openai

Features

• Add Bedrock Runtime endpoint support (SDK-290)

• api: add new Daybreak and gpt-5.6-cyber model identifiers

• api: add new Daybreak and gpt-5.6-cyber model identifiers

• api: Add ServiceTier and ImageDetail types

• api: add WebSocket stream IDs

• api: add workload identity access token issued event

• deprecated

  api: deprecate Sora video APIs

• api: Ultrafast tier, structured MCP and websocket errors, separate websocket events

Bug Fixes

• api: clarify audio upload metadata requirements

• audio: prevent microphone leaks and playback pipe deadlocks

• audio: reject ffplay spawn errors

• auth: reject redirects during workload identity token exchange

• auth: reject unsafe workload-identity token expirations

• Avoid TypeError in toFile for Responses without a URL

• Await webhook verification in README examples

• azure: honor explicit browser denial for Entra token providers

• azure: preserve model-to-deployment mapping for images.edit

• azure: prevent API-key disclosure across HTTP redirects

• security

  azure: prevent deployment path traversal

• bedrock: safely sign inherited query parameter names

• chat: support custom tool calls in parser and ChatCompletionStream

• client: handle empty JSON response body without content-length

• Configure Bash for pnpm scripts on Windows

• security

  deps: remediate Dependabot and fixture vulnerabilities

• embedding: response type for base64 encoding format

• Export AzureClientOptions (#1760) (511bf6d), closes #1735

• Export workload identity helpers from openai/auth

• Fail ecosystem CI when live credentials are missing

• format: restore formatting for generated SDK files

• Harden runTools against inherited function names

• Honor defaultHeaders null for helper method header

• Include items for strict Zod v3 any arrays

• Isolate Vercel ecosystem tests per request

• Keep streamed Responses output text linear and canonical

• lint: recognize Castiron-generated headers

• lint: restore generated SDK lint rules

• Parse empty chat content when present

• parser: recognize raw json_schema response format in auto-parsing checks

• Pass file batch helper options through

• Preserve File-like metadata in toFile

• Preserve skill upload paths without buffering native files

• Preserve Skills upload file paths

• Preserve zero retry-after-ms precedence

• Prevent prototype event names from crashing SDK streams

• Prevent prototype manipulation in strict Structured Outputs schemas

• security

  Prevent prototype pollution in assistant stream deltas

• realtime: allow overriding WebSocket connection URLs (#2308) (7407413), closes #2305

• realtime: enforce Azure browser denial and redact all credentials

• realtime: prevent Azure API-key disclosure across WebSocket redirects

• realtime: prevent remote error payloads from crashing clients

• realtime: remove immutable model updates from public and Azure examples

• Reject unsupported proto Zod v3 object properties

• Remove vulnerable extract-zip from browser tests

• responses: reject with OpenAIError when the stream emits an error event

• responses: validate streaming event indices before array access

• security: bound untrusted AssistantStream delta array indices

• security: contain Bedrock credentials to the configured endpoint origin

• security: keep browser ecosystem API keys out of navigation URLs

• security: prevent Bedrock bearer credential disclosure across redirects

• security

  security: prevent global Array.prototype pollution in chat completion streams

• security

  security: prevent multipart upload content-type header injection

• security

  security: prevent process-wide prototype pollution via assistant stream snapshot IDs

• security: prevent prototype manipulation in streamed chat snapshots

• security

  security: prevent streaming upload filename/header injection

• streaming: eliminate quadratic EventStream FIFO draining

• streaming: eliminate quadratic SSE buffer copying

• streaming: finish SSE streams immediately after [DONE]

• streaming: handle mixed SSE line endings

• streaming: isolate AssistantStream message and tool-call lifecycles

• streaming: make fragmented line decoding amortized linear

• streaming: surface mid-stream errors when iterating buffered streams

• ws: prevent duplicate listener leaks in Node and browser adapters

• zod: preserve literal payloads when escaping schema references

• zod: preserve null literals in Zod v3 JSON schemas

• zod: prevent generated definition name collisions

• zod: reject non-object Zod v3 strict schema roots