Skip to content

deps(deps): bump openai from 7.3.0 to 7.8.0 in /SortVision - #1000

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/openai-7.8.0
Open

deps(deps): bump openai from 7.3.0 to 7.8.0 in /SortVision#1000
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/openai-7.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps openai from 7.3.0 to 7.8.0.

Release notes

Sourced from openai's releases.

v7.8.0

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

v7.7.0

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

v7.6.0

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

  • [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)

... (truncated)

Commits
  • 31fae53 release: 7.8.0 (#2493)
  • f9b1313 feat(api): add compute_units to Responses and Chat Completions usage (#2505)
  • b21ff45 fix(deps): harden dependency and release boundaries (#2484)
  • a4a80eb test: exercise direct browser imports without credentials (#2501)
  • c8cab1e fix: restore native browser ESM imports (#2495)
  • d691a10 test: execute webpack browser bundle without live credentials (#2498)
  • 7ef99c4 test: verify packed browser bundles target ES2020 (#2496)
  • b86efac ci: require keyless ecosystem checks on release PRs (#2497)
  • 08f201c ci: gate npm publication on browser-compatible imports (#2500)
  • 44af438 test: cover webpack ESM and CommonJS package entrypoints (#2499)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [openai](https://github.com/openai/openai-node) from 7.3.0 to 7.8.0.
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.3.0...v7.8.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from alienx5499 as a code owner August 31, 2026 02:12
@dependabot dependabot Bot added automated dependencies Pull requests that update a dependency file npm labels Aug 31, 2026
@vercel

vercel Bot commented Aug 31, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sortvision Ready Ready Preview Aug 31, 2026 2:16am

@github-actions

Copy link
Copy Markdown

QA suite report

Metric Value
Total tests 655
Passed 655
Failed 0
Warnings 0
Pass rate 100.0%
Grade S+
Duration 4.26s

Result: passed.

View workflow run

QA vs main (last successful CI on base branch)

Baseline: last green Continuous integration on main @ a262af5 (same test:ci suite).

Base This PR Δ passed
Passed 655 655 0
Failed 0 0
Total 655 655

Fixed (failed on base, passing on this PR)

None

New failures (failed on this PR; were not failing on base)

None

Still failing (failed on base and still failing on this PR)

None

@github-actions

Copy link
Copy Markdown

Dependabot auto-merge

Could not enable auto-merge after Continuous integration succeeded.

Common causes: auto-merge disabled in repo settings, branch protection (reviews / code owners), merge queue rules, or token permissions.

CLI output:

GraphQL: Auto merge is not allowed for this repository (enablePullRequestAutoMerge)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file npm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant