Infinity v1 maintenance release with hardened fetching of third-party image and audio URLs.
- Block internal and other configured media destinations, validating hostnames, IP addresses, DNS results, and redirect destinations (#713, #714).
- Limit remote media downloads to 128 MiB per item by default, checking declared size and streamed bytes (#715). Configure the byte limit with
INFINITY_MEDIA_MAX_DOWNLOAD_BYTES. - Configure blocked destinations with
INFINITY_MEDIA_URL_BLACKLIST(semicolon-separated hostnames, host globs, and IP addresses/CIDRs). Setting it replaces the defaults; an empty value disables matching. HTTP-compressed media responses are rejected, and ambient proxies/netrc are not used for these downloads. - Fix the resolver type annotation and constrain Click to the range supported by Typer 0.12 so fresh server installations start correctly.
- Also includes Neuron SDK 2.28+/Trainium trn2 fixes, TPU support, Hugging Face Hub compatibility changes, and ONNX selection improvements merged since 0.0.77.
Install:
pip install 'infinity_emb[all]==0.0.78'The Python server and generated client packages are versioned 0.0.78. PyPI and Docker images are published asynchronously by the release workflows.