You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 07:32:23 UTC
[PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
dependabot[bot] opened a new pull request, #26393:
URL: https://github.com/apache/camel/pull/26393
Bumps `djl-version` from 0.36.0 to 0.38.0.
Updates `ai.djl:api` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl:api's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.timeseries:timeseries` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.timeseries:timeseries's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl:model-zoo` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl:model-zoo's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.mxnet:mxnet-model-zoo` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.mxnet:mxnet-model-zoo's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.mxnet:mxnet-engine` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.mxnet:mxnet-engine's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.pytorch:pytorch-model-zoo` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.pytorch:pytorch-model-zoo's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.pytorch:pytorch-engine` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.pytorch:pytorch-engine's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.tensorflow:tensorflow-model-zoo` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.tensorflow:tensorflow-model-zoo's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.tensorflow:tensorflow-engine` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.tensorflow:tensorflow-engine's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl.tensorflow:tensorflow-api` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl.tensorflow:tensorflow-api's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.com/ethnzhng"><code>@ethnzhng</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3876">deepjavalibrary/djl#3876</a></li>
<li>Increase build version to 0.38.0 by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3879">deepjavalibrary/djl#3879</a></li>
<li>[ci] Upgrade actions version by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3880">deepjavalibrary/djl#3880</a></li>
<li>[ci] Fix native library build pipeline by <a href="https://github.com/xyang16"><code>@xyang16</code></a> in <a href="https://redirect.github.com/deepjavalibrary/djl/pull/3881">deepjavalibrary/djl#3881</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0">https://github.com/deepjavalibrary/djl/compare/v0.37.0...v0.38.0</a></p>
<h2>DJL v0.37.0 Release</h2>
<p>This is the v0.37.0 release of DJL.</p>
<h2>Changes</h2>
<ul>
<li>Bundled <code>.java</code> compilation and remote URL loading are now configurable, with tightened defaults (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3875">#3875</a>)</li>
<li>Bumped log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3877">#3877</a>)</li>
<li>onnxruntime: allow sub-managers after <code>NDManager.cap()</code> (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3870">#3870</a>)</li>
<li>Docs: fixed a typo (<a href="https://redirect.github.com/deepjavalibrary/djl/pull/3874">#3874</a>)</li>
</ul>
<h2>Behavior changes</h2>
<p>Two loading behaviors changed their defaults in <a href="https://redirect.github.com/deepjavalibrary/djl/issues/3875">#3875</a>. Both previous behaviors remain available, but from this release each has to be enabled explicitly:</p>
<table>
<thead>
<tr>
<th>Behavior</th>
<th>Default</th>
<th>To restore</th>
</tr>
</thead>
<tbody>
<tr>
<td>Compile bundled <code>.java</code> sources at model load</td>
<td>off</td>
<td><code>DJL_COMPILE_JAVA=true</code> or <code>-Dai.djl.compile_java=true</code></td>
</tr>
<tr>
<td>Unrestricted remote URL loading</td>
<td>off</td>
<td><code>DJL_ALLOW_INSECURE_URL=true</code> or <code>-Dai.djl.allow_insecure_url=true</code></td>
</tr>
</tbody>
</table>
<p><code>Utils.openUrl</code> now limits remote fetches to public <code>http(s)</code> destinations, resolves redirects explicitly with a bounded hop count, and allows <code>file:</code> and <code>jar:</code> only where they denote a local read. Loading from local directories, <code>s3://</code>, <code>gs://</code>, public <code>http(s)</code> archives, the <code>djl://</code> model zoo and Hugging Face is unchanged. See the PR description for the full list and the flags.</p>
<h2>Known issues / limitations</h2>
<ul>
<li>A model whose translator is available <em>only</em> as a raw <code>.java</code> file under <code>lib/classes/</code> will not have it compiled by default; an error-level log names the flag. Models shipping a precompiled <code>.class</code> or <code>.jar</code>, or supplying a translator programmatically, are unaffected.</li>
