chore(deps,middleware)(deps): bump openai from 6.49.0 to 7.4.0 in /middleware - #653
chore(deps,middleware)(deps): bump openai from 6.49.0 to 7.4.0 in /middleware#653dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [openai](https://github.com/openai/openai-node) from 6.49.0 to 7.4.0. - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.49.0...v7.4.0) --- updated-dependencies: - dependency-name: openai dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
de05494 to
ac92531
Compare
|
Superseded by #658, which consolidates this run into a single verified change — all required checks green (Node 22.22.3, CI job order: Closing so the batch is reviewed once instead of four times. Reopen if #658 is dropped. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Consolidates the Dependabot PRs raised against main after #638 and #615 merged, superseding #651, #653, #654 and #655. All five PRs in this run target /middleware only; web-ui is untouched. openai 6.46.0 -> 7.4.0, @types/node 26.1.1 -> 26.2.0 (dev), @aws-sdk/client-s3 3.1075.0 -> 3.1107.0, undici 8.5.0 -> 8.10.0. @types/node is also raised from ^25.9.3 to ^26.2.0 in packages/canvas-core, packages/conductor-core and packages/dev-runner-shim, and @aws-sdk/client-s3 is mirrored in packages/harness-diagrams, so the workspace manifests stop skewing from the root. @types/node and @aws-sdk/client-s3 take the current resolution rather than the bot's, which had already gone stale. openai 7.0.0's only breaking change is that it requires Node.js 22 — there are no API changes. That is already satisfied: engines is ">=22.13.0 <23", .nvmrc is 22.22.3, every CI job pins node 22, and all Dockerfiles are on node:22.23.2. The import surface is three source locations plus two tests, deliberately funnelled through llm-adapter-openai's openaiClient.ts. Excludes #652 (cookie 0.7.2 -> 2.0.1): v2 removed the deprecated `parse` export in favour of `parseCookie` and went ESM-only, and we import exactly that removed symbol in src/auth/operatorAuthAccessor.ts. It also sits in the session-verification path, so it is handled as its own reviewable PR. Verified on Node 22.22.3 in CI job order: build, lint (0 errors), typecheck and 6094 pass / 0 fail / 4 skipped, with npm audit reporting 0 high / 0 critical.
Bumps openai from 6.49.0 to 7.4.0.
Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
83c437frelease: 7.4.0 (#2055)a97cbffci: prepare checks for merge queue (#2066)481b325build(deps-dev): bump@smithy/hash-nodefrom 4.3.5 to 4.4.15 (#2064)3576574build(deps): bump dotenv from 16.6.1 to 17.4.2 (#2065)823d7dfbuild(deps-dev): bump publint from 0.2.12 to 0.3.22 (#2058)f61f267build(deps-dev): bump@types/webfrom 0.0.194 to 0.0.354 (#2061)85ea6b2[dependabot] Configure a seven-day npm cooldown (#2054)4d927debuild(deps): bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel...590982fbuild(deps): bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edg...6d8fb53feat(api): Add gpt-5.5 model and tool metadata fields (#2049)Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.