Skip to content

chore: bump openai-agents to 0.19.0 and openai to 2.48.0 - #207

Open
mixxer wants to merge 1 commit into
VectifyAI:mainfrom
mixxer:chore/bump-deps-mcp2-compat
Open

chore: bump openai-agents to 0.19.0 and openai to 2.48.0#207
mixxer wants to merge 1 commit into
VectifyAI:mainfrom
mixxer:chore/bump-deps-mcp2-compat

Conversation

@mixxer

@mixxer mixxer commented Jul 27, 2026

Copy link
Copy Markdown

Summary

Bumps openai-agents 0.17.30.19.0 and openai 2.44.02.48.0.

Both are still pinned exactly per the supply-chain caution policy. This PR
documents the vetting rationale in pyproject.toml comments following the
existing convention.

Why bump

openai-agents 0.17.3 declares mcp<2 as a hard requirement. fastmcp>=4.0
requires mcp>=2.0.0b2. The two pins are irreconcilable and pip check reports
a broken environment when both are installed.

openai-agents 0.19.0 ships MCP Python SDK v2 compatibility (see
openai/openai-agents-python#3989)
and relaxes the mcp upper bound.

Vetting

Diff

# before
"openai-agents==0.17.3",
"openai==2.44.0",

# after (exact pins preserved, why-comments added)
# openai-agents 0.19.0 adds MCP Python SDK v2 compatibility (mcp 2.0.0b2). ...
"openai-agents==0.19.0",
# openai 2.48.0 is the minimum that openai-agents 0.19.0 declares compatible. ...
"openai==2.48.0",

openai-agents 0.17.3 requires mcp<2, which conflicts with fastmcp>=4.0
that requires mcp>=2.0.0b2. Bumping to 0.19.0 which includes MCP Python
SDK v2 compatibility (see openai/openai-agents-python#3989).

Vetted: stdio + streamable-http transports tested against fastmcp 4.0.0a2;
InputTokensDetails issue VectifyAI#187 (the reason for the original openai==2.44.0
pin) is resolved in openai-agents 0.19.0. Bump openai to 2.48.0 which
openai-agents 0.19.0 declares as minimum compatible.

Exact pins preserved per supply-chain policy. Why-comments added/updated.
@mixxer
mixxer force-pushed the chore/bump-deps-mcp2-compat branch from e3698fa to 28475f1 Compare July 27, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant