chore(deps): bump openai-agents from 0.17.7 to 0.18.0 in /openai-agents-sdk

[dependabot]

Bumps openai-agents from 0.17.7 to 0.18.0.

Release notes

Sourced from openai-agents's releases.

v0.18.0

Key Changes

RealtimeAgent's default is now gpt-realtime-2.1

Since this version, the default model for RealtimeAgents is gpt-realtime-2.1: https://developers.openai.com/api/docs/models/gpt-realtime-2.1

What's Changed

• feat: update default realtime model to gpt-realtime-2.1 by @​seratch in openai/openai-agents-python#3740
• feat: add Unicode storage option to SQLAlchemySession by @​seratch in openai/openai-agents-python#3746
• fix(visualization): keep fillcolor on handoff nodes by merging style attributes by @​comp in openai/openai-agents-python#3744

Documentation & Other Changes

• docs: updates for v0.17.8 release by @​seratch in openai/openai-agents-python#3737
• Release 0.18.0 by @​github-actions[bot] in openai/openai-agents-python#3742

New Contributors

• @​comp made their first contribution in openai/openai-agents-python#3744

Full Changelog: openai/openai-agents-python@v0.17.8...v0.18.0

v0.17.8

What's Changed

• feat: add invalid final output recovery handler by @​seratch in openai/openai-agents-python#3736
• fix: propagate realtime session iterator cancellation by @​fallintoplace in openai/openai-agents-python#3686
• fix: redact realtime validation failure logs by @​fallintoplace in openai/openai-agents-python#3687
• fix: preserve non-dict Mapping values in _to_dump_compatible by @​anxkhn in openai/openai-agents-python#3700
• fix: escape quotes and backslashes in DOT names for visualization by @​anxkhn in openai/openai-agents-python#3712
• fix: enforce strict Pydantic validation when strict_json_schema=True + handoffs by @​Om-Borse26 in openai/openai-agents-python#3724
• fix: fix an issue with length-frame exec-stdin writes within a sandbox by @​imran31415 in openai/openai-agents-python#3719

Documentation & Other Changes

• docs: add DProvenanceKit to external tracing processors list by @​Therealdk8890 in openai/openai-agents-python#3726
• docs: add sandbox examples to examples index by @​saime428 in openai/openai-agents-python#3731
• test: improve coverage for stream and sandbox edge cases by @​seratch in openai/openai-agents-python#3730
• chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 by @​dependabot[bot] in openai/openai-agents-python#3714
• chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 by @​dependabot[bot] in openai/openai-agents-python#3715
• chore(deps): bump actions/stale from 10.2.0 to 10.3.0 by @​dependabot[bot] in openai/openai-agents-python#3716
• chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @​dependabot[bot] in openai/openai-agents-python#3717
• Release 0.17.8 by @​github-actions[bot] in openai/openai-agents-python#3739

New Contributors

• @​fallintoplace made their first contribution in openai/openai-agents-python#3686
• @​anxkhn made their first contribution in openai/openai-agents-python#3700
• @​Om-Borse26 made their first contribution in openai/openai-agents-python#3724
• @​imran31415 made their first contribution in openai/openai-agents-python#3719

... (truncated)

Changelog

Sourced from openai-agents's changelog.

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

• Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
from agents.sandbox import Manifest, SandboxPathGrant
from agents.sandbox.entries import Dir, LocalDir
This is an absolute host path outside the SDK process base_dir.
TRUSTED_DOCS_ROOT = Path("/opt/my-app/docs")
manifest = Manifest(
extra_path_grants=(
# This host root is outside the SDK process base_dir, so the manifest must grant it.
SandboxPathGrant(path=str(TRUSTED_DOCS_ROOT), read_only=True),
),
entries={
# No grant is needed for local sources that stay under the SDK process base_dir.
"fixtures": LocalDir(src=Path("fixtures"), description="Local test fixtures."),
# This entry reads from the granted host root and copies it into the sandbox workspace.
"docs": LocalDir(src=TRUSTED_DOCS_ROOT, description="Trusted local documents."),
# Dir creates a sandbox workspace directory; it does not read from the host filesystem.
"output": Dir(description="Generated artifacts."),
},
)

Treat extra_path_grants as trusted application configuration. Do not populate grants from model output or other untrusted manifest input unless your application has already approved those host paths.

0.16.0

In this version, the SDK default model is now gpt-5.4-mini instead of gpt-4.1. This affects agents and runs that do not explicitly set a model. Because the new default is a GPT-5 model, implicit default model settings now include GPT-5 defaults such as reasoning.effort="none" and verbosity="low".

If you need to keep the previous default model behavior, set a model explicitly on the agent or run config, or set the OPENAI_DEFAULT_MODEL environment variable:

agent = Agent(name="Assistant", model="gpt-4.1")

... (truncated)

Commits

• 668fabd Release 0.18.0 (#3742)
• 4fde807 feat: add Unicode storage option to SQLAlchemySession (#3746)
• b4606c8 fix(visualization): keep fillcolor on handoff nodes by merging style attribut...
• 909c5c4 feat: update default realtime model to gpt-realtime-2.1 (#3740)
• 4a7dc08 docs: make hosted_mcp/on_approval.py stabler
• 94c1f60 docs: updates for v0.17.8 release (#3737)
• 7a828f6 Release 0.17.8 (#3739)
• 0ffb9e0 docs: update README.md
• 5d4a752 docs: add sandbox examples to examples index (#3731)
• 3d07ff1 feat: add invalid final output recovery handler (#3736)
• Additional commits viewable in compare view