Skip to content

chore(deps): bump openai from 6.49.0 to 7.8.0 - #249

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openai-7.8.0
Open

chore(deps): bump openai from 6.49.0 to 7.8.0#249
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openai-7.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps openai from 6.49.0 to 7.8.0.

Release notes

Sourced from openai's releases.

v7.8.0

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

v7.7.0

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

v7.6.0

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

  • [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)

... (truncated)

Commits
  • 31fae53 release: 7.8.0 (#2493)
  • f9b1313 feat(api): add compute_units to Responses and Chat Completions usage (#2505)
  • b21ff45 fix(deps): harden dependency and release boundaries (#2484)
  • a4a80eb test: exercise direct browser imports without credentials (#2501)
  • c8cab1e fix: restore native browser ESM imports (#2495)
  • d691a10 test: execute webpack browser bundle without live credentials (#2498)
  • 7ef99c4 test: verify packed browser bundles target ES2020 (#2496)
  • b86efac ci: require keyless ecosystem checks on release PRs (#2497)
  • 08f201c ci: gate npm publication on browser-compatible imports (#2500)
  • 44af438 test: cover webpack ESM and CommonJS package entrypoints (#2499)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [openai](https://github.com/openai/openai-node) from 6.49.0 to 7.8.0.
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.49.0...v7.8.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
@codereviewbot-ai

Copy link
Copy Markdown

馃 Review skipped: reviews for bot-created pull requests are not allowed on free accounts. Upgrade to a paid plan to enable bot reviews.

@codeant-ai

codeant-ai Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants