Skip to content

Update dependency openai to v7 - #27

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/openai-7.x
Open

Update dependency openai to v7#27
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/openai-7.x

Conversation

@renovate

@renovate renovate Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
openai 4.103.0 → 7.5.0 age confidence

Release Notes

openai/openai-node (openai)

v7.5.0

Compare Source

Features
  • add Bedrock Runtime endpoint support (SDK-290) (#​2348) (4a199af)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (#​2278) (9a38e63)
  • api: Add ServiceTier and ImageDetail types (#​2364) (602d481)
  • api: add WebSocket stream IDs (#​2314) (156a8db)
  • api: add workload identity access token issued event (#​2307) (322a5b1)
  • api: deprecate Sora video APIs (#​2313) (4424b40)
  • api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#​2332) (a3deafb)
Bug Fixes
  • api: clarify audio upload metadata requirements (#​2279) (34ecf3f)
  • audio: prevent microphone leaks and playback pipe deadlocks (#​2339) (1c692fe)
  • audio: reject ffplay spawn errors (#​2012) (6d42d4d)
  • auth: reject redirects during workload identity token exchange (#​2321) (240385e)
  • auth: reject unsafe workload-identity token expirations (#​2345) (1f0349d)
  • avoid TypeError in toFile for Responses without a URL (#​2311) (3313f54)
  • await webhook verification in README examples (#​2302) (0fe7ad0)
  • azure: honor explicit browser denial for Entra token providers (#​2328) (9d47510)
  • azure: preserve model-to-deployment mapping for images.edit (#​1918) (6c207c6)
  • azure: prevent API-key disclosure across HTTP redirects (#​2320) (f36c418)
  • azure: prevent deployment path traversal (#​2337) (a9d9d41)
  • bedrock: safely sign inherited query parameter names (#​2375) (3f8d5cc)
  • chat: support custom tool calls in parser and ChatCompletionStream (#​2023) (6fa9152)
  • client: handle empty JSON response body without content-length (#​1998) (b6447e9)
  • configure Bash for pnpm scripts on Windows (#​2330) (f5a0ad1)
  • deps: remediate Dependabot and fixture vulnerabilities (#​2282) (783da8f)
  • embedding: response type for base64 encoding format (#​1554) (ef69801)
  • export AzureClientOptions (#​1760) (511bf6d), closes #​1735
  • export workload identity helpers from openai/auth (#​2344) (af8f14f)
  • fail ecosystem CI when live credentials are missing (#​2349) (a47dc75)
  • format: restore formatting for generated SDK files (#​2089) (6d69d4b)
  • harden runTools against inherited function names (#​2333) (f4496d1)
  • honor defaultHeaders null for helper method header (#​1857) (8eab09a)
  • include items for strict Zod v3 any arrays (#​2357) (4c32089)
  • isolate Vercel ecosystem tests per request (#​2359) (2831290)
  • keep streamed Responses output text linear and canonical (#​2354) (6827a40)
  • lint: recognize Castiron-generated headers (#​2124) (cf6237f)
  • lint: restore generated SDK lint rules (#​2126) (6b8162c)
  • parse empty chat content when present (#​2331) (53dd723)
  • parser: recognize raw json_schema response format in auto-parsing checks (#​2015) (fbd2541)
  • pass file batch helper options through (#​1855) (05ce028)
  • preserve File-like metadata in toFile (#​1883) (ba1a781)
  • preserve skill upload paths without buffering native files (#​2303) (30b9c41)
  • preserve Skills upload file paths (#​1856) (e75de97)
  • preserve zero retry-after-ms precedence (#​2329) (b44644e)
  • prevent prototype event names from crashing SDK streams (#​2315) (c014250)
  • prevent prototype manipulation in strict Structured Outputs schemas (#​2341) (838de7e)
  • prevent prototype pollution in assistant stream deltas (#​2280) (928fa2b)
  • realtime: allow overriding WebSocket connection URLs (#​2308) (7407413), closes #​2305
  • realtime: enforce Azure browser denial and redact all credentials (#​2340) (a77861d)
  • realtime: prevent Azure API-key disclosure across WebSocket redirects (#​2325) (d5a1a1e)
  • realtime: prevent remote error payloads from crashing clients (#​2350) (896f021)
  • realtime: remove immutable model updates from public and Azure examples (#​2327) (08bd80a)
  • reject unsupported proto Zod v3 object properties (#​2352) (46a8ca0)
  • remove vulnerable extract-zip from browser tests (#​2312) (567ad4f)
  • responses: reject with OpenAIError when the stream emits an error event (#​2021) (a54014d)
  • responses: validate streaming event indices before array access (#​2323) (13eaf1d)
  • security: bound untrusted AssistantStream delta array indices (#​2326) (afdf5ef)
  • security: contain Bedrock credentials to the configured endpoint origin (#​2342) (23f0575)
  • security: keep browser ecosystem API keys out of navigation URLs (#​2353) (1029e82)
  • security: prevent Bedrock bearer credential disclosure across redirects (#​2377) (bfcccad)
  • security: prevent global Array.prototype pollution in chat completion streams (#​2318) (486e191)
  • security: prevent multipart upload content-type header injection (#​2322) (1c0b9ca)
  • security: prevent process-wide prototype pollution via assistant stream snapshot IDs (#​2316) (21a0653)
  • security: prevent prototype manipulation in streamed chat snapshots (#​2335) (e81d766)
  • security: prevent streaming upload filename/header injection (#​2363) (4ba4084)
  • streaming: eliminate quadratic EventStream FIFO draining (#​2356) (57521a1)
  • streaming: eliminate quadratic SSE buffer copying (#​2324) (ebdb296)
  • streaming: finish SSE streams immediately after [DONE] (#​2317) (7722171)
  • streaming: handle mixed SSE line endings (#​2309) (24d5ada)
  • streaming: isolate AssistantStream message and tool-call lifecycles (#​2334) (178e85f)
  • streaming: make fragmented line decoding amortized linear (#​2336) (f32e2df)
  • streaming: surface mid-stream errors when iterating buffered streams (#​2047) (8cc6cac)
  • ws: prevent duplicate listener leaks in Node and browser adapters (#​2347) (a032b85)
  • zod: preserve literal payloads when escaping schema references (#​2351) (8f189f4)
  • zod: preserve null literals in Zod v3 JSON schemas (#​2355) (ed5c5e6)
  • zod: prevent generated definition name collisions (#​2346) (0844573)
  • zod: reject non-object Zod v3 strict schema roots (#​2358) (cc7dbfa)
Chores

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/openai-7.x branch 4 times, most recently from 2285510 to 3fa5c00 Compare August 4, 2026 00:48
@renovate
renovate Bot force-pushed the renovate/openai-7.x branch from 3fa5c00 to d9db1fe Compare August 17, 2026 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants