[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
openai	>=1.109.1 → >=3.36.1

---

Release Notes

openai/openai-python (openai)

v3.36.1

Compare Source

Bug Fixes

• api: honor per-call WebSocket query settings (#​4138) (d40a5e1)
• examples: stop microphone capture between recordings (#​4143) (26e5d92)
• validate browser calls before reading driver state (#​4142) (2bfe460)

Chores

• api: clarify service-account API key deletion (#​4151) (6ed945e)

Refactors

• prepare handwritten chunked upload runtime (#​4146) (2d58e82)
• prepare handwritten vector-store polling runtime (#​4148) (7cd7028)

v3.36.0

Compare Source

Features

• add Vertex AI support for the Responses API (#​4139) (3e63d33)
• api: add 30-minute cache-write usage counts (#​4111) (5589146)
• api: add compaction trigger IDs (#​4122) (0e5794d)
• api: add custom voice consent management (#​4135) (de6d70d)
• types: prepare native synchronous WebSocket option type (#​4118) (90c0bac)

Bug Fixes

• api: accept canonical batch responses in strict mode (#​4106) (6eaa90e)
• clean up failed WebSocket setup and honor native options (#​4121) (b1a1a10)
• end sync WebSocket recovery when an attempt is interrupted (#​4129) (337769b)
• honor timed Translation receives during terminal cleanup (#​4132) (ca54146)
• preserve client headers in legacy Beta Realtime connections (#​4130) (8a2a2e0)
• preserve declared aliases during Pydantic v1 validation (#​4119) (8b1cac9)
• preserve Vertex API root for response lifecycle (#​4140) (c2b14f5)
• preserve WebSocket close across recovery and cancellation (#​4117) (4590ff1)
• realtime: honor native options for legacy beta sockets (#​4120) (8968560)

Chores

• api: clarify cache-write token totals (#​4136) (55b8b8a)
• api: clarify project API key update requirements (#​4131) (0e6be9f)
• api: maintain voice consent compatibility (#​4137) (07abe06)
• api: use neutral moderation examples (#​4104) (553703e)
• restore generated Castiron reporting scripts (#​4113) (9d12b56)
• support next checkpoints in the trusted reporter (#​4128) (ae2a6c2)

Documentation

• plan the Python generated-code transition (#​4114) (6a52987)
• record Python transition progress and batch follow-up work (#​4116) (46e3680)

v3.35.1

Compare Source

Bug Fixes

• preserve beta Realtime byte reads on websockets 13 (#​4102) (5766349)

v3.35.0

Compare Source

Features

• api: add typed Live sideband events (#​4099) (8d5cbf0)
• api: add ultrafast service tier for Agents (#​4101) (100bf8f)

Bug Fixes

• realtime: preserve byte receives with websockets 13 (#​4098) (309916e)

v3.34.0

Compare Source

Features

• api: add degraded external storage status (#​4097) (b216cb2)
• api: add Realtime Translation WebSocket sessions (#​4095) (bfada50)

v3.33.0

Compare Source

Features

• api: add safety identifiers to image requests and responses (#​4093) (c969e32)
• api: share Decisions cache breakpoint parameter type (#​4092) (f7cefda)

v3.32.0

Compare Source

Features

• api: add cache settings and key options [2/2] (#​4087) (325da45)
• api: add prompt-based voice creation (#​4091) (2e39db7)
• api: add regional processing residency options (#​4081) (21ce0c2)
• api: add response error diagnostics and model notices (#​4086) (e71d781)
• api: support audio fixture playback in Live sessions (#​4085) (9998c1a)
• api: support Decisions in Live sessions (#​4088) (230a923)

Bug Fixes

• api: declare Realtime response error messages (#​4083) (95dbee9)

Chores

• api: clarify Decisions request and response fields (#​4079) (d42accb)

Refactors

• share WebSocket connection handling (#​4084) (70d4738)

v3.31.0

Compare Source

Features

• add browser and computer toolsets (1/4) (#​4073) (47b9e4e)

v3.30.0

Compare Source

Features

• api: add beta session spending limits (#​4058) (b570279)
• api: add OCI external-storage provider support (#​4060) (9eb83fe)
• api: add organization Decisions usage reporting (#​4062) (5e7a23e)
• api: expose image tool error and moderation details (#​4072) (c5452af)
• api: support image URLs and detailed safety alert explanations (#​4061) (3c50399)
• api: support updating project API key expiry (#​4066) (1f05e33)

Bug Fixes

• streaming: restore async HTTP/1.1 connection reuse (#​4041) (1f6cfe1)

Chores

• api: clarify agent tool limits and environment pagination (#​4065) (0f73f1d)

v3.29.0

Compare Source

Features

• api: add billing_not_active session error code (#​4052) (c88b320)
• api: add shida to named Live voices (#​4053) (7352cf5)
• api: add vault updates and metadata filters (#​4047) (e72f493)
• api: align beta pagination limits and non-null parameters (#​4057) (800899e)

Chores

• api: clarify decision creation documentation (#​4054) (16d3d3b)
• api: clarify Decisions question and answer descriptions (#​4051) (895d617)
• api: document 128-character safety identifiers (#​4050) (2c1ae52)
• api: document decision choice constraints (#​4055) (b7a1990)
• api: document Files API rate-limit responses (#​4049) (f6a3459)

v3.28.0

Compare Source

Features

• api: add agent environment suspension and expiration (#​4046) (6aa25a9)

Chores

• deps: bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (#​4026) (8bfffd4)
• deps: bump CodeQL init and analyze to 4.38.2 (#​4025) (4f5e618)
• deps: update PyJWT security constraint to 2.14.0 (#​3991) (aaed2a7)

v3.27.0

Compare Source

Features

• api: add prewarmed hosted environments (#​4043) (c511a77)

v3.26.1

Compare Source

Bug Fixes

• api: correct custom voice creation parameters (#​4038) (b9bc5c1)

v3.26.0

Compare Source

Features

• api: add standalone Decisions support (#​4033) (b99e3e4)

v3.25.0

Compare Source

Features

• agents: observe local tool failures (#​4028) (95d9645)
• agents: run local tools during streamed session creation (#​4027) (919b623)
• api: add agent turn items and usage source grouping (#​4030) (bd74c4e)
• lib: export type_to_response_format_param publicly (#​2993) (becc1d2)
• tools: support tool search (defer_loading=true) in typed function helpers (#​4029) (eec627f)

v3.24.0

Compare Source

Features

• api: add custom voice creation and agent session events (#​4013) (e5de2e5)

Bug Fixes

• api: prioritize Python request routing fields (#​4014) (ffcc4c4)
• api: prioritize routing fields in parse helpers (#​4016) (ba53a10)

v3.23.0

Compare Source

Features

• agents: [1/n] return typed answers from session streams (#​4007) (10f8816)
• agents: stage files and download turn artifacts (#​4009) (4fc2438)
• api: Add session traces and Realtime translations (#​4001) (138e3d1)
• beta: expose typed application actions as agent tools (#​4006) (f219c55)
• collect final output from beta Agents streams (157ac4c)

Bug Fixes

• api: allow original image detail in Chat Completions (#​4005) (8a136c2)
• api: correct the eval run cancellation endpoint (#​4003) (28c5c9a)
• api: retain WebSocket endpoint paths and query parameters (#​3999) (7f203fd)
• keep Castiron budget results valid when main advances (#​4012) (73f189b)
• responses: avoid replaying uncertain typed sends on reconnect (#​4011) (1dbbf61)
• responses: respect send queue limits during reconnect (#​4000) (50f95ac)
• use monotonic clock for file processing timeout (#​3748) (58aca1d)

Chores

• api: retain WebRTC Live session transport types (#​4002) (5c9ace9)
• deps-dev: bump pyright from 1.1.413 to 1.1.414 (#​3902) (a91d779)
• deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#​3976) (f15f43c)
• deps: bump CodeQL actions to 4.38.1 (#​3974) (fb70d66)

v3.22.1

Compare Source

Bug Fixes

• api: correct the missing authentication error message (#​3993) (51692ed), closes #​3962
• transform NotRequired typed dictionary fields (#​3995) (5544c18)

Chores

• tests: mark sample_file.txt as text with LF line endings (#​3879) (fd78a48)

Documentation

• examples: fix two stale example comments (#​3877) (1c4830b)
• examples: print event.delta in the streaming helpers doc (#​3876) (063375b)

v3.22.0

Compare Source

Features

• api: add computer use to beta agents (#​3989) (f5dddb5)

v3.21.0

Compare Source

Features

• api: add GPT-6.1 Sol model identifier (#​3986) (160b2c0)

v3.20.0

Compare Source

Features

• api: add Agents credential and session options (#​3967) (bb68198)
• api: add Cyber access programs to Responses (#​3956) (09c5b6f)
• responses: opt in to incremental WebSocket text and tool snapshots (#​3973) (d0207b4)
• responses: preserve detailed WebSocket accumulator snapshots (#​3981) (a380cf2)

Bug Fixes

• client: retry unmapped TLS transport errors (#​3982) (0d35a26)
• live: avoid hangs at fractional transcript grouping deadlines (#​3970) (4ef4129)
• live: keep query parameters out of WebSocket endpoint paths (#​3972) (f9c458b)
• live: preserve caller queues and prevent uncertain WebSocket replay (#​3980) (80e9686)
• realtime: preserve base URL queries in WebSocket upgrades (#​3971) (f7bd4a7)
• realtime: retain configured queues without replaying attempted sends (#​3978) (a52805c)

Chores

• api: clarify documented API error responses (#​3965) (384fee3)
• api: document batch error responses (#​3961) (6e4a79c)
• api: document files and uploads error responses (#​3960) (a9d727f)
• api: document fine-tuning and model errors (#​3964) (5d4003c)
• api: document Responses not-found errors (#​3959) (63099e7)
• api: document stored chat completion errors (#​3963) (a73fe0c)

v3.19.2

Compare Source

Bug Fixes

• preserve single files for fallback extraction paths (#​3875) (bfd3680)

Chores

• api: clarify approximate web search location defaults (#​3953) (a95c95e)
• api: clarify Realtime modality array definitions (#​3954) (e79cf53)
• api: correct fine-tuning bounds and Realtime response reference (#​3949) (325a948)

v3.19.1

Compare Source

Bug Fixes

• chat: preserve single-pass tool iterables (#​3770) (33ffa1f)
• client: merge HTTP headers case-insensitively (#​3486) (5e39766)

Chores

• api: clarify Chat Completions seed limits (#​3945) (be9d666)

Documentation

• clarify collaborator-only pull request policy (#​3948) (ead1fa2)

v3.19.0

Compare Source

Features

• api: add GCP external storage support (#​3943) (d12d60f)
• api: add GPT-Rosalind research model (#​3940) (d041d73)

Bug Fixes

• _utils/_transform: propagate api_exclude in _async_transform_recursive (#​3324) (161ae65)
• api: handle omission markers in queued WebSocket events (#​3944) (63e4616)
• client: retry only replayable request content (#​3771) (6e0c2be)
• client: tolerate older optional aiohttp installations (#​3941) (0d91efb)
• helpers: use asyncio.get_running_loop() inside async methods (#​3289) (bac3545)

v3.18.0

Compare Source

Features

• api: add GPT-6 Sol and Luna model identifiers (#​3935) (455ce1b)

v3.17.0

Compare Source

Features

• api: add external storage configuration management (#​3909) (6332577)
• api: add safety case retrieval (#​3911) (a87b938)
• api: add safety warning and deactivation webhook events (#​3908) (19f1f37)
• api: add session environment reset events (#​3913) (69a2c1d)
• api: add SIP media security to incoming call events (#​3907) (c377eb2)
• api: support environment variable vault credentials (#​3905) (eeebc53)

Bug Fixes

• api: correct model types and network policy docs (618bb31)
• api: preserve model choices and defer error response docs (#​3931) (6e7a90f)
• lib: treat null message content as empty in parse_response (#​3851) (fab5283)
• lib: use log.warning instead of the deprecated log.warn (#​3878) (56b1708)

Chores

• api: document API error response contracts (#​3917) (fededc9)
• api: document response management resources (#​3912) (eaa5b77)
• deps: bump actions/github-script from 7.1.0 to 9.0.0 (#​3769) (32e07e1)
• deps: bump actions/upload-artifact from 5.0.0 to 7.0.1 (#​3767) (b413abe)
• deps: bump CodeQL init and analyze to 4.37.8 (#​3765) (f95237f)
• deps: bump CodeQL init and analyze to 4.37.8 (#​3766) (690a8b5)
• deps: bump httpx2 from 2.7.0 to 2.12.0 in the python-security group across 1 directory (#​3823) (9b8e399)
• deps: bump openai/codex-action from 1.11 to 1.12 (#​3768) (9c1579b)

v3.16.2

Compare Source

Bug Fixes

• parsing: drop TextFormatT parameterization in parse_response to fix memory leak (#​3084) (#​3088) (009b7f6)

v3.16.1

Compare Source

Bug Fixes

• api: avoid loading unrelated API resources on first use (#​3898) (68e4317)

v3.16.0

Compare Source

Features

• api: add webhook endpoint management (#​3892) (9a11f6e)

Chores

• api: deprecate MCP connector_id (#​3894) (1ccaf07)

v3.15.0

Compare Source

Features

• api: add agent session model settings (#​3882) (4b15817)
• api: add audio-mini model choices (#​3886) (a6eeb3f)
• api: add compaction progress events (#​3866) (98e1d24)
• api: add managed Responses WebSocket sessions (#​3887) (3b865af)
• api: add prompt-cache prewarming (#​3888) (8f7cdb8)

Bug Fixes

• preserve chat stream moderation results (#​3864) (b77076d)

Chores

• api: clarify incoming SIP call ID usage (#​3885) (f0457ab)
• api: update image request examples (#​3889) (bb79676)

Documentation

• realtime: remove nonexistent type imports (#​3869) (2971aaf)

v3.14.1

Compare Source

Bug Fixes

• client: validate retry limits and preserve application errors (#​3867) (f86c721)
• correct typo "th" to "the" in StreamAlreadyConsumed error message (#​3022) (7186203)
• examples: correct Azure endpoint hostname (#​3298) (543516c)
• examples: refresh chat streaming examples (#​2974) (54f460e)
• examples: split push-to-talk shebang arguments (#​3210) (d241ed6)
• examples: use uv in remaining Python launchers (#​3821) (8c76c4f)
• log only metadata for Live WebSocket diagnostics (#​3865) (ccc10f5)
• responses: skip structured parsing for commentary (#​3861) (6520df1)

Chores

• examples: bump module_client.py to gpt-5.6 (#​3211) (1493321)
• remove unused fine-tuning data validators (#​3863) (9640f29)

Documentation

• clarify async client cleanup (#​2388) (a3d83b5)
• clarify filenames for in-memory file uploads (#​3729) (cb27380)
• client: correct retry jitter comment (#​2252) (bdbbc16)
• fix Realtime docstring wording (#​3535) (8cb9ded)
• fix reusing wording in Azure client docstrings (#​3061) (dc625f9)
• fix streaming comment typo (#​3005) (d421d7a)
• fix vector store polling helper paths (#​3101) (2ef2de6)
• readme: correct SSE terminology (#​2837) (caaa9b4)
• update Responses API reference link (#​3279) (557bd06)
• utils: correct query component RFC reference (#​3300) (929a8a5)

v3.14.0

Compare Source

Features

• streaming: normalize errors raised while reading streams (#​3827) (d7c41ef)

Bug Fixes

• bound vector store file polling (#​3401) (ae41bc4)
• example: refresh realtime push_to_talk_app session types (#​2926) (0b7ad38)
• files: normalize PathLike upload tuples (#​3475) (90ac74c)
• include completion in content filter errors (#​3094) (e57a1b1)
• logging: support standard OPENAI_LOG levels (#​3734) (44000e0)
• normalize API error codes to strings (#​3532) (233d955), closes #​3531
• preserve response stream indexes after empty items (#​3126) (8f84fbd)
• responses: handle null text in output_text (#​3019) (df6b72c)

Documentation

• use the vision guide image in README example (#​3849) (1ed8902)

v3.13.0

Compare Source

Features

• api: add Agents API (1c4284a)

v3.12.0

Compare Source

Features

• api: Add Live API (0e4bfef)

Bug Fixes

• add aclose() to AsyncStream for standard async cleanup (#​2854) (802b334)
• handle bare dict and list annotations without type arguments (#​3760) (c7e8c03)
• preserve finalized output on null response completion (#​3345) (adb212e)

v3.11.0

Compare Source

Features

• api: Add expiration controls for service account keys (#​3825) ([f348e

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Ho_Chi_Minh)

• Branch creation
  • "before 5am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​openai@​2.38.0 ⏵ 3.41.0	-15

View full report

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for openai resolved to version 3.41.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 3.36.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/