release: 6.36.0 by stainless-app[bot] · Pull Request #1849 · openai/openai-node

stainless-app · 2026-04-28T15:54:51Z

Automated Release PR

6.36.0 (2026-04-30)

Full Changelog: v6.35.0...v6.36.0

Features

api: add support for Admin API Keys per endpoint (770d187)
api: manual updates (6af2b6d)
api: manual updates (f2dceda)

Bug Fixes

api: support admin api key auth (e3862a3)
api: tighten auth header selection (f1203bd)

Chores

format: run eslint and prettier separately (104543a)
internal: codegen related update (05d86da)
internal: codegen related update (f184586)

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

stainless-app · 2026-04-28T15:55:26Z

🧪 Testing

To try out this version of the SDK:

npm install 'https://pkg.stainless.com/s/openai-typescript/f184586fbcb8c7c07bf439455d6317aba62719ec/dist.tar.gz'

Expires at: Thu, 28 May 2026 15:55:25 GMT
Updated at: Tue, 28 Apr 2026 15:55:25 GMT

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c41a6ef577

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-04-28T15:56:51Z

+          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };


Preserve HeadersLike when merging OPENAI_CUSTOM_HEADERS

Merging with options.defaultHeaders via object spread breaks valid HeadersLike inputs whenever OPENAI_CUSTOM_HEADERS is set: spreading a Headers instance produces {} and spreading tuple-form headers produces numeric keys, so caller-provided default headers are dropped or malformed for all requests in those environments. Since ClientOptions.defaultHeaders explicitly supports these non-object forms, this is a regression in runtime behavior; the merge should preserve header semantics (e.g., by using buildHeaders/header iteration) instead of plain object spread.

Useful? React with 👍 / 👎.

apcha-oai · 2026-04-29T17:56:17Z

@codex review pls

chatgpt-codex-connector

💡 Codex Review

openai-node/src/realtime/ws.ts

Line 35 in c087df5

    
           ...(isAzure(client) && !props.__resolvedApiKey ? {} : { Authorization: `Bearer ${client.apiKey}` }),

Reject realtime connections when apiKey is missing

After allowing apiKey: null, non-Azure realtime paths still unconditionally format Authorization: Bearer ${client.apiKey} (and browser variants append protocol tokens with ...${client.apiKey}). Admin-only clients now send Bearer null/...null instead of failing fast, causing opaque handshake/auth failures.

openai-node/src/client.ts

Line 639 in c087df5

await this._callApiKey();

Skip apiKey provider calls for admin-only requests

prepareOptions always invokes _callApiKey() even when route security is admin-only. If apiKey is a function and it throws/returns invalid data, admin-key requests fail before adminAPIKey auth is used. Gate token resolution on options.__security?.bearerAuth to avoid breaking valid admin-only traffic.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-04-29T18:05:23Z

      path`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`,
      Page<PermissionCreateResponse>,
-      { body, method: 'post', ...options },
+      { body, method: 'post', ...options, __security: { bearerAuth: true } },


Mark checkpoint permission routes with admin auth scheme

These APIs are documented as admin-key-only, but the generated calls force __security: { bearerAuth: true }. With new OpenAI({ apiKey: null, adminAPIKey: '...' }), buildRequest cannot emit auth for these methods and throws "Could not resolve authentication method", making admin-only clients unable to call checkpoint permission endpoints.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-04-29T18:05:23Z

+          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };


Preserve non-object defaultHeaders when loading env headers

defaultHeaders accepts HeadersLike (e.g., Headers or tuple arrays), but this merge uses object spread. Spreading a Headers instance drops entries, so enabling OPENAI_CUSTOM_HEADERS can silently erase caller-provided default headers and change request behavior.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-04-29T18:05:23Z

        'OpenAI-Project': this.project,
      },
-      await this.authHeaders(options),
+      await this.authHeaders(options, options.__security ?? { bearerAuth: true, adminAPIKeyAuth: true }),


Scope fallback auth to avoid admin key on bearer-only routes

The new fallback options.__security ?? { bearerAuth: true, adminAPIKeyAuth: true } applies both schemes when a resource omits __security. src/resources/beta/realtime/sessions.ts and .../transcription-sessions.ts omit it, so clients with both keys send admin auth (last Authorization wins) to bearer-only endpoints, causing auth failures.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-04-29T18:05:23Z

+    if (nulls.has('authorization')) {
+      return;


Allow explicit api-key omission in header validation

validateHeaders lets callers intentionally omit auth only via nulls.has('authorization'). Azure clients clear auth with 'api-key': null; that path still throws "Could not resolve authentication method" even though omission was explicit. This blocks legitimate header overrides for Azure requests.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-04-29T18:05:23Z

+if ! [ -z "$FILE_LIST" ]; then
+   cat "$FILE_LIST" | xargs ./node_modules/.bin/prettier \


Check file-list contents before invoking prettier

The condition tests FILE_LIST (the path string), which is always non-empty after arg parsing. When the list file has no lines, xargs still invokes prettier once with no targets, causing unnecessary failures or full-run behavior. Guard on file contents (or use xargs -r) instead.

Useful? React with 👍 / 👎.

Generate SDK for admin.organization.audit_logs.

fix(api): tighten auth header selection

Include all admin APIs in the code generation.

chore(internal): codegen related update

f184586

stainless-app Bot requested a review from a team as a code owner April 28, 2026 15:54

stainless-app Bot added the autorelease: pending label Apr 28, 2026

chatgpt-codex-connector Bot reviewed Apr 28, 2026

View reviewed changes

stainless-app Bot added 5 commits April 28, 2026 20:17

chore(internal): codegen related update

05d86da

codegen metadata

6a1580f

chore(format): run eslint and prettier separately

104543a

feat(api): add support for Admin API Keys per endpoint

770d187

codegen metadata

c409a9e

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from c41a6ef to 9ac8b37 Compare April 29, 2026 01:57

stainless-app Bot changed the title ~~release: 6.35.1~~ release: 6.36.0 Apr 29, 2026

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch 2 times, most recently from a65ee74 to dbaed47 Compare April 29, 2026 06:03

fix(api): support admin api key auth

e3862a3

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from dbaed47 to c087df5 Compare April 29, 2026 14:09

chatgpt-codex-connector Bot reviewed Apr 29, 2026

View reviewed changes

stainless-app Bot added 6 commits April 30, 2026 16:53

ci: pin trigger-release-please github action

3ddfbf0

codegen metadata

3dbfb8d

codegen metadata

a48318b

codegen metadata

0b5f766

feat(api): manual updates

f2dceda

Generate SDK for admin.organization.audit_logs.

codegen metadata

92711f0

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from c087df5 to 18c2a42 Compare April 30, 2026 16:55

apcha-oai and others added 2 commits April 30, 2026 13:27

fix(api): tighten auth header selection

f1203bd

codegen metadata

453b9e0

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from 18c2a42 to 0f02137 Compare April 30, 2026 17:32

Merge pull request #1101 from stainless-sdks/apcha/fix-auth-review-1849

7165e04

fix(api): tighten auth header selection

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from 0f02137 to 2bb8d89 Compare April 30, 2026 17:38

stainless-app Bot added 2 commits April 30, 2026 19:38

feat(api): manual updates

6af2b6d

Include all admin APIs in the code generation.

release: 6.36.0

cbe7e3e

stainless-app Bot force-pushed the release-please--branches--master--changes--next--components--openai branch from 2bb8d89 to cbe7e3e Compare April 30, 2026 19:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

release: 6.36.0#1849

release: 6.36.0#1849
stainless-app[bot] wants to merge 18 commits intomasterfrom
release-please--branches--master--changes--next--components--openai

stainless-app Bot commented Apr 28, 2026 •

edited

Loading

Uh oh!

stainless-app Bot commented Apr 28, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Apr 28, 2026

Uh oh!

apcha-oai commented Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

		if ! [ -z "$FILE_LIST" ]; then
		cat "$FILE_LIST" \| xargs ./node_modules/.bin/prettier \

Conversation

stainless-app Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Automated Release PR

6.36.0 (2026-04-30)

Features

Bug Fixes

Chores

Uh oh!

stainless-app Bot commented Apr 28, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Apr 28, 2026

Choose a reason for hiding this comment

Uh oh!

apcha-oai commented Apr 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

stainless-app Bot commented Apr 28, 2026 •

edited

Loading