Update dependency keras to v3.15.1

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
keras	==3.15.0 → ==3.15.1

---

Release Notes

keras-team/keras (keras)

v3.15.1: Keras 3.15.1

Compare Source

Release Notes

Keras 3.15.1 is a patch release containing important security hardening, bug fixes, and Python 3.14 compatibility improvements.

Security Fixes

• Restrict unpickling when loading IMDB and Reuters datasets — Prevents insecure deserialization (CWE-502) by replacing bare np.load(allow_pickle=True) with a restricted unpickler that only permits numpy array reconstruction. (#​23047) by @​LinZiyuu
• Verify all intermediary H5 groups when navigating H5 files — Manually resolves nested H5 group paths to verify group types at each step, preventing potential path traversal issues. (#​23168) by @​hertschuh
• Reject decompression-bomb members on the .keras asset extraction path — Adds per-member decompression-ratio checks before extracting .keras archives to disk, preventing disk-exhaustion attacks via crafted archives. (#​23101) by @​LinZiyuu
• Restrict unpickling when loading CIFAR datasets — Replaces bare cPickle.load in CIFAR-10/100 batch loading with the numpy-only RestrictedUnpickler, blocking arbitrary code execution via pickle gadgets. (#​23252) by @​SABITHSAHEB

Bug Fixes

• Refactor _load_state to capture weight store while preserving Keras test passing — Improves model loading efficiency by capturing the weight store into a local variable, and enhances nested container detection in legacy files with isolated failure tracking. (#​23226) by @​buildwithsuhana
• Fix TraceContext error for NNX backend — Fixes TraceContext errors when using JAX NNX backend with models like T5 that lack a build method. Skips trace-level checks during symbolic shape inference and handles Flax 0.12 API changes. Fixes #​23289. (#​23326) by @​divyashreepathihalli

Compatibility

• Fixes for Python 3.14 — Resolves NotImplementedError boolean coercion changes in Python 3.14 and fixes dimension filtering in shape utilities. (#​23259) by @​hertschuh

---

Contributors

Thank you to all the contributors who made this release possible! 🎉

• @​LinZiyuu — Security hardening for IMDB, Reuters, and .keras asset extraction (#​23047, #​23101)
• @​hertschuh — H5 group verification, Python 3.14 compatibility (#​23168, #​23259)
• @​buildwithsuhana — Model loading refactor (#​23226)
• @​SABITHSAHEB — CIFAR dataset pickle restriction (#​23252)
• @​divyashreepathihalli — NNX backend TraceContext fix (#​23326)

---

Full Changelog: keras-team/keras@v3.15.0...v3.15.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.