build(deps): update openai-agents requirement from <0.19,>=0.12 to >=0.12,<0.24 in /engine

[dependabot]

Updates the requirements on openai-agents to permit the latest version.

Release notes

Sourced from openai-agents's releases.

v0.23.1

0.23.1 (2026-10-02)

Bug Fixes

• restore release tests and refresh required readiness check (#5278) (730deb4)

Release readiness review (v0.23.0 -> TARGET 0a5a08b21cd44808d73e8a9e732212dd33b3690d)

This is a release readiness report done by $final-release-review skill.

Diff

openai/openai-agents-python@v0.23.0...0a5a08b

Release intent

• Review mode: final candidate
• Intended release: patch, 0.23.1
• Minimum required release type: patch
• Versioning verdict: compatible

Release call

🟢 GREEN LIGHT TO SHIP this exact candidate. No concrete release-blocking regression was identified. Human approval and normal repository protections still apply.

Scope summary

• 28 files changed (+622/-42): release automation, test fixtures, integration/example tooling, and release metadata.
• The clean candidate contains current main a575a6e637feb9aea1b591237b007dd4991ddfba plus only six release-owned metadata files. Package, lockfile, manifest, source version and API baseline agree on 0.23.1. Snapshot source b31b9f8d13d49142a64f8873f2cc2ee40441a795 is an ancestor of the candidate.
• Relative to v0.23.0, SDK runtime source changes only its version string. API snapshot content, dependencies, Python support and persisted schemas are unchanged.

Risk assessment (ordered by impact)

1. First PyPI publication of the 0.23 series includes earlier migration requirements

   • Risk: 🟢 LOW with the previously reviewed migration paths. Users upgrading from 0.22.3 receive the 0.23.0 behavior changes as well as this patch.
   • Evidence: PyPI has neither 0.23.0 nor 0.23.1. The 0.23.0 release assessment in #5226 covers strict tools, approval restoration, encrypted history, resource limits, voice defaults and provider changes; this candidate does not alter those runtime paths.
   • Files: CHANGELOG.md, src/agents/version.py; unchanged 0.23.0 runtime contracts assessed in #5226.
   • Action: Carry forward the 0.23.0 migration guidance in the 0.23.1 announcement, particularly explicit strict-tool parameters, fresh legacy approvals, trusted encrypted-history import, resource-limit overrides and the explicit prior voice-model override.

2. Release checks recover without changing package behavior

   • Risk: 🟢 LOW. Test-loop initialization and required-check ownership are corrected while publication authorization remains intact.
   • Evidence: OS mocks are installed after event-loop initialization and restored before teardown. Authorized review events rerun the current PR-triggered readiness check instead of replacing or cancelling it. Source validation, native human approval, isolated builds and OIDC publishing remain unchanged.
   • Files: tests/sandbox/test_unix_local_user_file_io.py, .github/scripts/release_automation.py, .github/workflows/release-readiness-refresh.yml, .github/workflows/release-readiness.yml.
   • Action: Submit the exact-head human approval, allow readiness to refresh, merge through normal protections, and verify the publisher and uploaded provenance.

3. External-provider coverage now requires explicit maintainer intent

   • Risk: 🟢 LOW with an existing opt-in path. Default integration and automatic example runs no longer implicitly select the affected external-provider cases.

... (truncated)

Changelog

Sourced from openai-agents's changelog.

0.23.1 (2026-10-02)

Bug Fixes

• restore release tests and refresh required readiness check (#5278) (730deb4)

0.23.0 (2026-10-01)

Features

• mcp: add configurable MCP listing page limits (#5133) (9a21ab1)
• sandbox: add opt-in Docker removal protection (#5116) (ae5803f)
• sandbox: allow configuring memory consolidation turns (#5135) (daa1bcb)
• sessions: add an opt-in encrypted history scan budget (#5118) (a2fdb94)

Bug Fixes

• avoid awaiting cleanup during coroutine closure (#5163) (719c4e7)
• ci: update and group CodeQL actions together (#5262) (f76153c)
• ci: validate release source before building distributions (#5220) (2747c1c)
• core/extensions: respect sensitive trace capture for model metadata (#5129) (88b722d)
• core: bound agent tool streaming callback backlogs (#5106) (f23da76)
• core: isolate nested agent tool state across fresh runs (#5123) (46cc8d8)
• core: preserve closed parent constraints in singleton allOf (#5131) (f010d18)
• core: preserve guarded final outputs in agent tools (#5115) (f3a15f6)
• core: preserve structured guardrail diagnostics and agent output during persistence (#5016) (51bcea7)
• core: preserve tool identity during asynchronous enablement (#5136) (f2ae64c)
• core: redact default tool failure details (#5112) (40956e0)
• core: redact streaming task exception tracebacks (#5121) (c329e92)
• core: reject silently discarded kwargs tool arguments (#5174) (a9b1ce7)
• core: resolve tools after agent start hooks (#5124) (5237420)
• core: restore nested agent tool state against the tool's own agent (#5142) (ad93f54)
• core: retry pre-request WebSocket handshake failures (#4780) (265f16f)
• core: scope function tool approvals to their owning agent (#5144) (de25d82)
• core: select built-in shell and apply_patch tools by their own type (#4952) (eb68131)
• core: serialize only traced fields in ModelSettings.to_traceable_dict (#5003) (57f0b38)
• core: validate agent tool stream callbacks before execution (#5125) (fae72a4)
• core: validate tool_use_behavior callback results (#5173) (5a2d63f)
• deps-dev: bump coverage from 7.10.3 to 7.16.1 (#5152) (47c21ee)
• deps-dev: bump cryptography from 50.0.0 to 50.0.1 (#5234) (e6c6806)
• deps-dev: bump dapr from 1.16.0 to 1.18.3 (#5154) (e94309d)
• deps-dev: bump pymongo from 4.16.0 to 4.18.1 (#5155) (971c5f3)
• deps-dev: bump ruff from 0.9.2 to 0.16.8 (#5249) (9d2b318)
• deps-dev: bump textual from 8.2.3 to 8.2.8 (#5248) (f2df6e4)
• deps-dev: bump types-pynput from 1.8.1.20250809 to 1.8.1.20260712 (#5246) (582d048)
• deps: bump actions/create-github-app-token from 2.2.2 to 3.2.0 (#5245) (e6467e2)
• deps: bump anyio from 4.10.0 to 4.14.2 (#5091) (0910b46)

... (truncated)

Commits

• c4a1d04 release: 0.23.1 (#5279)
• a575a6e test: restrict default runs to OpenAI credentials (#5277)
• 730deb4 fix: restore release tests and refresh required readiness check (#5278)
• ce8ae9f release: 0.23.0 (#5226)
• 430da63 fix: use gpt-transcribe as the default voice STT model (#5276)
• fffe955 fix(deps): bump the codeql group with 2 updates (#5273)
• f9da374 build(release): use local maintainer review with release-please (#5274)
• 28e9f4f fix(deps): bump urllib3 from 2.7.0 to 2.8.0 (#5256)
• dc81a17 fix(deps): bump pyjwt from 2.13.0 to 2.15.0 (#5271)
• b64cad4 fix(schema): decode URI fragments before pointer traversal (#5272)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)