Keras v3.12.2

Saving & Reloading

• Harden path and link resolution when extracting files from archives (#22194 & #22839)
  • Fixed based folder used when validating files extracted from ZIP and TAR archives.
  • Fixed link resolution bug when validating links extracted from TAR archives.
  • Fixed path confusion bug when validating files extracted from ZIP and TAR archives (including .keras files).
  • Added path validation when extracting assets from Orbax checkpoints.
• Harden H5 validation code and apply it to legacy .h5 files (#22801)
  • Disallow external links and virtual datasets in H5 files.
  • Also apply all the validation to the legacy .h5 file extraction.
• Improve validation and error reporting in functional model deserialization (#22800)
  • Detect loops in the graph when deserializing a functional model.
  • Improve error reporting for missing nodes in the graph.

Other Fixes

• Fix lazy module import for h5py
  • Fixed lazy module import handling for h5py to ensure correct and safe validation behavior when the package is lazy-loaded.
• Remove deprecated openvino.runtime import (#21826)

What's Changed

• Patch fix 3.12.2 by @sachinprasadhs in https://github.com/keras-team/keras/pull/22850

Full Changelog: https://github.com/keras-team/keras/compare/v3.12.1...v3.12.2