chore(deps): bump openai from 2.48.0 to 3.1.0 - #702
Conversation
dependabot
Bot
added
dependencies
Completed Working on "Code Review"✅ Review submitted: COMMENT. Total comments: 1 across 1 files. ✅ Workflow completed successfully. |
![overcut-ai[bot]](https://avatars.githubusercontent.com/in/1367736?s=60&v=4){kind=small}
There was a problem hiding this comment.
Final Review Summary
Thanks for the update. I reviewed the posted findings and consolidated the results below.
Comment counts by importance
- BLOCKER: 0
- CRITICAL: 0
- MAJOR: 1
- MINOR: 0
- SUGGESTION: 0
- PRAISE: 0
Affected files
uv.lock
Key theme observed
- The dependency bump introduces unintended lockfile drift: while upgrading
openai,litellmwas downgraded, which may cause unrelated runtime regressions.
Actionable next steps
- Re-generate the lockfile with a constrained/targeted update for
openaiand only required transitives. - Keep
litellmat the intended version (or explicitly pin it before re-locking). - Re-run dependency validation/tests after lock refresh to confirm no behavioral regressions.
| [[package]] | ||
| name = "litellm" | ||
| version = "1.95.0" | ||
| version = "1.83.0" |
There was a problem hiding this comment.
[major]: This lockfile update downgrades litellm from 1.95.0 to 1.83.0 while bumping openai, which can silently remove fixes/features and change runtime behavior unrelated to this PR’s goal. Regenerate the lock with a constrained update (or pin litellm) so the OpenAI major bump does not introduce unrelated regressions.
019be80 to
0b399a5
Compare
Bumps [openai](https://github.com/openai/openai-python) from 2.48.0 to 3.1.0. - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.48.0...v3.1.0) --- updated-dependencies: - dependency-name: openai dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
0b399a5 to
577db4b
Compare
|
A newer version of openai exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
|
Left open deliberately when the low-risk bumps were batched into #735.
|
2 participants
Bumps openai from 2.48.0 to 3.1.0.
Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
10ee3f0release: 3.1.0 (#3600)f38355efeat(api): Ultrafast tier, structured MCP and websocket errors, separate webs...d9029e3feat(api): add WebSocket stream IDs (#3612)721cb1cfeat(api): deprecate Sora video APIs (#3610)df274d4feat(api): add workload identity access token issued event (#3601)5578d39ci: fix CodeQL permissions for private repositories (#3606)a1eeab5chore: remove Stainless attribution and infrastructure (#3599)8bb0e14release: 3.0.0 (#3598)ae8c3d5feat(api)!: migrate to HTTPX2 (#3594)03b3ec4release: 2.54.0 (#3592)