chore(deps): bump openai-agents from 0.13.6 to 0.14.1 in /apps/orchestrator

[dependabot]

Bumps openai-agents from 0.13.6 to 0.14.1.

Release notes

Sourced from openai-agents's releases.

v0.14.1

What's Changed

• fix: sanitize OpenAI tracing export payloads by @​alfozan in openai/openai-agents-python#2896
• fix: #2873 preserve computer driver compatibility for modifier keys by @​seratch in openai/openai-agents-python#2877
• fix #2151 shield server-managed handoffs from unsupported history rewrites by @​seratch in openai/openai-agents-python#2747
• fix: stop streamed tool execution after known input guardrail tripwire by @​seratch in openai/openai-agents-python#2688

Documentation & Other Changes

• docs: update translated document pages by @​github-actions[bot] in openai/openai-agents-python#2891
• docs: align translated sandbox nav and refresh generated refs by @​seratch in openai/openai-agents-python#2892
• docs: clarify ToolContext availability in function-tool lifecycle hooks by @​HuxleyHu98 in openai/openai-agents-python#2687
• docs: update translated document pages by @​github-actions[bot] in openai/openai-agents-python#2893
• ci: add sandbox auto-label mapping by @​seratch in openai/openai-agents-python#2894
• Release 0.14.1 by @​github-actions[bot] in openai/openai-agents-python#2895

New Contributors

• @​HuxleyHu98 made their first contribution in openai/openai-agents-python#2687
• @​alfozan made their first contribution in openai/openai-agents-python#2896

Full Changelog: openai/openai-agents-python@v0.14.0...v0.14.1

v0.14.0

What's Changed

Sandbox Agents

This release adds Sandbox Agents, a beta SDK surface for running agents with a persistent, isolated workspace. Sandbox agents keep the normal Agent and Runner flow, but add workspace manifests, sandbox-native capabilities, sandbox clients, snapshots, and resume support so agents can work over real files, run commands, edit repositories, generate artifacts, and continue work across runs.

Key pieces:

• SandboxAgent: an Agent with sandbox defaults such as default_manifest, sandbox instructions, capabilities, and run_as.
• Manifest: a fresh-workspace contract for files, directories, local files, local directories, Git repos, environment, users, groups, and mounts.
• SandboxRunConfig: per-run sandbox wiring for client creation, live session injection, serialized session resume, manifest overrides, snapshots, and materialization concurrency limits.
• Built-in capabilities for shell access, filesystem editing and image inspection, skills, memory, and compaction.
• Workspace snapshots and serialized sandbox session state for reconnecting to existing work or seeding a fresh sandbox from saved contents.

Sandbox clients and hosted providers

Sandbox agents now support local, containerized, and hosted execution backends:

• UnixLocalSandboxClient for fast local development.
• DockerSandboxClient for container isolation and image parity.
• Hosted sandbox clients for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel through optional extras.

The release also adds provider-specific examples and mount strategies for common storage backends, including S3, Cloudflare R2, Google Cloud Storage, Azure Blob Storage, and S3 Files where supported by the selected backend.

Sandbox memory

... (truncated)

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

• Bug fixes
• New features
• Changes to private interfaces
• Updates to beta features

Breaking change changelog

0.14.0

This minor release does not introduce a breaking change, but it adds a major new beta feature area: Sandbox Agents, plus the runtime, backend, and documentation support needed to use them across local, containerized, and hosted environments.

Highlights:

• Added a new beta sandbox runtime surface centered on SandboxAgent, Manifest, and SandboxRunConfig, letting agents work inside persistent isolated workspaces with files, directories, Git repos, mounts, snapshots, and resume support.
• Added sandbox execution backends for local and containerized development via UnixLocalSandboxClient and DockerSandboxClient, plus hosted provider integrations for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel through optional extras.
• Added sandbox memory support so future runs can reuse lessons from prior runs, with progressive disclosure, multi-turn grouping, configurable isolation boundaries, and persisted-memory examples including S3-backed workflows.
• Added a broader workspace and resume model, including local and synthetic workspace entries, remote storage mounts for S3/R2/GCS/Azure Blob Storage/S3 Files, portable snapshots, and resume flows via RunState, SandboxSessionState, or saved snapshots.
• Added substantial sandbox examples and tutorials under examples/sandbox/, covering coding tasks with skills, handoffs, memory, provider-specific setups, and end-to-end workflows such as code review, dataroom QA, and website cloning.
• Extended the core runtime and tracing stack with sandbox-aware session preparation, capability binding, state serialization, unified tracing, prompt cache key defaults, and safer sensitive MCP output redaction.

0.13.0

This minor release does not introduce a breaking change, but it includes a notable Realtime default update plus new MCP capabilities and runtime stability fixes.

Highlights:

• The default websocket Realtime model is now gpt-realtime-1.5, so new Realtime agent setups use the newer model without extra configuration.
• MCPServer now exposes list_resources(), list_resource_templates(), and read_resource(), and MCPServerStreamableHttp now exposes session_id so streamable HTTP sessions can be resumed across reconnects or stateless workers.
• Chat Completions integrations can now opt into reasoning-content replay via should_replay_reasoning_content, improving provider-specific reasoning/tool-call continuity for adapters such as LiteLLM/DeepSeek.
• Fixed several runtime and session edge cases, including concurrent first writes in SQLAlchemySession, compaction requests with orphaned assistant message IDs after reasoning stripping, remove_all_tools() leaving MCP/reasoning items behind, and a race in the function-tool batch executor.

0.12.0

This minor release does not introduce a breaking change. Check the release notes for major feature additions.

0.11.0

... (truncated)

Commits

• 3dffa4b Release 0.14.1 (#2895)
• 2cef83b fix: sanitize OpenAI tracing export payloads (#2896)
• 0a100fb ci: add sandbox auto-label mapping (#2894)
• fa049a2 fix: stop streamed tool execution after known input guardrail tripwire (#2688)
• 9013480 fix: #2873 preserve computer driver compatibility for modifier keys (#2877)
• 83b3833 fix #2151 shield server-managed handoffs from unsupported history rewrites (#...
• 5d05d5d docs: update translated document pages (#2893)
• bd871cd docs: clarify ToolContext availability in function-tool lifecycle hooks (#2687)
• 4892211 docs: align translated sandbox nav and refresh generated refs (#2892)
• e336667 docs: update translated document pages (#2891)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #206.