Skip to content

chore(skills): prioritize customer-impacting Ruby SDK defects - #519

Merged
jbeckwith-oai merged 8 commits into
mainfrom
codex/prioritize-ruby-sdk-defects
Aug 25, 2026
Merged

chore(skills): prioritize customer-impacting Ruby SDK defects#519
jbeckwith-oai merged 8 commits into
mainfrom
codex/prioritize-ruby-sdk-defects

Conversation

@jbeckwith-oai

Copy link
Copy Markdown
Contributor

Summary

  • Reorient the recurring OpenAI Ruby maintenance skill toward evidence-backed, customer-impacting SDK defects across transport, request/response handling, structured outputs, streaming, pagination, uploads, authentication, concurrency, and compatibility.
  • Require suspected security issues to remain on explicitly authorized private investigation/disclosure tracks; never route vulnerability details or remediation through ordinary public maintenance pull requests.
  • Preserve generated-source ownership, API compatibility, architecture escalation, isolated app-managed worktrees pinned to the exact refreshed default-branch commit, and the shared five-open-maintenance-PR cap.
  • Make one scan rank at most five independent findings while assigning proof, focused/full verification, strict review, CI follow-through, and review handoff to each implementation task.

Scope and compatibility

  • Changes only .agents/skills/improve-openai-ruby/SKILL.md; no runtime, generated SDK code, API, dependency, CI workflow, or AGENTS.md changes.
  • Existing security disclosure, custom-code budget, generator ownership, Conventional Commit, no-lint-suppression, reviewer-routing, and comment-resolution requirements remain in force.
  • Reviewed with the requested thermo-nuclear maintainability review, general code/compatibility review, and security/privacy review.

Verification

  • Official skill-creator quick_validate.py against .agents/skills/improve-openai-ruby.
  • Independent Ruby YAML-frontmatter and RDoc::Markdown parsing checks.
  • Twelve automated semantic checks covering customer-facing priority, private disclosure, security-skill routing, five-finding and five-public-PR limits, exact worktree SHA, generator ownership, architecture escalation, required reviews, review follow-through, and example-only fallback.
  • TMPDIR=/private/tmp bundle exec rake test under Ruby 4.0.6 — 1,191 tests, 10,593 assertions, 0 failures, 0 errors, 1 existing skip.
  • bundle exec rake lint under Ruby 4.0.6 — 2,746 Ruby files inspected; 1,239 RBS files validated; Sorbet and formatting checks pass.
  • python3 -m unittest discover -s scripts/castiron -p 'test_custom_code*.py'51 tests pass, 1 existing skip.
  • git diff --check and git diff --stat edfb30b2973d68b4a19ce3f86f1de7313f730702.

@jbeckwith-oai jbeckwith-oai added the codex-maintenance Low-risk maintenance changes created by Codex label Aug 23, 2026
@github-actions

github-actions Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

Castiron custom code

✅ No new custom-code files detected.

47 mixed files remain; 0 existing customizations changed.

Compared dd0a37cb17835780d9423cae. Generated baselines verified.

47 existing customizations unchanged
  • lib/openai.rb
  • lib/openai/client.rb
  • lib/openai/models/chat/chat_completion_message.rb
  • lib/openai/models/chat/chat_completion_message_function_tool_call.rb
  • lib/openai/models/chat/completion_create_params.rb
  • lib/openai/models/response_format_json_schema.rb
  • lib/openai/models/responses/function_tool.rb
  • lib/openai/models/responses/response.rb
  • lib/openai/models/responses/response_create_params.rb
  • lib/openai/models/responses/response_format_text_config.rb
  • lib/openai/models/responses/response_format_text_json_schema_config.rb
  • lib/openai/models/responses/response_function_tool_call.rb
  • lib/openai/models/responses/response_function_web_search.rb
  • lib/openai/models/responses/response_output_text.rb
  • lib/openai/models/responses/tool.rb
  • lib/openai/resources/beta/threads.rb
  • lib/openai/resources/chat/completions.rb
  • lib/openai/resources/files.rb
  • lib/openai/resources/responses.rb
  • lib/openai/resources/vector_stores/file_batches.rb
  • lib/openai/resources/vector_stores/files.rb
  • lib/openai/resources/webhooks.rb
  • rbi/openai/client.rbi
  • rbi/openai/models/chat/chat_completion_message.rbi
  • rbi/openai/models/chat/chat_completion_message_function_tool_call.rbi
  • rbi/openai/models/chat/completion_create_params.rbi
  • rbi/openai/models/response_format_json_schema.rbi
  • rbi/openai/models/responses/response.rbi
  • rbi/openai/models/responses/response_create_params.rbi
  • rbi/openai/models/responses/response_function_tool_call.rbi
  • rbi/openai/models/responses/response_function_web_search.rbi
  • rbi/openai/models/responses/response_output_text.rbi
  • rbi/openai/resources/chat/completions.rbi
  • rbi/openai/resources/files.rbi
  • rbi/openai/resources/responses.rbi
  • rbi/openai/resources/vector_stores/file_batches.rbi
  • rbi/openai/resources/vector_stores/files.rbi
  • scripts/castiron/README.md
  • scripts/castiron/custom_code_report.py
  • scripts/castiron/test_custom_code_report.py

7 more in the full report.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 32877898575 --repo openai/openai-ruby \
  --name castiron-custom-code-32877898575-1 --dir /tmp/castiron-custom-code-32877898575-1
git apply --stat /tmp/castiron-custom-code-32877898575-1/custom-code.patch
cat /tmp/castiron-custom-code-32877898575-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin dd0a37cb1783adc7282603d8d2c9a8f11319b205 5780d9423caed284961d5f3b72875769290be0c2
python3 scripts/castiron/custom_code_report.py report \
  --base dd0a37cb1783adc7282603d8d2c9a8f11319b205 \
  --head 5780d9423caed284961d5f3b72875769290be0c2 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-5780d9423cae
cat /tmp/castiron-custom-code-5780d9423cae/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

@jbeckwith-oai
jbeckwith-oai marked this pull request as ready for review August 23, 2026 20:11
@jbeckwith-oai
jbeckwith-oai requested a review from a team as a code owner August 23, 2026 20:11
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Aug 23, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-08-25T17:28:09.659031Z 5780d94 New commits
🔒 Security Review Completed 2026-08-25T17:29:00.571315Z 5780d94 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@openai-sdks

openai-sdks Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

OkTest Summary

237/237 SDK tests passed in 9.173s for Ruby SDK PR #519.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 112ms
tests/chat-completions-create.test.ts ✅ Passed 161ms
tests/chat-completions-stream.test.ts ✅ Passed 108ms
tests/files-content-binary.test.ts ✅ Passed 123ms
tests/files-create-multipart.test.ts ✅ Passed 196ms
tests/files-list-pagination.test.ts ✅ Passed 133ms
tests/initialize-config.test.ts ✅ Passed 136ms
tests/instance-isolation.test.ts ✅ Passed 180ms
tests/models-list.test.ts ✅ Passed 140ms
tests/responses-background-lifecycle.test.ts ✅ Passed 192ms
tests/responses-body-method-errors.test.ts ✅ Passed 327ms
tests/responses-cancel-timeout.test.ts ✅ Passed 303ms
tests/responses-cancel.test.ts ✅ Passed 168ms
tests/responses-compact-retries.test.ts ✅ Passed 174ms
tests/responses-compact.test.ts ✅ Passed 177ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 141ms
tests/responses-create-advanced.test.ts ✅ Passed 157ms
tests/responses-create-disconnect.test.ts ✅ Passed 1.066s
tests/responses-create-errors.test.ts ✅ Passed 564ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 153ms
tests/responses-create-retries.test.ts ✅ Passed 211ms
tests/responses-create-stream-failures.test.ts ✅ Passed 124ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 217ms
tests/responses-create-stream-wire.test.ts ✅ Passed 2.4s
tests/responses-create-stream.test.ts ✅ Passed 122ms
tests/responses-create-terminal-states.test.ts ✅ Passed 189ms
tests/responses-create-timeout.test.ts ✅ Passed 250ms
tests/responses-create.test.ts ✅ Passed 152ms
tests/responses-delete.test.ts ✅ Passed 183ms
tests/responses-input-items-errors.test.ts ✅ Passed 138ms
tests/responses-input-items-list.test.ts ✅ Passed 146ms
tests/responses-input-items-options.test.ts ✅ Passed 229ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 241ms
tests/responses-input-tokens-count.test.ts ✅ Passed 159ms
tests/responses-malformed-inputs.test.ts ✅ Passed 1.985s
tests/responses-not-found-errors.test.ts ✅ Passed 247ms
tests/responses-parse.test.ts ✅ Passed 130ms
tests/responses-retrieve-retries.test.ts ✅ Passed 182ms
tests/responses-retrieve.test.ts ✅ Passed 185ms
tests/responses-stored-method-errors.test.ts ✅ Passed 546ms
tests/retry-behavior.test.ts ✅ Passed 3.028s
tests/sdk-error-shape.test.ts ✅ Passed 526ms

View OkTest run #32877859345

SDK merge (9db5dd416121) · head (5780d9423cae) · base (dd0a37cb1783) · OkTest (2b1bdfd25e98)

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5b5c8dd7ff

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .agents/skills/improve-openai-ruby/SKILL.md Outdated
Comment thread .agents/skills/improve-openai-ruby/SKILL.md Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4d92806caf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated
Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 556d95be86

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated
@jbeckwith-oai jbeckwith-oai changed the title fix(skills): prioritize customer-impacting Ruby SDK defects chore(skills): prioritize customer-impacting Ruby SDK defects Aug 24, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 35d2d4bd28

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated
Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated
Comment thread .agents/skills/improve-openai-ruby/scripts/maintenance_state.py Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 71ccf5fec8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .agents/skills/improve-openai-ruby/SKILL.md
Comment thread .agents/skills/improve-openai-ruby/SKILL.md Outdated
Comment thread .agents/skills/improve-openai-ruby/SKILL.md Outdated

@apcha-oai apcha-oai left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[sdk codex review] Requesting changes at 71ccf5fec8e98f74814b7a2c3fffd71f4eb9ef65 after two independent full reviews of the sole Markdown change and all existing feedback. The following existing policy-correctness issues remain; I am referencing their threads instead of adding duplicate inline comments:

  • Terminal failure/cancellation reconciliation: a task that must stop without proof or a PR cannot reach the successful handoff required to release its finding, paths and capacity. Allow release for independently confirmed terminal failures/cancellations without an open PR, while retaining active or ambiguous reservations.
  • In-scope review handling: retain the Markdown-only boundary, but narrow the blanket instruction to ignore PR #519 feedback so legitimate corrections within this file can still be assessed.
  • Owned-draft label failure: restore cleanup/reconciliation for a definitely identified draft created by this task when mandatory labeling fails. I am not asserting automatic cap overflow: the retained task reservation may still prevent a replacement, but the unlabeled draft is left stranded.

The obsolete coordinator-script findings are not current defects in this one-file diff. Existing hosted Ruby 3.3.12/3.4.10/4.0.6 jobs verified this head merged with current base c3fe427c6e9d9fad78acd23118b897ab0d6c5611; each passed 1,209 tests and 10,715 assertions. Current CI/budget statuses are green apart from expected skips, but runtime suites do not validate these policy transitions. No skill, code, tests or scans were executed locally. Final head/base/merge-base, author, open/non-draft status and mergeability were verified.

@jbeckwith-oai
jbeckwith-oai added this pull request to the merge queue Aug 25, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Aug 25, 2026
@jbeckwith-oai
jbeckwith-oai added this pull request to the merge queue Aug 25, 2026
Merged via the queue into main with commit d638c57 Aug 25, 2026
19 checks passed
@jbeckwith-oai
jbeckwith-oai deleted the codex/prioritize-ruby-sdk-defects branch August 25, 2026 17:56
@openai-sdks openai-sdks Bot mentioned this pull request Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

codex-maintenance Low-risk maintenance changes created by Codex

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants