microsoft/openaivec v2.6.1

v2.6.1

Repository: microsoft/openaivec

Tag: v2.6.1

Published: 2026-09-11T03:47:39Z

Prerelease: no

Release notes:

openaivec 2.6.1

Dependency and release-tooling refresh, integrated in #193.

Updates

Re-resolved the lockfile against official PyPI, retaining the latest compatible versions for each supported Python version. Highlights:

| Package | Previous | Updated | | --- | --- | --- | | OpenAI | 3.1.0 | 3.13.0 | | HTTPX2 / HTTPCore2 | 2.10.0 | 2.12.0 | | Pydantic | 2.13.4 | 2.13.5 | | tiktoken | 0.13.0 | 0.14.0 | | cryptography | 50.0.0 | 50.0.1 | | Ruff | 0.16.3 | 0.16.7 | | Pyright | 1.1.411 | 1.1.414 |

• HTTPX2 2.12.0 includes fixes for CVE-2026-84379, CVE-2026-84380, and CVE-2026-84382. GitHub has marked the corresponding repository Dependabot alerts as fixed.
• Jupytext resolves to 1.19.5 because its publisher withdrew the incorrectly labeled 1.20.0 release.
• Updated pinned release actions: actions/deploy-pages 5.0.1 and softprops/action-gh-release 3.0.3.
• Superseded Dependabot PRs #176, #177, and #178 were closed after their changes were incorporated.

Compatibility

Python >=3.10, all 14 published dependency declarations (including the Spark extra), and runtime APIs are unchanged. This release refreshes the repository lockfile; it does not force newer minimum dependency versions in existing installations. Refresh existing environments' dependency resolution to receive the patched transitive packages.

The existing upstream PySpark warning about pandas 3.x remains. Passing the suite does not change upstream compatibility guarantees.

Verification

• Python 3.10 and 3.14 matrix: 950 tests passed on each version, with no skips. Ruff, blocking Pyright, and dependency consistency checks passed; documentation and distribution builds passed.
• Final integration CI: all 950 tests passed after the temporary verification workflow was removed.
• Fresh official-PyPI installations passed on Python 3.10 and 3.14, resolving OpenAI 3.13.0 and HTTPX2 2.12.0 without installing the optional Spark extra. All 48 installed Python sources match the release commit; batching, deduplication, ordering, cache reuse, and pandas accessor probes passed.
• Wheel and source archive SHA-256 hashes match official PyPI metadata. Both Sigstore bundles verify against this tag's GitHub Actions publishing identity.

Published on PyPI. Full changelog.