0.23.1 (2026-10-02) Bug Fixes restore release tests and refresh required readiness check (#5278) (730deb4) Release readiness review (v0.23.0 -> TARGET 0a5a08b) This is a release readiness report done by $final-release-review skill. Diff v0.23.0...0a5a08b Release intent Review mode: final candidate Intended release: patch, 0.23.1 Minimum required release type: patch Versioning verdict: compatible R…
0.23.0 (2026-10-01) Features mcp: add configurable MCP listing page limits (#5133) (9a21ab1) sandbox: add opt-in Docker removal protection (#5116) (ae5803f) sandbox: allow configuring memory consolidation turns (#5135) (daa1bcb) sessions: add an opt-in encrypted history scan budget (#5118) (a2fdb94) Bug Fixes avoid awaiting cleanup during coroutine closure (#5163) (719c4e7) ci: update and group Co…
What's Changed fix(core): align conditional approvals with validated tool arguments by @seratch in #5066 fix(core): deliver tool-not-found output on server-managed resume by @hyeonsang010716 in #4947 fix(sandbox): keep command paths POSIX on a Windows host by @hyeonsang010716 in #4958 fix(sessions): handle concurrent async SQLite startup by @00200200 in #4987 fix(sessions): do not forward session…
What's Changed feat: support current image generation tool options by @seratch in #4932 fix(sandbox): prevent UnixLocal file API symlink races by @seratch in #4931 fix(sessions): reset compaction response chain after pop by @rksharma-owg in #4934 Documentation & Other Changes docs: document v0.22.1 behavior updates by @seratch in #4577 release: 0.22.2 by @seratch in #4935 Full Changelog: v0.22.1..…
What's Changed feat(core): support image results in web search tools by @seratch in #4898 feat(core): customize output guardrail blocked messages by @seratch in #4594 feat(mcp): add server-wide guardrails to MCP tools by @seratch in #4632 feat(sandbox): add configurable Unix-local environment isolation by @seratch in #4640 feat(sandbox): allow labels on Docker sandbox containers by @seanxuu in #45…
Key Changes Version 0.22.0 is a minor release because it adds substantial runtime hardening and tightens an existing provider configuration contract. Applications that combine an explicit openai_client with organization or project must move those values to the AsyncOpenAI client. Highlights: Redacts terminal function-tool output rejected by agent output guardrails from replayable and persisted SDK…
What's Changed feat(core): add model call timeouts by @seratch in #4428 feat(sandbox): add run-scoped sandbox working directories by @seratch in #4427 feat(sandbox): allow Docker sandboxes to disable networking by @koadegno in #4452 feat(sandbox): add Modal sandbox resource options by @Filimoa in #4455 fix(core): honor exact call approval decisions by @seratch in #4447 fix(core): count Responses r…
Key Changes This minor release does not introduce a known breaking SDK behavior change. The minor version bump is for the new provider-neutral testing APIs and the OpenAI Python v3 compatibility update. Highlights: Added agents.testing, agents.realtime.testing, and agents.voice.testing utilities for deterministic Agent, Sandbox, Realtime, and Voice workflow tests without provider requests. Updated…
Key Changes Version 0.20.0 is a minor release because it changes the implicit default model and includes a potentially breaking MCP dependency migration for applications with customized local HTTP transports. MCP v1 remains supported, and affected applications can migrate to httpx2 or pin mcp<2. Highlights: The default model is now gpt-5.6-luna; explicit models, run-level overrides, and OPENAI_DEF…
What's Changed fix: preserve completed tool guardrail results by @seratch in #4180 fix: redact invalid tool argument errors by @seratch in #4182 fix: defer non-stream session saves until output guardrails by @seratch in #4184 fix: honor resolved status before policy checks by @seratch in #4183 fix: cancel sibling work after concurrent failures by @seratch in #4185 fix: surface non-streaming conten…
What's Changed fix: resolve agent tool name collisions consistently by @seratch in #4137 fix: reconcile resumed tool name collisions by @seratch in #4145 fix: persist the max-turns handler output to the session by @LeSingh1 in #4160 fix: report output guardrail results when a tripwire aborts the run by @Kaif10 in #4090 fix: replace closed default loop in run_sync by @hsusul in #4102 fix: honor fal…
What's Changed feat: expose original callable through wrapped by @seratch in #4038 fix: report input guardrail results when a tripwire aborts the run by @hsusul in #4071 fix: consolidate same-exception re-raises into bare raise across all modules by @AAliKKhan in #4023 fix(sandbox): preserve tagged EnvValue subclasses by @seratch in #4039 fix(modal): reject ephemeral paths during tar hydration by…
What's Changed feat(sandbox): support native host paths in path grants by @seratch in #4009 fix: redact Realtime audio format diagnostics by @seratch in #3992 fix: redact Blaxel unmount paths in logging by @seratch in #3993 fix: retry pre-response WebSocket server errors by @dk3yyyy in #3991 fix(run): cancel the parallel input-guardrail task when the model turn fails by @gunjanjaswal in #3982 fix(…
Key Changes This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling. Highlights: Added agents.tool.ProgrammaticToolCallingTool, which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool output…
What's Changed feat: make task and turn tracing spans configurable by @seratch in #3834 feat(realtime): track response usage in session context by @seratch in #3812 fix(memory): serialize OpenAI conversation session initialization by @russeell in #3821 fix(models): raise UserError for conflicting provider args instead of assert by @Dhruva-Das in #3809 fix(handoffs): preserve user messages containi…
What's Changed feat: support GPT-5.6 request controls by @seratch in #3794 feat: add hosted multi-agent beta support by @seratch in #3788 fix(sandbox): own Daytona PTY worker tasks by @seratch in #3778 fix(realtime): enqueue callback errors synchronously by @seratch in #3777 fix(realtime): use monotonic playback timing by @seratch in #3776 fix(sandbox): own Docker deferred cleanup tasks by @seratc…
What's Changed feat: add GPT-5.6 model defaults and migrate examples by @seratch in #3774 fix: support cache-write usage across OpenAI Python versions by @seratch in #3773 fix(realtime): make session cleanup deterministic by @seratch in #3767 fix: preserve nested tool state during restoration by @seratch in #3753 fix: close Chat Completions streams on early exit by @fallintoplace in #3689 fix(sess…
Key Changes RealtimeAgent's default is now gpt-realtime-2.1 Since this version, the default model for RealtimeAgents is gpt-realtime-2.1: https://developers.openai.com/api/docs/models/gpt-realtime-2.1 What's Changed feat: update default realtime model to gpt-realtime-2.1 by @seratch in #3740 feat: add Unicode storage option to SQLAlchemySession by @seratch in #3746 fix(visualization): keep fillcol…
What's Changed feat: add invalid final output recovery handler by @seratch in #3736 fix: propagate realtime session iterator cancellation by @fallintoplace in #3686 fix: redact realtime validation failure logs by @fallintoplace in #3687 fix: preserve non-dict Mapping values in _to_dump_compatible by @anxkhn in #3700 fix: escape quotes and backslashes in DOT names for visualization by @anxkhn in #3…
What's Changed feat: expose configurable websocket max_size limit by @anneheartrecord in #3645 feat: add buffered Chat Completions tool-call streaming by @incoffeemonster in #3506 fix: reduce sandbox sink buffering and spool timeouts by @2830500285 in #3642 fix: #3346 clean up branch-only messages when deleting branches by @Aphroq in #3347 fix: #3348 make AdvancedSQLiteSession add_items atomic by…
What's Changed feat: add pre-approval tool input guardrails by @seratch in #3487 feat: add SDK-only custom data for tool outputs by @seratch in #3486 fix: enforce the documented strict JSON-compatible contract for #3486 by @siddiksawani in #3657 fix: suppress handoff whitespace tool-name warnings by @seratch in #3652 Documentation & Other Changes docs: fix typo in sandbox guide by @mshsheikh in #3…
What's Changed fix: expose sandbox error retryability by @qiyaoq-oai in #3581 fix: #3512 type tool-end hook results as object by @seratch in #3518 fix: use tuple form for SpeechGroupSpanData __slots__ by @jluocsa in #3534 chore: bump Modal sandbox extra to 1.4.3 by @jdoughty04 in #3538 Documentation & Other Changes docs: add MongoDB session example under examples/memory by @alexbevi in #3036 docs:…
What's Changed feat: support Realtime custom voice objects by @lionel-oai in #3473 fix: #3459 add opt-in recovery for missing function tools by @seratch in #3461 fix: apply hardened http client default to MCP SSE transport by @ioleksiuk in #3466 fix: use non-None value for output in FunctionSpanData by @rmotgi1227 in #3475 fix: add missing entries to span slots by @rmotgi1227 in #3483 fix: redact…
What's Changed fix: keep mountpoint credentials out of sandbox commands by @seratch in #3429 fix: unify memory optional dependency import errors by @seratch in #3389 fix: guard None text in text_message_output and add output guardrail count to RunErrorDetails by @zhoufengen in #3375 fix: avoid mutating FunctionTool params_json_schema by @ioleksiuk in #3382 fix: avoid mutating codex output schema i…
What's Changed fix: #3268 fix OpenAI Conversations reasoning persistence by @seratch in #3352 fix: avoid auto response for unknown realtime tools (ref: #3287) by @seratch in #3366 fix: #3354 interrupt tracing retry backoff on shutdown by @Aphroq in #3355 fix: #3359 preserve local approval rejection reasons by @Aphroq in #3360 fix: #3361 honor session settings in AsyncSQLiteSession by @Aphroq in #3…
What's Changed Sandboxes fix: include sandbox provider error details by @seratch in #3326 fix: #3274 limit sandbox archive extraction by @Aphroq in #3278 fix: #3273 validate git repo subpaths by @Aphroq in #3276 fix: allow empty GitRepo subpaths as repository root by @seratch in #3299 fix: preserve GitRepo root subpath aliases by @seratch in #3303 Tracing fix: make tracing shutdown best-effort on…
Key Changes RealtimeAgent's default is now gpt-realtime-2 Since this version, the default model for RealtimeAgents is gpt-realtime-2: https://developers.openai.com/api/docs/models/gpt-realtime-2 Sandbox local source materialization change In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered…
What's Changed fix: #3109 stabilize chat completions stream output indexes by @seratch in #3176 fix: #3168 validate MCP require_approval policies by @seratch in #3179 fix: #3116 restore session history after compaction replacement failures by @Aphroq in #3117 fix: #3171 reject corrupt Dapr session state updates by @Aphroq in #3173 fix: #3170 clean up git repo temp clones on failure by @Aphroq in #…
Key Changes Default model change In this version, the SDK default model is now gpt-5.4-mini instead of gpt-4.1. This could affect agents and runs that do not explicitly set a model. Because the new default is a GPT-5 model, implicit default model settings now include GPT-5 defaults such as reasoning.effort="none" and verbosity="low". The new default model should work better for most use cases (see…