build(deps): bump openai from 7.5.0 to 7.7.0 in the npm-production-minor-patch group - #329
Conversation
Bumps the npm-production-minor-patch group with 1 update: [openai](https://github.com/openai/openai-node). Updates `openai` from 7.5.0 to 7.7.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v7.5.0...v7.7.0) --- updated-dependencies: - dependency-name: openai dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying podnotes with
|
| Latest commit: |
64234bd
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://92569218.podnotes.pages.dev |
| Branch Preview URL: | https://dependabot-npm-and-yarn-npm-ewg6.podnotes.pages.dev |
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependabot review — approve and merge
Production minor bump of openai 7.5.0 → 7.7.0 (build(deps):, npm-production-minor-patch). Diff is package.json + package-lock.json only.
Changelog vs plugin usage
PodNotes only constructs new OpenAI({ apiKey, dangerouslyAllowBrowser: true }) and calls client.audio.transcriptions.create (whisper-1 and gpt-4o-transcribe-diarize), passing an AbortSignal. 7.6.0 / 7.7.0 add optional API fields, data-residency / X.509 auth paths we do not use, and a streaming-cancel fix. No breaking change on that surface. Lockfile marks existing undici devOptional for the new optional peer; it is not a new hard dependency.
This build(deps): title will cut a plugin patch per release policy — expected.
Verification
npm cisucceeded; lockfile unchanged; resolvedopenai@7.7.0npm auditandnpm audit --omit=dev: 0 vulnerabilities- Local (Node 22.22.2): lint, format:check, typecheck, build, test — 1152 tests passed
- GitHub Test workflow: success on
64234bd - Obsidian GUI/e2e is not available in this environment; transcription unit/type coverage plus a clean production bundle were used instead
No regressions found. Squash-merging.
Sent by Cursor Automation: Dependabot PRs
Bumps the npm-production-minor-patch group with 1 update: openai.
Updates
openaifrom 7.5.0 to 7.7.0Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
6f6411erelease: 7.7.0 (#2489)b932ae6feat(api): make function call output call IDs optional (#2488)ababe12fix(streaming): honor cancellation while decoding SSE responses (#2487)6d1d54arelease: 7.6.0 (#2381)cd5b2d8fix(auth): sanitize malformed workload OAuth token responses (#2468)662bb37fix: publish Castiron checks for behind-main pull requests (#2486)2dac2f4fix(bedrock): honor cancellation during bearer credential resolution (#2478)dafcac4fix(audio): preserve recording outcomes during cancellation and cleanup (#2482)520d604fix(polling): honor cancellation during polling delays (#2477)63b1c75fix(assistants): reject run-step identity hijacking before tool callbacks (#2...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions