Bump keras from 3.14.1 to 3.15.1

[dependabot]

Bumps keras from 3.14.1 to 3.15.1.

Release notes

Sourced from keras's releases.

Keras 3.15.1

Release Notes

Keras 3.15.1 is a patch release containing important security hardening, bug fixes, and Python 3.14 compatibility improvements.

Security Fixes

• Restrict unpickling when loading IMDB and Reuters datasets — Prevents insecure deserialization (CWE-502) by replacing bare np.load(allow_pickle=True) with a restricted unpickler that only permits numpy array reconstruction. (#23047) by @​LinZiyuu
• Verify all intermediary H5 groups when navigating H5 files — Manually resolves nested H5 group paths to verify group types at each step, preventing potential path traversal issues. (#23168) by @​hertschuh
• Reject decompression-bomb members on the .keras asset extraction path — Adds per-member decompression-ratio checks before extracting .keras archives to disk, preventing disk-exhaustion attacks via crafted archives. (#23101) by @​LinZiyuu
• Restrict unpickling when loading CIFAR datasets — Replaces bare cPickle.load in CIFAR-10/100 batch loading with the numpy-only RestrictedUnpickler, blocking arbitrary code execution via pickle gadgets. (#23252) by @​SABITHSAHEB

Bug Fixes

• Refactor _load_state to capture weight store while preserving Keras test passing — Improves model loading efficiency by capturing the weight store into a local variable, and enhances nested container detection in legacy files with isolated failure tracking. (#23226) by @​buildwithsuhana
• Fix TraceContext error for NNX backend — Fixes TraceContext errors when using JAX NNX backend with models like T5 that lack a build method. Skips trace-level checks during symbolic shape inference and handles Flax 0.12 API changes. Fixes #23289. (#23326) by @​divyashreepathihalli

Compatibility

• Fixes for Python 3.14 — Resolves NotImplementedError boolean coercion changes in Python 3.14 and fixes dimension filtering in shape utilities. (#23259) by @​hertschuh

---

Contributors

Thank you to all the contributors who made this release possible! 🎉

• @​LinZiyuu — Security hardening for IMDB, Reuters, and .keras asset extraction (#23047, #23101)
• @​hertschuh — H5 group verification, Python 3.14 compatibility (#23168, #23259)
• @​buildwithsuhana — Model loading refactor (#23226)
• @​SABITHSAHEB — CIFAR dataset pickle restriction (#23252)
• @​divyashreepathihalli — NNX backend TraceContext fix (#23326)

---

Full Changelog: keras-team/keras@v3.15.0...v3.15.1

v3.15.0

Highlights

• Keras-to-Torch Export: New export_torch enables exporting Keras models to native PyTorch nn.Module format, along with LiteRT (TFLite) export support for the PyTorch backend.
• Sliding Window Attention: Added sliding_window parameter to MultiHeadAttention and GroupedQueryAttention for efficient long-context attention.
• Flash / Fused SDPA: Causal-only MHA/GQA now automatically dispatches to Flash Attention (cuDNN SDPA), and the manual attention path correctly applies causal masking.
• Multi-Optimizer Training: New MultiOptimizer supports assigning different optimizers to sub-networks.
• New Math Operations: Added unique, pinv, matrix_rank, fabs, fmax, fmin, erfc, dsplit, percentile, nanpercentile, sobel_edges, and ssim (structural similarity) to keras.ops.
• Security Hardening: Comprehensive hardening of model reloading against HDF5 exploits, tar/zip traversal attacks, insecure deserialization.

---

New Features and Operations

... (truncated)

Commits

• 250b421 Bump version to 3.15.1 (#23350)
• 9d1bbf9 Add erfinv tests and TensorFlow CPU fallback for half precision (#23086)
• b34af30 Fix pad_sequences string dtype check (np.bytes_ instead of duplicate np.str_)...
• f512e93 Fix wrong parameter names in ops.select and ops.argpartition docstrings (#23091)
• 915ec7e Support native Grouped-Query Attention (GQA) Key/Value head broadcast. (#23081)
• 49d668d Add JAX multi-process distribution tests (#23105)
• b49fde7 Refactor rematerialization logic into Operation and support more modes (#23107)
• e0bfa2d Add to the list of APIs that should not be part of a reloaded model. (#23115)
• 69d7fd6 Suppress spurious 'Skipping nested container' warning on freshly-saved files ...
• 048d142 Delete temp files after loading model from remote path. (#23113)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)