Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps openai from 1.102.0 to 2.5.0.

Release notes

Sourced from openai's releases.

v2.5.0

2.5.0 (2025-10-17)

Full Changelog: v2.4.0...v2.5.0

Features

Chores

  • bump httpx-aiohttp version to 0.1.9 (67f2f0a)

v2.4.0

2.4.0 (2025-10-16)

Full Changelog: v2.3.0...v2.4.0

Features

  • api: Add support for gpt-4o-transcribe-diarize on audio/transcriptions endpoint (bdbe9b8)

Chores

  • fix dangling comment (da14e99)
  • internal: detect missing future annotations with ruff (2672b8f)

v2.3.0

2.3.0 (2025-10-10)

Full Changelog: v2.2.0...v2.3.0

Features

  • api: comparison filter in/not in (aa49f62)

Chores

  • package: bump jiter to >=0.10.0 to support Python 3.14 (#2618) (aa445ca)

v2.2.0

2.2.0 (2025-10-06)

Full Changelog: v2.1.0...v2.2.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

2.5.0 (2025-10-17)

Full Changelog: v2.4.0...v2.5.0

Features

Chores

  • bump httpx-aiohttp version to 0.1.9 (67f2f0a)

2.4.0 (2025-10-16)

Full Changelog: v2.3.0...v2.4.0

Features

  • api: Add support for gpt-4o-transcribe-diarize on audio/transcriptions endpoint (bdbe9b8)

Chores

  • fix dangling comment (da14e99)
  • internal: detect missing future annotations with ruff (2672b8f)

2.3.0 (2025-10-10)

Full Changelog: v2.2.0...v2.3.0

Features

  • api: comparison filter in/not in (aa49f62)

Chores

  • package: bump jiter to >=0.10.0 to support Python 3.14 (#2618) (aa445ca)

2.2.0 (2025-10-06)

Full Changelog: v2.1.0...v2.2.0

Features

  • api: dev day 2025 launches (38ac009)

Bug Fixes

... (truncated)

Commits
  • 513ae76 release: 2.5.0 (#2694)
  • ebf3221 release: 2.4.0
  • e043d7b chore: fix dangling comment
  • 25cbb74 feat(api): Add support for gpt-4o-transcribe-diarize on audio/transcriptions ...
  • 8cdfd06 codegen metadata
  • d5c6443 codegen metadata
  • b20a9e7 chore(internal): detect missing future annotations with ruff
  • e5f93f5 release: 2.3.0
  • 0448788 feat(api): comparison filter in/not in
  • 85a91ad chore(package): bump jiter to >=0.10.0 to support Python 3.14 (#2618)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Disclaimer: Experimental PR review

Greptile Overview

Updated On: 2025-10-20 05:22:53 UTC

Summary

This PR upgrades the OpenAI SDK from v1.102.0 to v2.5.0, a major version bump that includes several improvements and dependency updates.

Key Changes:

  • OpenAI SDK upgraded from 1.102.0 → 2.5.0 (major version)
  • langchain-core updated from 0.3.75 → 0.3.79
  • langchain-openai updated from 0.3.32 → 0.3.35 (explicitly adds openai v2 support)
  • Minimum jiter version bumped from 0.4.0 → 0.10.0 (required for OpenAI v2)
  • httpx-aiohttp version requirement updated to 0.1.9

Compatibility Assessment:
The Langfuse integration code in langfuse/openai.py uses version detection (_is_openai_v1()) that checks for OpenAI >= 1.0.0, which means it treats v2.x the same as v1.x. The code imports openai._types.NotGiven which is an internal API, but this appears to be stable across v1 and v2 based on OpenAI's changelog.

The langchain-openai dependency was updated to 0.3.35, which explicitly supports OpenAI SDK 1.104.2 to <3.0.0, confirming compatibility with v2.x.

Confidence Score: 4/5

  • This PR is generally safe to merge with minimal risk, though CI test verification is recommended
  • The OpenAI v2 upgrade appears well-supported: langchain-openai was updated to explicitly support OpenAI v2.x, the Langfuse integration uses version detection that treats v2 like v1, and there are no obvious breaking API changes affecting the integration code. However, the use of internal API openai._types.NotGiven and the lack of CI test runs on this PR mean there's a small risk of runtime issues
  • No files require special attention - this is a dependency-only change

Important Files Changed

File Analysis

Filename Score Overview
poetry.lock 4/5 Bumps OpenAI from 1.102.0 to 2.5.0 (major version upgrade) and updates langchain-core and langchain-openai to compatible versions. Requires verification that internal code using openai._types.NotGiven remains compatible.

Sequence Diagram

sequenceDiagram
    participant DP as Dependabot
    participant PL as poetry.lock
    participant OAI as OpenAI SDK
    participant LC as langchain-openai
    participant LF as Langfuse Integration
    
    DP->>PL: Update openai: 1.102.0 → 2.5.0
    DP->>PL: Update jiter: >=0.4.0 → >=0.10.0
    DP->>PL: Update langchain-openai: 0.3.32 → 0.3.35
    DP->>PL: Update langchain-core: 0.3.75 → 0.3.79
    
    Note over OAI,LC: langchain-openai 0.3.35<br/>adds openai >=1.104.2,<3.0.0 support
    
    LF->>OAI: Check version with _is_openai_v1()
    OAI-->>LF: Returns True (v2.5.0 >= v1.0.0)
    
    Note over LF: Uses OPENAI_METHODS_V1<br/>Same instrumentation for v1 and v2
    
    LF->>OAI: Import NotGiven from openai._types
    Note over LF,OAI: Internal API, stable across v1→v2
Loading

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 20, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No files reviewed, no comments

Edit Code Review Agent Settings | Greptile

Bumps [openai](https://github.com/openai/openai-python) from 1.102.0 to 2.5.0.
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.102.0...v2.5.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/openai-2.5.0 branch from 9824e43 to 95ac964 Compare October 21, 2025 05:09
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2025

Superseded by #1412.

@dependabot dependabot bot closed this Oct 21, 2025
@dependabot dependabot bot deleted the dependabot/pip/openai-2.5.0 branch October 21, 2025 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant