chore(deps): bump actions/github-script from 7.1.0 to 9.0.0

[dependabot]

Bumps actions/github-script from 7.1.0 to 9.0.0.

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in actions/github-script#695
• ci: use deployment: false for integration test environments by @​salmanmkc in actions/github-script#712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in actions/github-script#700

New Contributors

• @​Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v8.0.0

What's Changed

• Update Node.js version support to 24.x by @​salmanmkc in actions/github-script#637
• README for updating actions/github-script from v7 to v8 by @​sneha-krip in actions/github-script#653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

• @​salmanmkc made their first contribution in actions/github-script#637
• @​sneha-krip made their first contribution in actions/github-script#653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

Commits

• 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
• ca10bbd fix: use @​octokit/core/types import for v7 compatibility
• 86e48e2 merge: incorporate main branch changes
• c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
• afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
• ff8117e ci: fix user-agent test to handle orchestration ID
• 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
• 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
• c17d55b ci: add getOctokit integration test job
• a047196 test: add getOctokit integration tests via callAsyncFunction
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[openai-sdks]

OkTest Summary

✅ 237/237 SDK tests passed in 11.581s for Python SDK PR #3769.

Test results — 42 files

Test	Result	Time
tests/chat-completions-complex-body.test.ts	✅ Passed	218ms
tests/chat-completions-create.test.ts	✅ Passed	260ms
tests/chat-completions-stream.test.ts	✅ Passed	138ms
tests/files-content-binary.test.ts	✅ Passed	271ms
tests/files-create-multipart.test.ts	✅ Passed	280ms
tests/files-list-pagination.test.ts	✅ Passed	152ms
tests/initialize-config.test.ts	✅ Passed	234ms
tests/instance-isolation.test.ts	✅ Passed	219ms
tests/models-list.test.ts	✅ Passed	201ms
tests/responses-background-lifecycle.test.ts	✅ Passed	242ms
tests/responses-body-method-errors.test.ts	✅ Passed	334ms
tests/responses-cancel-timeout.test.ts	✅ Passed	234ms
tests/responses-cancel.test.ts	✅ Passed	270ms
tests/responses-compact-retries.test.ts	✅ Passed	333ms
tests/responses-compact.test.ts	✅ Passed	219ms
tests/responses-create-advanced-stream.test.ts	✅ Passed	127ms
tests/responses-create-advanced.test.ts	✅ Passed	244ms
tests/responses-create-disconnect.test.ts	✅ Passed	1.216s
tests/responses-create-errors.test.ts	✅ Passed	165ms
tests/responses-create-malformed-api-responses.test.ts	✅ Passed	255ms
tests/responses-create-retries.test.ts	✅ Passed	297ms
tests/responses-create-stream-failures.test.ts	✅ Passed	134ms
tests/responses-create-stream-timeout.test.ts	✅ Passed	239ms
tests/responses-create-stream-wire.test.ts	✅ Passed	3.868s
tests/responses-create-stream.test.ts	✅ Passed	305ms
tests/responses-create-terminal-states.test.ts	✅ Passed	219ms
tests/responses-create-timeout.test.ts	✅ Passed	237ms
tests/responses-create.test.ts	✅ Passed	287ms
tests/responses-delete.test.ts	✅ Passed	265ms
tests/responses-input-items-errors.test.ts	✅ Passed	427ms
tests/responses-input-items-list.test.ts	✅ Passed	326ms
tests/responses-input-items-options.test.ts	✅ Passed	271ms
tests/responses-input-tokens-count-timeout.test.ts	✅ Passed	265ms
tests/responses-input-tokens-count.test.ts	✅ Passed	264ms
tests/responses-malformed-inputs.test.ts	✅ Passed	2.921s
tests/responses-not-found-errors.test.ts	✅ Passed	277ms
tests/responses-parse.test.ts	✅ Passed	393ms
tests/responses-retrieve-retries.test.ts	✅ Passed	224ms
tests/responses-retrieve.test.ts	✅ Passed	226ms
tests/responses-stored-method-errors.test.ts	✅ Passed	561ms
tests/retry-behavior.test.ts	✅ Passed	3.276s
tests/sdk-error-shape.test.ts	✅ Passed	290ms

View OkTest run #33379277308

_{SDK merge (44bd557935aa) · head (84f053f57fd0) · base (b19c2161b1ea) · OkTest (2b1bdfd25e98)}

[github-actions]

Castiron custom code

✅ No new custom-code files detected.

34 mixed files remain; 0 existing customizations changed.

Compared b19c2161b1ea → 84f053f57fd0. Generated baselines verified.

34 existing customizations unchanged

• api.md
• scripts/castiron/README.md
• scripts/castiron/custom_code_report.py
• scripts/castiron/test_custom_code_report.py
• src/openai/init.py
• src/openai/_client.py
• src/openai/resources/audio/transcriptions.py
• src/openai/resources/audio/translations.py
• src/openai/resources/beta/beta.py
• src/openai/resources/beta/responses/responses.py
• src/openai/resources/beta/threads/runs/runs.py
• src/openai/resources/beta/threads/threads.py
• src/openai/resources/chat/completions/completions.py
• src/openai/resources/embeddings.py
• src/openai/resources/files.py
• src/openai/resources/realtime/realtime.py
• src/openai/resources/responses/responses.py
• src/openai/resources/uploads/uploads.py
• src/openai/resources/vector_stores/file_batches.py
• src/openai/resources/vector_stores/files.py
• src/openai/resources/videos.py
• src/openai/resources/webhooks/init.py
• src/openai/resources/webhooks/webhooks.py
• src/openai/types/chat/init.py
• src/openai/types/chat/chat_completion_message_tool_call.py
• src/openai/types/fine_tuning/fine_tuning_job_integration.py
• src/openai/types/responses/init.py
• src/openai/types/responses/response.py
• src/openai/types/responses/response_function_web_search.py
• src/openai/types/responses/response_function_web_search_param.py
• src/openai/types/responses/tool.py
• src/openai/types/responses/tool_param.py
• src/openai/types/webhooks/init.py
• tests/api_resources/test_videos.py

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 33379308820 --repo openai/openai-python \
  --name castiron-custom-code-33379308820-1 --dir /tmp/castiron-custom-code-33379308820-1
git apply --stat /tmp/castiron-custom-code-33379308820-1/custom-code.patch
cat /tmp/castiron-custom-code-33379308820-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin b19c2161b1eac80fbf1f6f67a64a50af99c53356 84f053f57fd0b906d2aa9e2172ad8058bec73845
python3 scripts/castiron/custom_code_report.py report \
  --base b19c2161b1eac80fbf1f6f67a64a50af99c53356 \
  --head 84f053f57fd0b906d2aa9e2172ad8058bec73845 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-84f053f57fd0
cat /tmp/castiron-custom-code-84f053f57fd0/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch