Update dependency openai to v3

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
openai	>=1.109,<1.110 → >=3.24,<3.25

---

Release Notes

openai/openai-python (openai)

v3.24.0

Compare Source

Features

• api: add custom voice creation and agent session events (#​4013) (e5de2e5)

Bug Fixes

• api: prioritize Python request routing fields (#​4014) (ffcc4c4)
• api: prioritize routing fields in parse helpers (#​4016) (ba53a10)

v3.23.0

Compare Source

Features

• agents: [1/n] return typed answers from session streams (#​4007) (10f8816)
• agents: stage files and download turn artifacts (#​4009) (4fc2438)
• api: Add session traces and Realtime translations (#​4001) (138e3d1)
• beta: expose typed application actions as agent tools (#​4006) (f219c55)
• collect final output from beta Agents streams (157ac4c)

Bug Fixes

• api: allow original image detail in Chat Completions (#​4005) (8a136c2)
• api: correct the eval run cancellation endpoint (#​4003) (28c5c9a)
• api: retain WebSocket endpoint paths and query parameters (#​3999) (7f203fd)
• keep Castiron budget results valid when main advances (#​4012) (73f189b)
• responses: avoid replaying uncertain typed sends on reconnect (#​4011) (1dbbf61)
• responses: respect send queue limits during reconnect (#​4000) (50f95ac)
• use monotonic clock for file processing timeout (#​3748) (58aca1d)

Chores

• api: retain WebRTC Live session transport types (#​4002) (5c9ace9)
• deps-dev: bump pyright from 1.1.413 to 1.1.414 (#​3902) (a91d779)
• deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#​3976) (f15f43c)
• deps: bump CodeQL actions to 4.38.1 (#​3974) (fb70d66)

v3.22.1

Compare Source

Bug Fixes

• api: correct the missing authentication error message (#​3993) (51692ed), closes #​3962
• transform NotRequired typed dictionary fields (#​3995) (5544c18)

Chores

• tests: mark sample_file.txt as text with LF line endings (#​3879) (fd78a48)

Documentation

• examples: fix two stale example comments (#​3877) (1c4830b)
• examples: print event.delta in the streaming helpers doc (#​3876) (063375b)

v3.22.0

Compare Source

Features

• api: add computer use to beta agents (#​3989) (f5dddb5)

v3.21.0

Compare Source

Features

• api: add GPT-6.1 Sol model identifier (#​3986) (160b2c0)

v3.20.0

Compare Source

Features

• api: add Agents credential and session options (#​3967) (bb68198)
• api: add Cyber access programs to Responses (#​3956) (09c5b6f)
• responses: opt in to incremental WebSocket text and tool snapshots (#​3973) (d0207b4)
• responses: preserve detailed WebSocket accumulator snapshots (#​3981) (a380cf2)

Bug Fixes

• client: retry unmapped TLS transport errors (#​3982) (0d35a26)
• live: avoid hangs at fractional transcript grouping deadlines (#​3970) (4ef4129)
• live: keep query parameters out of WebSocket endpoint paths (#​3972) (f9c458b)
• live: preserve caller queues and prevent uncertain WebSocket replay (#​3980) (80e9686)
• realtime: preserve base URL queries in WebSocket upgrades (#​3971) (f7bd4a7)
• realtime: retain configured queues without replaying attempted sends (#​3978) (a52805c)

Chores

• api: clarify documented API error responses (#​3965) (384fee3)
• api: document batch error responses (#​3961) (6e4a79c)
• api: document files and uploads error responses (#​3960) (a9d727f)
• api: document fine-tuning and model errors (#​3964) (5d4003c)
• api: document Responses not-found errors (#​3959) (63099e7)
• api: document stored chat completion errors (#​3963) (a73fe0c)

v3.19.2

Compare Source

Bug Fixes

• preserve single files for fallback extraction paths (#​3875) (bfd3680)

Chores

• api: clarify approximate web search location defaults (#​3953) (a95c95e)
• api: clarify Realtime modality array definitions (#​3954) (e79cf53)
• api: correct fine-tuning bounds and Realtime response reference (#​3949) (325a948)

v3.19.1

Compare Source

Bug Fixes

• chat: preserve single-pass tool iterables (#​3770) (33ffa1f)
• client: merge HTTP headers case-insensitively (#​3486) (5e39766)

Chores

• api: clarify Chat Completions seed limits (#​3945) (be9d666)

Documentation

• clarify collaborator-only pull request policy (#​3948) (ead1fa2)

v3.19.0

Compare Source

Features

• api: add GCP external storage support (#​3943) (d12d60f)
• api: add GPT-Rosalind research model (#​3940) (d041d73)

Bug Fixes

• _utils/_transform: propagate api_exclude in _async_transform_recursive (#​3324) (161ae65)
• api: handle omission markers in queued WebSocket events (#​3944) (63e4616)
• client: retry only replayable request content (#​3771) (6e0c2be)
• client: tolerate older optional aiohttp installations (#​3941) (0d91efb)
• helpers: use asyncio.get_running_loop() inside async methods (#​3289) (bac3545)

v3.18.0

Compare Source

Features

• api: add GPT-6 Sol and Luna model identifiers (#​3935) (455ce1b)

v3.17.0

Compare Source

Features

• api: add external storage configuration management (#​3909) (6332577)
• api: add safety case retrieval (#​3911) (a87b938)
• api: add safety warning and deactivation webhook events (#​3908) (19f1f37)
• api: add session environment reset events (#​3913) (69a2c1d)
• api: add SIP media security to incoming call events (#​3907) (c377eb2)
• api: support environment variable vault credentials (#​3905) (eeebc53)

Bug Fixes

• api: correct model types and network policy docs (618bb31)
• api: preserve model choices and defer error response docs (#​3931) (6e7a90f)
• lib: treat null message content as empty in parse_response (#​3851) (fab5283)
• lib: use log.warning instead of the deprecated log.warn (#​3878) (56b1708)

Chores

• api: document API error response contracts (#​3917) (fededc9)
• api: document response management resources (#​3912) (eaa5b77)
• deps: bump actions/github-script from 7.1.0 to 9.0.0 (#​3769) (32e07e1)
• deps: bump actions/upload-artifact from 5.0.0 to 7.0.1 (#​3767) (b413abe)
• deps: bump CodeQL init and analyze to 4.37.8 (#​3765) (f95237f)
• deps: bump CodeQL init and analyze to 4.37.8 (#​3766) (690a8b5)
• deps: bump httpx2 from 2.7.0 to 2.12.0 in the python-security group across 1 directory (#​3823) (9b8e399)
• deps: bump openai/codex-action from 1.11 to 1.12 (#​3768) (9c1579b)

v3.16.2

Compare Source

Bug Fixes

• parsing: drop TextFormatT parameterization in parse_response to fix memory leak (#​3084) (#​3088) (009b7f6)

v3.16.1

Compare Source

Bug Fixes

• api: avoid loading unrelated API resources on first use (#​3898) (68e4317)

v3.16.0

Compare Source

Features

• api: add webhook endpoint management (#​3892) (9a11f6e)

Chores

• api: deprecate MCP connector_id (#​3894) (1ccaf07)

v3.15.0

Compare Source

Features

• api: add agent session model settings (#​3882) (4b15817)
• api: add audio-mini model choices (#​3886) (a6eeb3f)
• api: add compaction progress events (#​3866) (98e1d24)
• api: add managed Responses WebSocket sessions (#​3887) (3b865af)
• api: add prompt-cache prewarming (#​3888) (8f7cdb8)

Bug Fixes

• preserve chat stream moderation results (#​3864) (b77076d)

Chores

• api: clarify incoming SIP call ID usage (#​3885) (f0457ab)
• api: update image request examples (#​3889) (bb79676)

Documentation

• realtime: remove nonexistent type imports (#​3869) (2971aaf)

v3.14.1

Compare Source

Bug Fixes

• client: validate retry limits and preserve application errors (#​3867) (f86c721)
• correct typo "th" to "the" in StreamAlreadyConsumed error message (#​3022) (7186203)
• examples: correct Azure endpoint hostname (#​3298) (543516c)
• examples: refresh chat streaming examples (#​2974) (54f460e)
• examples: split push-to-talk shebang arguments (#​3210) (d241ed6)
• examples: use uv in remaining Python launchers (#​3821) (8c76c4f)
• log only metadata for Live WebSocket diagnostics (#​3865) (ccc10f5)
• responses: skip structured parsing for commentary (#​3861) (6520df1)

Chores

• examples: bump module_client.py to gpt-5.6 (#​3211) (1493321)
• remove unused fine-tuning data validators (#​3863) (9640f29)

Documentation

• clarify async client cleanup (#​2388) (a3d83b5)
• clarify filenames for in-memory file uploads (#​3729) (cb27380)
• client: correct retry jitter comment (#​2252) (bdbbc16)
• fix Realtime docstring wording (#​3535) (8cb9ded)
• fix reusing wording in Azure client docstrings (#​3061) (dc625f9)
• fix streaming comment typo (#​3005) (d421d7a)
• fix vector store polling helper paths (#​3101) (2ef2de6)
• readme: correct SSE terminology (#​2837) (caaa9b4)
• update Responses API reference link (#​3279) (557bd06)
• utils: correct query component RFC reference (#​3300) (929a8a5)

v3.14.0

Compare Source

Features

• streaming: normalize errors raised while reading streams (#​3827) (d7c41ef)

Bug Fixes

• bound vector store file polling (#​3401) (ae41bc4)
• example: refresh realtime push_to_talk_app session types (#​2926) (0b7ad38)
• files: normalize PathLike upload tuples (#​3475) (90ac74c)
• include completion in content filter errors (#​3094) (e57a1b1)
• logging: support standard OPENAI_LOG levels (#​3734) (44000e0)
• normalize API error codes to strings (#​3532) (233d955), closes #​3531
• preserve response stream indexes after empty items (#​3126) (8f84fbd)
• responses: handle null text in output_text (#​3019) (df6b72c)

Documentation

• use the vision guide image in README example (#​3849) (1ed8902)

v3.13.0

Compare Source

Features

• api: add Agents API (1c4284a)

v3.12.0

Compare Source

Features

• api: Add Live API (0e4bfef)

Bug Fixes

• add aclose() to AsyncStream for standard async cleanup (#​2854) (802b334)
• handle bare dict and list annotations without type arguments (#​3760) (c7e8c03)
• preserve finalized output on null response completion (#​3345) (adb212e)

v3.11.0

Compare Source

Features

• api: Add expiration controls for service account keys (#​3825) (f348ec8)

v3.10.0

Compare Source

Features

• api: add GPT Image 2.5 models and image options (#​3824) (5b39c45)
• api: add service-account API key expiration fields (#​3802) (f1cd7f0)

v3.9.0

Compare Source

Features

• api: Add prompt cache diagnostics (#​3800) (8326784)
• api: correct function argument completion event fields (openapi-545) (#​3801) (2a98f6a)

Bug Fixes

• api: accept incomplete web search call statuses (#​3786) (3cc8d78)
• refuse overflowing server retry delays (#​3799) (88b4d43)

Chores

• api: document throttling and model overload responses — SDK-235 (#​3803) (be92815)
• migrate to forked steady (#​3795) (b24aeda)

v3.8.0

Compare Source

Features

• api: add gpt-6-astra and related features (#​3791) (09f446f)

Documentation

• add canonical SDK security model (#​3778) (2a097b9)

v3.7.0

Compare Source

Features

• api: update usage APIs and documentation (#​3779) (6f0da16)

Bug Fixes

• avoid repeated numpy checks for embeddings (#​3757) (b19c216)

v3.6.0

Compare Source

Features

• api: add compute_units to Responses and Chat Completions usage (#​3749) (52421d1)

Bug Fixes

• auth: harden X.509 workload identity integration (#​3740) (fc3ad6c)

Chores

• deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#​3719) (4f5598c)
• deps-dev: bump mypy from 1.17 to 2.3.1 (#​3747) (0b52c9e)
• deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#​3659) (95f0b43)
• deps-dev: bump pyright from 1.1.399 to 1.1.413 (#​3744) (9917c6e)
• deps-dev: bump rich from 14.2.0 to 15.0.0 (#​3717) (7a5484d)
• deps: bump actions/checkout from 6.0.2 to 7.0.1 (#​3665) (d0a2550)
• deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#​3669) (f627619)
• deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#​3745) (a36010d)

Build System

• deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#​3672) (d765db7)
• deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#​3666) (dacbb66)

v3.5.0

Compare Source

Features

• api: make function call output call IDs optional (#​3738) (c74501d)

v3.4.0

Compare Source

Features

• api: Add obfuscation field to ChatCompletionChunk (#​3690) (c7d8e1d)
• api: add project residency configuration and cost quantity units (#​3726) (bc4f8ef)

Bug Fixes

• api: encode Realtime call offers and session configuration (#​3736) (555ac48)
• apply consistent origin checks to WebSocket redirects (#​3693) (1b324d0)
• azure: encode deployment names consistently (#​3683) (689538d)
• azure: keep provider validation errors value-free (#​3691) (72529c0)
• azure: resolve one authentication mode (#​3689) (e3d0681)
• compute custom-code summaries from trusted workflow code (#​3692) (2b5868d)
• create upload example fixtures in private directories (#​3686) (f36e6f7)
• decode SSE incrementally without limiting event size (#​3687) (2598d53)
• keep Python SDK diagnostics metadata-only (#​3685) (600aa8d)
• Preserve Azure authentication boundaries across transports (#​3684) (06ef57c)
• preserve the configured TLS hostname (#​3694) (aa5fbc4)
• preserve WebSocket send queue byte accounting during flush (#​3688) (96f966d)

Chores

• api: Clarify image background docs and preview support (#​3703) (bedb9a7)
• api: document supported image generation models (#​3695) (8edd9ae)
• api: move chat validation tests out of generated code (#​3698) (9d3ba20)
• api: move webhook tests out of generated code (#​3700) (04ecb3c)
• api: remove redundant generated formatting (#​3696) (5ac1e03)
• api: remove redundant generated test edits (#​3697) (351ef84)
• api: Update SDK generation metadata only (#​3716) (e43b422)
• set a ceiling for Python SDK customization (#​3714) (04d5d79)

Documentation

• api: restore generated ChatKit API index (#​3705) (4534106)
• standardize Python SDK vulnerability disclosure policy (#​3642) (1fc0a21)

Refactors

• api: isolate audio response format selection (#​3701) (ece4324)
• api: isolate vector-store polling helpers (#​3713) (a002ef3)
• api: move file processing polling into SDK-owned helpers (#​3712) (5f20c51)
• api: share embedding response decoding (#​3699) (50de9af)
• api: share webhook signature verification (#​3704) (e14ac34)

v3.3.1

Compare Source

Bug Fixes

• deps: update dependencies with published security fixes (#​3680) (53aa4fc)

Chores

• build: migrate to uv (#​3653) (b37e85d)
• deps: remove jsonschema and unused fixture-validation dependencies (0dfdfdd)
• lock the repository Pyright toolchain (#​3678) (3079be2)
• run the mock server from locked local tooling (#​3679) (370fcc6)

Refactors

• deps: use the standard library for platform detection (d5b0065)

Build System

• replace the external README metadata hook (e673ca8)

v3.3.0

Compare Source

Features

• support named data-residency endpoints (#​3646) (11ee914)

Bug Fixes

• require patched optional networking dependencies (#​3651) (40e56de)

Chores

• remove unused dependencies and pin build tooling (#​3650) (eee8e4a)

Documentation

• strengthen Python SDK security contribution guidance (#​3639) (6577709)

v3.2.0

Compare Source

Features

• add Bedrock Runtime endpoint support (SDK-290) (#​3623) (86267d2)
• api: Add shell call streaming events and new service/image types (#​3635) (ff14a33)

v3.1.0

Compare Source

Features

• api: add WebSocket stream IDs (#​3612) (d9029e3)
• api: add workload identity access token issued event (#​3601) (df274d4)
• api: deprecate Sora video APIs (#​3610) (721cb1c)
• api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#​3617) (f38355e)

Chores

• remove Stainless attribution and infrastructure (#​3599) (a1eeab5)

v3.0.0

Compare Source

⚠ BREAKING CHANGES

• api: HTTPX2 is now the default HTTP client, and httpx is no longer installed automatically. Applications using custom HTTPX clients, transports, or configuration objects must migrate to their HTTPX2 equivalents or use the temporary, runtime-only legacy HTTPX escape hatch. See the HTTPX2 migration guide.

Features

• api: migrate to HTTPX2 (#​3594)

v2.54.0

Compare Source

Features

• api: Add new Responses model identifiers (#​3595) (0652787)

Bug Fixes

• api: clarify audio upload metadata requirements (#​3596) (28888f9)

Chores

• api: Update generated-file header attribution to Castiron (#​3583)

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE