Skip to content

chore(deps,middleware)(deps): bump openai from 6.49.0 to 7.4.0 in /middleware - #653

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/openai-7.4.0
Closed

chore(deps,middleware)(deps): bump openai from 6.49.0 to 7.4.0 in /middleware#653
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/openai-7.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps openai from 6.49.0 to 7.4.0.

Release notes

Sourced from openai's releases.

v7.4.0

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)

v7.3.0

7.3.0 (2026-07-31)

Full Changelog: v7.2.0...v7.3.0

Features

  • api: content provenance checks (c6f9339)

Chores

Documentation

  • organize SDK guides and repository metadata (#2032) (275dff4)
  • remove root-level provider guides (98a2ae7)

... (truncated)

Changelog

Sourced from openai's changelog.

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)

7.3.0 (2026-07-31)

Full Changelog: v7.2.0...v7.3.0

Features

  • api: content provenance checks (c6f9339)

Chores

Documentation

  • organize SDK guides and repository metadata (#2032) (275dff4)
  • remove root-level provider guides (98a2ae7)

7.2.0 (2026-07-30)

... (truncated)

Commits
  • 83c437f release: 7.4.0 (#2055)
  • a97cbff ci: prepare checks for merge queue (#2066)
  • 481b325 build(deps-dev): bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064)
  • 3576574 build(deps): bump dotenv from 16.6.1 to 17.4.2 (#2065)
  • 823d7df build(deps-dev): bump publint from 0.2.12 to 0.3.22 (#2058)
  • f61f267 build(deps-dev): bump @​types/web from 0.0.194 to 0.0.354 (#2061)
  • 85ea6b2 [dependabot] Configure a seven-day npm cooldown (#2054)
  • 4d927de build(deps): bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel...
  • 590982f build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edg...
  • 6d8fb53 feat(api): Add gpt-5.5 model and tool metadata fields (#2049)
  • Additional commits viewable in compare view


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@dependabot dependabot Bot added deps Dependency updates (Dependabot) middleware middleware/ workspace labels Aug 10, 2026
Bumps [openai](https://github.com/openai/openai-node) from 6.49.0 to 7.4.0.
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.49.0...v7.4.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/middleware/openai-7.4.0 branch from de05494 to ac92531 Compare August 11, 2026 06:23
@Weegy

Weegy commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Superseded by #658, which consolidates this run into a single verified change — all required checks green (Node 22.22.3, CI job order: npm ci → build → lint → typecheck → test; 6094 pass / 0 fail / 4 skipped; npm audit 0 high / 0 critical).

Closing so the batch is reviewed once instead of four times. Reopen if #658 is dropped.

@Weegy Weegy closed this Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/middleware/openai-7.4.0 branch August 11, 2026 06:37
Weegy added a commit that referenced this pull request Aug 11, 2026
Consolidates the Dependabot PRs raised against main after #638 and #615
merged, superseding #651, #653, #654 and #655. All five PRs in this run
target /middleware only; web-ui is untouched.

openai 6.46.0 -> 7.4.0, @types/node 26.1.1 -> 26.2.0 (dev),
@aws-sdk/client-s3 3.1075.0 -> 3.1107.0, undici 8.5.0 -> 8.10.0.

@types/node is also raised from ^25.9.3 to ^26.2.0 in packages/canvas-core,
packages/conductor-core and packages/dev-runner-shim, and @aws-sdk/client-s3
is mirrored in packages/harness-diagrams, so the workspace manifests stop
skewing from the root. @types/node and @aws-sdk/client-s3 take the current
resolution rather than the bot's, which had already gone stale.

openai 7.0.0's only breaking change is that it requires Node.js 22 — there
are no API changes. That is already satisfied: engines is ">=22.13.0 <23",
.nvmrc is 22.22.3, every CI job pins node 22, and all Dockerfiles are on
node:22.23.2. The import surface is three source locations plus two tests,
deliberately funnelled through llm-adapter-openai's openaiClient.ts.

Excludes #652 (cookie 0.7.2 -> 2.0.1): v2 removed the deprecated `parse`
export in favour of `parseCookie` and went ESM-only, and we import exactly
that removed symbol in src/auth/operatorAuthAccessor.ts. It also sits in the
session-verification path, so it is handled as its own reviewable PR.

Verified on Node 22.22.3 in CI job order: build, lint (0 errors), typecheck
and 6094 pass / 0 fail / 4 skipped, with npm audit reporting 0 high /
0 critical.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates (Dependabot) middleware middleware/ workspace

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant