Skip to content

Bump the python-dependencies group with 2 updates - #3

Merged
antonkayai merged 1 commit into
mainfrom
dependabot/pip/python-dependencies-155a1d57a9
Jul 29, 2026
Merged

Bump the python-dependencies group with 2 updates#3
antonkayai merged 1 commit into
mainfrom
dependabot/pip/python-dependencies-155a1d57a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 2 updates: openai and openai-agents.

Updates openai from 2.48.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)
Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)
Commits

Updates openai-agents from 0.18.3 to 0.19.1

Release notes

Sourced from openai-agents's releases.

v0.19.1

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-python@v0.19.0...v0.19.1

v0.19.0

Key Changes

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added agents.tool.ProgrammaticToolCallingTool, which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added retries for WebSocket overloads that occur before a response starts.
  • Added VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

What's Changed

... (truncated)

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

  • Bug fixes
  • New features
  • Changes to private interfaces
  • Updates to beta features

Breaking change changelog

0.19.0

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added [ProgrammaticToolCallingTool][agents.tool.ProgrammaticToolCallingTool], which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added provider retry guidance for WebSocket overloads that occur before a response starts so opt-in Runner retry policies can act when replay is permitted.
  • Added create-time-only S3 mounts for Vercel sandboxes through VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

  • Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
</tr></table> 

... (truncated)

Commits
  • ddc39d0 Release 0.19.1 (#4010)
  • 1dddc0d feat(sandbox): support native host paths in path grants (#4009)
  • e75cdd2 fix: cancel sibling enablement checks on failure (#4005)
  • 3f45d9e fix: honor falsey input builders in agent-tools (#4007)
  • 71aa44e Preserve zero Blobfuse attribute cache timeout (#4006)
  • 3142f3a fix(run): cancel streamed models when input guardrails fail (#4004)
  • e8311b4 fix(run): count streamed retries when terminal usage is missing (#4002)
  • 35c8805 fix(memory): count valid SQLite session items for positive limits (#4001)
  • bb3d64e docs: update translated pages
  • f1becff docs: update missing info
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 2 updates: [openai](https://github.com/openai/openai-python) and [openai-agents](https://github.com/openai/openai-agents-python).


Updates `openai` from 2.48.0 to 2.50.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.48.0...v2.50.0)

Updates `openai-agents` from 0.18.3 to 0.19.1
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.18.3...v0.19.1)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: openai-agents
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates python Python dependencies and compatibility labels Jul 29, 2026

@antonkayai antonkayai left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed as a lockfile-only update. The public dependency ranges remain unchanged, upstream releases are compatible with Python 3.11+, and the full Python 3.11-3.14 CI/build matrix passes.

@antonkayai
antonkayai merged commit ce0bcb8 into main Jul 29, 2026
6 checks passed
@antonkayai
antonkayai deleted the dependabot/pip/python-dependencies-155a1d57a9 branch July 29, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates python Python dependencies and compatibility

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant