chore(deps): bump github.com/openai/openai-go/v3 from 3.39.0 to 3.54.0

[dependabot]

Bumps github.com/openai/openai-go/v3 from 3.39.0 to 3.54.0.

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.54.0

3.54.0 (2026-08-27)

Features

• api: make function call output call IDs optional (#864) (7095c46)

Bug Fixes

• auth: harden X.509 workload identity contract (#863) (adefcb3)

v3.53.0

3.53.0 (2026-08-25)

Features

• api: Add obfuscation field to ChatCompletionChunk (#813) (4b08348)
• api: add project residency and usage quantity units (#853) (2fd626c)
• api: add Realtime call creation and recursive filters (#860) (c396b57)
• auth: add caller-attested X.509 transport capability (#855) (64b2ef2)
• auth: complete X.509 token lifecycle and setup guidance (#858) (3e3a4e0)
• auth: implement pinned X.509 token exchange (#856) (a84eb49)
• option: add attested X.509 workload identity authentication (#857) (b509c12)
• support named data-residency endpoints (#805) (6e72880)

Bug Fixes

• apijson: preserve unknown union array variants (#768) (0ab7ee6)
• apijson: reject non-object root payloads (#769) (2959fbd)
• azure: isolate provider authentication defaults (#835) (4e5a07a)
• azure: require secure credential transport (#821) (1dcf764)
• azure: validate deployment routing bodies (#826) (54189a0)
• bound retry and polling delays (#828) (6d39b8b)
• don't drop tool_calls when content is empty but present (#757) (4a73240), closes #756
• enforce configured request origins (#823) (a71b2d1)
• harden multipart file metadata encoding (#825) (a4632e5)
• harden workload identity transport and request lifecycles (#861) (4ce8802)
• harden X.509 refresh races and empty-body replay (#859) (f95adf1)
• ignore empty tool call deltas in accumulator (#688) (c2c8590)
• make chat stream accumulation linear (#819) (0b7382a)
• make debug logging metadata-only (#815) (2e0743f)
• normalize registered stream decoder content types (#790) (a689437)
• preserve request options across pagination (#820) (ee97c12)
• responses: decode shell output delta stream events (#803) (bb12b7a)
• sdk: lock and verify the Steady mock server (#811) (37c0f0a)
• ssestream: finalize stream resources promptly (#839) (71a7aef)

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.54.0 (2026-08-27)

Features

• api: make function call output call IDs optional (#864) (7095c46)

Bug Fixes

• auth: harden X.509 workload identity contract (#863) (adefcb3)

3.53.0 (2026-08-25)

Features

• api: Add obfuscation field to ChatCompletionChunk (#813) (4b08348)
• api: add project residency and usage quantity units (#853) (2fd626c)
• api: add Realtime call creation and recursive filters (#860) (c396b57)
• auth: add caller-attested X.509 transport capability (#855) (64b2ef2)
• auth: complete X.509 token lifecycle and setup guidance (#858) (3e3a4e0)
• auth: implement pinned X.509 token exchange (#856) (a84eb49)
• option: add attested X.509 workload identity authentication (#857) (b509c12)
• support named data-residency endpoints (#805) (6e72880)

Bug Fixes

• apijson: preserve unknown union array variants (#768) (0ab7ee6)
• apijson: reject non-object root payloads (#769) (2959fbd)
• azure: isolate provider authentication defaults (#835) (4e5a07a)
• azure: require secure credential transport (#821) (1dcf764)
• azure: validate deployment routing bodies (#826) (54189a0)
• bound retry and polling delays (#828) (6d39b8b)
• don't drop tool_calls when content is empty but present (#757) (4a73240), closes #756
• enforce configured request origins (#823) (a71b2d1)
• harden multipart file metadata encoding (#825) (a4632e5)
• harden workload identity transport and request lifecycles (#861) (4ce8802)
• harden X.509 refresh races and empty-body replay (#859) (f95adf1)
• ignore empty tool call deltas in accumulator (#688) (c2c8590)
• make chat stream accumulation linear (#819) (0b7382a)
• make debug logging metadata-only (#815) (2e0743f)
• normalize registered stream decoder content types (#790) (a689437)
• preserve request options across pagination (#820) (ee97c12)
• responses: decode shell output delta stream events (#803) (bb12b7a)
• sdk: lock and verify the Steady mock server (#811) (37c0f0a)
• ssestream: finalize stream resources promptly (#839) (71a7aef)
• track stream accumulator events for every choice (#806) (8fa5f45)
• validate stream accumulator indices (#822) (02959ba)

... (truncated)

Commits

• 34c838d release: 3.54.0 (#865)
• 7095c46 feat(api): make function call output call IDs optional (#864)
• adefcb3 fix(auth): harden X.509 workload identity contract (#863)
• aae189f release: 3.53.0 (#798)
• 4ce8802 fix: harden workload identity transport and request lifecycles (#861)
• c396b57 feat(api): add Realtime call creation and recursive filters (#860)
• f95adf1 fix: harden X.509 refresh races and empty-body replay (#859)
• 3e3a4e0 feat(auth): complete X.509 token lifecycle and setup guidance (#858)
• b509c12 feat(option): add attested X.509 workload identity authentication (#857)
• 2fd626c feat(api): add project residency and usage quantity units (#853)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #84.