Merge remote-tracking branch 'origin/main' into codex/openai-python-pathlike-upload

Author: Hughhhhcoder

.castiron.stats.yml

@@ -1,8 +1,8 @@
 schema_version: 1
-generation_id: ee9a1017-930f-49f4-9724-5633d30d1c71
-openapi_spec_hash: 0ba3e4acd88b521d832e2a42d5471e00
-openapi_transformed_spec_hash: 0a6002520553b981f4c0bf6555a0a623
-config_hash: d8813efd847d1966dd7f03bb648c41dc
-codegen_sha: 7df32a6b1fe20434a95b0c9bbeb981810f5f3d20
-codegen_hash: 37a95ae987fcdd52ebbc324b4fa6aee8c76099df8af4b97250fb4ca5cf36965d
-public_codegen_sha: 86966c00928eccb2f77611935d572af7edd15619
+generation_id: 08cffa97-63b1-4ab3-b3e4-9d438f45458f
+openapi_spec_hash: fcdb9c99a509f5ea8b90d7abbf1dab2f
+openapi_transformed_spec_hash: dd244f7dd3ab9d18dc2c34970a39505f
+config_hash: 81fd1039eb373628d87269f065d30a69
+codegen_sha: fb6674883ea2eed44fa6db1f16b106ee84b4c9e5
+codegen_hash: d68cd064823d9541b5d0874c92142d2691f7943452d9142c205b4cead3798785
+public_codegen_sha: e84368fa07e999995b4ec9f8514e6c5a98be2a89

.github/workflows/ci.yml

@@ -177,6 +177,9 @@ jobs:
       - name: Bootstrap
         run: ./scripts/bootstrap
 
+      - name: Check concurrent Steady publication
+        run: node scripts/steady/publication.test.cjs
+
       - name: Run tests
         run: ./scripts/test
 

.gitignore

@@ -21,3 +21,5 @@ Brewfile.lock.json
 .DS_Store
 
 examples/*.mp3
+
+/scripts/steady/.cache/

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "3.7.0"
+  ".": "3.8.0"
 }

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [3.8.0](https://github.com/openai/openai-python/compare/v3.7.0...v3.8.0) (2026-09-03)
+
+
+### Features
+
+* **api:** add gpt-6-astra and related features ([#3791](https://github.com/openai/openai-python/issues/3791)) ([09f446f](https://github.com/openai/openai-python/commit/09f446f5f8623d79464568dc91b9dc258e74bcae))
+
+
+### Documentation
+
+* add canonical SDK security model ([#3778](https://github.com/openai/openai-python/issues/3778)) ([2a097b9](https://github.com/openai/openai-python/commit/2a097b991bb23a26bde9da8ea286f850ac1329f1))
+
 ## [3.7.0](https://github.com/openai/openai-python/compare/v3.6.0...v3.7.0) (2026-09-02)
 
 

CONTRIBUTING.md

@@ -172,11 +172,27 @@ $ pip install ./path-to-wheel-file.whl
 
 ## Running tests
 
-Most tests require you to [set up a mock server](https://github.com/dgellow/steady) against the OpenAPI spec to run the tests.
-
-`./scripts/bootstrap` installs the locked Steady package and its platform
-binary. `./scripts/test` starts it automatically when no mock server is running.
-Neither `./scripts/test` nor `./scripts/mock` downloads Node tools. If the local
+The mock server uses [the OpenAI Steady fork](https://github.com/openai-oss-forks/steady).
+`scripts/steady/manifest.json` is the single source of dependency pins: the
+Steady Git commit and source digest, plus the Deno version and runtime checksums. `./scripts/steady/install` fetches that source, verifies the runtime,
+and caches dependencies using the fork's frozen Deno lockfile. It requires
+Git, Node.js, curl, unzip, and sha256sum or shasum. The installation supports
+macOS and Linux on x64/ARM64, and Windows x64 through Git Bash.
+
+`./scripts/run-steady` verifies the local source and runtime, then runs without
+downloading dependencies. Pass a local OpenAPI specification path. To update
+Steady, review the fork commit and run
+`node scripts/steady/update.cjs <full-commit-sha>`. This updates the manifest
+with the commit and its source digest; no launcher or test edits are needed.
+Then run `./scripts/steady/install`. Review the release checksums when changing Deno.
+Run `node scripts/steady/test.cjs` to check the
+installation, integrity checks, and mock-server lifecycle.
+
+
+Most tests require you to [set up a mock server](https://github.com/openai-oss-forks/steady) against the OpenAPI spec to run the tests.
+
+`./scripts/bootstrap` installs the pinned Steady source and Deno runtime. `./scripts/test` starts it automatically when no mock server is running.
+Neither `./scripts/test` nor `./scripts/mock` downloads mock tooling. If the local
 tool is missing, rerun bootstrap. `TEST_API_BASE_URL` and an already-running
 mock server remain supported. To start the server yourself:
 

SECURITY.md

@@ -10,6 +10,16 @@ This policy applies to the source code in this repository and the official
 [`openai` Python package](https://pypi.org/project/openai/), including its
 published source distributions and wheels.
 
+## Threat model authority
+
+This file governs coordinated disclosure and what reporters should include. The
+canonical repository threat model, trust boundaries, reportability guidance,
+and severity calibration for Codex Security scans are maintained in
+[`docs/architecture/security-model.md`](docs/architecture/security-model.md).
+Follow that document's own trusted-revision resolution rule for security
+analysis; do not duplicate or infer a competing threat model from this
+disclosure policy.
+
 Do not report security vulnerabilities through public GitHub issues, pull requests, or discussions.
 
 ## What to include

api.md

@@ -435,6 +435,20 @@ Methods:
 - <code>client.vector_stores.file_batches.<a href="./src/openai/resources/vector_stores/file_batches.py">poll</a>(\*args) -> VectorStoreFileBatch</code>
 - <code>client.vector_stores.file_batches.<a href="./src/openai/resources/vector_stores/file_batches.py">upload_and_poll</a>(\*args) -> VectorStoreFileBatch</code>
 
+# Safety
+
+## Alerts
+
+Types:
+
+```python
+from openai.types.safety import SafetyAlert
+```
+
+Methods:
+
+- <code title="get /safety/alerts/{id}">client.safety.alerts.<a href="./src/openai/resources/safety/alerts.py">retrieve</a>(id) -> <a href="./src/openai/types/safety/safety_alert.py">SafetyAlert</a></code>
+
 # [Webhooks](src/openai/resources/webhooks/api.md)
 
 Methods:
@@ -492,6 +506,8 @@ from openai.types.beta import (
     BetaResponseComputerToolCall,
     BetaResponseComputerToolCallOutputItem,
     BetaResponseComputerToolCallOutputScreenshot,
+    BetaResponseConfigurationUpdateItem,
+    BetaResponseConfigurationUpdateItemParam,
     BetaResponseContainerReference,
     BetaResponseContent,
     BetaResponseContentPartAddedEvent,
@@ -581,6 +597,15 @@ from openai.types.beta import (
     BetaResponseShellCallOutputContentDeltaEvent,
     BetaResponseShellCallOutputContentDoneEvent,
     BetaResponseStatus,
+    BetaResponseSteerAcceptedEvent,
+    BetaResponseSteerErrorCode,
+    BetaResponseSteerEvent,
+    BetaResponseSteerFailedEvent,
+    BetaResponseSteerInput,
+    BetaResponseSteerInputContent,
+    BetaResponseSteerPendingEvent,
+    BetaResponseSteerPendingReason,
+    BetaResponseSteerRequiredInput,
     BetaResponseStreamEvent,
     BetaResponseTextConfig,
     BetaResponseTextDeltaEvent,