Skip to content

Update dependency openai to v7 - #74

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/openai-7.x
Open

Update dependency openai to v7#74
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/openai-7.x

Conversation

@renovate

@renovate renovate Bot commented Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
openai ^4.91.1 → ^7.0.0 age confidence

Release Notes

openai/openai-node (openai)

v7.8.0

Compare Source

Features
  • api: add compute_units to Responses and Chat Completions usage (#​2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#​2504) (9b2f089)
Bug Fixes

v7.7.0

Compare Source

Features
Bug Fixes
  • streaming: honor cancellation while decoding SSE responses (#​2487) (ababe12)

v7.6.0

Compare Source

Features
Bug Fixes
  • [responses] Avoid quadratic comparisons when accumulating long text (#​2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#​2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#​2482) (dafcac4)
  • auth: honor an explicit zero GCP metadata timeout (#​2481) (7a9dec8)
  • auth: sanitize malformed Azure IMDS token responses (#​2427) (bbfb792)
  • auth: sanitize malformed workload OAuth token responses (#​2468) (cd5b2d8)
  • avoid double-counting logprobs in streamed chat completions (#​2444) (ddf9922)
  • bedrock: honor cancellation during bearer credential resolution (#​2478) (2dac2f4)
  • drain tee stream queues in linear time (#​2379) (1f3ce07)
  • polling: honor cancellation during polling delays (#​2477) (520d604)
  • preserve large streaming responses (#​2433) (4e588c2)
  • preserve multipart upload array order (#​2380) (f1a2b61)
  • publish Castiron checks for behind-main pull requests (#​2486) (662bb37)
  • publish Castiron checks for external-fork pull requests (#​2464) (a90581e)
  • security: abort streaming examples when clients disconnect (#​2426) (b32a25b)
  • security: authenticate Cloudflare tests and restrict streaming proxies (#​2413) (9286fdb)
  • security: authenticate Vercel ecosystem APIs and clean up uploaded files (#​2412) (d58608a)
  • security: bound SDK event streams and validate streamed item identities (#​2415) (7df29a9)
  • security: bound SSE frames and NDJSON lines before buffering (#​2411) (0e250a4)
  • security: close rejected Azure managed-identity response streams (#​2416) (387bbc8)
  • security: harden Bedrock regions, query merges, and upload errors (#​2410) (ce45d0d)
  • security: harden Realtime WebSocket origins, worker guards, and Azure credentials (#​2414) (5533f73)
  • security: preserve chat structured response-format integrity (#​2402) (e69df93)
  • security: prevent AssistantStream deltas leaking sensitive data (#​2392) (17cf54c)
  • security: prevent streaming upload filename path disclosure (#​2386) (c88a024)
  • security: prevent structured-output format downgrade (#​2394) (dd945e6)
  • security: redact built-in structured JSON parse errors (#​2418) (a0d68cc)
  • security: redact chat completion finalization snapshots (#​2400) (fb5d8e7)
  • security: redact GCP metadata authentication error bodies (#​2399) (322840c)
  • security: redact invalid Bedrock bearer credentials (#​2419) (39c06d1)
  • security: redact invalid workload identity access tokens (#​2425) (0d28da3)
  • security: redact malformed NDJSON stream diagnostics (#​2420) (dcc705c)
  • security: redact malformed Realtime WebSocket error causes (#​2408) (e7a1a44)
  • security: redact malformed SSE diagnostic payloads (#​2403) (272a2cc)
  • security: redact sensitive assistant delta diagnostics (#​2406) (b130b83)
  • security: redact unsupported Responses stream event payloads (#​2395) (32b2953)
  • security: reject malformed Realtime WebSocket event frames (#​2391) (e6e11b0)
  • security: require an exact SSE completion sentinel (#​2422) (a905bfb)
  • security: require OIDC for npm publishing (#​2404) (342764b)
  • security: respect configured logger for Assistants stream errors (#​2390) (8ba3009)
  • security: restrict live CI credentials to protected main (#​2405) (3554cdc)
  • security: scope Cloudflare ecosystem API key files (#​2398) (4f4b45d)
  • security: secure Next.js Edge streaming example requests (#​2424) (861caed)
  • security: stop delayed and additional tool callbacks after cancellation (#​2430) (c168599)
  • security: stop retaining sensitive assistant stream events (#​2407) (dfec129)
  • settle concurrent stream event waiters in linear time (#​2387) (a88c2ca)
  • settle WebSocket event waiters in linear time (#​2389) (489dc72)
  • standard-schema: preserve validator bindings across helpers (#​2483) (e4afdb7)
  • streaming: reject named SSE provider error events (#​2409) (b7a0bd6)
  • tests: make credential-lifecycle held-inode scenarios portable to macOS (#​2480) (60f5267)
  • uploads: preserve Blob files and multipart media types (#​2467) (d497fb3)
  • webhooks: bound signature verification work (#​2475) (05cf7ab)
  • ws: block custom credential headers on redirects (#​2429) (d2ab6e7)
  • zod: support only provably JSON-native structured outputs (#​2396) (c3d68e4)
Chores
Documentation
  • encode recurring SDK review feedback in agent guidance (#​2378) (e552523)
  • security: add secure contributor and agent guidance (#​2382) (459d009)
Refactors

v7.5.0

Compare Source

Features
  • add Bedrock Runtime endpoint support (SDK-290) (#​2348) (4a199af)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (#​2278) (9a38e63)
  • api: Add ServiceTier and ImageDetail types (#​2364) (602d481)
  • api: add WebSocket stream IDs (#​2314) (156a8db)
  • api: add workload identity access token issued event (#​2307) (322a5b1)
  • api: deprecate Sora video APIs (#​2313) (4424b40)
  • api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#​2332) (a3deafb)
Bug Fixes
  • api: clarify audio upload metadata requirements (#​2279) (34ecf3f)
  • audio: prevent microphone leaks and playback pipe deadlocks (#​2339) (1c692fe)
  • audio: reject ffplay spawn errors (#​2012) (6d42d4d)
  • auth: reject redirects during workload identity token exchange (#​2321) (240385e)
  • auth: reject unsafe workload-identity token expirations (#​2345) (1f0349d)
  • avoid TypeError in toFile for Responses without a URL (#​2311) (3313f54)
  • await webhook verification in README examples (#​2302) (0fe7ad0)
  • azure: honor explicit browser denial for Entra token providers (#​2328) (9d47510)
  • azure: preserve model-to-deployment mapping for images.edit (#​1918) (6c207c6)
  • azure: prevent API-key disclosure across HTTP redirects (#​2320) (f36c418)
  • azure: prevent deployment path traversal (#​2337) (a9d9d41)
  • bedrock: safely sign inherited query parameter names (#​2375) (3f8d5cc)
  • chat: support custom tool calls in parser and ChatCompletionStream (#​2023) (6fa9152)
  • client: handle empty JSON response body without content-length (#​1998) (b6447e9)
  • configure Bash for pnpm scripts on Windows (#​2330) (f5a0ad1)
  • deps: remediate Dependabot and fixture vulnerabilities (#​2282) (783da8f)
  • embedding: response type for base64 encoding format (#​1554) (ef69801)
  • export AzureClientOptions (#​1760) (511bf6d), closes #​1735
  • export workload identity helpers from openai/auth (#​2344) (af8f14f)
  • fail ecosystem CI when live credentials are missing (#​2349) (a47dc75)
  • format: restore formatting for generated SDK files (#​2089) (6d69d4b)
  • harden runTools against inherited function names (#​2333) (f4496d1)
  • honor defaultHeaders null for helper method header (#​1857) (8eab09a)
  • include items for strict Zod v3 any arrays (#​2357) (4c32089)
  • isolate Vercel ecosystem tests per request (#​2359) (2831290)
  • keep streamed Responses output text linear and canonical (#​2354) (6827a40)
  • lint: recognize Castiron-generated headers (#​2124) (cf6237f)
  • lint: restore generated SDK lint rules (#​2126) (6b8162c)
  • parse empty chat content when present (#​2331) (53dd723)
  • parser: recognize raw json_schema response format in auto-parsing checks (#​2015) (fbd2541)
  • pass file batch helper options through (#​1855) (05ce028)
  • preserve File-like metadata in toFile (#​1883) (ba1a781)
  • preserve skill upload paths without buffering native files (#​2303) (30b9c41)
  • preserve Skills upload file paths (#​1856) (e75de97)
  • preserve zero retry-after-ms precedence (#​2329) (b44644e)
  • prevent prototype event names from crashing SDK streams (#​2315) (c014250)
  • prevent prototype manipulation in strict Structured Outputs schemas (#​2341) (838de7e)
  • prevent prototype pollution in assistant stream deltas (#​2280) (928fa2b)
  • realtime: allow overriding WebSocket connection URLs (#​2308) (7407413), closes #​2305
  • realtime: enforce Azure browser denial and redact all credentials (#​2340) (a77861d)
  • realtime: prevent Azure API-key disclosure across WebSocket redirects (#​2325) (d5a1a1e)
  • realtime: prevent remote error payloads from crashing clients (#​2350) (896f021)
  • realtime: remove immutable model updates from public and Azure examples (#​2327) (08bd80a)
  • reject unsupported proto Zod v3 object properties (#​2352) (46a8ca0)
  • remove vulnerable extract-zip from browser tests (#​2312) (567ad4f)
  • responses: reject with OpenAIError when the stream emits an error event (#​2021) (a54014d)
  • responses: validate streaming event indices before array access (#​2323) (13eaf1d)
  • security: bound untrusted AssistantStream delta array indices (#​2326) (afdf5ef)
  • security: contain Bedrock credentials to the configured endpoint origin (#​2342) (23f0575)
  • security: keep browser ecosystem API keys out of navigation URLs (#​2353) (1029e82)
  • security: prevent Bedrock bearer credential disclosure across redirects (#​2377) (bfcccad)
  • security: prevent global Array.prototype pollution in chat completion streams (#​2318) (486e191)
  • security: prevent multipart upload content-type header injection (#​2322) (1c0b9ca)
  • security: prevent process-wide prototype pollution via assistant stream snapshot IDs (#​2316) (21a0653)
  • security: prevent prototype manipulation in streamed chat snapshots (#​2335) (e81d766)
  • security: prevent streaming upload filename/header injection (#​2363) (4ba4084)
  • streaming: eliminate quadratic EventStream FIFO draining (#​2356) (57521a1)
  • streaming: eliminate quadratic SSE buffer copying (#​2324) (ebdb296)
  • streaming: finish SSE streams immediately after [DONE] (#​2317) (7722171)
  • streaming: handle mixed SSE line endings (#​2309) (24d5ada)
  • streaming: isolate AssistantStream message and tool-call lifecycles (#​2334) (178e85f)
  • streaming: make fragmented line decoding amortized linear (#​2336) (f32e2df)
  • streaming: surface mid-stream errors when iterating buffered streams (#​2047) (8cc6cac)
  • ws: prevent duplicate listener leaks in Node and browser adapters (#​2347) (a032b85)
  • zod: preserve literal payloads when escaping schema references (#​2351) (8f189f4)
  • zod: preserve null literals in Zod v3 JSON schemas (#​2355) (ed5c5e6)
  • zod: prevent generated definition name collisions (#​2346) (0844573)
  • zod: reject non-object Zod v3 strict schema roots (#​2358) (cc7dbfa)
Chores

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Jul 31, 2026
@vercel

vercel Bot commented Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
connected-agent Ready Ready Preview Aug 29, 2026 11:32pm

@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from dbc6af4 to c4b22d8 Compare July 31, 2026 23:56
@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from c4b22d8 to 997c963 Compare August 4, 2026 04:07
@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from 997c963 to 24f7aa1 Compare August 8, 2026 06:32
@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from 24f7aa1 to 168fece Compare August 20, 2026 23:27
@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from 168fece to edd87c8 Compare August 29, 2026 23:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants