release: 7.6.0

[openai-sdks]

Automated Release PR

7.6.0 (2026-08-20)

Features

• api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
• support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

• auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
• drain tee stream queues in linear time (#2379) (1f3ce07)
• preserve large streaming responses (#2433) (4e588c2)
• preserve multipart upload array order (#2380) (f1a2b61)
• security: abort streaming examples when clients disconnect (#2426) (b32a25b)
• security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
• security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
• security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
• security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)
• security: close rejected Azure managed-identity response streams (#2416) (387bbc8)
• security: harden Bedrock regions, query merges, and upload errors (#2410) (ce45d0d)
• security: harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414) (5533f73)
• security: preserve chat structured response-format integrity (#2402) (e69df93)
• security: prevent AssistantStream deltas leaking sensitive data (#2392) (17cf54c)
• security: prevent streaming upload filename path disclosure (#2386) (c88a024)
• security: prevent structured-output format downgrade (#2394) (dd945e6)
• security: redact built-in structured JSON parse errors (#2418) (a0d68cc)
• security: redact chat completion finalization snapshots (#2400) (fb5d8e7)
• security: redact GCP metadata authentication error bodies (#2399) (322840c)
• security: redact invalid workload identity access tokens (#2425) (0d28da3)
• security: redact malformed NDJSON stream diagnostics (#2420) (dcc705c)
• security: redact malformed Realtime WebSocket error causes (#2408) (e7a1a44)
• security: redact malformed SSE diagnostic payloads (#2403) (272a2cc)
• security: redact sensitive assistant delta diagnostics (#2406) (b130b83)
• security: redact unsupported Responses stream event payloads (#2395) (32b2953)
• security: reject malformed Realtime WebSocket event frames (#2391) (e6e11b0)
• security: require an exact SSE completion sentinel (#2422) (a905bfb)
• security: require OIDC for npm publishing (#2404) (342764b)
• security: respect configured logger for Assistants stream errors (#2390) (8ba3009)
• security: restrict live CI credentials to protected main (#2405) (3554cdc)
• security: scope Cloudflare ecosystem API key files (#2398) (4f4b45d)
• security: secure Next.js Edge streaming example requests (#2424) (861caed)
• security: stop retaining sensitive assistant stream events (#2407) (dfec129)
• settle concurrent stream event waiters in linear time (#2387) (a88c2ca)
• settle WebSocket event waiters in linear time (#2389) (489dc72)
• streaming: reject named SSE provider error events (#2409) (b7a0bd6)
• ws: block custom credential headers on redirects (#2429) (d2ab6e7)

Chores

• api: document supported image generation models (#2432) (0e00909)

Documentation

• encode recurring SDK review feedback in agent guidance (#2378) (e552523)
• security: add secure contributor and agent guidance (#2382) (459d009)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Castiron custom code

✅ No new custom-code files detected.

34 mixed files remain; 0 existing customizations changed.

Compared 4e588c2fed7f → e9cff1e057d6. Generated baselines verified.

34 existing customizations unchanged

• api.md
• scripts/castiron/README.md
• scripts/castiron/custom_code_report.py
• scripts/castiron/test_custom_code_report.py
• src/client.ts
• src/resources/audio/transcriptions.ts
• src/resources/audio/translations.ts
• src/resources/beta/assistants.ts
• src/resources/beta/beta.ts
• src/resources/beta/index.ts
• src/resources/beta/responses/internal-base.ts
• src/resources/beta/responses/responses.ts
• src/resources/beta/threads/index.ts
• src/resources/beta/threads/runs/index.ts
• src/resources/beta/threads/runs/runs.ts
• src/resources/beta/threads/threads.ts
• src/resources/chat/completions/completions.ts
• src/resources/chat/completions/index.ts
• src/resources/conversations/index.ts
• src/resources/embeddings.ts
• src/resources/files.ts
• src/resources/fine-tuning/checkpoints/permissions.ts
• src/resources/images.ts
• src/resources/responses/internal-base.ts
• src/resources/responses/responses.ts
• src/resources/skills/skills.ts
• src/resources/skills/versions/versions.ts
• src/resources/vector-stores/file-batches.ts
• src/resources/vector-stores/files.ts
• src/resources/webhooks/index.ts
• src/resources/webhooks/webhooks.ts
• tests/api-resources/embeddings.test.ts
• tests/api-resources/responses/responses.test.ts
• tests/lib/data-residency.test.ts

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 32418962198 --repo openai/openai-node \
  --name castiron-custom-code-32418962198-1 --dir /tmp/castiron-custom-code-32418962198-1
git apply --stat /tmp/castiron-custom-code-32418962198-1/custom-code.patch
cat /tmp/castiron-custom-code-32418962198-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 4e588c2fed7f5987381495f9cca245e245ac9cbd e9cff1e057d67a70009d737bf6a8dd4453f666c9
python3 scripts/castiron/custom_code_report.py report \
  --base 4e588c2fed7f5987381495f9cca245e245ac9cbd \
  --head e9cff1e057d67a70009d737bf6a8dd4453f666c9 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-e9cff1e057d6
cat /tmp/castiron-custom-code-e9cff1e057d6/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch