Skip to content

fix(deps): update rhdh augment dependencies (minor)#2914

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-augment-dependencies-(minor)
Open

fix(deps): update rhdh augment dependencies (minor)#2914
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-augment-dependencies-(minor)

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 24, 2026

This PR contains the following updates:

Package Change Age Confidence
@openai/agents-core (source) ^0.8.5^0.11.0 age confidence
@playwright/test (source) 1.58.21.60.0 age confidence

Release Notes

openai/openai-agents-js (@​openai/agents-core)

v0.11.4

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.11.3...v0.11.4

v0.11.3

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.11.2...v0.11.3

v0.11.2

Compare Source

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.11.1...v0.11.2

v0.11.1

Compare Source

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.11.0...v0.11.1

v0.11.0

Compare Source

Key Changes

RealtimeAgent's default is now gpt-realtime-2

Since this version, the default model for RealtimeAgents is gpt-realtime-2: https://developers.openai.com/api/docs/models/gpt-realtime-2

Sandbox local source materialization change

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization baseDir unless the source path is covered by Manifest.extraPathGrants. The baseDir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

import { Manifest, localDir, skills } from '@​openai/agents/sandbox';
import { localDirLazySkillSource } from '@​openai/agents/sandbox/local';
import { dirname, join } from 'node:path';
import { fileURLToPath } from 'node:url';

// Outside the base dir
const sharedSkillsDir = '/opt/company/agent-skills';

// Under the base dir
const appRoot = dirname(fileURLToPath(import.meta.url));
const repoDir = join(appRoot, 'repo');

const manifest = new Manifest({
  // Having extraPathGrants for the path outside the baseDir is now required
  extraPathGrants: [
    {
      path: sharedSkillsDir,
      readOnly: true,
      description: 'Shared skill bundle.',
    },
  ],
  entries: {
    // This one doesn't need extraPathGrants
    repo: localDir({ src: repoDir }),
  },
});

const skillCapability = skills({
  lazyFrom: localDirLazySkillSource({
    src: sharedSkillsDir,
  }),
});

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.10.1...v0.11.0

v0.10.1

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.10.0...v0.10.1

v0.10.0

Compare Source

Key Changes

Default model change

In this version, the SDK default model is now gpt-5.4-mini instead of gpt-4.1. This could affect agents and runs that do not explicitly set a model. Because the new default is a GPT-5 model, implicit default model settings now include GPT-5 defaults such as reasoning.effort="none" and verbosity="low".

The new default model should work better for most use cases (see the report at #​1248), but if you need to keep the previous default model behavior for some reasons, set a model explicitly on the agent or run config or set the OPENAI_DEFAULT_MODEL environment variable.

maxTurns configuration

This version adds a new option maxTurns=null to disable the Agents SDK run turn limit while preserving the existing default of DEFAULT_MAX_TURNS (10) when maxTurns is omitted.

Tool execution concurrency

This version adds a new SDK-side runtime configuration for local function tool execution concurrency: toolExecution.maxFunctionToolConcurrency on RunConfig, preserves default behavior when unset. The change keeps provider-side ModelSettings.parallelToolCalls separate from SDK-side local execution scheduling.

Server-prefixed MCP tool naming

This version adds a new option MCPConfigin Agent to align with the Python SDK. When Its includeServerInToolNames is set to true, the SDK includes the MCP server name in the tool name to prevent tool name conflicts with other MCP servers.

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.9.1...v0.10.0

v0.9.1

Compare Source

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.9.0...v0.9.1

v0.9.0

Compare Source

What's Changed

Sandbox Agents

This release adds Sandbox Agents, a beta SDK surface for running agents with persistent workspaces and sandbox-backed capabilities in JavaScript.

Sandbox agents build on the existing Agent, Runner, and run flow, while adding workspace manifests, sandbox sessions, capabilities, snapshots, memory, and resume support. They let agents inspect files, run commands, edit repositories, apply patches, generate artifacts, and continue work across runs.

Refer to the Sandbox Agents guide and examples/sandbox/ for more details.

Key additions include:

  • SandboxAgent, exported from @openai/agents/sandbox, with sandbox defaults such as defaultManifest, baseInstructions, capabilities, and runAs.
  • Manifest, a workspace contract for synthetic files and directories, local files and directories, Git repositories, environment, users, groups, permissions, and mounts.
  • SandboxRunConfig, which wires sandbox clients, live sessions, serialized session resume, manifest overrides, snapshots, and materialization limits into each run.
  • Built-in capabilities for filesystem access, shell access, patching and editing, image inspection, lazy skills, memory, and compaction.
  • Sandbox-aware RunState serialization for resuming runner-managed sandbox sessions.
Sandbox Clients and Hosted Providers

Sandbox agents support local, containerized, and hosted execution backends:

  • UnixLocalSandboxClient for local development.
  • DockerSandboxClient for container isolation and image parity.
  • Hosted sandbox clients for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel through @openai/agents-extensions/sandbox/* subpath exports.

Provider-specific examples are available under examples/sandbox/extensions/.

Workspaces, Snapshots, Resume, and Memory

This release adds a workspace model for sandbox sessions, including synthetic files and directories, local files and directories, Git repositories, local bind mounts, Docker volume strategies, and typed remote mounts where supported by the selected backend.

It also adds local and remote snapshot store interfaces for carrying workspace contents across runs, plus runner-managed resume through serialized sandbox session state.

Sandbox memory lets future sandbox-agent runs learn from prior runs by storing extracted lessons in the workspace, injecting concise summaries into later runs, and supporting progressive disclosure through deeper rollout summaries. Memory supports read-only and generate-enabled modes, live updates, automatic generation when sessions are flushed, multi-turn grouping, separate memory layouts, and pluggable MemoryStore implementations.

Examples

A new examples/sandbox/ suite demonstrates:

  • Basic SandboxAgent execution with a manifest.
  • Unix-local and Docker sandbox runners.
  • Interactive Unix-local PTY usage.
  • Sandbox handoffs and sandbox agents as tools.
  • Host-defined tools combined with sandbox agents.
  • Filesystem, shell, image, patch, compaction, lazy skill, and memory capabilities.
  • Snapshot-based resume and multi-agent or multi-turn memory.
  • Hosted provider runners for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel.
Runtime, Tracing, and Model Plumbing

The release includes the runtime plumbing needed for sandbox agents to work naturally inside the JavaScript SDK:

  • Runner-managed sandbox preparation, capability binding, lifecycle handling, cleanup, and resume.
  • Per-agent sandbox session tracking for handoffs and agents-as-tools flows.
  • Public sandbox agent identity preservation across model filters and runtime hooks.
  • Sandbox operation spans for session startup, command execution, filesystem work, snapshots, memory, and provider operations.
  • runAs support for compatible shell and filesystem operations.
  • Remote sandbox concurrency limits for manifest and local directory materialization.

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.8.5...v0.9.0

microsoft/playwright (@​playwright/test)

v1.60.0

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page
Locators and Assertions
Network
  • webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
  • New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.
Errors and Reporting
Test runner
  • New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
  • Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

  • HTML reporter:
    • npx playwright show-report accepts .zip files directly — no need to unzip first.
    • Steps that contain attachments inside nested children show an indicator on the parent step.
    • The repeatEachIndex is shown in the test header when non-zero.
  • Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

  • Removed long-deprecated APIs:
    • Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
    • handle option on BrowserContext.exposeBinding and Page.exposeBinding.
    • logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
    • Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

  • Chromium 148.0.7778.96
  • Mozilla Firefox 150.0.2
  • WebKit 26.4

This version was also tested against the following stable channels:

  • Google Chrome 147
  • Microsoft Edge 147

v1.59.1

Compare Source

v1.59.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from pkliczewski as a code owner April 24, 2026 15:52
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 24, 2026
@renovate renovate Bot requested a review from rrbanda as a code owner April 24, 2026 15:52
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 21 times, most recently from a069ced to 03cac36 Compare April 28, 2026 07:15
@renovate renovate Bot changed the title chore(deps): update dependency @playwright/test to v1.59.1 Update dependency @playwright/test to v1.59.1 Apr 28, 2026
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 2 times, most recently from b4ea4cd to ffad084 Compare April 28, 2026 09:15
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 4 times, most recently from 125880e to fa728f4 Compare April 29, 2026 14:34
@renovate renovate Bot changed the title Update dependency @playwright/test to v1.59.1 chore(deps): update dependency @playwright/test to v1.59.1 Apr 29, 2026
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 5 times, most recently from 3fe927d to 8f861c1 Compare April 29, 2026 18:44
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 29, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.78%. Comparing base (b418448) to head (6d3c946).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##             main    #2914     +/-   ##
=========================================
  Coverage   53.78%   53.78%             
=========================================
  Files        2362     2362             
  Lines       84847    84847             
  Branches    23510    23509      -1     
=========================================
  Hits        45634    45634             
- Misses      37755    38938   +1183     
+ Partials     1458      275   -1183     
Flag Coverage Δ *Carryforward flag
adoption-insights 83.58% <ø> (ø) Carriedforward from b418448
ai-integrations 70.03% <ø> (ø) Carriedforward from b418448
app-defaults 69.60% <ø> (ø) Carriedforward from b418448
augment 47.54% <ø> (ø)
bulk-import 72.86% <ø> (ø) Carriedforward from b418448
cost-management 16.49% <ø> (ø) Carriedforward from b418448
dcm 32.85% <ø> (ø) Carriedforward from b418448
extensions 61.79% <ø> (ø) Carriedforward from b418448
global-floating-action-button 74.30% <ø> (ø) Carriedforward from b418448
global-header 61.68% <ø> (ø) Carriedforward from b418448
homepage 50.99% <ø> (ø) Carriedforward from b418448
konflux 91.01% <ø> (ø) Carriedforward from b418448
lightspeed 68.33% <ø> (ø) Carriedforward from b418448
mcp-integrations 81.59% <ø> (ø) Carriedforward from b418448
orchestrator 36.36% <ø> (ø) Carriedforward from b418448
quickstart 62.88% <ø> (ø) Carriedforward from b418448
sandbox 79.49% <ø> (ø) Carriedforward from b418448
scorecard 83.84% <ø> (ø) Carriedforward from b418448
theme 64.54% <ø> (ø) Carriedforward from b418448
translations 8.49% <ø> (ø) Carriedforward from b418448
x2a 78.59% <ø> (ø) Carriedforward from b418448

*This pull request uses carry forward flags. Click here to find out more.


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b418448...6d3c946. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 8 times, most recently from 25a4f42 to 51a2a9e Compare April 30, 2026 13:21
@renovate renovate Bot changed the title chore(deps): update dependency @playwright/test to v1.59.1 Update dependency @playwright/test to v1.59.1 Apr 30, 2026
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 2 times, most recently from 71517e9 to c501291 Compare May 1, 2026 13:40
@renovate renovate Bot changed the title Update dependency @playwright/test to v1.59.1 chore(deps): update dependency @playwright/test to v1.59.1 May 1, 2026
@renovate renovate Bot force-pushed the renovate/rhdh-augment-dependencies-(minor) branch 3 times, most recently from 91863b6 to df0488d Compare May 4, 2026 10:43
@rhdh-gh-app
Copy link
Copy Markdown

rhdh-gh-app Bot commented May 21, 2026

Changed Packages

Package Name Package Path Changeset Bump Current Version
@red-hat-developer-hub/backstage-plugin-augment-backend workspaces/augment/plugins/augment-backend patch v0.1.0

@sonarqubecloud
Copy link
Copy Markdown

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

augment dependencies Pull requests that update a dependency file team/rhdh workspace/augment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants