Repository navigation
feat(api): keep callable API keys scoped to each request - #4216
Merged
Merged
Conversation
Castiron-Internal-PR: openai/openai-python-internal#388 Castiron-Source-SHA: 36dbb93b6bd4800f8d6491f98df46354dfc2a56e Castiron-Public-Base-SHA: bd61e84
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
dpiet-oai
approved these changes
Oct 30, 2026
![github-code-quality[bot]](https://avatars.githubusercontent.com/u/9919?s=60&v=4){kind=small}
Merged
gh-actions-shared Bot
pushed a commit
to xf-qubit/openai-python
that referenced
this pull request
Oct 31, 2026
Automated Release PR --- ## [3.42.0](openai/openai-python@v3.41.0...v3.42.0) (2026-10-31) ### Features * **api:** add agent context compaction settings ([openai#4209](openai#4209)) ([f552fcf](openai@f552fcf)) * **api:** add agent session review and tool settings ([openai#4217](openai#4217)) ([a63c4cd](openai@a63c4cd)) * **api:** add experimental agent time awareness ([openai#4211](openai#4211)) ([10f9dd0](openai@10f9dd0)) * **api:** add image edit markup overlays ([openai#4210](openai#4210)) ([72c656d](openai@72c656d)) * **api:** add organization external key management ([openai#4205](openai#4205)) ([3ee373e](openai@3ee373e)) * **api:** add SIP DTMF commands and delivery events ([openai#4208](openai#4208)) ([f9f3f76](openai@f9f3f76)) * **api:** improve WebSocket recovery and delivery reporting ([openai#4213](openai#4213)) ([68b962c](openai@68b962c)) * **api:** keep callable API keys scoped to each request ([openai#4216](openai#4216)) ([85bb536](openai@85bb536)) * **api:** support response format updates and local output types ([openai#4212](openai#4212)) ([bd61e84](openai@bd61e84)) * **api:** support WebSocket warmup and preserve cleanup cancellation ([openai#4215](openai#4215)) ([9abd656](openai@9abd656)) ### Bug Fixes * preserve refusal output and authentication in WebSocket helpers ([openai#4214](openai#4214)) ([0599203](openai@0599203)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: openai-sdks[bot] <284451331+openai-sdks[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Keeps each callable API-key result with its own HTTP request or WebSocket connection, including Azure API-key authentication.
Changes
Public signatures, header precedence, retries, and cached key visibility stay compatible. Private
_auth_headersoverrides may need updates because prepared credentials take precedence. Overrides of_configure_realtimemust accept the newapi_keykeyword. This change targets a minor release under the README's internal-interface policy.Validation includes 55 credential and runtime-binding regression tests under both Pydantic 1 and 2, plus 28 release and mixed-version wire checks. The wire checks include the generated caller with the v3.41.0 runtime. Canonical lint passes. The generated source change is limited to Realtime; no workflows change.
Public CI passes: 17 checks passed and 9 were skipped. SDK-owner approval and the exact merge-conflict check are complete. All 109 required compiler targets have passing results; one TypeScript shard passed on rerun after its process was killed.