<li>Loading a model over <code>http(s)</code> from a host that resolves to a private address now fails by default. Set the flag above if you serve models from an internal mirror.</li>
</ul>
<h2>Contributors</h2>
<p>Thank you to the following community members for contributing to this release:</p>
<p>Rohit Kumar Srivastava, Vaibhav Srivastava, dev_Hakaze</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/deepjavalibrary/djl/commit/41ff6b281b4571218c0578898282e3d546dd3fdb"><code>41ff6b2</code></a> Remove -SNAPSHOT for release v0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/502671ed1fde218fb3f7e25fe2bcc55586d905ef"><code>502671e</code></a> Increase DJL version to 0.38.0</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/c8387569834f7974819f95625cc12d4b3d198ec2"><code>c838756</code></a> [ci] Fix native library build pipeline (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3881">#3881</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/ffd4719af3b99cf80462874137f0f88ed5906a22"><code>ffd4719</code></a> [ci] Upgrade actions version (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3880">#3880</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/46787b39b2f96b9f33a80aa5bf65d55912d1cd6f"><code>46787b3</code></a> Increase build version to 0.38.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3879">#3879</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/dee55bfadb57bd5c6c23189711233e9bdc5111f4"><code>dee55bf</code></a> Use 64-bit arithmetic for tensor buffer size calculations (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3876">#3876</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1cb7449ac8ea04f2b17fe562610982413dfab2cf"><code>1cb7449</code></a> [build] Bump log4j to 2.26.0 (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3877">#3877</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/02b4111aa51d385958c7211055a12f1a2f546c91"><code>02b4111</code></a> [api] Make bundled Java compilation opt-in and restrict remote URL loading (#...</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/e263d0ddc8b0aaaae46673fdaf0a9b6e6b192b22"><code>e263d0d</code></a> [docs] fix typo benifit -> benefit (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3874">#3874</a>)</li>
<li><a href="https://github.com/deepjavalibrary/djl/commit/1d6e0580e4112b711f2edb2bc2305b0eeb6607f5"><code>1d6e058</code></a> fix(onnxruntime): allow sub-managers after NDManager.cap() (<a href="https://redirect.github.com/deepjavalibrary/djl/issues/3870">#3870</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/deepjavalibrary/djl/compare/v0.36.0...v0.38.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ai.djl:basicdataset` from 0.36.0 to 0.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/deepjavalibrary/djl/releases">ai.djl:basicdataset's releases</a>.</em></p>
<blockquote>
<h2>DJL v0.38.0 Release</h2>
<h2>What's Changed</h2>
<ul>
<li>Use 64-bit arithmetic for tensor buffer size calculations by <a href="https://github.c...
_Description has been truncated_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5682259433
@dependabot rebase
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5694352565
the difference seems to be in the values of the boundingbox rect:
0.37.0
```
{"className": "person", "probability": 0.99936, "boundingBox": {"rect":[90.91626739501953,241.90658569335938,250.81210327148438,490.4132385253906]}}
{"className": "person", "probability": 0.99891, "boundingBox": {"rect":[221.46133422851562,26.438583374023438,326.4205627441406,251.0301055908203]}}
{"className": "person", "probability": 0.80167, "boundingBox": {"rect":[295.8079528808594,35.2025146484375,407.6651916503906,242.73046875]}}
```
0.36.0
```
{"className": "person", "probability": 0.99936, "boundingBox": {"rect":[0.17757083475589752,0.47247380018234253,0.4898673892021179,0.9578383564949036]}}
{"className": "person", "probability": 0.99891, "boundingBox": {"rect":[0.4325416684150696,0.051637858152389526,0.6375401616096497,0.4902931749820709]}}
{"className": "person", "probability": 0.80167, "boundingBox": {"rect":[0.5777499079704285,0.06875491142272949,0.7962210774421692,0.47408294677734375]}}
```
the convertBodyTo Image is not working with these differences
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5660838695
<!-- ci-tested-modules -->
:test_tube: **CI tested the following changed modules:**
- `parent`
:white_check_mark: **POM dependency changes: targeted tests included**
Changed properties: djl-version
<details><summary>Modules affected by dependency changes (2)</summary>
- `:camel-djl`
- `:camel-huggingface`
</details>
---
<details><summary>:microscope: Scalpel shadow comparison — Scalpel: 10 tested, 27 compile-only — current: 0 all tested</summary>
[Maveniverse Scalpel](https://github.com/maveniverse/scalpel) detected **37 affected modules** (current approach: 0).
<details><summary>:warning: Modules only in Scalpel (37)</summary>
- `apache-camel`
- `camel-allcomponents`
- `camel-catalog`
- `camel-catalog-console`
- `camel-catalog-maven`
- `camel-catalog-suggest`
- `camel-componentdsl`
- `camel-djl`
- `camel-endpointdsl`
- `camel-endpointdsl-support`
- `camel-huggingface`
- `camel-itest`
- `camel-jbang-core`
- `camel-jbang-it`
- `camel-jbang-main`
- `camel-jbang-mcp`
- `camel-jbang-plugin-edit`
- `camel-jbang-plugin-generate`
- `camel-jbang-plugin-kubernetes`
- `camel-jbang-plugin-mcp`
- `camel-jbang-plugin-route-parser`
- `camel-jbang-plugin-test`
- `camel-jbang-plugin-tui`
- `camel-jbang-plugin-validate`
- `camel-kamelet-main`
- `camel-launcher`
- `camel-launcher-container`
- `camel-report-maven-plugin`
- `camel-route-parser`
- `camel-yaml-dsl`
- `camel-yaml-dsl-deserializers`
- `camel-yaml-dsl-maven-plugin`
- `camel-yaml-dsl-validator`
- `camel-yaml-dsl-validator-maven-plugin`
- `coverage`
- `docs`
- `dummy-component`
</details>
Changed properties: djl-version
**Skip-tests mode would test 10 modules** (2 direct + 8 downstream), **skip tests for 27** (generated code, meta-modules)
<details><summary>Modules Scalpel would test (10)</summary>
- `camel-djl`
- `camel-huggingface`
- `camel-jbang-mcp`
- `camel-jbang-plugin-mcp`
- `camel-jbang-plugin-route-parser`
- `camel-jbang-plugin-tui`
- `camel-jbang-plugin-validate`
- `camel-launcher-container`
- `camel-yaml-dsl-validator`
- `camel-yaml-dsl-validator-maven-plugin`
</details>
<details><summary>Modules with tests skipped (27)</summary>
- `apache-camel`
- `camel-allcomponents`
- `camel-catalog`
- `camel-catalog-console`
- `camel-catalog-maven`
- `camel-catalog-suggest`
- `camel-componentdsl`
- `camel-endpointdsl`
- `camel-endpointdsl-support`
- `camel-itest`
- `camel-jbang-core`
- `camel-jbang-it`
- `camel-jbang-main`
- `camel-jbang-plugin-edit`
- `camel-jbang-plugin-generate`
- `camel-jbang-plugin-kubernetes`
- `camel-jbang-plugin-test`
- `camel-kamelet-main`
- `camel-launcher`
- `camel-report-maven-plugin`
- `camel-route-parser`
- `camel-yaml-dsl`
- `camel-yaml-dsl-deserializers`
- `camel-yaml-dsl-maven-plugin`
- `coverage`
- `docs`
- `dummy-component`
</details>
> :information_source: Shadow mode — Scalpel observes but does not affect test execution. [Learn more](https://github.com/maveniverse/scalpel)
</details>
<details><summary>All tested modules (38 modules, 14.8s total)</summary>
**Total reactor time:** 14.8s
| Module | Duration | Status |
| --- | --- | --- |
| Camel :: AI :: Hugging Face | 13.8s | SUCCESS |
| Camel :: Parent | 1.0s | SUCCESS |
| Camel :: AI :: Deep Java Library | n/a | |
| Camel :: All Components Sync point | n/a | |
| Camel :: Assembly | n/a | |
| Camel :: Catalog :: Camel Catalog | n/a | |
| Camel :: Catalog :: Camel Report Maven Plugin | n/a | |
| Camel :: Catalog :: Camel Route Parser | n/a | |
| Camel :: Catalog :: Console | n/a | |
| Camel :: Catalog :: Dummy Component | n/a | |
| Camel :: Catalog :: Maven | n/a | |
| Camel :: Catalog :: Suggest (deprecated) | n/a | |
| Camel :: Component DSL | n/a | |
| Camel :: Coverage | n/a | |
| Camel :: Docs | n/a | |
| Camel :: Endpoint DSL | n/a | |
| Camel :: Endpoint DSL :: Support | n/a | |
| Camel :: Integration Tests | n/a | |
| Camel :: JBang :: Core | n/a | |
| Camel :: JBang :: Integration tests | n/a | |
| Camel :: JBang :: MCP | n/a | |
| Camel :: JBang :: Main | n/a | |
| Camel :: JBang :: Plugin :: Edit | n/a | |
| Camel :: JBang :: Plugin :: Generate | n/a | |
| Camel :: JBang :: Plugin :: Kubernetes | n/a | |
| Camel :: JBang :: Plugin :: MCP | n/a | |
| Camel :: JBang :: Plugin :: Route Parser | n/a | |
| Camel :: JBang :: Plugin :: TUI | n/a | |
| Camel :: JBang :: Plugin :: Testing | n/a | |
| Camel :: JBang :: Plugin :: Validate | n/a | |
| Camel :: Kamelet Main | n/a | |
| Camel :: Launcher | n/a | |
| Camel :: Launcher :: Container | n/a | |
| Camel :: YAML DSL | n/a | |
| Camel :: YAML DSL :: Deserializers | n/a | |
| Camel :: YAML DSL :: Maven Plugins | n/a | |
| Camel :: YAML DSL :: Validator | n/a | |
| Camel :: YAML DSL :: Validator Maven Plugin | n/a | |
**Top 20 slowest modules:**
- `Camel :: AI :: Hugging Face` (13.8s)
- `Camel :: Parent` (1.0s)
</details>
---
:gear: [View full build and test results](https://github.com/apache/camel/actions/runs/34818325064)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5694082994
test works with 0.36.0 (main) it fails with 0.37.0 and 0.38.0, even with `-Dai.djl.allow_insecure_url=true`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5660613604
:star2: Thank you for your contribution to the Apache Camel project! :star2:
:robot: CI automation will test this PR automatically.
:camel: Apache Camel Committers, please review the following items:
* First-time contributors **require MANUAL approval** for the GitHub Actions to run
* You can use the command `/component-test (camel-)component-name1 (camel-)component-name2..` to request a test from the test bot although they are normally detected and executed by CI.
* You can label PRs using `skip-tests` and `test-dependents` to fine-tune the checks executed by this PR.
* Build and test logs are available in the summary page. **Only** [Apache Camel committers](https://camel.apache.org/community/team/#committers) have access to the summary.
:warning: Be careful when sharing logs. Review their contents before sharing them publicly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "oscerd (via GitHub)" <gi...@apache.org>.
oscerd merged PR #26393:
URL: https://github.com/apache/camel/pull/26393
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5681116334
@dependabot rebase
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5661389750
```
[camel-djl] [ERROR] Tests run: 1, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 123.5 s <<< FAILURE! -- in org.apache.camel.component.djl.CvPoseEstimationTest
[camel-djl] [ERROR] org.apache.camel.component.djl.CvPoseEstimationTest.testDJL -- Time elapsed: 123.5 s <<< FAILURE!
java.lang.AssertionError: mock://result Received message count 0, expected at least 1
at org.apache.camel.component.mock.MockEndpoint.fail(MockEndpoint.java:2075)
at org.apache.camel.component.mock.MockEndpoint.assertTrue(MockEndpoint.java:2046)
at org.apache.camel.component.mock.MockEndpoint.doAssertIsSatisfied(MockEndpoint.java:510)
at org.apache.camel.component.mock.MockEndpoint.assertIsSatisfied(MockEndpoint.java:476)
at org.apache.camel.component.mock.MockEndpoint.assertIsSatisfied(MockEndpoint.java:466)
at org.apache.camel.component.djl.DJLTestSupport.assertMockSatisfied(DJLTestSupport.java:45)
at org.apache.camel.component.djl.CvPoseEstimationTest.testDJL(CvPoseEstimationTest.java:37)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5681491190
<!-- regen-patch -->
### :warning: Generated files are out of date
The [CI build](https://github.com/apache/camel/actions/runs/34976928294) regenerated files that are not committed on this PR.
If *Allow edits from maintainers* is enabled, a maintainer bot will automatically
push a "Regen" commit to this branch shortly.
Otherwise, you can apply the patch manually — the missing changes are available
as the `regen-patch` artifact of that run:
```bash
gh pr checkout 26393 --repo apache/camel
gh run download 34976928294 --repo apache/camel -n regen-patch
git apply --index regen.patch && rm regen.patch pr-number
git commit -m "Regen" && git push
```
Alternatively, run `./etc/scripts/regen.sh` locally and commit the resulting changes.
If the patch does not apply cleanly, update the branch from the base branch first —
the patch was generated against the merge with the base branch.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): Bump djl-version from 0.36.0 to 0.38.0 [camel]
Posted by "apupier (via GitHub)" <gi...@apache.org>.
apupier commented on PR #26393:
URL: https://github.com/apache/camel/pull/26393#issuecomment-5681845220
will require rebase after https://github.com/apache/camel/pull/26475 is merged
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org