hrudhai01/fix-3260-detokenize-quotes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/aec4fce1b84ad725b8975f7365b23a4f626572a9\"\u003e\u003ccode\u003eaec4fce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3522\"\u003e#3522\u003c/a\u003e from ekaf/pathsec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/eec4ee3591cb9cb8b8c2989f08012608c841d532\"\u003e\u003ccode\u003eeec4ee3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3526\"\u003e#3526\u003c/a\u003e from nltk/update-contributing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nltk/nltk/compare/3.9.1...3.9.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `certifi` from 2018.11.29 to 2024.7.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463\"\u003e\u003ccode\u003ebd81538\u003c/code\u003e\u003c/a\u003e 2024.07.04 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/295\"\u003e#295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/06a2cbf21f345563dde6c28b60e29d57e9b210b3\"\u003e\u003ccode\u003e06a2cbf\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/294\"\u003e#294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/13bba02b72bac97c432c277158bc04b4d2a6bc23\"\u003e\u003ccode\u003e13bba02\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.6 to 4.1.7 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/293\"\u003e#293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/e8abcd0e62b334c164b95d49fcabdc9ecbca0554\"\u003e\u003ccode\u003ee8abcd0\u003c/code\u003e\u003c/a\u003e Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/292\"\u003e#292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/124f4adf171e15cd9a91a8b6e0325ecc97be8fe1\"\u003e\u003ccode\u003e124f4ad\u003c/code\u003e\u003c/a\u003e 2024.06.02 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/291\"\u003e#291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/c2196ce5d6ee675b27755a19948480a7823e2c6a\"\u003e\u003ccode\u003ec2196ce\u003c/code\u003e\u003c/a\u003e --- (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/290\"\u003e#290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/fefdeec7588ff1c05214b85a552afcad5fdb51b2\"\u003e\u003ccode\u003efefdeec\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.4 to 4.1.5 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/289\"\u003e#289\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/3c5fb1560b826a7f83f1f9750173ff766492c9cf\"\u003e\u003ccode\u003e3c5fb15\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 4.1.6 to 4.1.7 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/4a9569a3eb58db8548536fc16c5c5c7af946a5b1\"\u003e\u003ccode\u003e4a9569a\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.2 to 4.1.4 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/1fc808626a895a916b1e4c2b63abae6c5eafdbe3\"\u003e\u003ccode\u003e1fc8086\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/288\"\u003e#288\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/certifi/python-certifi/compare/2018.11.29...2024.07.04\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `grpcio` from 1.19.0 to 1.53.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc/releases\"\u003egrpcio's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.49.4\u003c/h2\u003e\n\u003cp\u003eThis is release gRPC Core 1.49.4 (gamma).\u003c/p\u003e\n\u003cp\u003eFor gRPC documentation, see \u003ca href=\"https://grpc.io/\"\u003egrpc.io\u003c/a\u003e. For previous releases, see \u003ca href=\"https://github.com/grpc/grpc/releases\"\u003eReleases\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis release contains refinements, improvements, and bug fixes.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e[Core] Add set min/max TLS version APIs to TLS credentials APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/34861\"\u003e#34861\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/afb307fb89ed83f358d82b5d359034a039a95e66\"\u003e\u003ccode\u003eafb307f\u003c/code\u003e\u003c/a\u003e [v1.53.x][Interop] Backport Python image update (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33864\"\u003e#33864\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/7a9373b049fc38c2c6f0ed07ab97908b380db967\"\u003e\u003ccode\u003e7a9373b\u003c/code\u003e\u003c/a\u003e [Backport] [dependency] Restrict cython to less than 3.X (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33770\"\u003e#33770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/fdb64a69ec4c5a142aa7acbde4ba0d472c94ec19\"\u003e\u003ccode\u003efdb64a6\u003c/code\u003e\u003c/a\u003e [v1.53][Build] Update Phusion baseimage (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33767\"\u003e#33767\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33836\"\u003e#33836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/cdf4186a176c293eca5de9aaac28706b6f5edd70\"\u003e\u003ccode\u003ecdf4186\u003c/code\u003e\u003c/a\u003e [PSM Interop] Legacy tests: fix xDS test client build (v1.53.x backport) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33\"\u003e#33\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/ce5b93a3c69fcd60879a53272e2593366efa6065\"\u003e\u003ccode\u003ece5b93a\u003c/code\u003e\u003c/a\u003e [PSM Interop] Legacy test builds always pull the driver from master (v1.53.x ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/b24b6eac9aa86773cc1d7b45b4c8efcaf3417fc8\"\u003e\u003ccode\u003eb24b6ea\u003c/code\u003e\u003c/a\u003e [release] Bump release version to 1.53.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33709\"\u003e#33709\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/1e86ca5834b94cae7d5e6d219056c0fc895cf95d\"\u003e\u003ccode\u003e1e86ca5\u003c/code\u003e\u003c/a\u003e [backport][iomgr][EventEngine] Improve server handling of file descriptor exh...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/aff3066cea9d0386521668983a610e9a1844d384\"\u003e\u003ccode\u003eaff3066\u003c/code\u003e\u003c/a\u003e [PSM interop] Don't fail url_map target if sub-target already failed (v1.53.x...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/539d75cc57c922a2706cc114b8527d851f07f366\"\u003e\u003ccode\u003e539d75c\u003c/code\u003e\u003c/a\u003e [PSM interop] Don't fail target if sub-target already failed (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33222\"\u003e#33222\u003c/a\u003e) (v1.53....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/3e79c88157c47ff04e1363be2f0452d89fc1b89c\"\u003e\u003ccode\u003e3e79c88\u003c/code\u003e\u003c/a\u003e [Release] Bump version to 1.53.1 (on v1.53.x branch) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33047\"\u003e#33047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc/compare/v1.19.0...v1.53.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `idna` from 2.8 to 3.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/releases\"\u003eidna's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Guido Vranken for reporting the issue.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/kjd/idna/compare/v3.6...v3.7\"\u003ehttps://github.com/kjd/idna/compare/v3.6...v3.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/blob/master/HISTORY.rst\"\u003eidna's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.7 (2024-04-11)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix issue where specially crafted inputs to encode() could\ntake exceptionally long amount of time to process. [CVE-2024-3651]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Guido Vranken for reporting the issue.\u003c/p\u003e\n\u003cp\u003e3.6 (2023-11-25)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix regression to include tests in source distribution.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e3.5 (2023-11-24)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 15.1.0\u003c/li\u003e\n\u003cli\u003eString codec name is now \u0026quot;idna2008\u0026quot; as overriding the system codec\n\u0026quot;idna\u0026quot; was not working.\u003c/li\u003e\n\u003cli\u003eFix typing error for codec encoding\u003c/li\u003e\n\u003cli\u003e\u0026quot;setup.cfg\u0026quot; has been added for this release due to some downstream\nlack of adherence to PEP 517. Should be removed in a future release\nso please prepare accordingly.\u003c/li\u003e\n\u003cli\u003eRemoved reliance on a symlink for the \u0026quot;idna-data\u0026quot; tool to comport\nwith PEP 517 and the Python Packaging User Guide for sdist archives.\u003c/li\u003e\n\u003cli\u003eAdded security reporting protocol for project\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions\nto this release.\u003c/p\u003e\n\u003cp\u003e3.4 (2022-09-14)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 15.0.0\u003c/li\u003e\n\u003cli\u003eMigrate to pyproject.toml for build information (PEP 621)\u003c/li\u003e\n\u003cli\u003eCorrect another instance where generic exception was raised instead of\nIDNAError for malformed input\u003c/li\u003e\n\u003cli\u003eSource distribution uses zeroized file ownership for improved\nreproducibility\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Seth Michael Larson for contributions to this release.\u003c/p\u003e\n\u003cp\u003e3.3 (2021-10-13)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 14.0.0\u003c/li\u003e\n\u003cli\u003eUpdate to in-line type annotations\u003c/li\u003e\n\u003cli\u003eThrow IDNAError exception correctly for some malformed input\u003c/li\u003e\n\u003cli\u003eAdvertise support for Python 3.10\u003c/li\u003e\n\u003cli\u003eImprove testing regime on Github\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d\"\u003e\u003ccode\u003e1d365e1\u003c/code\u003e\u003c/a\u003e Release v3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/c1b3154939907fab67c5754346afaebe165ce8e6\"\u003e\u003ccode\u003ec1b3154\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kjd/idna/issues/172\"\u003e#172\u003c/a\u003e from kjd/optimize-contextj\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/0394ec76ff022813e770ba1fd89658790ea35623\"\u003e\u003ccode\u003e0394ec7\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into optimize-contextj\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/cd58a23173d2b0a40b95ee680baf3e59e8d33966\"\u003e\u003ccode\u003ecd58a23\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kjd/idna/issues/152\"\u003e#152\u003c/a\u003e from elliotwutingfeng/dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7\"\u003e\u003ccode\u003e5beb28b\u003c/code\u003e\u003c/a\u003e More efficient resolution of joiner contexts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/1b121483ed04d9576a1291758f537e1318cddc8b\"\u003e\u003ccode\u003e1b12148\u003c/code\u003e\u003c/a\u003e Update ossf/scorecard-action to v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/d516b874c3388047934938a500c7488d52c4e067\"\u003e\u003ccode\u003ed516b87\u003c/code\u003e\u003c/a\u003e Update Github actions/checkout to v4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/c095c75943413c75ebf8ac74179757031b7f80b7\"\u003e\u003ccode\u003ec095c75\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/60a0a4cb61ec6834d74306bd8a1fa46daac94c98\"\u003e\u003ccode\u003e60a0a4c\u003c/code\u003e\u003c/a\u003e Fix typo in GitHub Actions workflow key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/5918a0ef8034379c2e409ae93ee11d24295bb201\"\u003e\u003ccode\u003e5918a0e\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into dev\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kjd/idna/compare/v2.8...v3.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 2.2.4 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/2.2.4...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `protobuf` from 3.7.0 to 5.29.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protocolbuffers/protobuf/releases\"\u003eprotobuf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eProtocol Buffers v34.0-rc1\u003c/h2\u003e\n\u003ch1\u003eAnnouncements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eThis version includes breaking changes to: C++, Objective-C, PHP, Python.\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Make generator headers private (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/3a2af3510f0d454dbe3e4dc281674b61c4d20b9e\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/3a2af3510f0d454dbe3e4dc281674b61c4d20b9e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/7a7589823d2cfaaf7994b050e98d5d553bc9b1c1\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/7a7589823d2cfaaf7994b050e98d5d553bc9b1c1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Add [[nodiscard]] to many APIs. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/a70115f33f9af2c4b2202c800b84837e7fe0d738\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/a70115f33f9af2c4b2202c800b84837e7fe0d738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Make the arena-enabled constructors of \u003ccode\u003eRepeatedField\u003c/code\u003e, \u003ccode\u003eRepeatedPtrField\u003c/code\u003e, and \u003ccode\u003eMap\u003c/code\u003e private. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ef890c3d0c79398c70e047fe5dd893f460ba2336\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ef890c3d0c79398c70e047fe5dd893f460ba2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b115358c64127896fed88b8b5ef5d91d86d8cbae\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b115358c64127896fed88b8b5ef5d91d86d8cbae\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/68346ec9348e932664e58c3ecdcd1478f95233a8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/68346ec9348e932664e58c3ecdcd1478f95233a8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/837a2cd1d6c75402b2503ffe7cd8aeaf25868536\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/837a2cd1d6c75402b2503ffe7cd8aeaf25868536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() \u0026amp;\u0026amp; !is_repeated()) instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9dbc5d479a8e453921485d8d3de47fb3c005f1af\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9dbc5d479a8e453921485d8d3de47fb3c005f1af\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] All entity names have length limit (2afb0dc)\u003c/li\u003e\n\u003cli\u003e[ObjC] Remove \u003ccode\u003egenerate_minimal_imports\u003c/code\u003e generation option warning (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/45b1297fdaad5a9436d0e207422168c38dc45ac4\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/45b1297fdaad5a9436d0e207422168c38dc45ac4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[ObjC] Fix nullability annotations on some \u003ccode\u003eGPB*Dictionary\u003c/code\u003e types. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ea67d6d26a48478a567c404679e3bb99cf230d50\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ea67d6d26a48478a567c404679e3bb99cf230d50\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[ObjC] Remove \u003ccode\u003e-[GPBFieldDescriptor optional]\u003c/code\u003e (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/3414dc151eb4dcbdb2ca952e2589993bf7af75c4\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/3414dc151eb4dcbdb2ca952e2589993bf7af75c4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Other] Remove deprecated flag for enabling MSVC support (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/97c979be6e0907e1051bee62584dac4594e73fa7\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/97c979be6e0907e1051bee62584dac4594e73fa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP] Remove deprecated PHP APIs (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9c45014099a4f7004fab6dd1278de2f4f2a393c5\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9c45014099a4f7004fab6dd1278de2f4f2a393c5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\u003c/a\u003e, \u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/cd76e675b14d00dda5623b30835d2bc7105fccc6\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/cd76e675b14d00dda5623b30835d2bc7105fccc6\u003c/a\u003e, \u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP]  Add PHP typehints for setters and remove redundant GPBUtil checks (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/pull/25296\"\u003eprotocolbuffers/protobuf#25296\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/aee03b78929c02461a5f9d8e136a2a016359b0cd\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/aee03b78929c02461a5f9d8e136a2a016359b0cd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP]  support default values for editions/proto2 (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/pull/25161\"\u003eprotocolbuffers/protobuf#25161\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b01099d56350551bae3da88b97bf3027274c9f17\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b01099d56350551bae3da88b97bf3027274c9f17\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/5b116fe2f14f49dd0cc3b76089983717f211025c\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/5b116fe2f14f49dd0cc3b76089983717f211025c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove float_format/double_format from python proto text_format (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/e4854a186e0bfa867d5bfa5cd850608a948fd488\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/e4854a186e0bfa867d5bfa5cd850608a948fd488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/00aaca1b4d98954bc2933d7c8a5379ba6088124c\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/00aaca1b4d98954bc2933d7c8a5379ba6088124c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove float_precision from python proto json_format (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/f027f1fcd52b9d080b7ee79f4024f53cf54e0dc5\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/f027f1fcd52b9d080b7ee79f4024f53cf54e0dc5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated FieldDescriptor.label (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a8ff55518ea5874478ad5b26515b31d186045a9\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a8ff55518ea5874478ad5b26515b31d186045a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://protobuf.dev/news/\"\u003eProtobuf News\u003c/a\u003e may include additional announcements or pre-announcements for upcoming changes.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://protobuf.dev/support/migration/\"\u003eMigration Guide\u003c/a\u003e may include additional guidance for breaking changes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBazel\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/25168\"\u003e#25168\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/8c857c3a1c6a106b0a096f1c9fa504bfaca035a9\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/8c857c3a1c6a106b0a096f1c9fa504bfaca035a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBreaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFeat(bazel): wire up prebuilt protoc toolchain (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/24115\"\u003e#24115\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/cc23698b486e690ea2eb873cc7596a87c74a3ba6\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/cc23698b486e690ea2eb873cc7596a87c74a3ba6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMigrate \u003ccode\u003eproto_descriptor_set\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/23369\"\u003e#23369\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/8d4dfdd39a7a242a9ed631a6ab2192c57dd9b9c8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/8d4dfdd39a7a242a9ed631a6ab2192c57dd9b9c8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eCompiler\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eRuby codegen: support generation of rbs files (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/15633\"\u003e#15633\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/6ebdf851ba78728f0aa145d38454ed9a316fb08d\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/6ebdf851ba78728f0aa145d38454ed9a316fb08d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid collision name problems between a message named \u003ccode\u003eXyz\u003c/code\u003e and a direct sibling enum named \u003ccode\u003eXyzView\u003c/code\u003e (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/eba53e8f172b273d679759a72ce4250131ee3df1\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/eba53e8f172b273d679759a72ce4250131ee3df1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGeneralizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ed3c57114d8e2b47cca7697ddaa50c1b3762a6b0\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ed3c57114d8e2b47cca7697ddaa50c1b3762a6b0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a bug with custom features outside of the \u003ccode\u003epb\u003c/code\u003e package. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/872d3ce7a4da00d7dcec33ced20cfe45235935e8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/872d3ce7a4da00d7dcec33ced20cfe45235935e8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix import option handling when include_imports isn't set. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9ef9e80afd9bc8379d578fe67e5ab0738728c04e\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9ef9e80afd9bc8379d578fe67e5ab0738728c04e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/1229d4adba24c0952ab85ce96bc7b7f8a1fe6d0f\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/1229d4adba24c0952ab85ce96bc7b7f8a1fe6d0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent accidental stripping of \u003ccode\u003edebug_redact\u003c/code\u003e options via import option. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/f58b098bffa7ca4045ef7773b09151a6af5d0c28\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/f58b098bffa7ca4045ef7773b09151a6af5d0c28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eC++\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd EnumerateEnumValues function. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/397d5d99db274b379d1384814074bf7df39d32f7\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/397d5d99db274b379d1384814074bf7df39d32f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/protocolbuffers/protobuf/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `requests` from 2.21.0 to 2.33.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/requests/releases\"\u003erequests's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.33.0\u003c/h2\u003e\n\u003ch2\u003e2.33.0 (2026-03-25)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eAnnouncements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at \u003ca href=\"https://redirect.github.com/psf/requests/issues/7271\"\u003e#7271\u003c/a\u003e. Give it a try, and report any gaps or feedback you may have in the issue. 📣\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-25645 \u003ccode\u003erequests.utils.extract_zipped_paths\u003c/code\u003e now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eImprovements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated to a PEP 517 build system using setuptools. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7012\"\u003e#7012\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7205\"\u003e#7205\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eDropped support for Python 3.9 following its end of support. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7196\"\u003e#7196\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eVarious typo fixes and doc improvements.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/M0d3v1\"\u003e\u003ccode\u003e@​M0d3v1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6865\"\u003epsf/requests#6865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aminvakil\"\u003e\u003ccode\u003e@​aminvakil\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7220\"\u003epsf/requests#7220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/E8Price\"\u003e\u003ccode\u003e@​E8Price\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6960\"\u003epsf/requests#6960\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mitre88\"\u003e\u003ccode\u003e@​mitre88\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7244\"\u003epsf/requests#7244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magsen\"\u003e\u003ccode\u003e@​magsen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6553\"\u003epsf/requests#6553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7227\"\u003epsf/requests#7227\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25\"\u003ehttps://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.32.5\u003c/h2\u003e\n\u003ch2\u003e2.32.5 (2025-08-18)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe SSLContext caching feature originally introduced in 2.32.0 has created\na new class of issues in Requests that have had negative impact across a number\nof use cases. The Requests team has decided to revert this feature as long term\nmaintenance of it is proving to be unsustainable in its current iteration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for Python 3.14.\u003c/li\u003e\n\u003cli\u003eDropped support for Python 3.8 following its end of support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.32.4\u003c/h2\u003e\n\u003ch2\u003e2.32.4 (2025-06-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/requests/blob/main/HISTORY.md\"\u003erequests's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.33.0 (2026-03-25)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eAnnouncements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e📣 Requests is adding inline types. If you have a typed code base that\nuses Requests, please take a look at \u003ca href=\"https://redirect.github.com/psf/requests/issues/7271\"\u003e#7271\u003c/a\u003e. Give it a try, and report\nany gaps or feedback you may have in the issue. 📣\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-25645 \u003ccode\u003erequests.utils.extract_zipped_paths\u003c/code\u003e now extracts\ncontents to a non-deterministic location to prevent malicious file\nreplacement. This does not affect default usage of Requests, only\napplications calling the utility function directly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eImprovements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated to a PEP 517 build system using setuptools. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7012\"\u003e#7012\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where an empty netrc entry could cause\nmalformed authentication to be applied to Requests on\nPython 3.11+. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7205\"\u003e#7205\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eDropped support for Python 3.9 following its end of support. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7196\"\u003e#7196\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eVarious typo fixes and doc improvements.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.32.5 (2025-08-18)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe SSLContext caching feature originally introduced in 2.32.0 has created\na new class of issues in Requests that have had negative impact across a number\nof use cases. The Requests team has decided to revert this feature as long term\nmaintenance of it is proving to be unsustainable in its current iteration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for Python 3.14.\u003c/li\u003e\n\u003cli\u003eDropped support for Python 3.8 following its end of support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.32.4 (2025-06-10)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\nenvironment will retrieve credentials for the wrong hostname/machine from a\nnetrc file.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761\"\u003e\u003ccode\u003ebc04dfd\u003c/code\u003e\u003c/a\u003e v2.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7\"\u003e\u003ccode\u003e66d21cb\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028\"\u003e\u003ccode\u003e8b9bc8f\u003c/code\u003e\u003c/a\u003e Move badges to top of README (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7293\"\u003e#7293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286\"\u003e\u003ccode\u003ee331a28\u003c/code\u003e\u003c/a\u003e Remove unused extraction call (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7292\"\u003e#7292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29\"\u003e\u003ccode\u003e753fd08\u003c/code\u003e\u003c/a\u003e docs: fix FAQ grammar in httplib2 example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71\"\u003e\u003ccode\u003e774a0b8\u003c/code\u003e\u003c/a\u003e docs(socks): same block as other sections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303\"\u003e\u003ccode\u003e9c72a41\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.33.0 to 4.34.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be\"\u003e\u003ccode\u003eebf7190\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.32.0 to 4.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798\"\u003e\u003ccode\u003e0e4ae38\u003c/code\u003e\u003c/a\u003e docs: exclude Response.is_permanent_redirect from API docs (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7244\"\u003e#7244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a\"\u003e\u003ccode\u003ed568f47\u003c/code\u003e\u003c/a\u003e docs: clarify Quickstart POST example (\u003ca href=\"https://redirect.github.com/psf/requests/issues/6960\"\u003e#6960\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/psf/requests/compare/v2.21.0...v2.33.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 0.20.3 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eScikit-learn 1.4.2\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.4.2 release.\u003c/p\u003e\n\u003cp\u003eThis release only includes support for numpy 2.\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eScikit-learn 1.4.1.post1\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.4.1.post1 release.\u003c/p\u003e\n\u003cp\u003eYou can see the changelog here: \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/0.20.3...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tensorflow` from 1.13.1 to 2.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tensorflow/tensorflow/releases\"\u003etensorflow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTensorFlow 2.12.1\u003c/h2\u003e\n\u003ch1\u003eRelease 2.12.1\u003c/h1\u003e\n\u003ch3\u003eBug Fixes and Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe use of the ambe config to build and test aarch64 is not needed. The ambe config will be removed in the future. Making cpu_arm64_pip.sh and cpu_arm64_nonpip.sh more similar for easier future maintenance.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTensorFlow 2.12.0\u003c/h2\u003e\n\u003ch1\u003eRelease 2.12.0\u003c/h1\u003e\n\u003ch2\u003eTensorFlow\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eBuild, Compilation and Packaging\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved redundant packages \u003ccode\u003etensorflow-gpu\u003c/code\u003e and \u003ccode\u003etf-nightly-gpu\u003c/code\u003e. These packages were removed and replaced with packages that direct users to switch to \u003ccode\u003etensorflow\u003c/code\u003e or \u003ccode\u003etf-nightly\u003c/code\u003e respectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See \u003ca href=\"https://pypi.org/project/tensorflow-gpu\"\u003ehttps://pypi.org/project/tensorflow-gpu\u003c/a\u003e for more details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003etf.function\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003etf.function\u003c/code\u003e now uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:\n\u003cul\u003e\n\u003cli\u003eUsing \u003ccode\u003efunctools.wraps\u003c/code\u003e on a function with different signature\u003c/li\u003e\n\u003cli\u003eUsing \u003ccode\u003efunctools.partial\u003c/code\u003e with an invalid \u003ccode\u003etf.function\u003c/code\u003e input\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etf.function\u003c/code\u003e now enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.\u003c/li\u003e\n\u003cli\u003eParameterless \u003ccode\u003etf.function\u003c/code\u003es ar...\n\n_Description has been truncated_","html_url":"https://github.com/webmasterproT/signal-inversion-research/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/webmasterproT%2Fsignal-inversion-research/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"4095412869","node_id":"PR_kwDOPGSG_s7LjrAf","number":46,"state":"closed","title":"Bump the pip group across 23 directories with 10 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-18T22:36:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-18T14:12:46.000Z","updated_at":"2026-03-18T22:36:23.000Z","time_to_close":30215,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":10,"packages":[{"name":"fastmcp","old_version":"2.3.4","new_version":"2.14.2","repository_url":"https://github.com/PrefectHQ/fastmcp"},{"name":"lxml-html-clean","old_version":"0.3.1","new_version":"0.4.4","repository_url":"https://github.com/fedora-python/lxml_html_clean"},{"name":"pypdf","old_version":"4.3.1","new_version":"6.8.0","repository_url":"https://github.com/py-pdf/pypdf"},{"name":"keras","old_version":"3.5.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"black","old_version":"24.3.0","new_version":"26.3.1","repository_url":"https://github.com/psf/black"},{"name":"pypdf","old_version":"5.0.0","new_version":"6.8.0","repository_url":"https://github.com/py-pdf/pypdf"},{"name":"authlib","old_version":"1.3.1","new_version":"1.6.9","repository_url":"https://github.com/authlib/authlib"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the /integrations/a0ml directory: [fastmcp](https://github.com/PrefectHQ/fastmcp), [lxml-html-clean](https://github.com/fedora-python/lxml_html_clean) and [pypdf](https://github.com/py-pdf/pypdf).