Skip to content

[pull] main from openai:main - #128

Merged
pull[bot] merged 4 commits into
gitupdates:mainfrom
openai:main
Aug 13, 2026
Merged

[pull] main from openai:main#128
pull[bot] merged 4 commits into
gitupdates:mainfrom
openai:main

Conversation

@pull

@pull pull Bot commented Aug 13, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

apcha-oai and others added 4 commits August 13, 2026 15:53
## Summary

- Grant the CodeQL workflow `actions: read` alongside its existing
`contents: read` and `security-events: write` permissions.
- Allow the shared SDK workflow to read workflow-run metadata when it
runs in the mirrored private repository.

## Why

The public workflow currently succeeds because public Actions
workflow-run metadata can be read without an explicit Actions
permission. The identical workflow fails in the private mirror with
`Resource not accessible by integration` while preparing to upload
CodeQL results.

## Validation

- Parsed the workflow as YAML and verified the complete least-privilege
permission set.
- Confirmed the PR changes only one line in
`.github/workflows/codeql.yml`.
- Verified the exact commit passed internal CodeQL:
https://github.com/openai/openai-python-internal/actions/runs/31671272628
Source: openai/openai#1280093

Adds the new `tenant.workload_identity.access_token.issued` audit-log
event to generated request and response types.

Generated with Castiron from OpenAPI SHA
`11854aef674352d3f9cd5c0a7038f079a7bbac06` and validated with the
public-baseline dry-run workflow.

---------

Co-authored-by: Castiron Bot <castiron@openai.com>
## Summary

Deprecate Sora video APIs before their September shutdown

Co-authored-by: apcha-oai <228803254+apcha-oai@users.noreply.github.com>
## Summary

Adds optional WebSocket-only stream_id routing metadata to Responses
client events and all server response events. Events sharing a stream ID
are processed FIFO and response events echo that identifier.

Source: openai/openai#1282468
OpenAPI commit: 1e5b3b1f1d21b51c5a37d6122c2b3b2d70ef5a1a

## Validation

- Castiron public-baseline generation and formatter completed
- Python source compilation passed
- Strict generated-diff quality review passed
- No private inputs, workflow files, or internal-repository changes are
included
@pull pull Bot locked and limited conversation to collaborators Aug 13, 2026
@pull pull Bot added the ⤵️ pull label Aug 13, 2026
@pull
pull Bot merged commit d9029e3 into gitupdates:main Aug 13, 2026
3 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants