Skip to content

fix(deps): update dependency @openai/agents-core to ^0.17.0 - #4492

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-augment-dependencies-(minor)
Open

fix(deps): update dependency @openai/agents-core to ^0.17.0#4492
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-augment-dependencies-(minor)

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@openai/agents-core (source) ^0.14.0^0.17.0 age confidence

Release Notes

openai/openai-agents-js (@​openai/agents-core)

v0.17.0

Compare Source

Key Changes

Output-guardrail replay safety

Serialized output-bearing approval checkpoints now fail closed with UserError when the SDK cannot prove which response owns a pending terminal tool output. Continue with the live RunState when possible, or start a new run from safe input instead of replaying ambiguous serialized items. When an output guardrail rejects a completed function-tool result used as final output, the SDK replaces rejected content in SDK-owned replay surfaces with Output withheld by an output guardrail., sanitizes current guardrail metadata, and preserves earlier accepted history. This does not undo external tool side effects or erase application-owned copies.

Complete guardrail batch results

Guardrails started in the same batch now settle before the runner surfaces a tripwire or execution failure. Completed sibling results remain available in run state while further run processing is halted.

Explicit OpenAI client configuration

OpenAIProvider now rejects organization or project when openAIClient is also supplied because provider-level values cannot modify an already-created client. Configure these values when constructing the OpenAI client, then pass that client through openAIClient.

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.16.1...v0.17.0

v0.16.1

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.16.0...v0.16.1

v0.16.0

Compare Source

Key Changes

Deterministic SDK testing utilities

This release adds provider-neutral testing utilities through @openai/agents/testing, @openai/agents-core/testing, @openai/agents/realtime/testing, and @openai/agents-realtime/testing. ScriptedModel, scriptedSandboxSession(), and ScriptedRealtimeTransport let applications exercise runner, sandbox, and Realtime workflows without live model, sandbox, WebRTC, or WebSocket dependencies. Existing runtime entry points and defaults remain unchanged.

Standard Schema inputs and outputs

Tools, handoffs, and agent structured outputs now accept supported Standard Schema values alongside Zod and raw JSON Schema. The schema must provide synchronous ~standard.validate behavior plus ~standard.jsonSchema.input() and ~standard.jsonSchema.output(), and generated schemas must have an object root. Standard Schema function-tool parameters require strict mode; use a Zod schema, raw JSON Schema, or application-side validation for unsupported cases.

Safer run, provider, and Realtime behavior

CallModelInputFilter can opt into stable prepared-item identity with preserveInputIdentity = true; default filters continue to receive deep copies, and the SDK does not freeze opted-in items. The release also tightens interruption snapshots, max-turn finalization, invalid tool-output redaction, Responses parallel-tool-call forwarding, Chat Completions reasoning placement, Realtime audio-rate fallback, and unsupported assistant-audio history replay handling.

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.15.0...v0.16.0

v0.15.0

Compare Source

Key Changes

OpenAI client compatibility and the new default model

This release requires openai 7.2 or later for applications that supply their own OpenAI client. Agents without an explicit model now use gpt-5.6-luna with reasoning.effort: "none" and text.verbosity: "low". Configure an explicit model or set OPENAI_DEFAULT_MODEL when an application needs a different default.

MCP v2 negotiation with legacy server support

Local MCP connections now use the MCP TypeScript SDK v2 client and negotiate the 2026-07-28 protocol where available, with compatible fallback for existing v1 servers. Applications using MCPServerStdio, MCPServerStreamableHttp, or MCPServerSSE do not need to bridge the v1 and v2 SDK packages themselves.

Durable input, tool output, and retry state

RunState.addInput() can stage new input while a run is paused, and pendingInput survives serialization until the next safe model request. JSON-compatible tool return values retain their structure across RunState serialization, while canonical invocation evidence prevents approved or completed local tool calls from being rebound incorrectly. Applications may explicitly approve an otherwise unsafe non-streaming model replay with approveUnsafeReplay: true.

Safer sandbox mount credentials

Credential-bearing in-container mounts now fail closed unless the application acknowledges the exact effective mount path with Manifest.withInContainerMountCredentialExposureAcknowledged() or, for ambient and external authority, Manifest.withInContainerMountBroadCredentialExposureAcknowledged(). Serialized credentials and unsafe mount authority are never trusted on resume. The deprecated Vercel allowS3CredentialExposure: true option remains available for released inline S3 configurations.

React Native and Realtime improvements

Core and Realtime packages now publish React Native conditions for portable shims. React Native applications provide an app-owned native WebRTC transport and retain responsibility for permissions, audio routing, and transport lifecycle. Realtime configuration also supports GA transcription models and context options, while closing browser WebRTC transports no longer stops caller-owned media streams.

More faithful provider and adapter results

The OpenAI and AI SDK adapters now preserve additional provider behavior across streaming and non-streaming runs, including Chat Completions audio, citations and request IDs, optional raw usage, AI SDK PDF inputs and prompt-cache retention, conversation program item IDs, apply-patch move destinations, and complete interleaved output ordering.

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.14.3...v0.15.0

v0.14.3

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.14.2...v0.14.3

v0.14.2

Compare Source

What's Changed
Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.14.1...v0.14.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added augment dependencies Pull requests that update a dependency file labels Aug 31, 2026
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@rhdh-gh-app

rhdh-gh-app Bot commented Aug 31, 2026

Copy link
Copy Markdown

Changed Packages

Package Name Package Path Changeset Bump Current Version
@red-hat-developer-hub/backstage-plugin-augment-backend workspaces/augment/plugins/augment-backend patch v0.1.0

@rhdh-bot
rhdh-bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch from 3f3d7ab to e1f1136 Compare August 31, 2026 12:06
@sonarqubecloud

Copy link
Copy Markdown

❌ The last analysis has failed.

See analysis details on SonarQube Cloud

@codecov

codecov Bot commented Aug 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 61.61%. Comparing base (ecb789b) to head (e1f1136).
⚠️ Report is 8 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##             main    #4492     +/-   ##
=========================================
  Coverage   61.61%   61.61%             
=========================================
  Files        2568     2568             
  Lines      102824   102824             
  Branches    28800    28801      +1     
=========================================
  Hits        63360    63360             
+ Misses      38913    37649   -1264     
- Partials      551     1815   +1264     
Flag Coverage Δ *Carryforward flag
adoption-insights 84.55% <ø> (ø) Carriedforward from ecb789b
ai-integrations 69.09% <ø> (ø) Carriedforward from ecb789b
app-defaults 55.55% <ø> (ø) Carriedforward from ecb789b
augment 46.67% <ø> (ø)
boost 79.84% <ø> (ø) Carriedforward from ecb789b
bulk-import 72.79% <ø> (ø) Carriedforward from ecb789b
cost-management 13.55% <ø> (ø) Carriedforward from ecb789b
dcm 72.09% <ø> (ø) Carriedforward from ecb789b
e2e-adoption-insights 60.00% <ø> (ø) Carriedforward from ecb789b
e2e-extensions 62.13% <ø> (ø) Carriedforward from ecb789b
e2e-global-header 49.45% <ø> (ø) Carriedforward from ecb789b
e2e-homepage 61.11% <ø> (ø) Carriedforward from ecb789b
e2e-intelligent-assistant 46.65% <ø> (ø) Carriedforward from ecb789b
e2e-orchestrator 49.52% <ø> (ø) Carriedforward from ecb789b
e2e-orchestrator-plugin 49.51% <ø> (ø) Carriedforward from ecb789b
e2e-quickstart 55.21% <ø> (ø) Carriedforward from ecb789b
e2e-scorecard 50.21% <ø> (ø) Carriedforward from ecb789b
e2e-theme 16.36% <ø> (ø) Carriedforward from ecb789b
extensions 56.59% <ø> (ø) Carriedforward from ecb789b
global-floating-action-button 71.18% <ø> (ø) Carriedforward from ecb789b
global-header 66.50% <ø> (ø) Carriedforward from ecb789b
homepage 48.39% <ø> (ø) Carriedforward from ecb789b
install-dynamic-plugins 58.57% <ø> (ø) Carriedforward from ecb789b
intelligent-assistant 75.35% <ø> (ø) Carriedforward from ecb789b
konflux 91.98% <ø> (ø) Carriedforward from ecb789b
lightspeed 69.02% <ø> (ø) Carriedforward from ecb789b
mcp-integrations 84.14% <ø> (ø) Carriedforward from ecb789b
orchestrator 70.87% <ø> (ø) Carriedforward from ecb789b
quickstart 63.74% <ø> (ø) Carriedforward from ecb789b
sandbox 79.56% <ø> (ø) Carriedforward from ecb789b
scorecard 87.39% <ø> (ø) Carriedforward from ecb789b
theme 88.91% <ø> (ø) Carriedforward from ecb789b
translations 5.12% <ø> (ø) Carriedforward from ecb789b
x2a 77.10% <ø> (ø) Carriedforward from ecb789b

*This pull request uses carry forward flags. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ecb789b...e1f1136. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate

renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@gabemontero

Copy link
Copy Markdown
Contributor

some manual verification with our llamastack agentic chat test case is required here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

augment dependencies Pull requests that update a dependency file do-not-merge/hold workspace/augment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant