Update dependency openai to v7 by renovate[bot] · Pull Request #116 · descope-sample-apps/docs-gpt

ci: retry transient Deno download failures (#2752) (e39037b)
preserve chat runner abort reasons (#2607) (eda4d0c)
realtime: preserve native WebSocket error causes (#2715) (58fa72a)
responses: reject function-based API keys in WebSocket constructors (#2586) (eea7618)
runners: reject unfinished turns in streaming runTools (#2716) (937ed67)
streaming: emit terminal SSE events missing a trailing blank line (#2726) (94d6418)
zod: omit impossible optional branch in strict schemas (#2751) (2b4c2c7)

Chores

update lint tooling and tailor anti-slop for the SDK (#2753) (21a03c2)

Documentation

examples: preserve split UTF-8 in raw stream consumer (#2714) (f44152a)

`v7.16.0`

Compare Source

Features

websocket: add per-iterator incoming event limits (#2748) (76e4456)

Bug Fixes

api: handle malformed WebSocket events and improve buffering (#2739) (b7abc26)
bound fallback abort subscriptions with weak lifetimes (#2745) (a93347a)
deps-dev: bump @cloudflare/workers-types from 5.20260830.1 to 5.20260906.1 in /ecosystem-tests/cloudflare-worker (#2731) (6cd6579)
deps-dev: bump @types/node from 26.2.0 to 26.4.1 (#2737) (a95c0bf)
deps-dev: bump oxfmt from 0.62.0 to 0.66.0 (#2738) (0fe46cd)
deps-dev: bump oxlint from 1.80.0 to 1.81.0 (#2730) (b4986b1)
deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/browser-direct-import (#2728) (4f3fdec)
deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/ts-browser-webpack (#2736) (a70286b)
deps-dev: bump webpack from 5.110.2 to 5.110.3 in /ecosystem-tests/ts-browser-webpack (#2734) (b08c0bd)
deps-dev: bump wrangler from 4.127.1 to 4.129.0 in /ecosystem-tests/cloudflare-worker (#2729) (e4a9bdd)
deps: bump undici from 7.29.0 to 7.29.1 in /ecosystem-tests/node-ts-cjs (#2732) (b499843)
deps: bump undici from 8.9.0 to 8.10.2 (#2733) (d3c6c4f)
keep callback credentials local to each HTTP request (#2744) (35dcdbf)
live: avoid repeated acknowledgment normalization (#2747) (dcbbb25)
live: trim transcript acknowledgment suffixes in linear time (#2740) (45a2bf1)
responses: safely format WebSocket error messages (#2741) (c94cbf6)
tests: handle ecosystem proxy socket failures (#2743) (1a24082)
websocket: discard unread events when an iterator returns (#2742) (482930e)

Chores

bump smol-toml in Vercel Edge fixture (#2721) (3c4e4d2)

`v7.15.0`

Compare Source

Features

api: add Agents API (#2719) (20a47f9)

`v7.14.0`

Compare Source

Features

api: Add Live API (c037ba7)

Bug Fixes

deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
deps: update remaining tooling and fixture patches (#2712) (bcaabee)

`v7.13.0`

Compare Source

Features

api: Add API key expiration controls (#2708) (b416806)

`v7.12.1`

Compare Source

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

`v7.10.0`

Compare Source

Features

api: add gpt-6-astra and related features (#2582) (94ecdc4)

Documentation

add canonical SDK security model (#2566) (e6a7468)

`v7.9.0`

Compare Source

Features

api: update usage APIs and documentation (#2565) (4908505)

Bug Fixes

api: prevent Responses WebSockets from following redirects (#2513) (0a4fb1b)
load CommonJS under browser export conditions (#2507) (222f3d7)
restore monthly Node version review (#2553) (15dc890)
support Jest 28 CommonJS package imports (#2511) (eea2292)

Chores

deps-dev: bump browserslist to 4.28.7 across ecosystem tests (#2554) (a408e0b)
raise custom-code budget to 4,000 lines (#2562) (82c5b2d)

`v7.8.0`

Compare Source

Features

api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
deps: harden dependency and release boundaries (#2484) (b21ff45)
events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
restore native browser ESM imports (#2495) (c8cab1e)
uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

`v7.7.0`

Compare Source

Features

api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

`v7.6.0`

Compare Source

Features

api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

[responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)
auth: honor an explicit zero GCP metadata timeout (#2481) (7a9dec8)
auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
auth: sanitize malformed workload OAuth token responses (#2468) (cd5b2d8)
avoid double-counting logprobs in streamed chat completions (#2444) (ddf9922)
bedrock: honor cancellation during bearer credential resolution (#2478) (2dac2f4)
drain tee stream queues in linear time (#2379) (1f3ce07)
polling: honor cancellation during polling delays (#2477) (520d604)
preserve large streaming responses (#2433) (4e588c2)
preserve multipart upload array order (#2380) (f1a2b61)
publish Castiron checks for behind-main pull requests (#2486) (662bb37)
publish Castiron checks for external-fork pull requests (#2464) (a90581e)
security: abort streaming examples when clients disconnect (#2426) (b32a25b)
security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)
security: close rejected Azure managed-identity response streams (#2416) (387bbc8)
security: harden Bedrock regions, query merges, and upload errors (#2410) (ce45d0d)
security: harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414) (5533f73)
security: preserve chat structured response-format integrity (#2402) (e69df93)
security: prevent AssistantStream deltas leaking sensitive data (#2392) (17cf54c)
security: prevent streaming upload filename path disclosure (#2386) (c88a024)
security: prevent structured-output format downgrade (#2394) (dd945e6)
security: redact built-in structured JSON parse errors (#2418) (a0d68cc)
security: redact chat completion finalization snapshots (#2400) (fb5d8e7)
security: redact GCP metadata authentication error bodies (#2399) (322840c)
security: redact invalid Bedrock bearer credentials (#2419) (39c06d1)
security: redact invalid workload identity access tokens (#2425) (0d28da3)
security: redact malformed NDJSON stream diagnostics (#2420) (dcc705c)
security: redact malformed Realtime WebSocket error causes (#2408) (e7a1a44)
security: redact malformed SSE diagnostic payloads (#2403) (272a2cc)
security: redact sensitive assistant delta diagnostics (#2406) (b130b83)
security: redact unsupported Responses stream event payloads (#2395) (32b2953)
security: reject malformed Realtime WebSocket event frames (#2391) (e6e11b0)
security: require an exact SSE completion sentinel (#2422) (a905bfb)
security: require OIDC for npm publishing (#2404) (342764b)
security: respect configured logger for Assistants stream errors (#2390) (8ba3009)
security: restrict live CI credentials to protected main (#2405) (3554cdc)
security: scope Cloudflare ecosystem API key files (#2398) (4f4b45d)
security: secure Next.js Edge streaming example requests (#2424) (861caed)
security: stop delayed and additional tool callbacks after cancellation (#2430) (c168599)
security: stop retaining sensitive assistant stream events (#2407) (dfec129)
settle concurrent stream event waiters in linear time (#2387) (a88c2ca)
settle WebSocket event waiters in linear time (#2389) (489dc72)
standard-schema: preserve validator bindings across helpers (#2483) (e4afdb7)
streaming: reject named SSE provider error events (#2409) (b7a0bd6)
tests: make credential-lifecycle held-inode scenarios portable to macOS (#2480) (60f5267)
uploads: preserve Blob files and multipart media types (#2467) (d497fb3)
webhooks: bound signature verification work (#2475) (05cf7ab)
ws: block custom credential headers on redirects (#2429) (d2ab6e7)
zod: support only provably JSON-native structured outputs (#2396) (c3d68e4)

Chores

api: clarify image transparency and audio delta docs (#2439) (f14e885)
api: document supported image generation models (#2432) (0e00909)
api: update SDK generation metadata (#2448) (d1410d1)
deps-dev: bump @cloudflare/workers-types from 5.20260809.1 to 5.20260816.1 in /ecosystem-tests/cloudflare-worker (#2452) (cf7e588)
deps-dev: bump @smithy/hash-node from 4.4.16 to 4.5.2 (#2455) (342b0a3)
deps-dev: bump @smithy/signature-v4 from 5.6.12 to 5.7.2 (#2459) (bf4386c)
deps-dev: bump publint from 0.3.22 to 0.3.23 (#2457) (c100c83)
deps-dev: bump puppeteer from 25.5.0 to 25.7.0 in /ecosystem-tests/browser-direct-import (#2451) (c6c406b)
deps-dev: bump puppeteer from 25.5.0 to 25.7.0 in /ecosystem-tests/ts-browser-webpack (#2456) (e1faab1)
deps-dev: bump ws from 8.21.1 to 8.21.3 (#2454) (1f84889)
deps: bump next from 15.5.21 to 15.5.23 in /ecosystem-tests/vercel-edge (#2458) (cc532b3)
deps: bump next from 16.3.0 to 16.3.1 (#2460) (a2d88c1)
set a 3,000-line custom-code budget (#2446) (2035847)

Documentation

encode recurring SDK review feedback in agent guidance (#2378) (e552523)
security: add secure contributor and agent guidance (#2382) (459d009)

Refactors

move embedding encoding into an SDK-owned helper (#2436) (db9e930)
move file processing wait into an SDK-owned helper (#2438) (3d39e64)
move vector store batch uploads into an SDK-owned helper (#2441) (0257e51)
move vector store polling into an SDK-owned helper (#2437) (4317319)
move webhook signature checks into an SDK-owned helper (#2442) (283e12b)
share SDK-owned assistant run polling (#2440) (4de295b)

`v7.5.0`

Compare Source

Features

add Bedrock Runtime endpoint support (SDK-290) (#2348) (4a199af)
api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
api: add new Daybreak and gpt-5.6-cyber model identifiers (#2278) (9a38e63)
api: Add ServiceTier and ImageDetail types (#2364) (602d481)
api: add WebSocket stream IDs (#2314) (156a8db)
api: add workload identity access token issued event (#2307) (322a5b1)
api: deprecate Sora video APIs (#2313) (4424b40)
api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#2332) (a3deafb)

Bug Fixes

api: clarify audio upload metadata requirements (#2279) (34ecf3f)
audio: prevent microphone leaks and playback pipe deadlocks (#2339) (1c692fe)
audio: reject ffplay spawn errors (#2012) (6d42d4d)
auth: reject redirects during workload identity token exchange (#2321) (240385e)
auth: reject unsafe workload-identity token expirations (#2345) (1f0349d)
avoid TypeError in toFile for Responses without a URL (#2311) (3313f54)
await webhook verification in README examples (#2302) (0fe7ad0)
azure: honor explicit browser denial for Entra token providers (#2328) (9d47510)
azure: preserve model-to-deployment mapping for images.edit (#1918) (6c207c6)
azure: prevent API-key disclosure across HTTP redirects (#2320) (f36c418)
azure: prevent deployment path traversal (#2337) (a9d9d41)
bedrock: safely sign inherited query parameter names (#2375) (3f8d5cc)
chat: support custom tool calls in parser and ChatCompletionStream (#2023) (6fa9152)
client: handle empty JSON response body without content-length (#1998) (b6447e9)
configure Bash for pnpm scripts on Windows (#2330) (f5a0ad1)
deps: remediate Dependabot and fixture vulnerabilities (#2282) (783da8f)
embedding: response type for base64 encoding format (#1554) (ef69801)
export AzureClientOptions (#1760) (511bf6d), closes #1735
export workload identity helpers from openai/auth (#2344) (af8f14f)
fail ecosystem CI when live credentials are missing (#2349) (a47dc75)
format: restore formatting for generated SDK files (#2089) (6d69d4b)
harden runTools against inherited function names (#2333) (f4496d1)
honor defaultHeaders null for helper method header (#1857) (8eab09a)
include items for strict Zod v3 any arrays (#2357) (4c32089)
isolate Vercel ecosystem tests per request (#2359) (2831290)
keep streamed Responses output text linear and canonical (#2354) (6827a40)
lint: recognize Castiron-generated headers (#2124) (cf6237f)
lint: restore generated SDK lint rules (#2126) (6b8162c)
parse empty chat content when present (#2331) (53dd723)
parser: recognize raw json_schema response format in auto-parsing checks (#2015) (fbd2541)
pass file batch helper options through (#1855) (05ce028)
preserve File-like metadata in toFile (#1883) (ba1a781)
preserve skill upload paths without buffering native files (#2303) (30b9c41)
preserve Skills upload file paths (#1856) (e75de97)
preserve zero retry-after-ms precedence (#2329) (b44644e)
prevent prototype event names from crashing SDK streams (#2315) (c014250)
prevent prototype manipulation in strict Structured Outputs schemas (#2341) (838de7e)
prevent prototype pollution in assistant stream deltas (#2280) (928fa2b)
realtime: allow overriding WebSocket connection URLs (#2308) (7407413), closes #2305
realtime: enforce Azure browser denial and redact all credentials (#2340) (a77861d)
realtime: prevent Azure API-key disclosure across WebSocket redirects (#2325) (d5a1a1e)
realtime: prevent remote error payloads from crashing clients (#2350) (896f021)
realtime: remove immutable model updates from public and Azure examples (#2327) (08bd80a)
reject unsupported proto Zod v3 object properties (#2352) (46a8ca0)
remove vulnerable extract-zip from browser tests (#2312) (567ad4f)
responses: reject with OpenAIError when the stream emits an error event (#2021) (a54014d)
responses: validate streaming event indices before array access (#2323) (13eaf1d)
security: bound untrusted AssistantStream delta array indices (#2326) (afdf5ef)
security: contain Bedrock credentials to the configured endpoint origin (#2342) (23f0575)
security: keep browser ecosystem API keys out of navigation URLs (#2353) (1029e82)
security: prevent Bedrock bearer credential disclosure across redirects (#2377) (bfcccad)
security: prevent global Array.prototype pollution in chat completion streams (#2318) (486e191)
security: prevent multipart upload content-type header injection (#2322) (1c0b9ca)
security: prevent process-wide prototype pollution via assistant stream snapshot IDs (#2316) (21a0653)
security: prevent prototype manipulation in streamed chat snapshots (#2335) (e81d766)
security: prevent streaming upload filename/header injection (#2363) (4ba4084)
streaming: eliminate quadratic EventStream FIFO draining (#2356) (57521a1)
streaming: eliminate quadratic SSE buffer copying (#2324) (ebdb296)
streaming: finish SSE streams immediately after [DONE] (#2317) (7722171)
streaming: handle mixed SSE line endings (#2309) (24d5ada)
streaming: isolate AssistantStream message an

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-07-31T04:33:13Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs-gpt	Error		Sep 21, 2026 3:40am UTC

renovate Bot added the renovate label Jul 31, 2026

renovate Bot force-pushed the renovate/openai-7.x branch from 9fc0a43 to 34bf400 Compare July 31, 2026 23:50

vercel Bot had a problem deploying to Preview July 31, 2026 23:50 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 34bf400 to c8a3856 Compare August 2, 2026 19:12

vercel Bot had a problem deploying to Preview August 2, 2026 19:12 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from c8a3856 to 78d07ed Compare August 3, 2026 17:38

vercel Bot had a problem deploying to Preview August 3, 2026 17:39 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 78d07ed to acbcd34 Compare August 4, 2026 03:48

vercel Bot had a problem deploying to Preview August 4, 2026 03:49 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from acbcd34 to 5d30752 Compare August 6, 2026 22:51

vercel Bot had a problem deploying to Preview August 6, 2026 22:52 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 5d30752 to 6ee6108 Compare August 10, 2026 23:56

vercel Bot had a problem deploying to Preview August 10, 2026 23:56 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 6ee6108 to e6bd2e6 Compare August 20, 2026 23:16

vercel Bot had a problem deploying to Preview August 20, 2026 23:17 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from e6bd2e6 to f915482 Compare August 27, 2026 04:05

vercel Bot had a problem deploying to Preview August 27, 2026 04:05 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from f915482 to fa170f8 Compare August 29, 2026 23:37

vercel Bot had a problem deploying to Preview August 29, 2026 23:37 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from fa170f8 to 0acf5fc Compare August 30, 2026 03:36

vercel Bot had a problem deploying to Preview August 30, 2026 03:36 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 0acf5fc to a37a340 Compare August 30, 2026 19:44

vercel Bot had a problem deploying to Preview August 30, 2026 19:44 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from a37a340 to 2ea749f Compare September 5, 2026 03:05

vercel Bot had a problem deploying to Preview September 5, 2026 03:05 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 2ea749f to a4bb001 Compare September 6, 2026 22:54

vercel Bot had a problem deploying to Preview September 6, 2026 22:54 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from a4bb001 to f19df48 Compare September 12, 2026 03:03

vercel Bot had a problem deploying to Preview September 12, 2026 03:04 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from f19df48 to f6ec6a7 Compare September 12, 2026 18:59

vercel Bot had a problem deploying to Preview September 12, 2026 18:59 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from f6ec6a7 to cee8def Compare September 13, 2026 19:00

vercel Bot had a problem deploying to Preview September 13, 2026 19:01 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from cee8def to 15375da Compare September 13, 2026 22:55

vercel Bot had a problem deploying to Preview September 13, 2026 22:56 Failure

renovate Bot force-pushed the renovate/openai-7.x branch from 15375da to e0312ea Compare September 20, 2026 16:01

vercel Bot had a problem deploying to Preview September 20, 2026 16:02 Failure

Update dependency openai to v7

b964f07

renovate Bot force-pushed the renovate/openai-7.x branch from e0312ea to b964f07 Compare September 21, 2026 03:39

vercel Bot had a problem deploying to Preview September 21, 2026 03:40 Failure

Navigation Menu

Update dependency openai to v7 - #116

Update dependency openai to v7#116
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/openai-7.x

renovate Bot commented Jul 31, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 31, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Chores

Features

Bug Fixes

Chores

Documentation

Features

Bug Fixes

Chores

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Documentation

Features

Bug Fixes

Chores

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Chores

Documentation

Refactors

Features

Bug Fixes

Configuration

Uh oh!

vercel Bot commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 31, 2026 •

edited

Loading

vercel Bot commented Jul 31, 2026 •

edited

Loading