\nBumps the pip group with 1 update in the /integrations/ggml-org-central/ggml directory: [keras](https://github.com/keras-team/keras).\nBumps the pip group with 1 update in the /integrations/kokkos-central/llvm-project/llvm/utils/git directory: [black](https://github.com/psf/black).\nBumps the pip group with 3 updates in the /integrations/mem0/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/embedchain/deployment/gradio.app directory: [gradio](https://github.com/gradio-app/gradio).\nBumps the pip group with 2 updates in the /integrations/mem0/embedchain/examples/api_server directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/slack_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/whatsapp_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 3 updates in the /integrations/mem0/mem0_temp/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/embedchain/deployment/gradio.app directory: [gradio](https://github.com/gradio-app/gradio).\nBumps the pip group with 2 updates in the /integrations/mem0/mem0_temp/embedchain/examples/api_server directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0/mem0_temp/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/slack_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/whatsapp_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 3 updates in the /integrations/mem0_temp/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0_temp/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0_temp/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0_temp/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\n\nUpdates `fastmcp` from 2.3.4 to 2.14.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases\"\u003efastmcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.14.2: Port Authority\u003c/h2\u003e\n\u003cp\u003eFastMCP 2.14.2 brings a wave of community contributions safely into the 2.x line. A variety of important fixes backported from 3.0 work improve OpenAPI 3.1 compatibility, MCP spec compliance for output schemas and elicitation, and correct a subtle base_url fallback issue. The CLI now gently reminds you that FastMCP 3.0 is on the horizon.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin MCP under 2.x by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2709\"\u003ejlowin/fastmcp#2709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd auth_route parameter to SupabaseProvider by \u003ca href=\"https://github.com/EloiZalczer\"\u003e\u003ccode\u003e@​EloiZalczer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2760\"\u003ejlowin/fastmcp#2760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CLI banner with FastMCP 3.0 notice by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2765\"\u003ejlowin/fastmcp#2765\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLet FastMCPError propagate unchanged from managers by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2697\"\u003ejlowin/fastmcp#2697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix test cleanup for uvicorn 0.39+ context isolation by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2696\"\u003ejlowin/fastmcp#2696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump pydocket to 0.16.3 to fix worker cleanup race condition by \u003ca href=\"https://github.com/chrisguidry\"\u003e\u003ccode\u003e@​chrisguidry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2700\"\u003ejlowin/fastmcp#2700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Prefect website URL in docs footer by \u003ca href=\"https://github.com/mgoldsborough\"\u003e\u003ccode\u003e@​mgoldsborough\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2705\"\u003ejlowin/fastmcp#2705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: resolve root-level $ref in outputSchema for MCP spec compliance by \u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2727\"\u003ejlowin/fastmcp#2727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OAuth Proxy resource parameter validation by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2763\"\u003ejlowin/fastmcp#2763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix openapi_version check to include 3.1 by \u003ca href=\"https://github.com/deeleeramone\"\u003e\u003ccode\u003e@​deeleeramone\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2769\"\u003ejlowin/fastmcp#2769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix titled enum elicitation schema to comply with MCP spec by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2774\"\u003ejlowin/fastmcp#2774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix base_url fallback when url is not set by \u003ca href=\"https://github.com/bhbs\"\u003e\u003ccode\u003e@​bhbs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2782\"\u003ejlowin/fastmcp#2782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy import DiskStore to avoid sqlite3 dependency on import by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2785\"\u003ejlowin/fastmcp#2785\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd v3 breaking changes notice to README and docs by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2713\"\u003ejlowin/fastmcp#2713\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd changelog entries for v2.13.1 through v2.14.1 by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2724\"\u003ejlowin/fastmcp#2724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003econference to 2.x branch by \u003ca href=\"https://github.com/aaazzam\"\u003e\u003ccode\u003e@​aaazzam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2787\"\u003ejlowin/fastmcp#2787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jlowin/fastmcp/compare/v2.14.1...v2.14.2\"\u003ehttps://github.com/jlowin/fastmcp/compare/v2.14.1...v2.14.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.14.1: 'Tis a Gift to Be Sample\u003c/h2\u003e\n\u003cp\u003eFastMCP 2.14.1 adds support for sampling with tools (SEP-1577). This exciting new feature lets servers pass tools to \u003ccode\u003ectx.sample()\u003c/code\u003e, enabling agentic workflows where the server borrows the client's LLM and controls tool execution automatically. Pass any callable as a tool and FastMCP handles the loop: calling the LLM, executing tools, and feeding results back until a final response is produced. For fine-grained control, \u003ccode\u003ectx.sample_step()\u003c/code\u003e makes a single LLM call and returns a \u003ccode\u003eSampleStep\u003c/code\u003e, letting you inspect tool calls, add custom logic, or build your own execution loop. Structured output via \u003ccode\u003eresult_type\u003c/code\u003e returns validated Pydantic models instead of raw text. This release also adds \u003ccode\u003eAnthropicSamplingHandler\u003c/code\u003e alongside the existing \u003ccode\u003eOpenAI\u003c/code\u003e handler (newly promoted out of the \u003ccode\u003eexperimental\u003c/code\u003e module), so clients \u003cem\u003eand\u003c/em\u003e servers can provide sampling capability across major providers with ease.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eNew Features 🎉\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSEP-1577: Sampling with tools by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2551\"\u003ejlowin/fastmcp#2551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd AnthropicSamplingHandler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2617\"\u003ejlowin/fastmcp#2617\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd Python 3.13 to Ubuntu CI tests by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2606\"\u003ejlowin/fastmcp#2606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove legacy _task_capable_initialize() workaround by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2612\"\u003ejlowin/fastmcp#2612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConsolidate session state reset logic and improve cancellation cleanup by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2615\"\u003ejlowin/fastmcp#2615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUnify SamplingHandler and promote OpenAI handler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2616\"\u003ejlowin/fastmcp#2616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tool_names parameter to mount() for name overrides by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2619\"\u003ejlowin/fastmcp#2619\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdopt streamable_http_client API from MCP SDK by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2620\"\u003ejlowin/fastmcp#2620\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate exclude_args in favor of Depends() by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2621\"\u003ejlowin/fastmcp#2621\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: prompt tasks returning mcp.types.PromptMessage now work by \u003ca href=\"https://github.com/chrisguidry\"\u003e\u003ccode\u003e@​chrisguidry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2603\"\u003ejlowin/fastmcp#2603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse WindowsSelectorEventLoopPolicy to fix Windows test warnings by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2607\"\u003ejlowin/fastmcp#2607\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClean up cancelled connection startup by \u003ca href=\"https://github.com/shawnthapa\"\u003e\u003ccode\u003e@​shawnthapa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2614\"\u003ejlowin/fastmcp#2614\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx\"\u003efastmcp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003chr /\u003e\n\u003ch2\u003etitle: \u0026quot;Changelog\u0026quot;\nicon: \u0026quot;list-check\u0026quot;\nrss: true\ntag: NEW\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases/tag/v3.0.2\"\u003ev3.0.2: Threecovery Mode II\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eTwo community-contributed fixes: auth headers from MCP transport no longer leak through to downstream OpenAPI APIs, and background task workers now correctly receive the originating request ID. Plus a new docs example for context-aware tool factories.\u003c/p\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: prevent MCP transport auth header from leaking to downstream OpenAPI APIs by \u003ca href=\"https://github.com/stakeswky\"\u003e\u003ccode\u003e@​stakeswky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3262\"\u003e#3262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: propagate origin_request_id to background task workers by \u003ca href=\"https://github.com/gfortaine\"\u003e\u003ccode\u003e@​gfortaine\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3175\"\u003e#3175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd v3.0.1 release notes by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3259\"\u003e#3259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add context-aware tool factory example by \u003ca href=\"https://github.com/machov\"\u003e\u003ccode\u003e@​machov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3264\"\u003e#3264\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/PrefectHQ/fastmcp/compare/v3.0.1...v3.0.2\"\u003ev3.0.1...v3.0.2\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases/tag/v3.0.1\"\u003ev3.0.1: Three-covery Mode\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eFirst patch after 3.0 — mostly smoothing out rough edges discovered in the wild. The big ones: middleware state that wasn't surviving the trip to tool handlers now does, \u003ccode\u003eTool.from_tool()\u003c/code\u003e accepts callables again, OpenAPI schemas with circular references no longer crash discovery, and decorator overloads now return the correct types in function mode. Also adds \u003ccode\u003everify_id_token\u003c/code\u003e to OIDCProxy for providers (like some Azure AD configs) that issue opaque access tokens but standard JWT id_tokens.\u003c/p\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd verify_id_token option to OIDCProxy by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3248\"\u003e#3248\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix v3.0.0 changelog compare link by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3223\"\u003e#3223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MDX parse error in upgrade guide prompts by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3227\"\u003e#3227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix non-serializable state lost between middleware and tools by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3234\"\u003e#3234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAccept callables in Tool.from_tool() by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3235\"\u003e#3235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve skill metadata through provider wrapping by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3237\"\u003e#3237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix circular reference crash in OpenAPI schemas by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3245\"\u003e#3245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix NameError with future annotations and Context/Depends parameters by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3243\"\u003e#3243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ty ignore syntax in OpenAPI provider by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3253\"\u003e#3253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse max_completion_tokens instead of deprecated max_tokens in OpenAI handler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3254\"\u003e#3254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ty compatibility with upgraded deps by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3257\"\u003e#3257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix decorator overload return types for function mode by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3258\"\u003e#3258\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSync README with welcome.mdx, fix install count by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3224\"\u003e#3224\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument dict-to-Message prompt migration in upgrade guides by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3225\"\u003e#3225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix v2 upgrade guide: remove incorrect v1 import advice by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3226\"\u003e#3226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/99832a9fafe742dcfa747bc6b829b386c25c243b\"\u003e\u003ccode\u003e99832a9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2787\"\u003e#2787\u003c/a\u003e from jlowin/confernece-to-2.x-branch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/7fd365c8680b2c747bd23360662eebfaa0c1fb27\"\u003e\u003ccode\u003e7fd365c\u003c/code\u003e\u003c/a\u003e Update docs.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/9cf9aa9b37dcbbe917d43b7a3a06540fe6bfd65e\"\u003e\u003ccode\u003e9cf9aa9\u003c/code\u003e\u003c/a\u003e Lazy import DiskStore to avoid sqlite3 dependency on import (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2785\"\u003e#2785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/1b637522d166d40ad41346997d2fda74bc886934\"\u003e\u003ccode\u003e1b63752\u003c/code\u003e\u003c/a\u003e Fix base_url fallback when url is not set (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2776\"\u003e#2776\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2782\"\u003e#2782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/33ff356c0f08bbbc22a369e0fc789f4b086e2767\"\u003e\u003ccode\u003e33ff356\u003c/code\u003e\u003c/a\u003e Fix titled enum elicitation schema to comply with MCP spec (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2774\"\u003e#2774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/820f74e8ed7c49fc5c53c02f8cb92f8b3121a265\"\u003e\u003ccode\u003e820f74e\u003c/code\u003e\u003c/a\u003e [BugFix] Fix \u003ccode\u003eopenapi_version\u003c/code\u003e Check So 3.1 Is Included (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2768\"\u003e#2768\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2769\"\u003e#2769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/bbf6c200eeda0a9a946dd8f650a5fa35864ab36f\"\u003e\u003ccode\u003ebbf6c20\u003c/code\u003e\u003c/a\u003e Update CLI banner with FastMCP 3.0 notice (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2765\"\u003e#2765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/97327893bba11bc837aa1883e39cf8ffea8af479\"\u003e\u003ccode\u003e9732789\u003c/code\u003e\u003c/a\u003e Fix OAuth Proxy resource parameter validation (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2763\"\u003e#2763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/6bade1cbd973cbbbca26a84ed7c4cc58ecfda5b3\"\u003e\u003ccode\u003e6bade1c\u003c/code\u003e\u003c/a\u003e Add auth_route parameter to SupabaseProvider (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2760\"\u003e#2760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/4963b516c285bcfe6440a44996dfe06d604af3bd\"\u003e\u003ccode\u003e4963b51\u003c/code\u003e\u003c/a\u003e Fix: resolve root-level $ref in outputSchema for MCP spec compliance (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2720\"\u003e#2720\u003c/a\u003e) ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/PrefectHQ/fastmcp/compare/v2.3.4...v2.14.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml-html-clean` from 0.3.1 to 0.4.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fedora-python/lxml_html_clean/blob/main/CHANGES.rst\"\u003elxml-html-clean's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.4.4 (2026-02-26)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where Unicode escapes in CSS were not properly decoded\nbefore security checks. This prevents attackers from bypassing filters\nusing escape sequences. (CVE-2026-28348)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e tags could be used for URL\nhijacking attacks. The \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e tag is now automatically removed\nwhenever the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e tag is removed (via \u003ccode\u003epage_structure=True\u003c/code\u003e\nor manual configuration), as \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e must be inside \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e\naccording to HTML specifications. (CVE-2026-28350)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.3 (2025-10-02)\u003c/h1\u003e\n\u003ch2\u003eMaintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eTests updated to work correctly with new lxml and libxml2 releases.\u003c/li\u003e\n\u003cli\u003ePython 3.6 and 3.7 are no longer tested.\u003c/li\u003e\n\u003cli\u003eImproved documentation about CSS removal behavior.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.2 (2025-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elxml_html_clean\u003c/code\u003e now correctly handles HTML input as bytes\nas it did before the 0.2.0 release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.1 (2024-11-15)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved superfluous debug prints.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.0 (2024-11-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eCleaner()\u003c/code\u003e now scans for hidden JavaScript code embedded\nwithin CSS comments. In certain contexts, such as within \u003ccode\u003e\u0026lt;svg\u0026gt;\u003c/code\u003e or \u003ccode\u003e\u0026lt;math\u0026gt;\u003c/code\u003e tags,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/fd10d79cf8a4d4a962e139aee6d02dec02b2de7c\"\u003e\u003ccode\u003efd10d79\u003c/code\u003e\u003c/a\u003e Add more tests for different combinations of backslashes and unicode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/5b7e2288d9e5bda81d1fcf6a4feaed362534899e\"\u003e\u003ccode\u003e5b7e228\u003c/code\u003e\u003c/a\u003e Restore the removal of all backslashes from styles after decoding of unicode ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/88da8f9e679190ae06f1238106dd9fbd1d87bfbb\"\u003e\u003ccode\u003e88da8f9\u003c/code\u003e\u003c/a\u003e Prepare release 0.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/9c5612ca33b941eec4178abf8a5294b103403f34\"\u003e\u003ccode\u003e9c5612c\u003c/code\u003e\u003c/a\u003e Remove \u0026lt;base\u0026gt; tags to prevent URL hijacking attacks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/2ef732667ddbc74ea59847bcf24b75809aaeed3b\"\u003e\u003ccode\u003e2ef7326\u003c/code\u003e\u003c/a\u003e Implement unicode escape decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/7c854afd949ff82cc6e81a666962e07b739706cf\"\u003e\u003ccode\u003e7c854af\u003c/code\u003e\u003c/a\u003e Add missing Python 3.14 to classifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/80cebf7156449bd48d2d6106a70c7442874fa1f9\"\u003e\u003ccode\u003e80cebf7\u003c/code\u003e\u003c/a\u003e Continue using the package link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/1cef82e0647549b901452f45396ded8e6b2bceab\"\u003e\u003ccode\u003e1cef82e\u003c/code\u003e\u003c/a\u003e Update safe sanitizer recommendation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/79f35f4b7542bf87286b45764a7b0bdf6830bb36\"\u003e\u003ccode\u003e79f35f4\u003c/code\u003e\u003c/a\u003e CI: Drop Python 3.8, add 3.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/fab1dd4a23cbad1cdd4f2cebd2d6cae1130565bd\"\u003e\u003ccode\u003efab1dd4\u003c/code\u003e\u003c/a\u003e Release 0.4.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fedora-python/lxml_html_clean/compare/0.3.1...0.4.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pypdf` from 4.3.1 to 6.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/releases\"\u003epypdf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e) by \u003ca href=\"https://github.com/costajohnt\"\u003e\u003ccode\u003e@​costajohnt\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e) by \u003ca href=\"https://github.com/rampageservices\"\u003e\u003ccode\u003e@​rampageservices\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md\"\u003epypdf's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of page boxes defined on \u003ccode\u003e/Pages\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.1, 2026-02-17\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/a869eceb57e1f98d118e8b73c6169bdc519cbc57\"\u003e\u003ccode\u003ea869ece\u003c/code\u003e\u003c/a\u003e REL: 6.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/3c550b3196adeba1506a26e57c09c09fac75e9aa\"\u003e\u003ccode\u003e3c550b3\u003c/code\u003e\u003c/a\u003e SEC: Limit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/5dae0e28bec83a5c9a3df2ace26dc77c633b4f72\"\u003e\u003ccode\u003e5dae0e2\u003c/code\u003e\u003c/a\u003e MAINT: Document and test XMP security (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3674\"\u003e#3674\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/b9f66ab4338ce14e5f07a73f51f09ed08fa1fe7a\"\u003e\u003ccode\u003eb9f66ab\u003c/code\u003e\u003c/a\u003e DEV: Change to \u003ccode\u003eloadfile\u003c/code\u003e strategy for PyPy in CI (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3671\"\u003e#3671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/071118b08286bed057bb1608cc507d76722cc6f9\"\u003e\u003ccode\u003e071118b\u003c/code\u003e\u003c/a\u003e MAINT: Remove excessive logging in extract_links while not clear (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3670\"\u003e#3670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/43add641726c2819a465cd0d5c05818aa697f81e\"\u003e\u003ccode\u003e43add64\u003c/code\u003e\u003c/a\u003e DEV: Timeout PyPy tests after one minute\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/4228dd2f52e5f70b95c8058c4fc8c6ac291ebbc1\"\u003e\u003ccode\u003e4228dd2\u003c/code\u003e\u003c/a\u003e DOC: Avoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/0e9792df262f782884ea5e1b75ea1138655a1fe7\"\u003e\u003ccode\u003e0e9792d\u003c/code\u003e\u003c/a\u003e ENH: Add /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/ede6db99d007f27540e62867c762746df7a6ed0e\"\u003e\u003ccode\u003eede6db9\u003c/code\u003e\u003c/a\u003e DOC: Document how to disable jbig2dec calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/6d0fa2fc0b6e54d9d6f61ffa52d057c8b5ff032f\"\u003e\u003ccode\u003e6d0fa2f\u003c/code\u003e\u003c/a\u003e MAINT: Move and rename _xobj_image_helpers.py (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3661\"\u003e#3661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/py-pdf/pypdf/compare/4.3.1...6.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.5.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `black` from 24.3.0 to 26.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/black/releases\"\u003eblack's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.3.1\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent Jupyter notebook magic masking collisions from corrupting cells by using\nexact-length placeholders for short magics and aborting if a placeholder can no longer\nbe unmasked safely (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eConfiguration\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlways hash cache filename components derived from \u003ccode\u003e--python-cell-magics\u003c/code\u003e so custom\nmagic names cannot affect cache paths (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cem\u003eBlackd\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDisable browser-originated requests by default, add configurable origin allowlisting\nand request body limits, and bound executor submissions to improve backpressure\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.3.0\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't double-decode input, causing non-UTF-8 files to be corrupted (\u003ca href=\"https://redirect.github.com/psf/black/issues/4964\"\u003e#4964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix crash on standalone comment in lambda default arguments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4993\"\u003e#4993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve parentheses when \u003ccode\u003e# type: ignore\u003c/code\u003e comments would be merged with other\ncomments on the same line, preventing AST equivalence failures (\u003ca href=\"https://redirect.github.com/psf/black/issues/4888\"\u003e#4888\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreview style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where \u003ccode\u003eif\u003c/code\u003e guards in \u003ccode\u003ecase\u003c/code\u003e blocks were incorrectly split when the pattern had\na trailing comma (\u003ca href=\"https://redirect.github.com/psf/black/issues/4884\"\u003e#4884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003estring_processing\u003c/code\u003e crashing on unassigned long string literals with trailing\ncommas (one-item tuples) (\u003ca href=\"https://redirect.github.com/psf/black/issues/4929\"\u003e#4929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify implementation of the power operator \u0026quot;hugging\u0026quot; logic (\u003ca href=\"https://redirect.github.com/psf/black/issues/4918\"\u003e#4918\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePackaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in\nfrozen environments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4930\"\u003e#4930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce winloop for windows as an alternative to uvloop (\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove deprecated function \u003ccode\u003euvloop.install()\u003c/code\u003e in favor of \u003ccode\u003euvloop.new_event_loop()\u003c/code\u003e\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename \u003ccode\u003emaybe_install_uvloop\u003c/code\u003e function to \u003ccode\u003emaybe_use_uvloop\u003c/code\u003e to simplify loop\ninstallation and creation of either a uvloop/winloop evenloop or default eventloop\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOutput\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/black/blob/main/CHANGES.md\"\u003eblack's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.3.1\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent Jupyter notebook magic masking collisions from corrupting cells by using\nexact-length placeholders for short magics and aborting if a placeholder can no longer\nbe unmasked safely (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eConfiguration\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlways hash cache filename components derived from \u003ccode\u003e--python-cell-magics\u003c/code\u003e so custom\nmagic names cannot affect cache paths (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cem\u003eBlackd\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDisable browser-originated requests by default, add configurable origin allowlisting\nand request body limits, and bound executor submissions to improve backpressure\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.3.0\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't double-decode input, causing non-UTF-8 files to be corrupted (\u003ca href=\"https://redirect.github.com/psf/black/issues/4964\"\u003e#4964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix crash on standalone comment in lambda default arguments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4993\"\u003e#4993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve parentheses when \u003ccode\u003e# type: ignore\u003c/code\u003e comments would be merged with other\ncomments on the same line, preventing AST equivalence failures (\u003ca href=\"https://redirect.github.com/psf/black/issues/4888\"\u003e#4888\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreview style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where \u003ccode\u003eif\u003c/code\u003e guards in \u003ccode\u003ecase\u003c/code\u003e blocks were incorrectly split when the pattern had\na trailing comma (\u003ca href=\"https://redirect.github.com/psf/black/issues/4884\"\u003e#4884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003estring_processing\u003c/code\u003e crashing on unassigned long string literals with trailing\ncommas (one-item tuples) (\u003ca href=\"https://redirect.github.com/psf/black/issues/4929\"\u003e#4929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify implementation of the power operator \u0026quot;hugging\u0026quot; logic (\u003ca href=\"https://redirect.github.com/psf/black/issues/4918\"\u003e#4918\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePackaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in\nfrozen environments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4930\"\u003e#4930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce winloop for windows as an alternative to uvloop (\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove deprecated function \u003ccode\u003euvloop.install()\u003c/code\u003e in favor of \u003ccode\u003euvloop.new_event_loop()\u003c/code\u003e\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename \u003ccode\u003emaybe_install_uvloop\u003c/code\u003e function to \u003ccode\u003emaybe_use_uvloop\u003c/code\u003e to simplify loop\ninstallation and creation of either a uvloop/winloop evenloop or default eventloop\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c6755bb741b6481d6b3d3bb563c83fa060db96c9\"\u003e\u003ccode\u003ec6755bb\u003c/code\u003e\u003c/a\u003e Prepare release 26.3.1 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5046\"\u003e#5046\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/69973fd6950985fbeb1090d96da717dc4d8380b0\"\u003e\u003ccode\u003e69973fd\u003c/code\u003e\u003c/a\u003e Harden blackd browser-facing request handling (\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/4937fe6cf241139ddbfc16b0bdbb5b422798909d\"\u003e\u003ccode\u003e4937fe6\u003c/code\u003e\u003c/a\u003e Fix some shenanigans with the cache file and IPython (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/2e641d174469c505d5ae905e75d4c769597e681f\"\u003e\u003ccode\u003e2e641d1\u003c/code\u003e\u003c/a\u003e docs: remove outdated Black Playground references (\u003ca href=\"https://redirect.github.com/psf/black/issues/5044\"\u003e#5044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c014b22a2d5e0632587b47b81151658bddfa0b88\"\u003e\u003ccode\u003ec014b22\u003c/code\u003e\u003c/a\u003e Remove unused internal code (\u003ca href=\"https://redirect.github.com/psf/black/issues/5041\"\u003e#5041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/0dae20b2d009f2f03de8696d06b0c947d3abafc9\"\u003e\u003ccode\u003e0dae20b\u003c/code\u003e\u003c/a\u003e Add new changelog (\u003ca href=\"https://redirect.github.com/psf/black/issues/5036\"\u003e#5036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c5c1cbddd92cecb554ac2a77a24139dd76831030\"\u003e\u003ccode\u003ec5c1cbd\u003c/code\u003e\u003c/a\u003e Minor release patches (\u003ca href=\"https://redirect.github.com/psf/black/issues/5035\"\u003e#5035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/7e5a828c37d71b6a6666e28eed444816def6a8f4\"\u003e\u003ccode\u003e7e5a828\u003c/code\u003e\u003c/a\u003e docs: clarify relationship between Black style and PEP 8 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5025\"\u003e#5025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/69705deb8776e7c5e585668da106d1abe2cb8d77\"\u003e\u003ccode\u003e69705de\u003c/code\u003e\u003c/a\u003e docs: add clearer pyproject configuration guidance (\u003ca href=\"https://redirect.github.com/psf/black/issues/5026\"\u003e#5026\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/35ea67920b7f6ac8e09be1c47278752b1e827f76\"\u003e\u003ccode\u003e35ea679\u003c/code\u003e\u003c/a\u003e Prepare release 26.3.0 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5032\"\u003e#5032\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/psf/black/compare/24.3.0...26.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pypdf` from 5.0.0 to 6.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/releases\"\u003epypdf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e) by \u003ca href=\"https://github.com/costajohnt\"\u003e\u003ccode\u003e@​costajohnt\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e) by \u003ca href=\"https://github.com/rampageservices\"\u003e\u003ccode\u003e@​rampageservices\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md\"\u003epypdf's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of page boxes defined on \u003ccode\u003e/Pages\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.1, 2026-02-17\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/a869eceb57e1f98d118e8b73c6169bdc519cbc57\"\u003e\u003ccode\u003ea869ece\u003c/code\u003e\u003c/a\u003e REL: 6.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/3c550b3196adeba1506a26e57c09c09fac75e9aa\"\u003e\u003ccode\u003e3c550b3\u003c/code\u003e\u003c/a\u003e SEC: Limit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/5dae0e28bec83a5c9a3df2ace26dc77c633b4f72\"\u003e\u003ccode\u003e5dae0e2\u003c/code\u003e\u003c/a\u003e MAINT: Document and test XMP security (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3674\"\u003e#3674\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/b9f66ab4338ce14e5f07a73f51f09ed08fa1fe7a\"\u003e\u003ccode\u003eb9f66ab\u003c/code\u003e\u003c/a\u003e DEV: Change to \u003ccode\u003eloadfile\u003c/code\u003e strategy for PyPy in CI (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3671\"\u003e#3671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/071118b08286bed057bb1608cc507d76722cc6f9\"\u003e\u003ccode\u003e071118b\u003c/code\u003e\u003c/a\u003e MAINT: Remove excessive logging in extract_links while not clear (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3670\"\u003e#3670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/43add641726c2819a465cd0d5c05818aa697f81e\"\u003e\u003ccode\u003e43add64\u003c/code\u003e\u003c/a\u003e DEV: Timeout PyPy tests after one minute\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/4228dd2f52e5f70b95c8058c4fc8c6ac291ebbc1\"\u003e\u003ccode\u003e4228dd2\u003c/code\u003e\u003c/a\u003e DOC: Avoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/0e9792df262f782884ea5e1b75ea1138655a1fe7\"\u003e\u003ccode\u003e0e9792d\u003c/code\u003e\u003c/a\u003e ENH: Add /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/ede6db99d007f27540e62867c762746df7a6ed0e\"\u003e\u003ccode\u003eede6db9\u003c/code\u003e\u003c/a\u003e DOC: Document how to disable jbig2dec calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/6d0fa2fc0b6e54d9d6f61ffa52d057c8b5ff032f\"\u003e\u003ccode\u003e6d0fa2f\u003c/code\u003e\u003c/a\u003e MAINT: Move and rename _xobj_image_helpers.py (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3661\"\u003e#3661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/py-pdf/pypdf/compare/4.3.1...6.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `authlib` from 1.3.1 to 1.6.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/authlib/authlib/releases\"\u003eauthlib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.9\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.8...v1.6.9\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.8...v1.6.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eChanges in \u003ccode\u003ejose\u003c/code\u003e module\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNot using header's \u003ccode\u003ejwk\u003c/code\u003e automatically\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eES256K\u003c/code\u003e into default jwt algorithms\u003c/li\u003e\n\u003cli\u003eRemove deprecated algorithm from default registry\u003c/li\u003e\n\u003cli\u003eGenerate random \u003ccode\u003ecek\u003c/code\u003e when \u003ccode\u003ecek\u003c/code\u003e length doesn't match\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.8\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.7...v1.6.8\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.7...v1.6.8\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eEdDSA\u003c/code\u003e to default \u003ccode\u003ejwt\u003c/code\u003e instance.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.7\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.6...v1.6.7\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.6...v1.6.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eSet supported algorithms for the default \u003ccode\u003ejwt\u003c/code\u003e instance.\u003c/p\u003e\n\u003ch2\u003ev1.6.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ClientAuth): fix incorrect signature when Content-Type is x-www-form-urlencoded by \u003ca href=\"https://github.com/shc261392\"\u003e\u003ccode\u003e@​shc261392\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/778\"\u003eauthlib/authlib#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Use \u003ccode\u003eexpires_in\u003c/code\u003e when \u003ccode\u003eexpires_at\u003c/code\u003e is unparsable by \u003ca href=\"https://github.com/bendavis78\"\u003e\u003ccode\u003e@​bendavis78\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/842\"\u003eauthlib/authlib#842\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eget_jwt_config\u003c/code\u003e takes a \u003ccode\u003eclient\u003c/code\u003e parameter. by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/844\"\u003eauthlib/authlib#844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shc261392\"\u003e\u003ccode\u003e@​shc261392\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/778\"\u003eauthlib/authlib#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bendavis78\"\u003e\u003ccode\u003e@​bendavis78\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/842\"\u003eauthlib/authlib#842\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.5...v1.6.6\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.5...v1.6.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.6.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003erequest\u003c/code\u003e param to RFC7591 \u003ccode\u003egenerate_client_info\u003c/code\u003e and \u003ccode\u003egenerate_client_secret\u003c/code\u003e methods by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/825\"\u003eauthlib/authlib#825\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: support list params in prepare_grant_uri by \u003ca href=\"https://github.com/lisongmin\"\u003e\u003ccode\u003e@​lisongmin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/827\"\u003eauthlib/authlib#827\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump SonarSource/sonarqube-scan-action from 5 to 6 in /.github/workflows by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/828\"\u003eauthlib/authlib#828\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jose): add max size for JWE zip=DEF decompression by \u003ca href=\"https://github.com/lepture\"\u003e\u003ccode\u003e@​lepture\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/830\"\u003eauthlib/authlib#830\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lisongmin\"\u003e\u003ccode\u003e@​lisongmin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/827\"\u003eauthlib/authlib#827\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/828\"\u003eauthlib/authlib#828\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.4...v1.6.5\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.4...v1.6.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.6.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(jose): prevent public/unprotected header overwriting protected header by \u003ca href=\"https://github.com/lepture\"\u003e\u003ccode\u003e@​lepture\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/809\"\u003eauthlib/authlib#809\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eInsecureTransportError\u003c/code\u003e raising by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/810\"\u003eauthlib/authlib#810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd conventional-commits pre-commit hook by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/811\"\u003eauthlib/authlib#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/authlib/authlib/blob/main/docs/changelog.rst\"\u003eauthlib's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003e.. meta::\n:description: The full list of changes between each Authlib release.\u003c/p\u003e\n\u003cp\u003eHere you can see the full list of changes between each Authlib release.\u003c/p\u003e\n\u003ch2\u003eVersion 1.7.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eUnreleased\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for \u003ccode\u003eOpenID Connect RP-Initiated Logout 1.0 \u0026lt;https://openid.net/specs/openid-connect-rpinitiated-1_0.html\u0026gt;\u003c/code\u003e_.\nSee :ref:\u003ccode\u003especs/rpinitiated\u003c/code\u003e for details. :issue:\u003ccode\u003e500\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003ePer RFC 6749 Section 3.3, the \u003ccode\u003escope\u003c/code\u003e parameter is now optional at both\nauthorization and token endpoints. \u003ccode\u003eclient.get_allowed_scope()\u003c/code\u003e is called\nto determine the default scope when omitted. :issue:\u003ccode\u003e845\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eStop support for Python 3.9, start support Python 3.14. :pr:\u003ccode\u003e850\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eAuthorizationServerMetadata.validate()\u003c/code\u003e to compose with RFC extension classes.\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eexpires_at=0\u003c/code\u003e being incorrectly treated as \u003ccode\u003eNone\u003c/code\u003e. :issue:\u003ccode\u003e530\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eResourceProtector\u003c/code\u003e decorator to be used without parentheses. :issue:\u003ccode\u003e604\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImplement RFC9700 PKCE downgrade countermeasure.\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eUser-Agent\u003c/code\u003e header when fetching server metadata and JWKs. :issue:\u003ccode\u003e704\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRFC7523 accepts the issuer URL as a valid audience. :issue:\u003ccode\u003e730\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUpgrade Guide: :ref:\u003ccode\u003ejoserfc_upgrade\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eVersion 1.6.6\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eReleased on Dec 12, 2025\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eget_jwt_config\u003c/code\u003e takes a \u003ccode\u003eclient\u003c/code\u003e parameter, :pr:\u003ccode\u003e844\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFix incorrect signature when \u003ccode\u003eContent-Type\u003c/code\u003e is x-www-form-urlencoded for OAuth 1.0 Client, :pr:\u003ccode\u003e778\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eexpires_in\u003c/code\u003e in \u003ccode\u003eOAuth2Token\u003c/code\u003e when \u003ccode\u003eexpires_at\u003c/code\u003e is unparsable, :pr:\u003ccode\u003e842\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAlways track \u003ccode\u003estate\u003c/code\u003e in session for OAuth client integrations.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 1.6.5\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eReleased on Oct 2, 2025\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRFC7591 \u003ccode\u003egenerate_client_info\u003c/code\u003e and \u003ccode\u003egenerate_client_secret\u003c/code\u003e take a \u003ccode\u003erequest\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAdd size limitation when decode JWS/JWE to prevent DoS.\u003c/li\u003e\n\u003cli\u003eAdd size limitation for \u003ccode\u003eDEF\u003c/code\u003e JWE zip algorithm.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 1.6.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/authlib/authlib/commit/9266eaa2227ad7e21dc731b2a4a01909aabd934b\"\u003e\u003ccode\u003e9266eaa\u003c/code\u003e\u003c/a\u003e chore: release 1.6.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b\"\u003e\u003ccode\u003eb9bb2b2\u003c/code\u003e\u003c/a\u003e fix(oidc): fail close at validating c_h...\n\n_Description has been truncated_","html_url":"https://github.com/OzCog/co9priml/pull/46","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OzCog%2Fco9priml/issues/46","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/46/packages"}],"issue_packages":[{"old_version":"\u003e=3.14.0","new_version":"\u003e=3.14.1","update_type":"patch","path":null,"pr_created_at":"2026-05-14T19:44:01.000Z","version_change":"\u003e=3.14.0 → \u003e=3.14.1","issue":{"uuid":"4448778454","node_id":"PR_kwDOKgWbms7bqAmp","number":171,"state":"open","title":"build(deps): update keras requirement from \u003e=3.14.0 to \u003e=3.14.1","user":"dependabot[bot]","labels":["🤖 Dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T19:44:01.000Z","updated_at":"2026-05-14T19:45:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): update","packages":[{"name":"keras","old_version":"\u003e=3.14.0","new_version":"\u003e=3.14.1","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.14.1\u003c/h2\u003e\n\u003ch2\u003eSaving \u0026amp; Reloading\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHarden path and link resolution when extracting files from archives (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22839\"\u003e#22839\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eFixed link resolution bug when validating links extracted from TAR archives.\u003c/li\u003e\n\u003cli\u003eFixed path confusion bug when validating files extracted from ZIP and TAR archives (including \u003ccode\u003e.keras\u003c/code\u003e files).\u003c/li\u003e\n\u003cli\u003eAdded path validation when extracting assets from Orbax checkpoints.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHarden H5 validation code and apply it to legacy .h5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22801\"\u003e#22801\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eDisallow external links and virtual datasets in H5 files.\u003c/li\u003e\n\u003cli\u003eAlso apply all the validation to the legacy .h5 file extraction.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eImprove validation and error reporting in functional model deserialization (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22800\"\u003e#22800\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eDetect loops in the graph when deserializing a functional model.\u003c/li\u003e\n\u003cli\u003eImprove error reporting for missing nodes in the graph.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFix data sharding logic in \u003ccode\u003eModelParallel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22179\"\u003e#22179\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix regression with metrics passed to \u003ccode\u003ecompile\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22663\"\u003e#22663\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a regression introduced in \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22308\"\u003e#22308\u003c/a\u003e where \u003ccode\u003ey_pred\u003c/code\u003e (as a list) and \u003ccode\u003ey_true\u003c/code\u003e (as a dict with keys matching Functional model output names) were not ordered identically and could be paired incorrectly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix regression preventing compilation with the \u003ccode\u003eL1L2\u003c/code\u003e regularizer (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22629\"\u003e#22629\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFix test compatibility with JAX 0.10.0 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22694\"\u003e#22694\u003c/a\u003e)\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/b7f0905d8ae5076ec501fe58f8b8c85fa7d22d43\"\u003e\u003ccode\u003eb7f0905\u003c/code\u003e\u003c/a\u003e Patch release 3.14.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22846\"\u003e#22846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.14.0...v3.14.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Smartappli/IA-CLASSIFICATION/pull/171","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Smartappli%2FIA-CLASSIFICATION/issues/171","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/171/packages"}},{"old_version":"3.12.2","new_version":"3.13.2","update_type":"minor","path":"the uv group across 1 directory","pr_created_at":"2026-05-10T14:32:12.000Z","version_change":"3.12.2 → 3.13.2","issue":{"uuid":"4415880216","node_id":"PR_kwDOSZO7R87aAQUL","number":2,"state":"closed","title":"chore(deps): bump keras from 3.12.2 to 3.13.2 in the uv group across 1 directory","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-10T14:40:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-10T14:32:12.000Z","updated_at":"2026-05-10T14:40:28.000Z","time_to_close":487,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"keras","old_version":"3.12.2","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"the uv group across 1 directory","ecosystem":"pip"},"body":"Bumps the uv group with 1 update in the / directory: [keras](https://github.com/keras-team/keras).\n\nUpdates `keras` from 3.12.2 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.12.2...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=uv\u0026previous-version=3.12.2\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gandli/data-annotation-course/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/gandli/data-annotation-course/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gandli%2Fdata-annotation-course/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-05-04T09:49:14.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4375537989","node_id":"PR_kwDOSTyfL87X9DJ7","number":4,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T09:49:14.000Z","updated_at":"2026-05-04T09:49:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/tanakahiroshi92/AI_Object_Detection_Yolov5/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/tanakahiroshi92%2FAI_Object_Detection_Yolov5/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"3.6.0","new_version":"3.13.2","update_type":"minor","path":null,"pr_created_at":"2026-04-28T17:51:15.000Z","version_change":"3.6.0 → 3.13.2","issue":{"uuid":"4345172837","node_id":"PR_kwDOJ5EiO87Wb62X","number":297,"state":"closed","title":"Bump the pip group across 3 directories with 3 updates","user":"dependabot[bot]","labels":["dependencies","Stale","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-22T06:06:37.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-28T17:51:15.000Z","updated_at":"2026-05-22T06:06:47.000Z","time_to_close":2031322,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":3,"packages":[{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"lxml","old_version":"4.9.4","new_version":"6.1.0","repository_url":"https://github.com/lxml/lxml"},{"name":"scikit-learn","old_version":"1.4.2","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the / directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\nBumps the pip group with 3 updates in the /docs/docs/book/src directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\nBumps the pip group with 3 updates in the /pkscreener directory: [lxml](https://github.com/lxml/lxml), [scikit-learn](https://github.com/scikit-learn/scikit-learn) and [keras](https://github.com/keras-team/keras).\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml` from 4.9.4 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/releases\"\u003elxml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003elxml-6.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-6.0.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.4.0\u003c/h2\u003e\n\u003ch1\u003e5.4.0 (2025-04-22)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.\n(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)\nIssue found by Anatoly Katyushin, see \u003ca href=\"https://bugs.launchpad.net/lxml/+bug/2107279\"\u003ehttps://bugs.launchpad.net/lxml/+bug/2107279\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003elxml-5.3.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.3.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003elxml-5.2.2\u003c/h2\u003e\n\u003ch1\u003e5.2.2 (2024-05-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#417: The \u003ccode\u003etest_feed_parser\u003c/code\u003e test could fail if \u003ccode\u003elxml_html_clean\u003c/code\u003e was not installed.\nIt is now skipped in that case.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to\n\u0026quot;core2\u0026quot;, without SSE 4.2.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxml/lxml/blob/master/CHANGES.txt\"\u003elxml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e6.1.0 (2026-04-17)\u003c/h1\u003e\n\u003cp\u003eThis release fixes a possible external entity injection (XXE) vulnerability in\n\u003ccode\u003eiterparse()\u003c/code\u003e and the \u003ccode\u003eETCompatXMLParser\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eFeatures added\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eGH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes\nin \u003ccode\u003elxml.html.defs\u003c/code\u003e.  This allows \u003ccode\u003elxml_html_clean\u003c/code\u003e to pass them through.\nPatch by oomsveta.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default chunk size for reading from file-likes in \u003ccode\u003eiterparse()\u003c/code\u003e is now configurable\nwith a new \u003ccode\u003echunk_size\u003c/code\u003e argument.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2146291: The \u003ccode\u003eresolve_entities\u003c/code\u003e option was still set to \u003ccode\u003eTrue\u003c/code\u003e for\n\u003ccode\u003eiterparse\u003c/code\u003e and \u003ccode\u003eETCompatXMLParser\u003c/code\u003e, allowing for external entity injection (XXE)\nwhen using these parsers without setting this option explicitly.\nThe default was now changed to \u003ccode\u003e'internal'\u003c/code\u003e only (as for the normal XML and HTML parsers\nsince lxml 5.0).\nIssue found by Sihao Qiu as CVE-2026-41066.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.4 (2026-04-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLP#2148019: Spurious MemoryError during namespace cleanup.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e6.0.3 (2026-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral out of memory error cases now raise \u003ccode\u003eMemoryError\u003c/code\u003e that were not handled before.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSlicing with large step values (outside of \u003ccode\u003e+/- sys.maxsize\u003c/code\u003e) could trigger undefined C behaviour.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2125399: Some failing tests were fixed or disabled in PyPy.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eLP#2138421: Memory leak in error cases when setting the \u003ccode\u003epublic_id\u003c/code\u003e or \u003ccode\u003esystem_url\u003c/code\u003e of a document.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/43722f4402afa48b7890a96ce012eb0b9b1af5be\"\u003e\u003ccode\u003e43722f4\u003c/code\u003e\u003c/a\u003e Update changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/87470409b17188a5a7dbefcfa124af9cd792ffaa\"\u003e\u003ccode\u003e8747040\u003c/code\u003e\u003c/a\u003e Name version of option change in docstring.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6c36e6cef77db5087a1fff1a0d1ca8fed963afe7\"\u003e\u003ccode\u003e6c36e6c\u003c/code\u003e\u003c/a\u003e Fix pypistats URL in download statistics script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c7d76d6cb817c8e1f316e43b16cab5e6ad669ad0\"\u003e\u003ccode\u003ec7d76d6\u003c/code\u003e\u003c/a\u003e Change security policy to point to Github security advisories.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/378ccf82db8160928807c55ed580c0443aa94f42\"\u003e\u003ccode\u003e378ccf8\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/315270b810a9e3276c60daba549299d204ac962b\"\u003e\u003ccode\u003e315270b\u003c/code\u003e\u003c/a\u003e Docs: Reduce TOC depth of package pages and move module contents first.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/6dbba7f3c72f655b05b26ef453fdee31af13ccf5\"\u003e\u003ccode\u003e6dbba7f\u003c/code\u003e\u003c/a\u003e Docs: Show current year in copyright line.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/e4385bfa5d79527350d5ef17372fb70ba80b4cce\"\u003e\u003ccode\u003ee4385bf\u003c/code\u003e\u003c/a\u003e Update project income report.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/5bed1e1a227cd9ba5a879aaeacdf504093a3f6e8\"\u003e\u003ccode\u003e5bed1e1\u003c/code\u003e\u003c/a\u003e Validate file hashes in release download script.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lxml/lxml/commit/c13ee10a429f1144779bb1cbf6ae3bec808ae9c1\"\u003e\u003ccode\u003ec13ee10\u003c/code\u003e\u003c/a\u003e Prepare release of 6.1.0.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lxml/lxml/compare/lxml-4.9.4...lxml-6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 1.4.2 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.6.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pkjmesra/PKScreener/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/pkjmesra/PKScreener/pull/297","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pkjmesra%2FPKScreener/issues/297","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/297/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-23T22:10:12.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4319178817","node_id":"PR_kwDOSK8tTs7VI9k2","number":10,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-23T22:10:12.000Z","updated_at":"2026-04-23T22:10:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jramir7254/yolo/pull/10","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jramir7254%2Fyolo/issues/10","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-17T04:28:33.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4280110154","node_id":"PR_kwDORyPdLs7TL7U2","number":5,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-17T04:28:33.000Z","updated_at":"2026-04-17T04:28:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/maheshchandracipet-stack/yolov5/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/maheshchandracipet-stack%2Fyolov5/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"3.8.0","new_version":"3.13.2","update_type":"minor","path":"/public_dropin_environments_sandbox/fips_python3_keras","pr_created_at":"2026-04-15T00:10:06.000Z","version_change":"3.8.0 → 3.13.2","issue":{"uuid":"4265444270","node_id":"PR_kwDOD_V1dM7SeagC","number":2059,"state":"open","title":"Bump keras from 3.8.0 to 3.13.2 in /public_dropin_environments_sandbox/fips_python3_keras","user":"dependabot[bot]","labels":["Ready for Review","dependencies","python","Needs Review: GenAI Systems"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:10:06.000Z","updated_at":"2026-04-15T00:10:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.8.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/public_dropin_environments_sandbox/fips_python3_keras","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.8.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.8.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.8.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/datarobot/datarobot-user-models/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- CURSOR_SUMMARY --\u003e\n---\n\n\u003e [!NOTE]\n\u003e **Medium Risk**\n\u003e Upgrading a core ML dependency (`keras`) may introduce runtime/serialization behavior changes that could affect model loading or training in this environment.\n\u003e \n\u003e **Overview**\n\u003e Updates the `public_dropin_environments_sandbox/fips_python3_keras` pinned dependencies by bumping `keras` from `3.8.0` to `3.13.2` in `requirements.txt`.\n\u003e \n\u003e \u003csup\u003eReviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 92a626366aeb13661811fea55e82fe4a2dfe350e. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).\u003c/sup\u003e\n\u003c!-- /CURSOR_SUMMARY --\u003e","html_url":"https://github.com/datarobot/datarobot-user-models/pull/2059","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/datarobot%2Fdatarobot-user-models/issues/2059","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2059/packages"}},{"old_version":"3.6.0","new_version":"3.13.2","update_type":"minor","path":"/sugarcane-disease-api","pr_created_at":"2026-04-15T00:09:30.000Z","version_change":"3.6.0 → 3.13.2","issue":{"uuid":"4265442637","node_id":"PR_kwDOMRzff87SeaMK","number":1051,"state":"open","title":"Bump keras from 3.6.0 to 3.13.2 in /sugarcane-disease-api","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:09:30.000Z","updated_at":"2026-04-15T00:09:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.6.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/sugarcane-disease-api","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.6.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.6.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.6.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/manikumarreddyu/AgroTech-AI/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/manikumarreddyu/AgroTech-AI/pull/1051","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/manikumarreddyu%2FAgroTech-AI/issues/1051","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1051/packages"}},{"old_version":"3.11.3","new_version":"3.13.2","update_type":"minor","path":"/wandb/run-20251212_092456-qc7gti9l/files","pr_created_at":"2026-04-15T00:06:15.000Z","version_change":"3.11.3 → 3.13.2","issue":{"uuid":"4265433368","node_id":"PR_kwDORPaGtc7SeYcI","number":59,"state":"open","title":"Bump keras from 3.11.3 to 3.13.2 in /wandb/run-20251212_092456-qc7gti9l/files","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:06:15.000Z","updated_at":"2026-04-15T00:06:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.11.3","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/wandb/run-20251212_092456-qc7gti9l/files","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.11.3 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.11.3...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.11.3\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/arthrod/NerGuard/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/arthrod/NerGuard/pull/59","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/arthrod%2FNerGuard/issues/59","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/59/packages"}},{"old_version":"2.7.0","new_version":"3.13.2","update_type":"major","path":"/blockchain_integration/pi_network/pibrain","pr_created_at":"2026-04-14T23:59:05.000Z","version_change":"2.7.0 → 3.13.2","issue":{"uuid":"4265413299","node_id":"PR_kwDOL5R9Yc7SeUfY","number":1933,"state":"open","title":"Bump keras from 2.7.0 to 3.13.2 in /blockchain_integration/pi_network/pibrain","user":"dependabot[bot]","labels":["python","dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-14T23:59:05.000Z","updated_at":"2026-04-14T23:59:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"2.7.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/blockchain_integration/pi_network/pibrain","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 2.7.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v2.7.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=2.7.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/KOSASIH/pi-nexus-autonomous-banking-network/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/KOSASIH/pi-nexus-autonomous-banking-network/pull/1933","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/KOSASIH%2Fpi-nexus-autonomous-banking-network/issues/1933","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1933/packages"}},{"old_version":"2.2.4","new_version":"3.13.2","update_type":"major","path":null,"pr_created_at":"2026-04-14T23:47:06.000Z","version_change":"2.2.4 → 3.13.2","issue":{"uuid":"4265374616","node_id":"PR_kwDOD0QF687SeMp4","number":14,"state":"closed","title":"Bump keras from 2.2.4 to 3.13.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-15T00:48:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-14T23:47:06.000Z","updated_at":"2026-04-15T00:48:17.000Z","time_to_close":3669,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"2.2.4","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 2.2.4 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/2.2.4...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=2.2.4\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Taehyung93/tacoton2_wavenet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Taehyung93/tacoton2_wavenet/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Taehyung93%2Ftacoton2_wavenet/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}},{"old_version":"3.9.0","new_version":"3.13.2","update_type":"minor","path":"/docker","pr_created_at":"2026-04-14T23:29:08.000Z","version_change":"3.9.0 → 3.13.2","issue":{"uuid":"4265315131","node_id":"PR_kwDOAOyKIc7SeAfe","number":64,"state":"closed","title":"Bump keras from 3.9.0 to 3.13.2 in /docker","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-15T02:58:42.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-14T23:29:08.000Z","updated_at":"2026-04-15T02:58:48.000Z","time_to_close":12574,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"keras","old_version":"3.9.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"}],"path":"/docker","ecosystem":"pip"},"body":"Bumps [keras](https://github.com/keras-team/keras) from 3.9.0 to 3.13.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.9.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keras\u0026package-manager=pip\u0026previous-version=3.9.0\u0026new-version=3.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/awsteiner/o2scl/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/awsteiner/o2scl/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/awsteiner%2Fo2scl/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"}},{"old_version":"2.15.0","new_version":"3.13.2","update_type":"major","path":null,"pr_created_at":"2026-04-13T20:39:55.000Z","version_change":"2.15.0 → 3.13.2","issue":{"uuid":"4257736688","node_id":"PR_kwDOLCvp4s7SHFMy","number":126,"state":"closed","title":"chore(deps): bump the pip group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-13T21:59:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-13T20:39:55.000Z","updated_at":"2026-04-13T21:59:04.000Z","time_to_close":4746,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"pip","update_count":3,"packages":[{"name":"keras","old_version":"2.15.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"pillow","old_version":"10.4.0","new_version":"12.2.0","repository_url":"https://github.com/python-pillow/Pillow"},{"name":"pymongo","old_version":"4.6.1","new_version":"4.6.3","repository_url":"https://github.com/mongodb/mongo-python-driver"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the /API directory: [keras](https://github.com/keras-team/keras), [pillow](https://github.com/python-pillow/Pillow) and [pymongo](https://github.com/mongodb/mongo-python-driver).\n\nUpdates `keras` from 2.15.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v2.15.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 10.4.0 to 12.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.2.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate 12.2.0 release notes \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9482\"\u003e#9482\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Python versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9515\"\u003e#9515\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eJeffrey A. Clark -\u0026gt; Jeffrey 'Alex' Clark \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9513\"\u003e#9513\u003c/a\u003e [\u003ca href=\"https://github.com/aclark4life\"\u003e\u003ccode\u003e@​aclark4life\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd release notes for \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9394\"\u003e#9394\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9419\"\u003e#9419\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9456\"\u003e#9456\u003c/a\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9467\"\u003e#9467\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd Amiga Workbench .info loader to 3rd party plugins list \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9459\"\u003e#9459\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMerge PFM documentation into PPM \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9434\"\u003e#9434\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eFix CVE number \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9430\"\u003e#9430\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate xz to 5.8.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9523\"\u003e#9523\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libjpeg-turbo to 3.1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9507\"\u003e#9507\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libpng to 1.6.56 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9499\"\u003e#9499\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9485\"\u003e#9485\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libavif to 1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9479\"\u003e#9479\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated harfbuzz to 13.2.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9461\"\u003e#9461\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate harfbuzz to 13.0.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9453\"\u003e#9453\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libavif to 1.4.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9460\"\u003e#9460\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.2 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9449\"\u003e#9449\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate actions/download-artifact action to v8 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9451\"\u003e#9451\u003c/a\u003e [@\u003ca href=\"https://github.com/apps/renovate\"\u003erenovate[bot]\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libpng to 1.6.55 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9425\"\u003e#9425\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTesting\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleanup .spider extension in the same test where it is added \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9517\"\u003e#9517\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRun tests in parallel via tox for 3.5x speedup \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9516\"\u003e#9516\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eEnable colour in CI logs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9486\"\u003e#9486\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSimplify TGA test code \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9477\"\u003e#9477\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate tests to check for ValueError when encoding an empty image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9464\"\u003e#9464\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpgrade CI from \u003ccode\u003emacos-15-intel\u003c/code\u003e to \u003ccode\u003emacos-26-intel\u003c/code\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9454\"\u003e#9454\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd check-case-conflict hook \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9446\"\u003e#9446\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSpecify platform when pulling docker image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9440\"\u003e#9440\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eGHA: Cache libavif and webp builds for Ubuntu \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9437\"\u003e#9437\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck calloc return value \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eCheck all allocs in the Arrow tree \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e [\u003ca href=\"https://github.com/wiredfool\"\u003e\u003ccode\u003e@​wiredfool\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eReject non-numeric elements inside list coords \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMove variable declaration inside define \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst\"\u003epillow's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog (Pillow)\u003c/h1\u003e\n\u003ch2\u003e11.1.0 and newer\u003c/h2\u003e\n\u003cp\u003eSee GitHub Releases:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003ehttps://github.com/python-pillow/Pillow/releases\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e11.0.0 (2024-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpdate licence to MIT-CMU \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8460\"\u003e#8460\u003c/a\u003e\n[hugovk]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eConditionally define ImageCms type hint to avoid requiring core \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8197\"\u003e#8197\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport writing LONG8 offsets in AppendingTiffWriter \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8417\"\u003e#8417\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse ImageFile.MAXBLOCK when saving TIFF images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8461\"\u003e#8461\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDo not close provided file handles with libtiff when saving \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8458\"\u003e#8458\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport ImageFilter.BuiltinFilter for I;16* images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8438\"\u003e#8438\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse ImagingCore.ptr instead of ImagingCore.id \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8341\"\u003e#8341\u003c/a\u003e\n[homm, radarhere, hugovk]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated EPS mode when opening images without transparency \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8281\"\u003e#8281\u003c/a\u003e\n[Yay295, radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUse transparency when combining P frames from APNGs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8443\"\u003e#8443\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSupport all resampling filters when resizing I;16* images \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8422\"\u003e#8422\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFree memory on early return \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8413\"\u003e#8413\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCast int before potentially exceeding INT_MAX \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/8402\"\u003e#8402\u003c/a\u003e\n[radarhere]\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/3c41c095064200a02672d89cc5ff629eaf4b0d4f\"\u003e\u003ccode\u003e3c41c09\u003c/code\u003e\u003c/a\u003e 12.2.0 version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cdaa29eb520291c4f1fb50fb71ae46502d41e460\"\u003e\u003ccode\u003ecdaa29e\u003c/code\u003e\u003c/a\u003e Check calloc return value (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/585b2f5a780722c8a5bfffb3a40f7f42e8a205be\"\u003e\u003ccode\u003e585b2f5\u003c/code\u003e\u003c/a\u003e Check calloc return value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ecf011ea15991d4cebacd946e58270cc30b0f2c1\"\u003e\u003ccode\u003eecf011e\u003c/code\u003e\u003c/a\u003e Check all allocs in the Arrow tree (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cf6de8ca9b23e714aa5310e1c791eda66fc0b670\"\u003e\u003ccode\u003ecf6de8c\u003c/code\u003e\u003c/a\u003e Reject non-numeric elements inside list coords (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ffdcede6516b28d9667c92929854023d17048b64\"\u003e\u003ccode\u003effdcede\u003c/code\u003e\u003c/a\u003e Update 12.2.0 release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/7929d7760fe5a307ba5ae6eabdf70ae4486b147c\"\u003e\u003ccode\u003e7929d77\u003c/code\u003e\u003c/a\u003e Added security release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/c4f7aa5dfb4dbd1242978ac235e01b9934ec6d3c\"\u003e\u003ccode\u003ec4f7aa5\u003c/code\u003e\u003c/a\u003e Added security release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/22cdb5f2e4b15250c06563b1124ac1667342712f\"\u003e\u003ccode\u003e22cdb5f\u003c/code\u003e\u003c/a\u003e Move variable declaration inside define (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/fc15b3b01899408ec989d7804c5283e13802d057\"\u003e\u003ccode\u003efc15b3b\u003c/code\u003e\u003c/a\u003e Resize tall images vertically first (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9524\"\u003e#9524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-pillow/Pillow/compare/10.4.0...12.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pymongo` from 4.6.1 to 4.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-python-driver/releases\"\u003epymongo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ePyMongo 4.6.3\u003c/h2\u003e\n\u003cp\u003eCommunity notes: \u003ca href=\"https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348\"\u003ehttps://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePyMongo 4.6.2\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404\"\u003ehttps://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst\"\u003epymongo's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChanges in Version 4.6.3 (2024/03/27)\u003c/h2\u003e\n\u003cp\u003ePyMongo 4.6.3 fixes the following bug:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential memory access violation when decoding invalid bson.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIssues Resolved\n...............\u003c/p\u003e\n\u003cp\u003eSee the \u003ccode\u003ePyMongo 4.6.3 release notes in JIRA\u003c/code\u003e_ for the list of resolved issues\nin this release.\u003c/p\u003e\n\u003cp\u003e.. _PyMongo 4.6.3 release notes in JIRA: \u003ca href=\"https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=38360\"\u003ehttps://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=38360\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eChanges in Version 4.6.2 (2024/02/21)\u003c/h2\u003e\n\u003cp\u003ePyMongo 4.6.2 fixes the following bug:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug appearing in Python 3.12 where \u0026quot;RuntimeError: can't create new thread at interpreter shutdown\u0026quot;\ncould be written to stderr when a MongoClient's thread starts as the python interpreter is shutting down.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIssues Resolved\n...............\u003c/p\u003e\n\u003cp\u003eSee the \u003ccode\u003ePyMongo 4.6.2 release notes in JIRA\u003c/code\u003e_ for the list of resolved issues\nin this release.\u003c/p\u003e\n\u003cp\u003e.. _PyMongo 4.6.2 release notes in JIRA: \u003ca href=\"https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=37906\"\u003ehttps://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004\u0026amp;version=37906\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/8da192f9ca2d4f6464897b22b3029c227043f0cb\"\u003e\u003ccode\u003e8da192f\u003c/code\u003e\u003c/a\u003e BUMP 4.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2\"\u003e\u003ccode\u003e56b6b6d\u003c/code\u003e\u003c/a\u003e PYTHON-4305 Fix bson size check (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1564\"\u003e#1564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/449d0f316cbcdea59d8b69b5e4fc34ac07949dc6\"\u003e\u003ccode\u003e449d0f3\u003c/code\u003e\u003c/a\u003e BUMP to 4.6.3.dev0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/e04576de22c06a4609b16db0f6e10e86ad5c8dad\"\u003e\u003ccode\u003ee04576d\u003c/code\u003e\u003c/a\u003e DEVPROD-3871 Use teardown_task when there is one function/command (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1533\"\u003e#1533\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/cf1c6a11f76861fd6150b0df79a7ed70f2b2fea5\"\u003e\u003ccode\u003ecf1c6a1\u003c/code\u003e\u003c/a\u003e PYTHON-4219 Prep for 4.6.2 Release (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1530\"\u003e#1530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/d29b2b7cf405901a801591e475574b63aa81ac5c\"\u003e\u003ccode\u003ed29b2b7\u003c/code\u003e\u003c/a\u003e PYTHON-4147 [v4.6]: Silence noisy thread.start() RuntimeError at shutdown (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/0477b9bc0c59de311fbb6d6a157b97a4af8d0a23\"\u003e\u003ccode\u003e0477b9b\u003c/code\u003e\u003c/a\u003e PYTHON-4077 [v4.6]: Ensure there is a MacOS wheel for Python 3.7 (\u003ca href=\"https://redirect.github.com/mongodb/mongo-python-driver/issues/1527\"\u003e#1527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/mongo-python-driver/commit/ecad17d24e8aafa374ab5fd194ce79b6861efcad\"\u003e\u003ccode\u003eecad17d\u003c/code\u003e\u003c/a\u003e BUMP 4.6.2.dev0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mongodb/mongo-python-driver/compare/4.6.1...4.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/devansh-shah-11/FaceRec/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/devansh-shah-11/FaceRec/pull/126","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/devansh-shah-11%2FFaceRec/issues/126","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/126/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-13T04:38:01.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4251301427","node_id":"PR_kwDOR0f1R87R3dnZ","number":13,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T04:38:01.000Z","updated_at":"2026-04-13T04:38:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Mufasa-PJ/My_yolov5/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Mufasa-PJ%2FMy_yolov5/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-13T04:37:50.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4251300652","node_id":"PR_kwDOR6x4oM7R3dfx","number":4,"state":"closed","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-21T08:56:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-13T04:37:50.000Z","updated_at":"2026-04-21T08:57:00.000Z","time_to_close":706740,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Aditya3815/DASwin-YOLO/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Aditya3815%2FDASwin-YOLO/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-13T04:36:34.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4251295036","node_id":"PR_kwDORuAi_87R3cqV","number":11,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T04:36:34.000Z","updated_at":"2026-04-13T04:36:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Aniketh-Srivathsa/mini_proj/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Aniketh-Srivathsa%2Fmini_proj/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"}},{"old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","update_type":null,"path":null,"pr_created_at":"2026-04-12T04:03:58.000Z","version_change":"\u003c=3.12.0,\u003e=3.5.0 → \u003e=3.10.0,\u003c=3.12.0","issue":{"uuid":"4246462814","node_id":"PR_kwDORQ68t87Run1w","number":8,"state":"open","title":"Update keras requirement from \u003c=3.12.0,\u003e=3.5.0 to \u003e=3.10.0,\u003c=3.12.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-12T04:03:58.000Z","updated_at":"2026-04-12T04:04:30.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"keras","old_version":"\u003c=3.12.0,\u003e=3.5.0","new_version":"\u003e=3.10.0,\u003c=3.12.0","repository_url":"https://github.com/keras-team/keras"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [keras](https://github.com/keras-team/keras) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eKeras 3.10.0\u003c/h2\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for weight sharding for saving very large models with \u003ccode\u003emodel.save()\u003c/code\u003e. It is controlled via the \u003ccode\u003emax_shard_size\u003c/code\u003e argument. Specifying this argument will split your Keras model weight file into chunks of this size at most. Use \u003ccode\u003eload_model()\u003c/code\u003e to reload the sharded files.\u003c/li\u003e\n\u003cli\u003eAdd optimizer \u003ccode\u003ekeras.optimizers.Muon\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd image preprocessing layer \u003ccode\u003ekeras.layers.RandomElasticTransform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd loss function \u003ccode\u003ekeras.losses.CategoricalGeneralizedCrossEntropy\u003c/code\u003e (with functional version \u003ccode\u003ekeras.losses.categorical_generalized_cross_entropy\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eaxis\u003c/code\u003e argument to \u003ccode\u003eSparseCategoricalCrossentropy\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003elora_alpha\u003c/code\u003e to all LoRA-enabled layers. If set, this parameter scales the low-rank adaptation delta during the forward pass.\u003c/li\u003e\n\u003cli\u003eAdd activation function \u003ccode\u003ekeras.activations.sparse_sigmoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.image.elastic_transform\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.angle\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.bartlett\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.blackman\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd op \u003ccode\u003ekeras.ops.hamming\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd ops \u003ccode\u003ekeras.ops.view_as_complex\u003c/code\u003e, \u003ccode\u003ekeras.ops.view_as_real\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePyTorch backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd cuDNN support for LSTM with the PyTorch backend\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTensorFlow backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etf.RaggedTensor\u003c/code\u003e support to \u003ccode\u003eEmbedding\u003c/code\u003e layer\u003c/li\u003e\n\u003cli\u003eAdd variable-level support for \u003ccode\u003esynchronization\u003c/code\u003e argument\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOpenVINO backend\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for over 50 additional Keras ops in the OpenVINO inference backend!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JyotinderSingh\"\u003e\u003ccode\u003e@​JyotinderSingh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20993\"\u003ekeras-team/keras#20993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SaifMohammed22\"\u003e\u003ccode\u003e@​SaifMohammed22\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20982\"\u003ekeras-team/keras#20982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/11happy\"\u003e\u003ccode\u003e@​11happy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20940\"\u003ekeras-team/keras#20940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jpy794\"\u003e\u003ccode\u003e@​jpy794\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21008\"\u003ekeras-team/keras#21008\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chiruu12\"\u003e\u003ccode\u003e@​chiruu12\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/20950\"\u003ekeras-team/keras#20950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arkhamHack\"\u003e\u003ccode\u003e@​arkhamHack\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21010\"\u003ekeras-team/keras#21010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/samitshah1\"\u003e\u003ccode\u003e@​samitshah1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21036\"\u003ekeras-team/keras#21036\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nathanrooy\"\u003e\u003ccode\u003e@​nathanrooy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21056\"\u003ekeras-team/keras#21056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rfezzani\"\u003e\u003ccode\u003e@​rfezzani\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21053\"\u003ekeras-team/keras#21053\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drasmuss\"\u003e\u003ccode\u003e@​drasmuss\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21072\"\u003ekeras-team/keras#21072\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pass-lin\"\u003e\u003ccode\u003e@​pass-lin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21037\"\u003ekeras-team/keras#21037\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wilsbj\"\u003e\u003ccode\u003e@​wilsbj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21077\"\u003ekeras-team/keras#21077\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timsweeneyfanelli\"\u003e\u003ccode\u003e@​timsweeneyfanelli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21081\"\u003ekeras-team/keras#21081\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darshil929\"\u003e\u003ccode\u003e@​darshil929\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21042\"\u003ekeras-team/keras#21042\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/superbobry\"\u003e\u003ccode\u003e@​superbobry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21106\"\u003ekeras-team/keras#21106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nithin9000\"\u003e\u003ccode\u003e@​nithin9000\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21136\"\u003ekeras-team/keras#21136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Huanli-Gong\"\u003e\u003ccode\u003e@​Huanli-Gong\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21141\"\u003ekeras-team/keras#21141\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/he7d3r\"\u003e\u003ccode\u003e@​he7d3r\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21098\"\u003ekeras-team/keras#21098\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/3bedb9a970394879360fcb1c0264f3ffdc634a77\"\u003e\u003ccode\u003e3bedb9a\u003c/code\u003e\u003c/a\u003e Update layer.py add_metric error message (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21290\"\u003e#21290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c52d71e55dfaeae7367905b821708f07731dbe3c\"\u003e\u003ccode\u003ec52d71e\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] support ops.split (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21296\"\u003e#21296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8f67babc2587d62cda31102119f507d45d8b2897\"\u003e\u003ccode\u003e8f67bab\u003c/code\u003e\u003c/a\u003e Update layer.py add_loss to properly handle when input loss is a list of scal...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/df58e70c5f6b41abd316983d827abff6d065e942\"\u003e\u003ccode\u003edf58e70\u003c/code\u003e\u003c/a\u003e jax eig now has GPU support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c6187c1fb31c5e2b777d908b5b3eb4a333bd3dcf\"\u003e\u003ccode\u003ec6187c1\u003c/code\u003e\u003c/a\u003e [OpenVINO Backend] modify ops.stack to support tuples (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21297\"\u003e#21297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c2b1993615bd6822b7bcf0e02e6a4740cb73a2cc\"\u003e\u003ccode\u003ec2b1993\u003c/code\u003e\u003c/a\u003e Replace the bias addition in EinsumDense with ops.add(x, bias) instead of usi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/c949e759095950ab65445e0e6ae46d1bd179d6c9\"\u003e\u003ccode\u003ec949e75\u003c/code\u003e\u003c/a\u003e Implementation np.outer function (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21270\"\u003e#21270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/cf08b92ad0b3378ee3f86c6e1e34fb8aae175bc2\"\u003e\u003ccode\u003ecf08b92\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add sparse support to \u003ccode\u003eops.ones_like\u003c/code\u003e and \u003ccode\u003eops.zeros_like\u003c/code\u003e.\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21302\"\u003e#21302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/dba71dae653fbcc73777ef7ec5203cdb7e41c859\"\u003e\u003ccode\u003edba71da\u003c/code\u003e\u003c/a\u003e update JAX GPU version (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21293\"\u003e#21293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e19a2edc8415236dc3ba3409bda2016be2a6e6c9\"\u003e\u003ccode\u003ee19a2ed\u003c/code\u003e\u003c/a\u003e Add an easy way to run a script for a few steps only (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21217\"\u003e#21217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/liqianqi/yolov5_fourpoints/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/liqianqi%2Fyolov5_fourpoints/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"3.13.2","new_version":"3.14.0","update_type":"minor","path":null,"pr_created_at":"2026-04-08T01:07:49.000Z","version_change":"3.13.2 → 3.14.0","issue":{"uuid":"4221456698","node_id":"PR_kwDOMpA0VM7QqXkn","number":348,"state":"open","title":"Bump the dependabot group with 2 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-08T01:07:49.000Z","updated_at":"2026-04-08T06:51:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"dependabot","update_count":2,"packages":[{"name":"keras","old_version":"3.13.2","new_version":"3.14.0","repository_url":"https://github.com/keras-team/keras"},{"name":"pillow","old_version":"12.1.1","new_version":"12.2.0","repository_url":"https://github.com/python-pillow/Pillow"}],"path":null,"ecosystem":"pip"},"body":"Bumps the dependabot group with 2 updates: [keras](https://github.com/keras-team/keras) and [pillow](https://github.com/python-pillow/Pillow).\n\nUpdates `keras` from 3.13.2 to 3.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.14.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eOrbax Checkpoint Integration\u003c/strong\u003e: Full support for Orbax checkpoints, including sharding, remote paths, and step recovery.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eQuantization Upgrades\u003c/strong\u003e: Added support for Activation-aware Weight Quantization (AWQ) and Asymmetric INT4 Sub-Channel Quantization.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBatch Renormalization in BatchNorm\u003c/strong\u003e: Added batch renormalization feature to the \u003ccode\u003eBatchRenormalization\u003c/code\u003e layer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew Optimizer\u003c/strong\u003e: Added \u003ccode\u003eScheduleFreeAdamW\u003c/code\u003e optimizer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eGated Attention\u003c/strong\u003e: Introduced optional Gated Attention support in \u003ccode\u003eMultiHeadAttention\u003c/code\u003e and \u003ccode\u003eGroupedQueryAttention\u003c/code\u003e layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eNew Features and Operations\u003c/h2\u003e\n\u003ch3\u003eMulti-Backend Operations\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNaN-aware NumPy Operations\u003c/strong\u003e: Added support for \u003ccode\u003enanmin\u003c/code\u003e, \u003ccode\u003enanmax\u003c/code\u003e, \u003ccode\u003enanmean\u003c/code\u003e, \u003ccode\u003enanmedian\u003c/code\u003e, \u003ccode\u003enanvar\u003c/code\u003e, \u003ccode\u003enanstd\u003c/code\u003e, \u003ccode\u003enanprod\u003c/code\u003e, \u003ccode\u003enanargmin\u003c/code\u003e, \u003ccode\u003enanargmax\u003c/code\u003e, and \u003ccode\u003enanquantile\u003c/code\u003e in \u003ccode\u003ekeras.ops.numpy\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew Math \u0026amp; Linear Algebra Operators\u003c/strong\u003e: Added \u003ccode\u003enextafter\u003c/code\u003e, \u003ccode\u003eptp\u003c/code\u003e, \u003ccode\u003eview\u003c/code\u003e, \u003ccode\u003esinc\u003c/code\u003e, \u003ccode\u003efmod\u003c/code\u003e, \u003ccode\u003ei0\u003c/code\u003e, \u003ccode\u003efliplr\u003c/code\u003e, \u003ccode\u003eflipud\u003c/code\u003e, \u003ccode\u003erad2deg\u003c/code\u003e, \u003ccode\u003egeomspace\u003c/code\u003e, \u003ccode\u003edepth_to_space\u003c/code\u003e, \u003ccode\u003espace_to_depth\u003c/code\u003e, and \u003ccode\u003efold\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreprocessing and Layers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCLAHE Layer\u003c/strong\u003e: Added Contrast Limited Adaptive Histogram Equalization preprocessing layer.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAdapt Support for Iterables\u003c/strong\u003e: Preprocessing layers now support Python iterables in the \u003ccode\u003eadapt()\u003c/code\u003e method, which allows the direct use of Grain datasets.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eOpenVINO Backend Support\u003c/h2\u003e\n\u003cp\u003eThe OpenVINO backend received a massive update, implementing a wide array of NumPy and Neural Network operations to achieve feature parity with other backends:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNumPy Operations\u003c/strong\u003e: \u003ccode\u003evander\u003c/code\u003e, \u003ccode\u003etrapezoid\u003c/code\u003e, \u003ccode\u003ecorrcoef\u003c/code\u003e, \u003ccode\u003ecorrelate\u003c/code\u003e, \u003ccode\u003eflip\u003c/code\u003e, \u003ccode\u003ediagonal\u003c/code\u003e, \u003ccode\u003ecbrt\u003c/code\u003e, \u003ccode\u003ehypot\u003c/code\u003e, \u003ccode\u003etrace\u003c/code\u003e, \u003ccode\u003ekron\u003c/code\u003e, \u003ccode\u003eargpartition\u003c/code\u003e, \u003ccode\u003elogaddexp2\u003c/code\u003e, \u003ccode\u003eldexp\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e, \u003ccode\u003eround\u003c/code\u003e, \u003ccode\u003evstack\u003c/code\u003e, \u003ccode\u003ehsplit\u003c/code\u003e, \u003ccode\u003evsplit\u003c/code\u003e, \u003ccode\u003etile\u003c/code\u003e, \u003ccode\u003enansum\u003c/code\u003e, \u003ccode\u003etensordot\u003c/code\u003e, \u003ccode\u003eexp2\u003c/code\u003e, \u003ccode\u003etrunc\u003c/code\u003e, \u003ccode\u003egcd\u003c/code\u003e, \u003ccode\u003eunravel_index\u003c/code\u003e, \u003ccode\u003einner\u003c/code\u003e, \u003ccode\u003ecumprod\u003c/code\u003e, \u003ccode\u003esearchsorted\u003c/code\u003e, \u003ccode\u003ehanning\u003c/code\u003e, \u003ccode\u003ediagflat\u003c/code\u003e, \u003ccode\u003enorm\u003c/code\u003e, \u003ccode\u003ehistogram\u003c/code\u003e, \u003ccode\u003elcm\u003c/code\u003e, \u003ccode\u003eallclose\u003c/code\u003e, \u003ccode\u003ereal\u003c/code\u003e, \u003ccode\u003eimag\u003c/code\u003e, \u003ccode\u003eisreal\u003c/code\u003e, \u003ccode\u003ekaiser\u003c/code\u003e, \u003ccode\u003eshuffle\u003c/code\u003e, \u003ccode\u003eeinsum\u003c/code\u003e, \u003ccode\u003equantile\u003c/code\u003e, \u003ccode\u003econj\u003c/code\u003e, \u003ccode\u003erandint\u003c/code\u003e, \u003ccode\u003ein_top_k\u003c/code\u003e, \u003ccode\u003esignbit\u003c/code\u003e, \u003ccode\u003egamma\u003c/code\u003e, \u003ccode\u003eheaviside\u003c/code\u003e, \u003ccode\u003evar\u003c/code\u003e, \u003ccode\u003estd\u003c/code\u003e, \u003ccode\u003einv\u003c/code\u003e, \u003ccode\u003esolve\u003c/code\u003e, \u003ccode\u003echolesky_inverse\u003c/code\u003e, \u003ccode\u003efft\u003c/code\u003e, \u003ccode\u003efft2\u003c/code\u003e, \u003ccode\u003eifft2\u003c/code\u003e, \u003ccode\u003erfft\u003c/code\u003e, \u003ccode\u003eirfft\u003c/code\u003e, \u003ccode\u003estft\u003c/code\u003e, \u003ccode\u003eistft\u003c/code\u003e, \u003ccode\u003escatter\u003c/code\u003e, \u003ccode\u003ebinomial\u003c/code\u003e, \u003ccode\u003eunfold\u003c/code\u003e, \u003ccode\u003eQR decomposition\u003c/code\u003e, \u003ccode\u003eview\u003c/code\u003e, and more.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNeural Network Operations\u003c/strong\u003e: Added support for \u003ccode\u003eseparable_conv\u003c/code\u003e, \u003ccode\u003econv_transpose\u003c/code\u003e, \u003ccode\u003eadaptive_average_pool\u003c/code\u003e, \u003ccode\u003eadaptive_max_pool\u003c/code\u003e, \u003ccode\u003eRNN\u003c/code\u003e, \u003ccode\u003eLSTM\u003c/code\u003e, and \u003ccode\u003eGRU\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eControl Flow Operations\u003c/strong\u003e: Implemented \u003ccode\u003econd\u003c/code\u003e, \u003ccode\u003escan\u003c/code\u003e, \u003ccode\u003eassociative_scan\u003c/code\u003e, \u003ccode\u003emap\u003c/code\u003e, \u003ccode\u003eswitch\u003c/code\u003e, \u003ccode\u003efori_loop\u003c/code\u003e, and \u003ccode\u003evectorized_map\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eBug Fixes and Improvements\u003c/h2\u003e\n\u003ch3\u003eBackend Specific Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePyTorch\u003c/strong\u003e: Dynamic shapes support in export, device selection improvements, and bug fixes to the CuDNN based LSTM and GRU implementation.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eJAX\u003c/strong\u003e: Improved RNG handling in \u003ccode\u003eFlaxLayer\u003c/code\u003e and \u003ccode\u003eJaxLayer\u003c/code\u003e, variable jitting improvements, and direct JAX-to-ONNX export.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNumPy\u003c/strong\u003e: Enabled masking support for the NumPy backend.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed multiple symbolic shape bugs across layers like \u003ccode\u003eConv1DTranspose\u003c/code\u003e, \u003ccode\u003eIndexLookup\u003c/code\u003e, and \u003ccode\u003eTextVectorization\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed activity regularizer normalization by batch size.\u003c/li\u003e\n\u003cli\u003eImproved \u003ccode\u003eSequential\u003c/code\u003e error messages for incompatible layers.\u003c/li\u003e\n\u003cli\u003eMinimized memory usage issues in \u003ccode\u003esparse_categorical_crossentropy\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cp\u003eWe would like to thank our new contributors for making their first contribution to the Keras project:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/050671c8cfa58cd288bcc1f4ad21e83991bfdf9f\"\u003e\u003ccode\u003e050671c\u003c/code\u003e\u003c/a\u003e Keras Automations : Refine auto fix to add unit tests (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22624\"\u003e#22624\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/05bbdae31bdff7cf519d587310760e453cf7440e\"\u003e\u003ccode\u003e05bbdae\u003c/code\u003e\u003c/a\u003e Keras Automations:  Refine Auto fix (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22623\"\u003e#22623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/9708582efe976040ec0ca322fdae88924c5afe81\"\u003e\u003ccode\u003e9708582\u003c/code\u003e\u003c/a\u003e Implement nanmedian function in keras.ops (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22585\"\u003e#22585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e0baba4546c252caf84aaf404f28d680ea4e2061\"\u003e\u003ccode\u003ee0baba4\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Pass the \u003ccode\u003eshape\u003c/code\u003e when creating a \u003ccode\u003etf.Variable\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22460\"\u003e#22460\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22609\"\u003e#22609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/b8ba027f4ffcabf564f040c62da21fb666ee2ae8\"\u003e\u003ccode\u003eb8ba027\u003c/code\u003e\u003c/a\u003e Keras Automations: Auto fix improve (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22613\"\u003e#22613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/d1e5f1c6d57b4c00ac09ef1cd3b13c53f2bd394b\"\u003e\u003ccode\u003ed1e5f1c\u003c/code\u003e\u003c/a\u003e Keras automation: fix label name (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22611\"\u003e#22611\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/a44d76e7cb06f6e627c248bbd618b3e46fdaa308\"\u003e\u003ccode\u003ea44d76e\u003c/code\u003e\u003c/a\u003e auto fix updates (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22610\"\u003e#22610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/838b7e32a5ea3271bb26140d76de838e9b17b6b6\"\u003e\u003ccode\u003e838b7e3\u003c/code\u003e\u003c/a\u003e Fix TPU test broken in master. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22605\"\u003e#22605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/6c5956d837f87aa89225c962f9f23dcc423dbec2\"\u003e\u003ccode\u003e6c5956d\u003c/code\u003e\u003c/a\u003e [Fix] MelSpectrogram skips fft_length \u0026gt;= sequence_length validation for symbo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/99dda4c45485aab6e95e4def1042680c4c52c958\"\u003e\u003ccode\u003e99dda4c\u003c/code\u003e\u003c/a\u003e [OpenVINO] Fix float16 dtype promotion in OpenVINOKerasTensor binary operator...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.2...v3.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 12.1.1 to 12.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.2.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate 12.2.0 release notes \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9482\"\u003e#9482\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Python versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9515\"\u003e#9515\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eJeffrey A. Clark -\u0026gt; Jeffrey 'Alex' Clark \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9513\"\u003e#9513\u003c/a\u003e [\u003ca href=\"https://github.com/aclark4life\"\u003e\u003ccode\u003e@​aclark4life\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd release notes for \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9394\"\u003e#9394\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9419\"\u003e#9419\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9456\"\u003e#9456\u003c/a\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9467\"\u003e#9467\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd Amiga Workbench .info loader to 3rd party plugins list \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9459\"\u003e#9459\u003c/a\u003e [\u003ca href=\"https://github.com/bitplane\"\u003e\u003ccode\u003e@​bitplane\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMerge PFM documentation into PPM \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9434\"\u003e#9434\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eFix CVE number \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9430\"\u003e#9430\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDependencies\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate xz to 5.8.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9523\"\u003e#9523\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libjpeg-turbo to 3.1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9507\"\u003e#9507\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libpng to 1.6.56 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9499\"\u003e#9499\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.3 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9485\"\u003e#9485\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libavif to 1.4.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9479\"\u003e#9479\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated harfbuzz to 13.2.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9461\"\u003e#9461\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate harfbuzz to 13.0.1 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9453\"\u003e#9453\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate libavif to 1.4.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9460\"\u003e#9460\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate freetype to 2.14.2 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9449\"\u003e#9449\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate actions/download-artifact action to v8 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9451\"\u003e#9451\u003c/a\u003e [@\u003ca href=\"https://github.com/apps/renovate\"\u003erenovate[bot]\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdated libpng to 1.6.55 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9425\"\u003e#9425\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTesting\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCleanup .spider extension in the same test where it is added \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9517\"\u003e#9517\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRun tests in parallel via tox for 3.5x speedup \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9516\"\u003e#9516\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eEnable colour in CI logs \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9486\"\u003e#9486\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate Ghostscript to 10.7.0 \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9469\"\u003e#9469\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSimplify TGA test code \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9477\"\u003e#9477\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate tests to check for ValueError when encoding an empty image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9464\"\u003e#9464\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpgrade CI from \u003ccode\u003emacos-15-intel\u003c/code\u003e to \u003ccode\u003emacos-26-intel\u003c/code\u003e \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9454\"\u003e#9454\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd check-case-conflict hook \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9446\"\u003e#9446\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSpecify platform when pulling docker image \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9440\"\u003e#9440\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eGHA: Cache libavif and webp builds for Ubuntu \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9437\"\u003e#9437\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate macOS tested Pillow versions \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9431\"\u003e#9431\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck calloc return value \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eCheck all allocs in the Arrow tree \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e [\u003ca href=\"https://github.com/wiredfool\"\u003e\u003ccode\u003e@​wiredfool\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eReject non-numeric elements inside list coords \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e [\u003ca href=\"https://github.com/hugovk\"\u003e\u003ccode\u003e@​hugovk\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eMove variable declaration inside define \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e [\u003ca href=\"https://github.com/radarhere\"\u003e\u003ccode\u003e@​radarhere\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/3c41c095064200a02672d89cc5ff629eaf4b0d4f\"\u003e\u003ccode\u003e3c41c09\u003c/code\u003e\u003c/a\u003e 12.2.0 version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cdaa29eb520291c4f1fb50fb71ae46502d41e460\"\u003e\u003ccode\u003ecdaa29e\u003c/code\u003e\u003c/a\u003e Check calloc return value (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9527\"\u003e#9527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/585b2f5a780722c8a5bfffb3a40f7f42e8a205be\"\u003e\u003ccode\u003e585b2f5\u003c/code\u003e\u003c/a\u003e Check calloc return value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ecf011ea15991d4cebacd946e58270cc30b0f2c1\"\u003e\u003ccode\u003eecf011e\u003c/code\u003e\u003c/a\u003e Check all allocs in the Arrow tree (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9488\"\u003e#9488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/cf6de8ca9b23e714aa5310e1c791eda66fc0b670\"\u003e\u003ccode\u003ecf6de8c\u003c/code\u003e\u003c/a\u003e Reject non-numeric elements inside list coords (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9526\"\u003e#9526\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/ffdcede6516b28d9667c92929854023d17048b64\"\u003e\u003ccode\u003effdcede\u003c/code\u003e\u003c/a\u003e Update 12.2.0 release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9522\"\u003e#9522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/7929d7760fe5a307ba5ae6eabdf70ae4486b147c\"\u003e\u003ccode\u003e7929d77\u003c/code\u003e\u003c/a\u003e Added security release notes (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/c4f7aa5dfb4dbd1242978ac235e01b9934ec6d3c\"\u003e\u003ccode\u003ec4f7aa5\u003c/code\u003e\u003c/a\u003e Added security release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/22cdb5f2e4b15250c06563b1124ac1667342712f\"\u003e\u003ccode\u003e22cdb5f\u003c/code\u003e\u003c/a\u003e Move variable declaration inside define (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9525\"\u003e#9525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-pillow/Pillow/commit/fc15b3b01899408ec989d7804c5283e13802d057\"\u003e\u003ccode\u003efc15b3b\u003c/code\u003e\u003c/a\u003e Resize tall images vertically first (\u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9524\"\u003e#9524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-pillow/Pillow/compare/12.1.1...12.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/google/sedpack/pull/348","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fsedpack/issues/348","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/348/packages"}},{"old_version":"2.2.4","new_version":"3.13.2","update_type":"major","path":null,"pr_created_at":"2026-04-02T08:38:34.000Z","version_change":"2.2.4 → 3.13.2","issue":{"uuid":"4192895366","node_id":"PR_kwDOR3gtKM7PfYbx","number":1,"state":"closed","title":"Bump the pip group across 2 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-14T23:53:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-02T08:38:34.000Z","updated_at":"2026-04-14T23:53:52.000Z","time_to_close":1091716,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":12,"packages":[{"name":"setuptools","old_version":"77.0.3","new_version":"78.1.1","repository_url":"https://github.com/pypa/setuptools"},{"name":"nltk","old_version":"3.9.1","new_version":"3.9.4","repository_url":"https://github.com/nltk/nltk"},{"name":"certifi","old_version":"2018.11.29","new_version":"2024.7.4","repository_url":"https://github.com/certifi/python-certifi"},{"name":"grpcio","old_version":"1.19.0","new_version":"1.53.2","repository_url":"https://github.com/grpc/grpc"},{"name":"idna","old_version":"2.8","new_version":"3.7","repository_url":"https://github.com/kjd/idna"},{"name":"keras","old_version":"2.2.4","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"protobuf","old_version":"3.7.0","new_version":"5.29.6","repository_url":"https://github.com/protocolbuffers/protobuf"},{"name":"requests","old_version":"2.21.0","new_version":"2.33.0","repository_url":"https://github.com/psf/requests"},{"name":"scikit-learn","old_version":"0.20.3","new_version":"1.5.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"tensorflow","old_version":"1.13.1","new_version":"2.12.1","repository_url":"https://github.com/tensorflow/tensorflow"},{"name":"urllib3","old_version":"1.24.1","new_version":"2.6.3","repository_url":"https://github.com/urllib3/urllib3"},{"name":"werkzeug","old_version":"0.14.1","new_version":"3.1.6","repository_url":"https://github.com/pallets/werkzeug"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 2 updates in the /legacy_thesis directory: [setuptools](https://github.com/pypa/setuptools) and [nltk](https://github.com/nltk/nltk).\nBumps the pip group with 12 updates in the /legacy_classifiers directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [setuptools](https://github.com/pypa/setuptools) | `77.0.3` | `78.1.1` |\n| [nltk](https://github.com/nltk/nltk) | `3.9.1` | `3.9.4` |\n| [certifi](https://github.com/certifi/python-certifi) | `2018.11.29` | `2024.7.4` |\n| [grpcio](https://github.com/grpc/grpc) | `1.19.0` | `1.53.2` |\n| [idna](https://github.com/kjd/idna) | `2.8` | `3.7` |\n| [keras](https://github.com/keras-team/keras) | `2.2.4` | `3.13.2` |\n| [protobuf](https://github.com/protocolbuffers/protobuf) | `3.7.0` | `5.29.6` |\n| [requests](https://github.com/psf/requests) | `2.21.0` | `2.33.0` |\n| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `0.20.3` | `1.5.0` |\n| [tensorflow](https://github.com/tensorflow/tensorflow) | `1.13.1` | `2.12.1` |\n| [urllib3](https://github.com/urllib3/urllib3) | `1.24.1` | `2.6.3` |\n| [werkzeug](https://github.com/pallets/werkzeug) | `0.14.1` | `3.1.6` |\n\n\nUpdates `setuptools` from 77.0.3 to 78.1.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/setuptools/blob/main/NEWS.rst\"\u003esetuptools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev78.1.1\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMore fully sanitized the filename in PackageIndex._download. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4946\"\u003e#4946\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.1.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore access to _get_vc_env with a warning. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4874\"\u003e#4874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.2\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePostponed removals of deprecated dash-separated and uppercase fields in \u003ccode\u003esetup.cfg\u003c/code\u003e.\nAll packages with deprecated configurations are advised to move before 2026. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4911\"\u003e#4911\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.1\u003c/h1\u003e\n\u003ch2\u003eMisc\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4909\"\u003e#4909\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.0\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReverted distutils changes that broke the monkey patching of command classes. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4902\"\u003e#4902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDeprecations and Removals\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSetuptools no longer accepts options containing uppercase or dash characters in \u003ccode\u003esetup.cfg\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8e4868a036b7fae3208d16cb4e5fe6d63c3752df\"\u003e\u003ccode\u003e8e4868a\u003c/code\u003e\u003c/a\u003e Bump version: 78.1.0 → 78.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/100e9a61ad24d5a147ada57357425a8d40626d09\"\u003e\u003ccode\u003e100e9a6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8faf1d7e0ca309983252e4f21837b73ee12e960f\"\u003e\u003ccode\u003e8faf1d7\u003c/code\u003e\u003c/a\u003e Add news fragment.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/2ca4a9fe4758fcd39d771d3d3a5b4840aacebdf7\"\u003e\u003ccode\u003e2ca4a9f\u003c/code\u003e\u003c/a\u003e Rely on re.sub to perform the decision in one expression.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/e409e8002932f2b86aae7b1abc8f8c2ebf96df2c\"\u003e\u003ccode\u003ee409e80\u003c/code\u003e\u003c/a\u003e Extract _sanitize method for sanitizing the filename.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b\"\u003e\u003ccode\u003e250a6d1\u003c/code\u003e\u003c/a\u003e Add a check to ensure the name resolves relative to the tmpdir.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d8390feaa99091d1ba9626bec0e4ba7072fc507a\"\u003e\u003ccode\u003ed8390fe\u003c/code\u003e\u003c/a\u003e Extract _resolve_download_filename with test.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/4e1e89392de5cb405e7844cdc8b20fc2755dbaba\"\u003e\u003ccode\u003e4e1e893\u003c/code\u003e\u003c/a\u003e Merge \u003ca href=\"https://github.com/jaraco/skeleton\"\u003ehttps://github.com/jaraco/skeleton\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/3a3144f0d2887fa37c06550f42a101e9eebd953a\"\u003e\u003ccode\u003e3a3144f\u003c/code\u003e\u003c/a\u003e Fix typo: \u003ccode\u003epyproject.license\u003c/code\u003e -\u0026gt; \u003ccode\u003eproject.license\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4931\"\u003e#4931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d751068fd2627d6d8f1729e39cbcd8119049998f\"\u003e\u003ccode\u003ed751068\u003c/code\u003e\u003c/a\u003e Fix typo: pyproject.license -\u0026gt; project.license\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/setuptools/compare/v77.0.3...v78.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nltk` from 3.9.1 to 3.9.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nltk/nltk/blob/develop/ChangeLog\"\u003enltk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eVersion 3.9.4 2026-03-24\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Python 3.14\u003c/li\u003e\n\u003cli\u003eFix bug in Levenshtein distance when substitution_cost \u0026gt; 2\u003c/li\u003e\n\u003cli\u003eFix bug in Treebank detokeniser re quote ordering\u003c/li\u003e\n\u003cli\u003eFix bug in Jaro similarity for empty strings\u003c/li\u003e\n\u003cli\u003eSeveral security enhancements\u003c/li\u003e\n\u003cli\u003eFix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder\u003c/li\u003e\n\u003cli\u003eImplement TextTiling vocabulary introduction method (Hearst 1997)\u003c/li\u003e\n\u003cli\u003eFix ALINE feature matrix errors and add comprehensive tests\u003c/li\u003e\n\u003cli\u003eSupport multiple VerbNet versions, fix longid/shortid regex for VerbNet ids\u003c/li\u003e\n\u003cli\u003eLet downloader fallback to md5 when sha256 is unavailable\u003c/li\u003e\n\u003cli\u003eSeveral other minor bugfixes and code cleanups\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.4:\nMin-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01,\njancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,\u003c/p\u003e\n\u003cp\u003eVersion 3.9.3 2026-02-21\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix CVE-2025-14009: secure ZIP extraction in nltk.downloader (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/arbitrary reads in nltk.data for protocol-less refs (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3467\"\u003e#3467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/abs paths in corpus readers and FS pointers (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3479\"\u003e#3479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate external StanfordSegmenter JARs using SHA256 (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd optional sandbox enforcement for filestring() (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3485\"\u003e#3485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMaintenance: downloader/zipped models, CI/tooling updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.3:\nChris Clauss, Eric Kafe, HyperPS, purificant, Shivansh-Game, Christopher Smith\u003c/p\u003e\n\u003cp\u003eVersion 3.9.2 2025-10-01\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate download checksums to use SHA256 in built index\u003c/li\u003e\n\u003cli\u003eFix percentage escape in new-style string formatting\u003c/li\u003e\n\u003cli\u003ereplace shortened URLs using goo.gl\u003c/li\u003e\n\u003cli\u003eMake Wordnet interoperable with various taggers and tagged corpora\u003c/li\u003e\n\u003cli\u003eFix saving PerceptronTagger\u003c/li\u003e\n\u003cli\u003eDocument how to reproduce old Wordnet studies\u003c/li\u003e\n\u003cli\u003eproperly initialize Portuguese corpus reader\u003c/li\u003e\n\u003cli\u003esupport for mixed rules conversion into Chomsky Normal Form\u003c/li\u003e\n\u003cli\u003eonly import tkinter if a GUI is needed\u003c/li\u003e\n\u003cli\u003eissue \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/2112\"\u003e#2112\u003c/a\u003e with Corenlp\u003c/li\u003e\n\u003cli\u003enew environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL\u003c/li\u003e\n\u003cli\u003eLesk defaults to most frequent sense in case of ties\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.2:\nJose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu,\nSamer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq,\nChristopher Smith, Ryan Mannion\u003c/p\u003e\n\u003cp\u003eVersion 3.9.1 2024-08-19\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/ad9c96ba00a16923ffe917eacf63f1707bfa2d08\"\u003e\u003ccode\u003ead9c96b\u003c/code\u003e\u003c/a\u003e Update copyright year\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/7edcddfda566627b897397397cc4d10ae91cb86d\"\u003e\u003ccode\u003e7edcddf\u003c/code\u003e\u003c/a\u003e Updates for 3.9.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/67a2736f89b286b028db08bd247134f17a11fc6b\"\u003e\u003ccode\u003e67a2736\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3180\"\u003e#3180\u003c/a\u003e from yzhaoinuw/bug-on-edit_distance_align\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/2b17ac5358a1c8d4b97455766efde0b786e6cdb2\"\u003e\u003ccode\u003e2b17ac5\u003c/code\u003e\u003c/a\u003e Fix edit_distance_align backtrace for high substitution costs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/4b72976a6ff3d180ed4012f11843e611a8f89516\"\u003e\u003ccode\u003e4b72976\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3018\"\u003e#3018\u003c/a\u003e from JuanIMartinezB/bug/shortid-longid\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/8a5619f53a281149e5342b1a00fe05fe2fc6517f\"\u003e\u003ccode\u003e8a5619f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3222\"\u003e#3222\u003c/a\u003e from Syzygy2048/feature/texttiling-vocabulary-introd...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/c6574d755e02b6163d9cd1d0b407076940e08864\"\u003e\u003ccode\u003ec6574d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3289\"\u003e#3289\u003c/a\u003e from ihitamandal/codeflash/optimize-windowdiff-2024-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/98ff5d9eaa1a81511873b9aef857944519c28dc4\"\u003e\u003ccode\u003e98ff5d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3435\"\u003e#3435\u003c/a\u003e from Hrudhai01/fix-3260-detokenize-quotes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/aec4fce1b84ad725b8975f7365b23a4f626572a9\"\u003e\u003ccode\u003eaec4fce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3522\"\u003e#3522\u003c/a\u003e from ekaf/pathsec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/eec4ee3591cb9cb8b8c2989f08012608c841d532\"\u003e\u003ccode\u003eeec4ee3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3526\"\u003e#3526\u003c/a\u003e from nltk/update-contributing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nltk/nltk/compare/3.9.1...3.9.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `setuptools` from 77.0.3 to 78.1.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/setuptools/blob/main/NEWS.rst\"\u003esetuptools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev78.1.1\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMore fully sanitized the filename in PackageIndex._download. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4946\"\u003e#4946\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.1.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore access to _get_vc_env with a warning. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4874\"\u003e#4874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.2\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePostponed removals of deprecated dash-separated and uppercase fields in \u003ccode\u003esetup.cfg\u003c/code\u003e.\nAll packages with deprecated configurations are advised to move before 2026. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4911\"\u003e#4911\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.1\u003c/h1\u003e\n\u003ch2\u003eMisc\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4909\"\u003e#4909\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev78.0.0\u003c/h1\u003e\n\u003ch2\u003eBugfixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReverted distutils changes that broke the monkey patching of command classes. (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4902\"\u003e#4902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDeprecations and Removals\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSetuptools no longer accepts options containing uppercase or dash characters in \u003ccode\u003esetup.cfg\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8e4868a036b7fae3208d16cb4e5fe6d63c3752df\"\u003e\u003ccode\u003e8e4868a\u003c/code\u003e\u003c/a\u003e Bump version: 78.1.0 → 78.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/100e9a61ad24d5a147ada57357425a8d40626d09\"\u003e\u003ccode\u003e100e9a6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/8faf1d7e0ca309983252e4f21837b73ee12e960f\"\u003e\u003ccode\u003e8faf1d7\u003c/code\u003e\u003c/a\u003e Add news fragment.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/2ca4a9fe4758fcd39d771d3d3a5b4840aacebdf7\"\u003e\u003ccode\u003e2ca4a9f\u003c/code\u003e\u003c/a\u003e Rely on re.sub to perform the decision in one expression.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/e409e8002932f2b86aae7b1abc8f8c2ebf96df2c\"\u003e\u003ccode\u003ee409e80\u003c/code\u003e\u003c/a\u003e Extract _sanitize method for sanitizing the filename.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b\"\u003e\u003ccode\u003e250a6d1\u003c/code\u003e\u003c/a\u003e Add a check to ensure the name resolves relative to the tmpdir.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d8390feaa99091d1ba9626bec0e4ba7072fc507a\"\u003e\u003ccode\u003ed8390fe\u003c/code\u003e\u003c/a\u003e Extract _resolve_download_filename with test.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/4e1e89392de5cb405e7844cdc8b20fc2755dbaba\"\u003e\u003ccode\u003e4e1e893\u003c/code\u003e\u003c/a\u003e Merge \u003ca href=\"https://github.com/jaraco/skeleton\"\u003ehttps://github.com/jaraco/skeleton\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/3a3144f0d2887fa37c06550f42a101e9eebd953a\"\u003e\u003ccode\u003e3a3144f\u003c/code\u003e\u003c/a\u003e Fix typo: \u003ccode\u003epyproject.license\u003c/code\u003e -\u0026gt; \u003ccode\u003eproject.license\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/setuptools/issues/4931\"\u003e#4931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/setuptools/commit/d751068fd2627d6d8f1729e39cbcd8119049998f\"\u003e\u003ccode\u003ed751068\u003c/code\u003e\u003c/a\u003e Fix typo: pyproject.license -\u0026gt; project.license\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/setuptools/compare/v77.0.3...v78.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nltk` from 3.9.1 to 3.9.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nltk/nltk/blob/develop/ChangeLog\"\u003enltk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eVersion 3.9.4 2026-03-24\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Python 3.14\u003c/li\u003e\n\u003cli\u003eFix bug in Levenshtein distance when substitution_cost \u0026gt; 2\u003c/li\u003e\n\u003cli\u003eFix bug in Treebank detokeniser re quote ordering\u003c/li\u003e\n\u003cli\u003eFix bug in Jaro similarity for empty strings\u003c/li\u003e\n\u003cli\u003eSeveral security enhancements\u003c/li\u003e\n\u003cli\u003eFix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder\u003c/li\u003e\n\u003cli\u003eImplement TextTiling vocabulary introduction method (Hearst 1997)\u003c/li\u003e\n\u003cli\u003eFix ALINE feature matrix errors and add comprehensive tests\u003c/li\u003e\n\u003cli\u003eSupport multiple VerbNet versions, fix longid/shortid regex for VerbNet ids\u003c/li\u003e\n\u003cli\u003eLet downloader fallback to md5 when sha256 is unavailable\u003c/li\u003e\n\u003cli\u003eSeveral other minor bugfixes and code cleanups\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.4:\nMin-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01,\njancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,\u003c/p\u003e\n\u003cp\u003eVersion 3.9.3 2026-02-21\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix CVE-2025-14009: secure ZIP extraction in nltk.downloader (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3468\"\u003e#3468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/arbitrary reads in nltk.data for protocol-less refs (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3467\"\u003e#3467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBlock path traversal/abs paths in corpus readers and FS pointers (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3479\"\u003e#3479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eValidate external StanfordSegmenter JARs using SHA256 (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3477\"\u003e#3477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd optional sandbox enforcement for filestring() (\u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3485\"\u003e#3485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMaintenance: downloader/zipped models, CI/tooling updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.3:\nChris Clauss, Eric Kafe, HyperPS, purificant, Shivansh-Game, Christopher Smith\u003c/p\u003e\n\u003cp\u003eVersion 3.9.2 2025-10-01\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate download checksums to use SHA256 in built index\u003c/li\u003e\n\u003cli\u003eFix percentage escape in new-style string formatting\u003c/li\u003e\n\u003cli\u003ereplace shortened URLs using goo.gl\u003c/li\u003e\n\u003cli\u003eMake Wordnet interoperable with various taggers and tagged corpora\u003c/li\u003e\n\u003cli\u003eFix saving PerceptronTagger\u003c/li\u003e\n\u003cli\u003eDocument how to reproduce old Wordnet studies\u003c/li\u003e\n\u003cli\u003eproperly initialize Portuguese corpus reader\u003c/li\u003e\n\u003cli\u003esupport for mixed rules conversion into Chomsky Normal Form\u003c/li\u003e\n\u003cli\u003eonly import tkinter if a GUI is needed\u003c/li\u003e\n\u003cli\u003eissue \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/2112\"\u003e#2112\u003c/a\u003e with Corenlp\u003c/li\u003e\n\u003cli\u003enew environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL\u003c/li\u003e\n\u003cli\u003eLesk defaults to most frequent sense in case of ties\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to the following contributors to 3.9.2:\nJose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu,\nSamer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq,\nChristopher Smith, Ryan Mannion\u003c/p\u003e\n\u003cp\u003eVersion 3.9.1 2024-08-19\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/ad9c96ba00a16923ffe917eacf63f1707bfa2d08\"\u003e\u003ccode\u003ead9c96b\u003c/code\u003e\u003c/a\u003e Update copyright year\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/7edcddfda566627b897397397cc4d10ae91cb86d\"\u003e\u003ccode\u003e7edcddf\u003c/code\u003e\u003c/a\u003e Updates for 3.9.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/67a2736f89b286b028db08bd247134f17a11fc6b\"\u003e\u003ccode\u003e67a2736\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3180\"\u003e#3180\u003c/a\u003e from yzhaoinuw/bug-on-edit_distance_align\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/2b17ac5358a1c8d4b97455766efde0b786e6cdb2\"\u003e\u003ccode\u003e2b17ac5\u003c/code\u003e\u003c/a\u003e Fix edit_distance_align backtrace for high substitution costs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/4b72976a6ff3d180ed4012f11843e611a8f89516\"\u003e\u003ccode\u003e4b72976\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3018\"\u003e#3018\u003c/a\u003e from JuanIMartinezB/bug/shortid-longid\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/8a5619f53a281149e5342b1a00fe05fe2fc6517f\"\u003e\u003ccode\u003e8a5619f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3222\"\u003e#3222\u003c/a\u003e from Syzygy2048/feature/texttiling-vocabulary-introd...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/c6574d755e02b6163d9cd1d0b407076940e08864\"\u003e\u003ccode\u003ec6574d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3289\"\u003e#3289\u003c/a\u003e from ihitamandal/codeflash/optimize-windowdiff-2024-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/98ff5d9eaa1a81511873b9aef857944519c28dc4\"\u003e\u003ccode\u003e98ff5d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3435\"\u003e#3435\u003c/a\u003e from Hrudhai01/fix-3260-detokenize-quotes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/aec4fce1b84ad725b8975f7365b23a4f626572a9\"\u003e\u003ccode\u003eaec4fce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3522\"\u003e#3522\u003c/a\u003e from ekaf/pathsec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nltk/nltk/commit/eec4ee3591cb9cb8b8c2989f08012608c841d532\"\u003e\u003ccode\u003eeec4ee3\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/nltk/nltk/issues/3526\"\u003e#3526\u003c/a\u003e from nltk/update-contributing\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nltk/nltk/compare/3.9.1...3.9.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `certifi` from 2018.11.29 to 2024.7.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463\"\u003e\u003ccode\u003ebd81538\u003c/code\u003e\u003c/a\u003e 2024.07.04 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/295\"\u003e#295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/06a2cbf21f345563dde6c28b60e29d57e9b210b3\"\u003e\u003ccode\u003e06a2cbf\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/294\"\u003e#294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/13bba02b72bac97c432c277158bc04b4d2a6bc23\"\u003e\u003ccode\u003e13bba02\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.6 to 4.1.7 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/293\"\u003e#293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/e8abcd0e62b334c164b95d49fcabdc9ecbca0554\"\u003e\u003ccode\u003ee8abcd0\u003c/code\u003e\u003c/a\u003e Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/292\"\u003e#292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/124f4adf171e15cd9a91a8b6e0325ecc97be8fe1\"\u003e\u003ccode\u003e124f4ad\u003c/code\u003e\u003c/a\u003e 2024.06.02 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/291\"\u003e#291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/c2196ce5d6ee675b27755a19948480a7823e2c6a\"\u003e\u003ccode\u003ec2196ce\u003c/code\u003e\u003c/a\u003e --- (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/290\"\u003e#290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/fefdeec7588ff1c05214b85a552afcad5fdb51b2\"\u003e\u003ccode\u003efefdeec\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.4 to 4.1.5 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/289\"\u003e#289\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/3c5fb1560b826a7f83f1f9750173ff766492c9cf\"\u003e\u003ccode\u003e3c5fb15\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 4.1.6 to 4.1.7 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/4a9569a3eb58db8548536fc16c5c5c7af946a5b1\"\u003e\u003ccode\u003e4a9569a\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.1.2 to 4.1.4 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/1fc808626a895a916b1e4c2b63abae6c5eafdbe3\"\u003e\u003ccode\u003e1fc8086\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/288\"\u003e#288\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/certifi/python-certifi/compare/2018.11.29...2024.07.04\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `grpcio` from 1.19.0 to 1.53.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc/releases\"\u003egrpcio's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.49.4\u003c/h2\u003e\n\u003cp\u003eThis is release gRPC Core 1.49.4 (gamma).\u003c/p\u003e\n\u003cp\u003eFor gRPC documentation, see \u003ca href=\"https://grpc.io/\"\u003egrpc.io\u003c/a\u003e. For previous releases, see \u003ca href=\"https://github.com/grpc/grpc/releases\"\u003eReleases\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis release contains refinements, improvements, and bug fixes.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e[Core] Add set min/max TLS version APIs to TLS credentials APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/34861\"\u003e#34861\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/afb307fb89ed83f358d82b5d359034a039a95e66\"\u003e\u003ccode\u003eafb307f\u003c/code\u003e\u003c/a\u003e [v1.53.x][Interop] Backport Python image update (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33864\"\u003e#33864\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/7a9373b049fc38c2c6f0ed07ab97908b380db967\"\u003e\u003ccode\u003e7a9373b\u003c/code\u003e\u003c/a\u003e [Backport] [dependency] Restrict cython to less than 3.X (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33770\"\u003e#33770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/fdb64a69ec4c5a142aa7acbde4ba0d472c94ec19\"\u003e\u003ccode\u003efdb64a6\u003c/code\u003e\u003c/a\u003e [v1.53][Build] Update Phusion baseimage (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33767\"\u003e#33767\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33836\"\u003e#33836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/cdf4186a176c293eca5de9aaac28706b6f5edd70\"\u003e\u003ccode\u003ecdf4186\u003c/code\u003e\u003c/a\u003e [PSM Interop] Legacy tests: fix xDS test client build (v1.53.x backport) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33\"\u003e#33\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/ce5b93a3c69fcd60879a53272e2593366efa6065\"\u003e\u003ccode\u003ece5b93a\u003c/code\u003e\u003c/a\u003e [PSM Interop] Legacy test builds always pull the driver from master (v1.53.x ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/b24b6eac9aa86773cc1d7b45b4c8efcaf3417fc8\"\u003e\u003ccode\u003eb24b6ea\u003c/code\u003e\u003c/a\u003e [release] Bump release version to 1.53.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33709\"\u003e#33709\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/1e86ca5834b94cae7d5e6d219056c0fc895cf95d\"\u003e\u003ccode\u003e1e86ca5\u003c/code\u003e\u003c/a\u003e [backport][iomgr][EventEngine] Improve server handling of file descriptor exh...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/aff3066cea9d0386521668983a610e9a1844d384\"\u003e\u003ccode\u003eaff3066\u003c/code\u003e\u003c/a\u003e [PSM interop] Don't fail url_map target if sub-target already failed (v1.53.x...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/539d75cc57c922a2706cc114b8527d851f07f366\"\u003e\u003ccode\u003e539d75c\u003c/code\u003e\u003c/a\u003e [PSM interop] Don't fail target if sub-target already failed (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33222\"\u003e#33222\u003c/a\u003e) (v1.53....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc/commit/3e79c88157c47ff04e1363be2f0452d89fc1b89c\"\u003e\u003ccode\u003e3e79c88\u003c/code\u003e\u003c/a\u003e [Release] Bump version to 1.53.1 (on v1.53.x branch) (\u003ca href=\"https://redirect.github.com/grpc/grpc/issues/33047\"\u003e#33047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc/compare/v1.19.0...v1.53.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `idna` from 2.8 to 3.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/releases\"\u003eidna's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Guido Vranken for reporting the issue.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/kjd/idna/compare/v3.6...v3.7\"\u003ehttps://github.com/kjd/idna/compare/v3.6...v3.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/blob/master/HISTORY.rst\"\u003eidna's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.7 (2024-04-11)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix issue where specially crafted inputs to encode() could\ntake exceptionally long amount of time to process. [CVE-2024-3651]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Guido Vranken for reporting the issue.\u003c/p\u003e\n\u003cp\u003e3.6 (2023-11-25)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix regression to include tests in source distribution.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e3.5 (2023-11-24)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 15.1.0\u003c/li\u003e\n\u003cli\u003eString codec name is now \u0026quot;idna2008\u0026quot; as overriding the system codec\n\u0026quot;idna\u0026quot; was not working.\u003c/li\u003e\n\u003cli\u003eFix typing error for codec encoding\u003c/li\u003e\n\u003cli\u003e\u0026quot;setup.cfg\u0026quot; has been added for this release due to some downstream\nlack of adherence to PEP 517. Should be removed in a future release\nso please prepare accordingly.\u003c/li\u003e\n\u003cli\u003eRemoved reliance on a symlink for the \u0026quot;idna-data\u0026quot; tool to comport\nwith PEP 517 and the Python Packaging User Guide for sdist archives.\u003c/li\u003e\n\u003cli\u003eAdded security reporting protocol for project\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions\nto this release.\u003c/p\u003e\n\u003cp\u003e3.4 (2022-09-14)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 15.0.0\u003c/li\u003e\n\u003cli\u003eMigrate to pyproject.toml for build information (PEP 621)\u003c/li\u003e\n\u003cli\u003eCorrect another instance where generic exception was raised instead of\nIDNAError for malformed input\u003c/li\u003e\n\u003cli\u003eSource distribution uses zeroized file ownership for improved\nreproducibility\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to Seth Michael Larson for contributions to this release.\u003c/p\u003e\n\u003cp\u003e3.3 (2021-10-13)\n++++++++++++++++\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 14.0.0\u003c/li\u003e\n\u003cli\u003eUpdate to in-line type annotations\u003c/li\u003e\n\u003cli\u003eThrow IDNAError exception correctly for some malformed input\u003c/li\u003e\n\u003cli\u003eAdvertise support for Python 3.10\u003c/li\u003e\n\u003cli\u003eImprove testing regime on Github\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d\"\u003e\u003ccode\u003e1d365e1\u003c/code\u003e\u003c/a\u003e Release v3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/c1b3154939907fab67c5754346afaebe165ce8e6\"\u003e\u003ccode\u003ec1b3154\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kjd/idna/issues/172\"\u003e#172\u003c/a\u003e from kjd/optimize-contextj\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/0394ec76ff022813e770ba1fd89658790ea35623\"\u003e\u003ccode\u003e0394ec7\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into optimize-contextj\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/cd58a23173d2b0a40b95ee680baf3e59e8d33966\"\u003e\u003ccode\u003ecd58a23\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kjd/idna/issues/152\"\u003e#152\u003c/a\u003e from elliotwutingfeng/dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7\"\u003e\u003ccode\u003e5beb28b\u003c/code\u003e\u003c/a\u003e More efficient resolution of joiner contexts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/1b121483ed04d9576a1291758f537e1318cddc8b\"\u003e\u003ccode\u003e1b12148\u003c/code\u003e\u003c/a\u003e Update ossf/scorecard-action to v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/d516b874c3388047934938a500c7488d52c4e067\"\u003e\u003ccode\u003ed516b87\u003c/code\u003e\u003c/a\u003e Update Github actions/checkout to v4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/c095c75943413c75ebf8ac74179757031b7f80b7\"\u003e\u003ccode\u003ec095c75\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into dev\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/60a0a4cb61ec6834d74306bd8a1fa46daac94c98\"\u003e\u003ccode\u003e60a0a4c\u003c/code\u003e\u003c/a\u003e Fix typo in GitHub Actions workflow key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/5918a0ef8034379c2e409ae93ee11d24295bb201\"\u003e\u003ccode\u003e5918a0e\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into dev\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kjd/idna/compare/v2.8...v3.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 2.2.4 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/2.2.4...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `protobuf` from 3.7.0 to 5.29.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protocolbuffers/protobuf/releases\"\u003eprotobuf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eProtocol Buffers v34.0-rc1\u003c/h2\u003e\n\u003ch1\u003eAnnouncements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eThis version includes breaking changes to: C++, Objective-C, PHP, Python.\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Make generator headers private (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/3a2af3510f0d454dbe3e4dc281674b61c4d20b9e\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/3a2af3510f0d454dbe3e4dc281674b61c4d20b9e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/7a7589823d2cfaaf7994b050e98d5d553bc9b1c1\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/7a7589823d2cfaaf7994b050e98d5d553bc9b1c1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Add [[nodiscard]] to many APIs. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/a70115f33f9af2c4b2202c800b84837e7fe0d738\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/a70115f33f9af2c4b2202c800b84837e7fe0d738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Make the arena-enabled constructors of \u003ccode\u003eRepeatedField\u003c/code\u003e, \u003ccode\u003eRepeatedPtrField\u003c/code\u003e, and \u003ccode\u003eMap\u003c/code\u003e private. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ef890c3d0c79398c70e047fe5dd893f460ba2336\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ef890c3d0c79398c70e047fe5dd893f460ba2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b115358c64127896fed88b8b5ef5d91d86d8cbae\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b115358c64127896fed88b8b5ef5d91d86d8cbae\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/68346ec9348e932664e58c3ecdcd1478f95233a8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/68346ec9348e932664e58c3ecdcd1478f95233a8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/837a2cd1d6c75402b2503ffe7cd8aeaf25868536\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/837a2cd1d6c75402b2503ffe7cd8aeaf25868536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() \u0026amp;\u0026amp; !is_repeated()) instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9dbc5d479a8e453921485d8d3de47fb3c005f1af\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9dbc5d479a8e453921485d8d3de47fb3c005f1af\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[C++] All entity names have length limit (2afb0dc)\u003c/li\u003e\n\u003cli\u003e[ObjC] Remove \u003ccode\u003egenerate_minimal_imports\u003c/code\u003e generation option warning (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/45b1297fdaad5a9436d0e207422168c38dc45ac4\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/45b1297fdaad5a9436d0e207422168c38dc45ac4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[ObjC] Fix nullability annotations on some \u003ccode\u003eGPB*Dictionary\u003c/code\u003e types. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ea67d6d26a48478a567c404679e3bb99cf230d50\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ea67d6d26a48478a567c404679e3bb99cf230d50\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[ObjC] Remove \u003ccode\u003e-[GPBFieldDescriptor optional]\u003c/code\u003e (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/3414dc151eb4dcbdb2ca952e2589993bf7af75c4\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/3414dc151eb4dcbdb2ca952e2589993bf7af75c4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Other] Remove deprecated flag for enabling MSVC support (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/97c979be6e0907e1051bee62584dac4594e73fa7\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/97c979be6e0907e1051bee62584dac4594e73fa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP] Remove deprecated PHP APIs (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9c45014099a4f7004fab6dd1278de2f4f2a393c5\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9c45014099a4f7004fab6dd1278de2f4f2a393c5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\u003c/a\u003e, \u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/cd76e675b14d00dda5623b30835d2bc7105fccc6\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/cd76e675b14d00dda5623b30835d2bc7105fccc6\u003c/a\u003e, \u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/42081219920c6fad17ba6ddd1e28d111bcfb3345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP]  Add PHP typehints for setters and remove redundant GPBUtil checks (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/pull/25296\"\u003eprotocolbuffers/protobuf#25296\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/aee03b78929c02461a5f9d8e136a2a016359b0cd\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/aee03b78929c02461a5f9d8e136a2a016359b0cd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[PHP]  support default values for editions/proto2 (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/pull/25161\"\u003eprotocolbuffers/protobuf#25161\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b01099d56350551bae3da88b97bf3027274c9f17\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b01099d56350551bae3da88b97bf3027274c9f17\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/5b116fe2f14f49dd0cc3b76089983717f211025c\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/5b116fe2f14f49dd0cc3b76089983717f211025c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove float_format/double_format from python proto text_format (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/e4854a186e0bfa867d5bfa5cd850608a948fd488\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/e4854a186e0bfa867d5bfa5cd850608a948fd488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/00aaca1b4d98954bc2933d7c8a5379ba6088124c\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/00aaca1b4d98954bc2933d7c8a5379ba6088124c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove float_precision from python proto json_format (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/f027f1fcd52b9d080b7ee79f4024f53cf54e0dc5\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/f027f1fcd52b9d080b7ee79f4024f53cf54e0dc5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/b76faa921fdd244f374c7be0bddd4050fc42c292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated FieldDescriptor.label (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a8ff55518ea5874478ad5b26515b31d186045a9\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a8ff55518ea5874478ad5b26515b31d186045a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/c301c2ca286327a21c50c0c4cd877afc9c655b00\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://protobuf.dev/news/\"\u003eProtobuf News\u003c/a\u003e may include additional announcements or pre-announcements for upcoming changes.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://protobuf.dev/support/migration/\"\u003eMigration Guide\u003c/a\u003e may include additional guidance for breaking changes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBazel\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/25168\"\u003e#25168\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/8c857c3a1c6a106b0a096f1c9fa504bfaca035a9\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/8c857c3a1c6a106b0a096f1c9fa504bfaca035a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBreaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/0a5c2f6b633c1e5259f566cb42d30fe347b8aadb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFeat(bazel): wire up prebuilt protoc toolchain (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/24115\"\u003e#24115\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/cc23698b486e690ea2eb873cc7596a87c74a3ba6\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/cc23698b486e690ea2eb873cc7596a87c74a3ba6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMigrate \u003ccode\u003eproto_descriptor_set\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/23369\"\u003e#23369\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/8d4dfdd39a7a242a9ed631a6ab2192c57dd9b9c8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/8d4dfdd39a7a242a9ed631a6ab2192c57dd9b9c8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eCompiler\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eRuby codegen: support generation of rbs files (\u003ca href=\"https://redirect.github.com/protocolbuffers/protobuf/issues/15633\"\u003e#15633\u003c/a\u003e) (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/6ebdf851ba78728f0aa145d38454ed9a316fb08d\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/6ebdf851ba78728f0aa145d38454ed9a316fb08d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid collision name problems between a message named \u003ccode\u003eXyz\u003c/code\u003e and a direct sibling enum named \u003ccode\u003eXyzView\u003c/code\u003e (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/eba53e8f172b273d679759a72ce4250131ee3df1\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/eba53e8f172b273d679759a72ce4250131ee3df1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGeneralizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/ed3c57114d8e2b47cca7697ddaa50c1b3762a6b0\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/ed3c57114d8e2b47cca7697ddaa50c1b3762a6b0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a bug with custom features outside of the \u003ccode\u003epb\u003c/code\u003e package. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/872d3ce7a4da00d7dcec33ced20cfe45235935e8\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/872d3ce7a4da00d7dcec33ced20cfe45235935e8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix import option handling when include_imports isn't set. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/9ef9e80afd9bc8379d578fe67e5ab0738728c04e\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/9ef9e80afd9bc8379d578fe67e5ab0738728c04e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/1229d4adba24c0952ab85ce96bc7b7f8a1fe6d0f\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/1229d4adba24c0952ab85ce96bc7b7f8a1fe6d0f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent accidental stripping of \u003ccode\u003edebug_redact\u003c/code\u003e options via import option. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/f58b098bffa7ca4045ef7773b09151a6af5d0c28\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/f58b098bffa7ca4045ef7773b09151a6af5d0c28\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eC++\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd EnumerateEnumValues function. (\u003ca href=\"https://github.com/protocolbuffers/protobuf/commit/397d5d99db274b379d1384814074bf7df39d32f7\"\u003ehttps://github.com/protocolbuffers/protobuf/commit/397d5d99db274b379d1384814074bf7df39d32f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/protocolbuffers/protobuf/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `requests` from 2.21.0 to 2.33.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/requests/releases\"\u003erequests's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.33.0\u003c/h2\u003e\n\u003ch2\u003e2.33.0 (2026-03-25)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eAnnouncements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at \u003ca href=\"https://redirect.github.com/psf/requests/issues/7271\"\u003e#7271\u003c/a\u003e. Give it a try, and report any gaps or feedback you may have in the issue. 📣\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-25645 \u003ccode\u003erequests.utils.extract_zipped_paths\u003c/code\u003e now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eImprovements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated to a PEP 517 build system using setuptools. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7012\"\u003e#7012\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7205\"\u003e#7205\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eDropped support for Python 3.9 following its end of support. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7196\"\u003e#7196\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eVarious typo fixes and doc improvements.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/M0d3v1\"\u003e\u003ccode\u003e@​M0d3v1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6865\"\u003epsf/requests#6865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aminvakil\"\u003e\u003ccode\u003e@​aminvakil\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7220\"\u003epsf/requests#7220\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/E8Price\"\u003e\u003ccode\u003e@​E8Price\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6960\"\u003epsf/requests#6960\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mitre88\"\u003e\u003ccode\u003e@​mitre88\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7244\"\u003epsf/requests#7244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magsen\"\u003e\u003ccode\u003e@​magsen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/6553\"\u003epsf/requests#6553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Rohan5commit\"\u003e\u003ccode\u003e@​Rohan5commit\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/psf/requests/pull/7227\"\u003epsf/requests#7227\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25\"\u003ehttps://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.32.5\u003c/h2\u003e\n\u003ch2\u003e2.32.5 (2025-08-18)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe SSLContext caching feature originally introduced in 2.32.0 has created\na new class of issues in Requests that have had negative impact across a number\nof use cases. The Requests team has decided to revert this feature as long term\nmaintenance of it is proving to be unsustainable in its current iteration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for Python 3.14.\u003c/li\u003e\n\u003cli\u003eDropped support for Python 3.8 following its end of support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.32.4\u003c/h2\u003e\n\u003ch2\u003e2.32.4 (2025-06-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/requests/blob/main/HISTORY.md\"\u003erequests's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.33.0 (2026-03-25)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eAnnouncements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e📣 Requests is adding inline types. If you have a typed code base that\nuses Requests, please take a look at \u003ca href=\"https://redirect.github.com/psf/requests/issues/7271\"\u003e#7271\u003c/a\u003e. Give it a try, and report\nany gaps or feedback you may have in the issue. 📣\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-25645 \u003ccode\u003erequests.utils.extract_zipped_paths\u003c/code\u003e now extracts\ncontents to a non-deterministic location to prevent malicious file\nreplacement. This does not affect default usage of Requests, only\napplications calling the utility function directly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eImprovements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated to a PEP 517 build system using setuptools. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7012\"\u003e#7012\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where an empty netrc entry could cause\nmalformed authentication to be applied to Requests on\nPython 3.11+. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7205\"\u003e#7205\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eDropped support for Python 3.9 following its end of support. (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7196\"\u003e#7196\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eVarious typo fixes and doc improvements.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.32.5 (2025-08-18)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eBugfixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe SSLContext caching feature originally introduced in 2.32.0 has created\na new class of issues in Requests that have had negative impact across a number\nof use cases. The Requests team has decided to revert this feature as long term\nmaintenance of it is proving to be unsustainable in its current iteration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDeprecations\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for Python 3.14.\u003c/li\u003e\n\u003cli\u003eDropped support for Python 3.8 following its end of support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.32.4 (2025-06-10)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSecurity\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted\nenvironment will retrieve credentials for the wrong hostname/machine from a\nnetrc file.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761\"\u003e\u003ccode\u003ebc04dfd\u003c/code\u003e\u003c/a\u003e v2.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7\"\u003e\u003ccode\u003e66d21cb\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028\"\u003e\u003ccode\u003e8b9bc8f\u003c/code\u003e\u003c/a\u003e Move badges to top of README (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7293\"\u003e#7293\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286\"\u003e\u003ccode\u003ee331a28\u003c/code\u003e\u003c/a\u003e Remove unused extraction call (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7292\"\u003e#7292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29\"\u003e\u003ccode\u003e753fd08\u003c/code\u003e\u003c/a\u003e docs: fix FAQ grammar in httplib2 example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71\"\u003e\u003ccode\u003e774a0b8\u003c/code\u003e\u003c/a\u003e docs(socks): same block as other sections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303\"\u003e\u003ccode\u003e9c72a41\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.33.0 to 4.34.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be\"\u003e\u003ccode\u003eebf7190\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.32.0 to 4.33.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798\"\u003e\u003ccode\u003e0e4ae38\u003c/code\u003e\u003c/a\u003e docs: exclude Response.is_permanent_redirect from API docs (\u003ca href=\"https://redirect.github.com/psf/requests/issues/7244\"\u003e#7244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a\"\u003e\u003ccode\u003ed568f47\u003c/code\u003e\u003c/a\u003e docs: clarify Quickstart POST example (\u003ca href=\"https://redirect.github.com/psf/requests/issues/6960\"\u003e#6960\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/psf/requests/compare/v2.21.0...v2.33.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `scikit-learn` from 0.20.3 to 1.5.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/scikit-learn/scikit-learn/releases\"\u003escikit-learn's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eScikit-learn 1.5.0\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.5.0 release.\u003c/p\u003e\n\u003cp\u003eYou can read the release highlights under \u003ca href=\"https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\"\u003ehttps://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html\u003c/a\u003e and the long version of the change log under \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.5.html\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.5.html\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eScikit-learn 1.4.2\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.4.2 release.\u003c/p\u003e\n\u003cp\u003eThis release only includes support for numpy 2.\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eScikit-learn 1.4.1.post1\u003c/h2\u003e\n\u003cp\u003eWe're happy to announce the 1.4.1.post1 release.\u003c/p\u003e\n\u003cp\u003eYou can see the changelog here: \u003ca href=\"https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1\"\u003ehttps://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis version supports Python versions 3.9 to 3.12.\u003c/p\u003e\n\u003cp\u003eYou can upgrade with pip as usual:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003epip install -U scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe conda-forge builds can be installed using:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003econda install -c conda-forge scikit-learn\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b51d0c9648241d1fd53dc9151689f62a61633a3d\"\u003e\u003ccode\u003eb51d0c9\u003c/code\u003e\u003c/a\u003e trigger whell builder [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/919ae9bf72554a180baa3d8f4537b49c730b7580\"\u003e\u003ccode\u003e919ae9b\u003c/code\u003e\u003c/a\u003e MAINT Reoder what's new for 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29039\"\u003e#29039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/0ac28ade871ca71a89a71c834a7b47829b075829\"\u003e\u003ccode\u003e0ac28ad\u003c/code\u003e\u003c/a\u003e DOC Release highlights 1.5 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29007\"\u003e#29007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/729b54d5af208432f788ae7945842f0cf597bd36\"\u003e\u003ccode\u003e729b54d\u003c/code\u003e\u003c/a\u003e test py3.12 against numpy 2 [cd build]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/1e50434f18275bb8727c2a2e24cb953db143d8a5\"\u003e\u003ccode\u003e1e50434\u003c/code\u003e\u003c/a\u003e set version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/ffbe4ab45bd9a113737231721fa2f55a70f3d0ab\"\u003e\u003ccode\u003effbe4ab\u003c/code\u003e\u003c/a\u003e DOC remove obsolete SVM example (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/27108\"\u003e#27108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/4647729e5ee8c46e4fedace2d3c50c37f0a6693d\"\u003e\u003ccode\u003e4647729\u003c/code\u003e\u003c/a\u003e DOC Fix time complexity of MLP (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28592\"\u003e#28592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/9bd7047b4a6c673bcfd2911997f124e265f8ad57\"\u003e\u003ccode\u003e9bd7047\u003c/code\u003e\u003c/a\u003e FIX convergence criterion of MeanShift (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/28951\"\u003e#28951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/b79420f1c2e82d814dec8026e96421751bfc9c96\"\u003e\u003ccode\u003eb79420f\u003c/code\u003e\u003c/a\u003e FIX add long long for int32/int64 windows compat in NumPy 2.0 (\u003ca href=\"https://redirect.github.com/scikit-learn/scikit-learn/issues/29029\"\u003e#29029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/scikit-learn/scikit-learn/commit/37f544db78503ed1a50da02cbb4f1a4e466fb0a7\"\u003e\u003ccode\u003e37f544d\u003c/code\u003e\u003c/a\u003e DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/scikit-learn/scikit-learn/compare/0.20.3...1.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tensorflow` from 1.13.1 to 2.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tensorflow/tensorflow/releases\"\u003etensorflow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTensorFlow 2.12.1\u003c/h2\u003e\n\u003ch1\u003eRelease 2.12.1\u003c/h1\u003e\n\u003ch3\u003eBug Fixes and Other Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe use of the ambe config to build and test aarch64 is not needed. The ambe config will be removed in the future. Making cpu_arm64_pip.sh and cpu_arm64_nonpip.sh more similar for easier future maintenance.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTensorFlow 2.12.0\u003c/h2\u003e\n\u003ch1\u003eRelease 2.12.0\u003c/h1\u003e\n\u003ch2\u003eTensorFlow\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eBuild, Compilation and Packaging\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved redundant packages \u003ccode\u003etensorflow-gpu\u003c/code\u003e and \u003ccode\u003etf-nightly-gpu\u003c/code\u003e. These packages were removed and replaced with packages that direct users to switch to \u003ccode\u003etensorflow\u003c/code\u003e or \u003ccode\u003etf-nightly\u003c/code\u003e respectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See \u003ca href=\"https://pypi.org/project/tensorflow-gpu\"\u003ehttps://pypi.org/project/tensorflow-gpu\u003c/a\u003e for more details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003etf.function\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003etf.function\u003c/code\u003e now uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:\n\u003cul\u003e\n\u003cli\u003eUsing \u003ccode\u003efunctools.wraps\u003c/code\u003e on a function with different signature\u003c/li\u003e\n\u003cli\u003eUsing \u003ccode\u003efunctools.partial\u003c/code\u003e with an invalid \u003ccode\u003etf.function\u003c/code\u003e input\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etf.function\u003c/code\u003e now enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.\u003c/li\u003e\n\u003cli\u003eParameterless \u003ccode\u003etf.function\u003c/code\u003es ar...\n\n_Description has been truncated_","html_url":"https://github.com/webmasterproT/signal-inversion-research/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/webmasterproT%2Fsignal-inversion-research/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"3.5.0","new_version":"3.13.2","update_type":"minor","path":null,"pr_created_at":"2026-03-18T14:12:46.000Z","version_change":"3.5.0 → 3.13.2","issue":{"uuid":"4095412869","node_id":"PR_kwDOPGSG_s7LjrAf","number":46,"state":"closed","title":"Bump the pip group across 23 directories with 10 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-18T22:36:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-18T14:12:46.000Z","updated_at":"2026-03-18T22:36:23.000Z","time_to_close":30215,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":10,"packages":[{"name":"fastmcp","old_version":"2.3.4","new_version":"2.14.2","repository_url":"https://github.com/PrefectHQ/fastmcp"},{"name":"lxml-html-clean","old_version":"0.3.1","new_version":"0.4.4","repository_url":"https://github.com/fedora-python/lxml_html_clean"},{"name":"pypdf","old_version":"4.3.1","new_version":"6.8.0","repository_url":"https://github.com/py-pdf/pypdf"},{"name":"keras","old_version":"3.5.0","new_version":"3.13.2","repository_url":"https://github.com/keras-team/keras"},{"name":"black","old_version":"24.3.0","new_version":"26.3.1","repository_url":"https://github.com/psf/black"},{"name":"pypdf","old_version":"5.0.0","new_version":"6.8.0","repository_url":"https://github.com/py-pdf/pypdf"},{"name":"authlib","old_version":"1.3.1","new_version":"1.6.9","repository_url":"https://github.com/authlib/authlib"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 3 updates in the /integrations/a0ml directory: [fastmcp](https://github.com/PrefectHQ/fastmcp), [lxml-html-clean](https://github.com/fedora-python/lxml_html_clean) and [pypdf](https://github.com/py-pdf/pypdf).\nBumps the pip group with 1 update in the /integrations/ggml-org-central/ggml directory: [keras](https://github.com/keras-team/keras).\nBumps the pip group with 1 update in the /integrations/kokkos-central/llvm-project/llvm/utils/git directory: [black](https://github.com/psf/black).\nBumps the pip group with 3 updates in the /integrations/mem0/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/embedchain/deployment/gradio.app directory: [gradio](https://github.com/gradio-app/gradio).\nBumps the pip group with 2 updates in the /integrations/mem0/embedchain/examples/api_server directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/slack_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/embedchain/examples/whatsapp_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 3 updates in the /integrations/mem0/mem0_temp/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/embedchain/deployment/gradio.app directory: [gradio](https://github.com/gradio-app/gradio).\nBumps the pip group with 2 updates in the /integrations/mem0/mem0_temp/embedchain/examples/api_server directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0/mem0_temp/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/slack_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 1 update in the /integrations/mem0/mem0_temp/embedchain/examples/whatsapp_bot directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 3 updates in the /integrations/mem0_temp/embedchain directory: [pypdf](https://github.com/py-pdf/pypdf), [authlib](https://github.com/authlib/authlib) and [pyasn1](https://github.com/pyasn1/pyasn1).\nBumps the pip group with 1 update in the /integrations/mem0_temp/embedchain/examples/full_stack/backend directory: [flask](https://github.com/pallets/flask).\nBumps the pip group with 2 updates in the /integrations/mem0_temp/embedchain/examples/rest-api directory: [flask](https://github.com/pallets/flask) and [yt-dlp](https://github.com/yt-dlp/yt-dlp).\nBumps the pip group with 1 update in the /integrations/mem0_temp/embedchain/examples/telegram_bot directory: [flask](https://github.com/pallets/flask).\n\nUpdates `fastmcp` from 2.3.4 to 2.14.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases\"\u003efastmcp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.14.2: Port Authority\u003c/h2\u003e\n\u003cp\u003eFastMCP 2.14.2 brings a wave of community contributions safely into the 2.x line. A variety of important fixes backported from 3.0 work improve OpenAPI 3.1 compatibility, MCP spec compliance for output schemas and elicitation, and correct a subtle base_url fallback issue. The CLI now gently reminds you that FastMCP 3.0 is on the horizon.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin MCP under 2.x by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2709\"\u003ejlowin/fastmcp#2709\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd auth_route parameter to SupabaseProvider by \u003ca href=\"https://github.com/EloiZalczer\"\u003e\u003ccode\u003e@​EloiZalczer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2760\"\u003ejlowin/fastmcp#2760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CLI banner with FastMCP 3.0 notice by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2765\"\u003ejlowin/fastmcp#2765\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLet FastMCPError propagate unchanged from managers by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2697\"\u003ejlowin/fastmcp#2697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix test cleanup for uvicorn 0.39+ context isolation by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2696\"\u003ejlowin/fastmcp#2696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump pydocket to 0.16.3 to fix worker cleanup race condition by \u003ca href=\"https://github.com/chrisguidry\"\u003e\u003ccode\u003e@​chrisguidry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2700\"\u003ejlowin/fastmcp#2700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Prefect website URL in docs footer by \u003ca href=\"https://github.com/mgoldsborough\"\u003e\u003ccode\u003e@​mgoldsborough\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2705\"\u003ejlowin/fastmcp#2705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: resolve root-level $ref in outputSchema for MCP spec compliance by \u003ca href=\"https://github.com/majiayu000\"\u003e\u003ccode\u003e@​majiayu000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2727\"\u003ejlowin/fastmcp#2727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OAuth Proxy resource parameter validation by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2763\"\u003ejlowin/fastmcp#2763\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix openapi_version check to include 3.1 by \u003ca href=\"https://github.com/deeleeramone\"\u003e\u003ccode\u003e@​deeleeramone\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2769\"\u003ejlowin/fastmcp#2769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix titled enum elicitation schema to comply with MCP spec by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2774\"\u003ejlowin/fastmcp#2774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix base_url fallback when url is not set by \u003ca href=\"https://github.com/bhbs\"\u003e\u003ccode\u003e@​bhbs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2782\"\u003ejlowin/fastmcp#2782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy import DiskStore to avoid sqlite3 dependency on import by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2785\"\u003ejlowin/fastmcp#2785\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd v3 breaking changes notice to README and docs by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2713\"\u003ejlowin/fastmcp#2713\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd changelog entries for v2.13.1 through v2.14.1 by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2724\"\u003ejlowin/fastmcp#2724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003econference to 2.x branch by \u003ca href=\"https://github.com/aaazzam\"\u003e\u003ccode\u003e@​aaazzam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2787\"\u003ejlowin/fastmcp#2787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jlowin/fastmcp/compare/v2.14.1...v2.14.2\"\u003ehttps://github.com/jlowin/fastmcp/compare/v2.14.1...v2.14.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.14.1: 'Tis a Gift to Be Sample\u003c/h2\u003e\n\u003cp\u003eFastMCP 2.14.1 adds support for sampling with tools (SEP-1577). This exciting new feature lets servers pass tools to \u003ccode\u003ectx.sample()\u003c/code\u003e, enabling agentic workflows where the server borrows the client's LLM and controls tool execution automatically. Pass any callable as a tool and FastMCP handles the loop: calling the LLM, executing tools, and feeding results back until a final response is produced. For fine-grained control, \u003ccode\u003ectx.sample_step()\u003c/code\u003e makes a single LLM call and returns a \u003ccode\u003eSampleStep\u003c/code\u003e, letting you inspect tool calls, add custom logic, or build your own execution loop. Structured output via \u003ccode\u003eresult_type\u003c/code\u003e returns validated Pydantic models instead of raw text. This release also adds \u003ccode\u003eAnthropicSamplingHandler\u003c/code\u003e alongside the existing \u003ccode\u003eOpenAI\u003c/code\u003e handler (newly promoted out of the \u003ccode\u003eexperimental\u003c/code\u003e module), so clients \u003cem\u003eand\u003c/em\u003e servers can provide sampling capability across major providers with ease.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eNew Features 🎉\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSEP-1577: Sampling with tools by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2551\"\u003ejlowin/fastmcp#2551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd AnthropicSamplingHandler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2617\"\u003ejlowin/fastmcp#2617\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd Python 3.13 to Ubuntu CI tests by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2606\"\u003ejlowin/fastmcp#2606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove legacy _task_capable_initialize() workaround by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2612\"\u003ejlowin/fastmcp#2612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConsolidate session state reset logic and improve cancellation cleanup by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2615\"\u003ejlowin/fastmcp#2615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUnify SamplingHandler and promote OpenAI handler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2616\"\u003ejlowin/fastmcp#2616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tool_names parameter to mount() for name overrides by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2619\"\u003ejlowin/fastmcp#2619\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdopt streamable_http_client API from MCP SDK by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2620\"\u003ejlowin/fastmcp#2620\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate exclude_args in favor of Depends() by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2621\"\u003ejlowin/fastmcp#2621\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: prompt tasks returning mcp.types.PromptMessage now work by \u003ca href=\"https://github.com/chrisguidry\"\u003e\u003ccode\u003e@​chrisguidry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2603\"\u003ejlowin/fastmcp#2603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse WindowsSelectorEventLoopPolicy to fix Windows test warnings by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2607\"\u003ejlowin/fastmcp#2607\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClean up cancelled connection startup by \u003ca href=\"https://github.com/shawnthapa\"\u003e\u003ccode\u003e@​shawnthapa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jlowin/fastmcp/pull/2614\"\u003ejlowin/fastmcp#2614\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx\"\u003efastmcp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003chr /\u003e\n\u003ch2\u003etitle: \u0026quot;Changelog\u0026quot;\nicon: \u0026quot;list-check\u0026quot;\nrss: true\ntag: NEW\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases/tag/v3.0.2\"\u003ev3.0.2: Threecovery Mode II\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eTwo community-contributed fixes: auth headers from MCP transport no longer leak through to downstream OpenAPI APIs, and background task workers now correctly receive the originating request ID. Plus a new docs example for context-aware tool factories.\u003c/p\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: prevent MCP transport auth header from leaking to downstream OpenAPI APIs by \u003ca href=\"https://github.com/stakeswky\"\u003e\u003ccode\u003e@​stakeswky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3262\"\u003e#3262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: propagate origin_request_id to background task workers by \u003ca href=\"https://github.com/gfortaine\"\u003e\u003ccode\u003e@​gfortaine\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3175\"\u003e#3175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd v3.0.1 release notes by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3259\"\u003e#3259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add context-aware tool factory example by \u003ca href=\"https://github.com/machov\"\u003e\u003ccode\u003e@​machov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3264\"\u003e#3264\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/PrefectHQ/fastmcp/compare/v3.0.1...v3.0.2\"\u003ev3.0.1...v3.0.2\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/releases/tag/v3.0.1\"\u003ev3.0.1: Three-covery Mode\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eFirst patch after 3.0 — mostly smoothing out rough edges discovered in the wild. The big ones: middleware state that wasn't surviving the trip to tool handlers now does, \u003ccode\u003eTool.from_tool()\u003c/code\u003e accepts callables again, OpenAPI schemas with circular references no longer crash discovery, and decorator overloads now return the correct types in function mode. Also adds \u003ccode\u003everify_id_token\u003c/code\u003e to OIDCProxy for providers (like some Azure AD configs) that issue opaque access tokens but standard JWT id_tokens.\u003c/p\u003e\n\u003ch3\u003eEnhancements 🔧\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd verify_id_token option to OIDCProxy by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3248\"\u003e#3248\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes 🐞\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix v3.0.0 changelog compare link by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3223\"\u003e#3223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MDX parse error in upgrade guide prompts by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3227\"\u003e#3227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix non-serializable state lost between middleware and tools by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3234\"\u003e#3234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAccept callables in Tool.from_tool() by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3235\"\u003e#3235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve skill metadata through provider wrapping by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3237\"\u003e#3237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix circular reference crash in OpenAPI schemas by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3245\"\u003e#3245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix NameError with future annotations and Context/Depends parameters by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3243\"\u003e#3243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ty ignore syntax in OpenAPI provider by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3253\"\u003e#3253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse max_completion_tokens instead of deprecated max_tokens in OpenAI handler by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3254\"\u003e#3254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ty compatibility with upgraded deps by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3257\"\u003e#3257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix decorator overload return types for function mode by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3258\"\u003e#3258\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs 📚\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSync README with welcome.mdx, fix install count by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3224\"\u003e#3224\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument dict-to-Message prompt migration in upgrade guides by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3225\"\u003e#3225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix v2 upgrade guide: remove incorrect v1 import advice by \u003ca href=\"https://github.com/jlowin\"\u003e\u003ccode\u003e@​jlowin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/pull/3226\"\u003e#3226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/99832a9fafe742dcfa747bc6b829b386c25c243b\"\u003e\u003ccode\u003e99832a9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2787\"\u003e#2787\u003c/a\u003e from jlowin/confernece-to-2.x-branch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/7fd365c8680b2c747bd23360662eebfaa0c1fb27\"\u003e\u003ccode\u003e7fd365c\u003c/code\u003e\u003c/a\u003e Update docs.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/9cf9aa9b37dcbbe917d43b7a3a06540fe6bfd65e\"\u003e\u003ccode\u003e9cf9aa9\u003c/code\u003e\u003c/a\u003e Lazy import DiskStore to avoid sqlite3 dependency on import (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2785\"\u003e#2785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/1b637522d166d40ad41346997d2fda74bc886934\"\u003e\u003ccode\u003e1b63752\u003c/code\u003e\u003c/a\u003e Fix base_url fallback when url is not set (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2776\"\u003e#2776\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2782\"\u003e#2782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/33ff356c0f08bbbc22a369e0fc789f4b086e2767\"\u003e\u003ccode\u003e33ff356\u003c/code\u003e\u003c/a\u003e Fix titled enum elicitation schema to comply with MCP spec (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2774\"\u003e#2774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/820f74e8ed7c49fc5c53c02f8cb92f8b3121a265\"\u003e\u003ccode\u003e820f74e\u003c/code\u003e\u003c/a\u003e [BugFix] Fix \u003ccode\u003eopenapi_version\u003c/code\u003e Check So 3.1 Is Included (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2768\"\u003e#2768\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2769\"\u003e#2769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/bbf6c200eeda0a9a946dd8f650a5fa35864ab36f\"\u003e\u003ccode\u003ebbf6c20\u003c/code\u003e\u003c/a\u003e Update CLI banner with FastMCP 3.0 notice (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2765\"\u003e#2765\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/97327893bba11bc837aa1883e39cf8ffea8af479\"\u003e\u003ccode\u003e9732789\u003c/code\u003e\u003c/a\u003e Fix OAuth Proxy resource parameter validation (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2763\"\u003e#2763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/6bade1cbd973cbbbca26a84ed7c4cc58ecfda5b3\"\u003e\u003ccode\u003e6bade1c\u003c/code\u003e\u003c/a\u003e Add auth_route parameter to SupabaseProvider (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2760\"\u003e#2760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/PrefectHQ/fastmcp/commit/4963b516c285bcfe6440a44996dfe06d604af3bd\"\u003e\u003ccode\u003e4963b51\u003c/code\u003e\u003c/a\u003e Fix: resolve root-level $ref in outputSchema for MCP spec compliance (\u003ca href=\"https://redirect.github.com/PrefectHQ/fastmcp/issues/2720\"\u003e#2720\u003c/a\u003e) ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/PrefectHQ/fastmcp/compare/v2.3.4...v2.14.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lxml-html-clean` from 0.3.1 to 0.4.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fedora-python/lxml_html_clean/blob/main/CHANGES.rst\"\u003elxml-html-clean's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.4.4 (2026-02-26)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where Unicode escapes in CSS were not properly decoded\nbefore security checks. This prevents attackers from bypassing filters\nusing escape sequences. (CVE-2026-28348)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e tags could be used for URL\nhijacking attacks. The \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e tag is now automatically removed\nwhenever the \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e tag is removed (via \u003ccode\u003epage_structure=True\u003c/code\u003e\nor manual configuration), as \u003ccode\u003e\u0026lt;base\u0026gt;\u003c/code\u003e must be inside \u003ccode\u003e\u0026lt;head\u0026gt;\u003c/code\u003e\naccording to HTML specifications. (CVE-2026-28350)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.3 (2025-10-02)\u003c/h1\u003e\n\u003ch2\u003eMaintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eTests updated to work correctly with new lxml and libxml2 releases.\u003c/li\u003e\n\u003cli\u003ePython 3.6 and 3.7 are no longer tested.\u003c/li\u003e\n\u003cli\u003eImproved documentation about CSS removal behavior.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.2 (2025-04-09)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elxml_html_clean\u003c/code\u003e now correctly handles HTML input as bytes\nas it did before the 0.2.0 release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.1 (2024-11-15)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved superfluous debug prints.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.4.0 (2024-11-12)\u003c/h1\u003e\n\u003ch2\u003eBugs fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eCleaner()\u003c/code\u003e now scans for hidden JavaScript code embedded\nwithin CSS comments. In certain contexts, such as within \u003ccode\u003e\u0026lt;svg\u0026gt;\u003c/code\u003e or \u003ccode\u003e\u0026lt;math\u0026gt;\u003c/code\u003e tags,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/fd10d79cf8a4d4a962e139aee6d02dec02b2de7c\"\u003e\u003ccode\u003efd10d79\u003c/code\u003e\u003c/a\u003e Add more tests for different combinations of backslashes and unicode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/5b7e2288d9e5bda81d1fcf6a4feaed362534899e\"\u003e\u003ccode\u003e5b7e228\u003c/code\u003e\u003c/a\u003e Restore the removal of all backslashes from styles after decoding of unicode ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/88da8f9e679190ae06f1238106dd9fbd1d87bfbb\"\u003e\u003ccode\u003e88da8f9\u003c/code\u003e\u003c/a\u003e Prepare release 0.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/9c5612ca33b941eec4178abf8a5294b103403f34\"\u003e\u003ccode\u003e9c5612c\u003c/code\u003e\u003c/a\u003e Remove \u0026lt;base\u0026gt; tags to prevent URL hijacking attacks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/2ef732667ddbc74ea59847bcf24b75809aaeed3b\"\u003e\u003ccode\u003e2ef7326\u003c/code\u003e\u003c/a\u003e Implement unicode escape decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/7c854afd949ff82cc6e81a666962e07b739706cf\"\u003e\u003ccode\u003e7c854af\u003c/code\u003e\u003c/a\u003e Add missing Python 3.14 to classifiers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/80cebf7156449bd48d2d6106a70c7442874fa1f9\"\u003e\u003ccode\u003e80cebf7\u003c/code\u003e\u003c/a\u003e Continue using the package link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/1cef82e0647549b901452f45396ded8e6b2bceab\"\u003e\u003ccode\u003e1cef82e\u003c/code\u003e\u003c/a\u003e Update safe sanitizer recommendation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/79f35f4b7542bf87286b45764a7b0bdf6830bb36\"\u003e\u003ccode\u003e79f35f4\u003c/code\u003e\u003c/a\u003e CI: Drop Python 3.8, add 3.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedora-python/lxml_html_clean/commit/fab1dd4a23cbad1cdd4f2cebd2d6cae1130565bd\"\u003e\u003ccode\u003efab1dd4\u003c/code\u003e\u003c/a\u003e Release 0.4.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fedora-python/lxml_html_clean/compare/0.3.1...0.4.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pypdf` from 4.3.1 to 6.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/releases\"\u003epypdf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e) by \u003ca href=\"https://github.com/costajohnt\"\u003e\u003ccode\u003e@​costajohnt\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e) by \u003ca href=\"https://github.com/rampageservices\"\u003e\u003ccode\u003e@​rampageservices\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md\"\u003epypdf's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of page boxes defined on \u003ccode\u003e/Pages\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.1, 2026-02-17\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/a869eceb57e1f98d118e8b73c6169bdc519cbc57\"\u003e\u003ccode\u003ea869ece\u003c/code\u003e\u003c/a\u003e REL: 6.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/3c550b3196adeba1506a26e57c09c09fac75e9aa\"\u003e\u003ccode\u003e3c550b3\u003c/code\u003e\u003c/a\u003e SEC: Limit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/5dae0e28bec83a5c9a3df2ace26dc77c633b4f72\"\u003e\u003ccode\u003e5dae0e2\u003c/code\u003e\u003c/a\u003e MAINT: Document and test XMP security (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3674\"\u003e#3674\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/b9f66ab4338ce14e5f07a73f51f09ed08fa1fe7a\"\u003e\u003ccode\u003eb9f66ab\u003c/code\u003e\u003c/a\u003e DEV: Change to \u003ccode\u003eloadfile\u003c/code\u003e strategy for PyPy in CI (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3671\"\u003e#3671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/071118b08286bed057bb1608cc507d76722cc6f9\"\u003e\u003ccode\u003e071118b\u003c/code\u003e\u003c/a\u003e MAINT: Remove excessive logging in extract_links while not clear (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3670\"\u003e#3670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/43add641726c2819a465cd0d5c05818aa697f81e\"\u003e\u003ccode\u003e43add64\u003c/code\u003e\u003c/a\u003e DEV: Timeout PyPy tests after one minute\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/4228dd2f52e5f70b95c8058c4fc8c6ac291ebbc1\"\u003e\u003ccode\u003e4228dd2\u003c/code\u003e\u003c/a\u003e DOC: Avoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/0e9792df262f782884ea5e1b75ea1138655a1fe7\"\u003e\u003ccode\u003e0e9792d\u003c/code\u003e\u003c/a\u003e ENH: Add /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/ede6db99d007f27540e62867c762746df7a6ed0e\"\u003e\u003ccode\u003eede6db9\u003c/code\u003e\u003c/a\u003e DOC: Document how to disable jbig2dec calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/6d0fa2fc0b6e54d9d6f61ffa52d057c8b5ff032f\"\u003e\u003ccode\u003e6d0fa2f\u003c/code\u003e\u003c/a\u003e MAINT: Move and rename _xobj_image_helpers.py (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3661\"\u003e#3661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/py-pdf/pypdf/compare/4.3.1...6.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `keras` from 3.5.0 to 3.13.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/keras-team/keras/releases\"\u003ekeras's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.13.2\u003c/h2\u003e\n\u003ch2\u003eSecurity Fixes \u0026amp; Hardening\u003c/h2\u003e\n\u003cp\u003eThis release introduces critical security hardening for model loading and saving, alongside improvements to the JAX backend metadata handling.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDisallow \u003ccode\u003eTFSMLayer\u003c/code\u003e deserialization in \u003ccode\u003esafe_mode\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22035\"\u003e#22035\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously, \u003ccode\u003eTFSMLayer\u003c/code\u003e could load external TensorFlow SavedModels during deserialization without respecting Keras \u003ccode\u003esafe_mode\u003c/code\u003e. This could allow the execution of attacker-controlled graphs during model invocation.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTFSMLayer\u003c/code\u003e now enforces \u003ccode\u003esafe_mode\u003c/code\u003e by default. Deserialization via \u003ccode\u003efrom_config()\u003c/code\u003e will raise a \u003ccode\u003eValueError\u003c/code\u003e unless \u003ccode\u003esafe_mode=False\u003c/code\u003e is explicitly passed or \u003ccode\u003ekeras.config.enable_unsafe_deserialization()\u003c/code\u003e is called.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eFix Denial of Service (DoS) in \u003ccode\u003eKerasFileEditor\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/21880\"\u003e#21880\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces validation for HDF5 dataset metadata to prevent \u0026quot;shape bomb\u0026quot; attacks.\u003c/li\u003e\n\u003cli\u003eHardens the \u003ccode\u003e.keras\u003c/code\u003e file editor against malicious metadata that could cause dimension overflows or unbounded memory allocation (unbounded numpy allocation of multi-gigabyte tensors).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eBlock External Links in HDF5 files (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eKeras now explicitly disallows external links within HDF5 files during loading. This prevents potential security risks where a weight file could point to external system datasets.\u003c/li\u003e\n\u003cli\u003eIncludes improved verification for H5 Groups and Datasets to ensure they are local and valid.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBackend-specific Improvements (JAX)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSet \u003ccode\u003emutable=True\u003c/code\u003e by default in \u003ccode\u003ennx_metadata\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22074\"\u003e#22074\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated the JAX backend logic to ensure that variables are treated as mutable by default in \u003ccode\u003ennx_metadata\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThis makes Keras 3.13.2 compatible with Flax 0.12.3 when the Keras NNX integration is enabled.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSaving \u0026amp; Serialization\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eImproved H5IOStore Integrity (\u003ca href=\"https://redirect.github.com/keras-team/keras/pull/22057\"\u003e#22057\u003c/a\u003e)\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored \u003ccode\u003eH5IOStore\u003c/code\u003e and \u003ccode\u003eShardedH5IOStore\u003c/code\u003e to remove unused, unverified methods.\u003c/li\u003e\n\u003cli\u003eFixed key-ordering logic in sharded HDF5 stores to ensure consistent state loading across different environments.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch3\u003eContributors\u003c/h3\u003e\n\u003cp\u003eWe would like to thank the following contributors for their security reports and code improvements:\n\u003ca href=\"https://github.com/0xManan\"\u003e\u003ccode\u003e@​0xManan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyperPS\"\u003e\u003ccode\u003e@​HyperPS\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hertschuh\"\u003e\u003ccode\u003e@​hertschuh\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/divyashreepathihalli\"\u003e\u003ccode\u003e@​divyashreepathihalli\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.1...v3.13.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.13.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes \u0026amp; Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGeneral\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved a persistent warning triggered during \u003ccode\u003eimport keras\u003c/code\u003e when using NumPy 2.0 or higher. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21949\"\u003e#21949\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBackends\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eJAX:\u003c/strong\u003e Fixed an issue where CUDNN flash attention was broken when using JAX versions greater than 0.6.2. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21970\"\u003e#21970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eExport \u0026amp; Serialization\u003c/strong\u003e\n\u003cul\u003e\n\u003cli\u003eResolved a regression in the export pipeline that incorrectly forced batch sizes to be dynamic. The export process now correctly respects static batch sizes when defined. (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21944\"\u003e#21944\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\"\u003ehttps://github.com/keras-team/keras/compare/v3.13.0...v3.13.1\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/e29d0efbefe21b80c041849bd73cc3e54c872de3\"\u003e\u003ccode\u003ee29d0ef\u003c/code\u003e\u003c/a\u003e Version bump and cherry picks for 3.13.2 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22080\"\u003e#22080\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/8914427b7fa9d90f3c476cb2ee65d55d4f808e65\"\u003e\u003ccode\u003e8914427\u003c/code\u003e\u003c/a\u003e Patch release commits for 3.13.1 (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/22005\"\u003e#22005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/986ff971d98e216a89fba38d48a337ed09d6dc44\"\u003e\u003ccode\u003e986ff97\u003c/code\u003e\u003c/a\u003e Update release version and comment orbax checkpoint (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21934\"\u003e#21934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/ca23fceb51f7de40dba51908a0a5297f1f425651\"\u003e\u003ccode\u003eca23fce\u003c/code\u003e\u003c/a\u003e Refactors AbsMaxQuantizer to accept axis in \u003cstrong\u003ecall\u003c/strong\u003e (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21931\"\u003e#21931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/1a9893f04e081ba7f233f59b0669bbde2d83143f\"\u003e\u003ccode\u003e1a9893f\u003c/code\u003e\u003c/a\u003e Adds Serialization Support for QuantizationConfig based quantized models (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/86bfab4375d17ed41e56dc25ab1fdb6e324377a8\"\u003e\u003ccode\u003e86bfab4\u003c/code\u003e\u003c/a\u003e More OpenVINO Numpy Operations (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21925\"\u003e#21925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/f48f4805fd462893f68e5f6cc632d320d4198a52\"\u003e\u003ccode\u003ef48f480\u003c/code\u003e\u003c/a\u003e Add adaptive pooling (1D, 2D, 3D) support across JAX, NumPy, TensorFlow, and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/0771c8044a5c183e3cd8c1c4e8756a607579d4a0\"\u003e\u003ccode\u003e0771c80\u003c/code\u003e\u003c/a\u003e Fix ops.tile shape inference issue on TensorFlow backend (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21860\"\u003e#21860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/024c96db1705f2d4fc0c03fde9158e33554b5304\"\u003e\u003ccode\u003e024c96d\u003c/code\u003e\u003c/a\u003e Extended fix OOM Issue \u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21634\"\u003e#21634\u003c/a\u003e on Keras side (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21755\"\u003e#21755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/keras-team/keras/commit/71f499735f543871d296474c48f56a2e9758a73c\"\u003e\u003ccode\u003e71f4997\u003c/code\u003e\u003c/a\u003e Introduces QuantizationConfig for fine-grained quantization control (\u003ca href=\"https://redirect.github.com/keras-team/keras/issues/21896\"\u003e#21896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/keras-team/keras/compare/v3.5.0...v3.13.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `black` from 24.3.0 to 26.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/black/releases\"\u003eblack's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.3.1\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent Jupyter notebook magic masking collisions from corrupting cells by using\nexact-length placeholders for short magics and aborting if a placeholder can no longer\nbe unmasked safely (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eConfiguration\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlways hash cache filename components derived from \u003ccode\u003e--python-cell-magics\u003c/code\u003e so custom\nmagic names cannot affect cache paths (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cem\u003eBlackd\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDisable browser-originated requests by default, add configurable origin allowlisting\nand request body limits, and bound executor submissions to improve backpressure\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.3.0\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't double-decode input, causing non-UTF-8 files to be corrupted (\u003ca href=\"https://redirect.github.com/psf/black/issues/4964\"\u003e#4964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix crash on standalone comment in lambda default arguments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4993\"\u003e#4993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve parentheses when \u003ccode\u003e# type: ignore\u003c/code\u003e comments would be merged with other\ncomments on the same line, preventing AST equivalence failures (\u003ca href=\"https://redirect.github.com/psf/black/issues/4888\"\u003e#4888\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreview style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where \u003ccode\u003eif\u003c/code\u003e guards in \u003ccode\u003ecase\u003c/code\u003e blocks were incorrectly split when the pattern had\na trailing comma (\u003ca href=\"https://redirect.github.com/psf/black/issues/4884\"\u003e#4884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003estring_processing\u003c/code\u003e crashing on unassigned long string literals with trailing\ncommas (one-item tuples) (\u003ca href=\"https://redirect.github.com/psf/black/issues/4929\"\u003e#4929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify implementation of the power operator \u0026quot;hugging\u0026quot; logic (\u003ca href=\"https://redirect.github.com/psf/black/issues/4918\"\u003e#4918\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePackaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in\nfrozen environments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4930\"\u003e#4930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce winloop for windows as an alternative to uvloop (\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove deprecated function \u003ccode\u003euvloop.install()\u003c/code\u003e in favor of \u003ccode\u003euvloop.new_event_loop()\u003c/code\u003e\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename \u003ccode\u003emaybe_install_uvloop\u003c/code\u003e function to \u003ccode\u003emaybe_use_uvloop\u003c/code\u003e to simplify loop\ninstallation and creation of either a uvloop/winloop evenloop or default eventloop\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOutput\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/psf/black/blob/main/CHANGES.md\"\u003eblack's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.3.1\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent Jupyter notebook magic masking collisions from corrupting cells by using\nexact-length placeholders for short magics and aborting if a placeholder can no longer\nbe unmasked safely (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eConfiguration\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlways hash cache filename components derived from \u003ccode\u003e--python-cell-magics\u003c/code\u003e so custom\nmagic names cannot affect cache paths (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003cem\u003eBlackd\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDisable browser-originated requests by default, add configurable origin allowlisting\nand request body limits, and bound executor submissions to improve backpressure\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.3.0\u003c/h2\u003e\n\u003ch3\u003eStable style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't double-decode input, causing non-UTF-8 files to be corrupted (\u003ca href=\"https://redirect.github.com/psf/black/issues/4964\"\u003e#4964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix crash on standalone comment in lambda default arguments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4993\"\u003e#4993\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve parentheses when \u003ccode\u003e# type: ignore\u003c/code\u003e comments would be merged with other\ncomments on the same line, preventing AST equivalence failures (\u003ca href=\"https://redirect.github.com/psf/black/issues/4888\"\u003e#4888\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePreview style\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bug where \u003ccode\u003eif\u003c/code\u003e guards in \u003ccode\u003ecase\u003c/code\u003e blocks were incorrectly split when the pattern had\na trailing comma (\u003ca href=\"https://redirect.github.com/psf/black/issues/4884\"\u003e#4884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003estring_processing\u003c/code\u003e crashing on unassigned long string literals with trailing\ncommas (one-item tuples) (\u003ca href=\"https://redirect.github.com/psf/black/issues/4929\"\u003e#4929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify implementation of the power operator \u0026quot;hugging\u0026quot; logic (\u003ca href=\"https://redirect.github.com/psf/black/issues/4918\"\u003e#4918\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePackaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in\nfrozen environments (\u003ca href=\"https://redirect.github.com/psf/black/issues/4930\"\u003e#4930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce winloop for windows as an alternative to uvloop (\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove deprecated function \u003ccode\u003euvloop.install()\u003c/code\u003e in favor of \u003ccode\u003euvloop.new_event_loop()\u003c/code\u003e\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename \u003ccode\u003emaybe_install_uvloop\u003c/code\u003e function to \u003ccode\u003emaybe_use_uvloop\u003c/code\u003e to simplify loop\ninstallation and creation of either a uvloop/winloop evenloop or default eventloop\n(\u003ca href=\"https://redirect.github.com/psf/black/issues/4996\"\u003e#4996\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c6755bb741b6481d6b3d3bb563c83fa060db96c9\"\u003e\u003ccode\u003ec6755bb\u003c/code\u003e\u003c/a\u003e Prepare release 26.3.1 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5046\"\u003e#5046\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/69973fd6950985fbeb1090d96da717dc4d8380b0\"\u003e\u003ccode\u003e69973fd\u003c/code\u003e\u003c/a\u003e Harden blackd browser-facing request handling (\u003ca href=\"https://redirect.github.com/psf/black/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/4937fe6cf241139ddbfc16b0bdbb5b422798909d\"\u003e\u003ccode\u003e4937fe6\u003c/code\u003e\u003c/a\u003e Fix some shenanigans with the cache file and IPython (\u003ca href=\"https://redirect.github.com/psf/black/issues/5038\"\u003e#5038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/2e641d174469c505d5ae905e75d4c769597e681f\"\u003e\u003ccode\u003e2e641d1\u003c/code\u003e\u003c/a\u003e docs: remove outdated Black Playground references (\u003ca href=\"https://redirect.github.com/psf/black/issues/5044\"\u003e#5044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c014b22a2d5e0632587b47b81151658bddfa0b88\"\u003e\u003ccode\u003ec014b22\u003c/code\u003e\u003c/a\u003e Remove unused internal code (\u003ca href=\"https://redirect.github.com/psf/black/issues/5041\"\u003e#5041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/0dae20b2d009f2f03de8696d06b0c947d3abafc9\"\u003e\u003ccode\u003e0dae20b\u003c/code\u003e\u003c/a\u003e Add new changelog (\u003ca href=\"https://redirect.github.com/psf/black/issues/5036\"\u003e#5036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/c5c1cbddd92cecb554ac2a77a24139dd76831030\"\u003e\u003ccode\u003ec5c1cbd\u003c/code\u003e\u003c/a\u003e Minor release patches (\u003ca href=\"https://redirect.github.com/psf/black/issues/5035\"\u003e#5035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/7e5a828c37d71b6a6666e28eed444816def6a8f4\"\u003e\u003ccode\u003e7e5a828\u003c/code\u003e\u003c/a\u003e docs: clarify relationship between Black style and PEP 8 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5025\"\u003e#5025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/69705deb8776e7c5e585668da106d1abe2cb8d77\"\u003e\u003ccode\u003e69705de\u003c/code\u003e\u003c/a\u003e docs: add clearer pyproject configuration guidance (\u003ca href=\"https://redirect.github.com/psf/black/issues/5026\"\u003e#5026\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/psf/black/commit/35ea67920b7f6ac8e09be1c47278752b1e827f76\"\u003e\u003ccode\u003e35ea679\u003c/code\u003e\u003c/a\u003e Prepare release 26.3.0 (\u003ca href=\"https://redirect.github.com/psf/black/issues/5032\"\u003e#5032\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/psf/black/compare/24.3.0...26.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pypdf` from 5.0.0 to 6.8.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/releases\"\u003epypdf's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e) by \u003ca href=\"https://github.com/costajohnt\"\u003e\u003ccode\u003e@​costajohnt\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch2\u003eWhat's new\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e) by \u003ca href=\"https://github.com/rampageservices\"\u003e\u003ccode\u003e@​rampageservices\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e) by \u003ca href=\"https://github.com/stefan6419846\"\u003e\u003ccode\u003e@​stefan6419846\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md\"\u003epypdf's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 6.8.0, 2026-03-09\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLimit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features (ENH)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation (DOC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument how to disable jbig2dec calls\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.5...6.8.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.5, 2026-03-02\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the performance of the ASCIIHexDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3666\"\u003e#3666\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.4...6.7.5\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.4, 2026-02-27\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow limiting output length for RunLengthDecode filter (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3664\"\u003e#3664\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRobustness (ROB)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeal with invalid annotations in extract_links (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3659\"\u003e#3659\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.3, 2026-02-24\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse zlib decompression limit when retrieving XFA data (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3658\"\u003e#3658\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.2, 2026-02-22\u003c/h2\u003e\n\u003ch3\u003eSecurity (SEC)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent infinite loop from circular xref /Prev references (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3655\"\u003e#3655\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes (BUG)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix wrong LUT size error (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3651\"\u003e#3651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of page boxes defined on \u003ccode\u003e/Pages\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3650\"\u003e#3650\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 6.7.1, 2026-02-17\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/a869eceb57e1f98d118e8b73c6169bdc519cbc57\"\u003e\u003ccode\u003ea869ece\u003c/code\u003e\u003c/a\u003e REL: 6.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/3c550b3196adeba1506a26e57c09c09fac75e9aa\"\u003e\u003ccode\u003e3c550b3\u003c/code\u003e\u003c/a\u003e SEC: Limit allowed \u003ccode\u003e/Length\u003c/code\u003e value of stream  (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3675\"\u003e#3675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/5dae0e28bec83a5c9a3df2ace26dc77c633b4f72\"\u003e\u003ccode\u003e5dae0e2\u003c/code\u003e\u003c/a\u003e MAINT: Document and test XMP security (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3674\"\u003e#3674\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/b9f66ab4338ce14e5f07a73f51f09ed08fa1fe7a\"\u003e\u003ccode\u003eb9f66ab\u003c/code\u003e\u003c/a\u003e DEV: Change to \u003ccode\u003eloadfile\u003c/code\u003e strategy for PyPy in CI (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3671\"\u003e#3671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/071118b08286bed057bb1608cc507d76722cc6f9\"\u003e\u003ccode\u003e071118b\u003c/code\u003e\u003c/a\u003e MAINT: Remove excessive logging in extract_links while not clear (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3670\"\u003e#3670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/43add641726c2819a465cd0d5c05818aa697f81e\"\u003e\u003ccode\u003e43add64\u003c/code\u003e\u003c/a\u003e DEV: Timeout PyPy tests after one minute\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/4228dd2f52e5f70b95c8058c4fc8c6ac291ebbc1\"\u003e\u003ccode\u003e4228dd2\u003c/code\u003e\u003c/a\u003e DOC: Avoid using \u003ccode\u003ePageObject.replace_contents\u003c/code\u003e on PdfReader (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3669\"\u003e#3669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/0e9792df262f782884ea5e1b75ea1138655a1fe7\"\u003e\u003ccode\u003e0e9792d\u003c/code\u003e\u003c/a\u003e ENH: Add /IRT (in-reply-to) support for markup annotations (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3631\"\u003e#3631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/ede6db99d007f27540e62867c762746df7a6ed0e\"\u003e\u003ccode\u003eede6db9\u003c/code\u003e\u003c/a\u003e DOC: Document how to disable jbig2dec calls\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/py-pdf/pypdf/commit/6d0fa2fc0b6e54d9d6f61ffa52d057c8b5ff032f\"\u003e\u003ccode\u003e6d0fa2f\u003c/code\u003e\u003c/a\u003e MAINT: Move and rename _xobj_image_helpers.py (\u003ca href=\"https://redirect.github.com/py-pdf/pypdf/issues/3661\"\u003e#3661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/py-pdf/pypdf/compare/4.3.1...6.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `authlib` from 1.3.1 to 1.6.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/authlib/authlib/releases\"\u003eauthlib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.9\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.8...v1.6.9\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.8...v1.6.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eChanges in \u003ccode\u003ejose\u003c/code\u003e module\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNot using header's \u003ccode\u003ejwk\u003c/code\u003e automatically\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eES256K\u003c/code\u003e into default jwt algorithms\u003c/li\u003e\n\u003cli\u003eRemove deprecated algorithm from default registry\u003c/li\u003e\n\u003cli\u003eGenerate random \u003ccode\u003ecek\u003c/code\u003e when \u003ccode\u003ecek\u003c/code\u003e length doesn't match\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.8\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.7...v1.6.8\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.7...v1.6.8\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eEdDSA\u003c/code\u003e to default \u003ccode\u003ejwt\u003c/code\u003e instance.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.6.7\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.6...v1.6.7\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.6...v1.6.7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eSet supported algorithms for the default \u003ccode\u003ejwt\u003c/code\u003e instance.\u003c/p\u003e\n\u003ch2\u003ev1.6.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ClientAuth): fix incorrect signature when Content-Type is x-www-form-urlencoded by \u003ca href=\"https://github.com/shc261392\"\u003e\u003ccode\u003e@​shc261392\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/778\"\u003eauthlib/authlib#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Use \u003ccode\u003eexpires_in\u003c/code\u003e when \u003ccode\u003eexpires_at\u003c/code\u003e is unparsable by \u003ca href=\"https://github.com/bendavis78\"\u003e\u003ccode\u003e@​bendavis78\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/842\"\u003eauthlib/authlib#842\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eget_jwt_config\u003c/code\u003e takes a \u003ccode\u003eclient\u003c/code\u003e parameter. by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/844\"\u003eauthlib/authlib#844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shc261392\"\u003e\u003ccode\u003e@​shc261392\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/778\"\u003eauthlib/authlib#778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bendavis78\"\u003e\u003ccode\u003e@​bendavis78\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/842\"\u003eauthlib/authlib#842\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.5...v1.6.6\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.5...v1.6.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.6.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003erequest\u003c/code\u003e param to RFC7591 \u003ccode\u003egenerate_client_info\u003c/code\u003e and \u003ccode\u003egenerate_client_secret\u003c/code\u003e methods by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/825\"\u003eauthlib/authlib#825\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: support list params in prepare_grant_uri by \u003ca href=\"https://github.com/lisongmin\"\u003e\u003ccode\u003e@​lisongmin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/827\"\u003eauthlib/authlib#827\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump SonarSource/sonarqube-scan-action from 5 to 6 in /.github/workflows by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/828\"\u003eauthlib/authlib#828\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jose): add max size for JWE zip=DEF decompression by \u003ca href=\"https://github.com/lepture\"\u003e\u003ccode\u003e@​lepture\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/830\"\u003eauthlib/authlib#830\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lisongmin\"\u003e\u003ccode\u003e@​lisongmin\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/827\"\u003eauthlib/authlib#827\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/828\"\u003eauthlib/authlib#828\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/authlib/authlib/compare/v1.6.4...v1.6.5\"\u003ehttps://github.com/authlib/authlib/compare/v1.6.4...v1.6.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.6.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(jose): prevent public/unprotected header overwriting protected header by \u003ca href=\"https://github.com/lepture\"\u003e\u003ccode\u003e@​lepture\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/809\"\u003eauthlib/authlib#809\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eInsecureTransportError\u003c/code\u003e raising by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/810\"\u003eauthlib/authlib#810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd conventional-commits pre-commit hook by \u003ca href=\"https://github.com/azmeuk\"\u003e\u003ccode\u003e@​azmeuk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/authlib/authlib/pull/811\"\u003eauthlib/authlib#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/authlib/authlib/blob/main/docs/changelog.rst\"\u003eauthlib's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003e.. meta::\n:description: The full list of changes between each Authlib release.\u003c/p\u003e\n\u003cp\u003eHere you can see the full list of changes between each Authlib release.\u003c/p\u003e\n\u003ch2\u003eVersion 1.7.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eUnreleased\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for \u003ccode\u003eOpenID Connect RP-Initiated Logout 1.0 \u0026lt;https://openid.net/specs/openid-connect-rpinitiated-1_0.html\u0026gt;\u003c/code\u003e_.\nSee :ref:\u003ccode\u003especs/rpinitiated\u003c/code\u003e for details. :issue:\u003ccode\u003e500\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003ePer RFC 6749 Section 3.3, the \u003ccode\u003escope\u003c/code\u003e parameter is now optional at both\nauthorization and token endpoints. \u003ccode\u003eclient.get_allowed_scope()\u003c/code\u003e is called\nto determine the default scope when omitted. :issue:\u003ccode\u003e845\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eStop support for Python 3.9, start support Python 3.14. :pr:\u003ccode\u003e850\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eAuthorizationServerMetadata.validate()\u003c/code\u003e to compose with RFC extension classes.\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eexpires_at=0\u003c/code\u003e being incorrectly treated as \u003ccode\u003eNone\u003c/code\u003e. :issue:\u003ccode\u003e530\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eResourceProtector\u003c/code\u003e decorator to be used without parentheses. :issue:\u003ccode\u003e604\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImplement RFC9700 PKCE downgrade countermeasure.\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eUser-Agent\u003c/code\u003e header when fetching server metadata and JWKs. :issue:\u003ccode\u003e704\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRFC7523 accepts the issuer URL as a valid audience. :issue:\u003ccode\u003e730\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUpgrade Guide: :ref:\u003ccode\u003ejoserfc_upgrade\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eVersion 1.6.6\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eReleased on Dec 12, 2025\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eget_jwt_config\u003c/code\u003e takes a \u003ccode\u003eclient\u003c/code\u003e parameter, :pr:\u003ccode\u003e844\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFix incorrect signature when \u003ccode\u003eContent-Type\u003c/code\u003e is x-www-form-urlencoded for OAuth 1.0 Client, :pr:\u003ccode\u003e778\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003eexpires_in\u003c/code\u003e in \u003ccode\u003eOAuth2Token\u003c/code\u003e when \u003ccode\u003eexpires_at\u003c/code\u003e is unparsable, :pr:\u003ccode\u003e842\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAlways track \u003ccode\u003estate\u003c/code\u003e in session for OAuth client integrations.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 1.6.5\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eReleased on Oct 2, 2025\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRFC7591 \u003ccode\u003egenerate_client_info\u003c/code\u003e and \u003ccode\u003egenerate_client_secret\u003c/code\u003e take a \u003ccode\u003erequest\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eAdd size limitation when decode JWS/JWE to prevent DoS.\u003c/li\u003e\n\u003cli\u003eAdd size limitation for \u003ccode\u003eDEF\u003c/code\u003e JWE zip algorithm.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 1.6.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/authlib/authlib/commit/9266eaa2227ad7e21dc731b2a4a01909aabd934b\"\u003e\u003ccode\u003e9266eaa\u003c/code\u003e\u003c/a\u003e chore: release 1.6.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b\"\u003e\u003ccode\u003eb9bb2b2\u003c/code\u003e\u003c/a\u003e fix(oidc): fail close at validating c_h...\n\n_Description has been truncated_","html_url":"https://github.com/OzCog/co9priml/pull/46","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OzCog%2Fco9priml/issues/46","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/46/packages"}}]}