chore(deps): bump openai from 6.48.0 to 7.8.0

[dependabot]

Bumps openai from 6.48.0 to 7.8.0.

Release notes

Sourced from openai's releases.

v7.8.0

7.8.0 (2026-08-27)

Features

• api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
• api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

• auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
• auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
• deps: harden dependency and release boundaries (#2484) (b21ff45)
• events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
• restore native browser ESM imports (#2495) (c8cab1e)
• uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

v7.7.0

7.7.0 (2026-08-26)

Features

• api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

• streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

v7.6.0

7.6.0 (2026-08-26)

Features

• api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
• api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
• api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
• auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
• auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
• auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
• auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
• support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

7.8.0 (2026-08-27)

Features

• api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
• api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

• auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
• auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
• deps: harden dependency and release boundaries (#2484) (b21ff45)
• events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
• restore native browser ESM imports (#2495) (c8cab1e)
• uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

7.7.0 (2026-08-26)

Features

• api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

• streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

7.6.0 (2026-08-26)

Features

• api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
• api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
• api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
• auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
• auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
• auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
• auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
• support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

• [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
• assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
• audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)

... (truncated)

Commits

• 31fae53 release: 7.8.0 (#2493)
• f9b1313 feat(api): add compute_units to Responses and Chat Completions usage (#2505)
• b21ff45 fix(deps): harden dependency and release boundaries (#2484)
• a4a80eb test: exercise direct browser imports without credentials (#2501)
• c8cab1e fix: restore native browser ESM imports (#2495)
• d691a10 test: execute webpack browser bundle without live credentials (#2498)
• 7ef99c4 test: verify packed browser bundles target ES2020 (#2496)
• b86efac ci: require keyless ecosystem checks on release PRs (#2497)
• 08f201c ci: gate npm publication on browser-compatible imports (#2500)
• 44af438 test: cover webpack ESM and CommonJS package entrypoints (#2499)
• Additional commits viewable in compare view

[dependabot]

Superseded by #380.