v3.53.0

3.53.0 (2026-08-25)

Features

• api: Add obfuscation field to ChatCompletionChunk (#813) (4b08348)
• api: add project residency and usage quantity units (#853) (2fd626c)
• api: add Realtime call creation and recursive filters (#860) (c396b57)
• auth: add caller-attested X.509 transport capability (#855) (64b2ef2)
• auth: complete X.509 token lifecycle and setup guidance (#858) (3e3a4e0)
• auth: implement pinned X.509 token exchange (#856) (a84eb49)
• option: add attested X.509 workload identity authentication (#857) (b509c12)
• support named data-residency endpoints (#805) (6e72880)

Bug Fixes

• apijson: preserve unknown union array variants (#768) (0ab7ee6)
• apijson: reject non-object root payloads (#769) (2959fbd)
• azure: isolate provider authentication defaults (#835) (4e5a07a)
• azure: require secure credential transport (#821) (1dcf764)
• azure: validate deployment routing bodies (#826) (54189a0)
• bound retry and polling delays (#828) (6d39b8b)
• don't drop tool_calls when content is empty but present (#757) (4a73240), closes #756
• enforce configured request origins (#823) (a71b2d1)
• harden multipart file metadata encoding (#825) (a4632e5)
• harden workload identity transport and request lifecycles (#861) (4ce8802)
• harden X.509 refresh races and empty-body replay (#859) (f95adf1)
• ignore empty tool call deltas in accumulator (#688) (c2c8590)
• make chat stream accumulation linear (#819) (0b7382a)
• make debug logging metadata-only (#815) (2e0743f)
• normalize registered stream decoder content types (#790) (a689437)
• preserve request options across pagination (#820) (ee97c12)
• responses: decode shell output delta stream events (#803) (bb12b7a)
• sdk: lock and verify the Steady mock server (#811) (37c0f0a)
• ssestream: finalize stream resources promptly (#839) (71a7aef)
• track stream accumulator events for every choice (#806) (8fa5f45)
• validate stream accumulator indices (#822) (02959ba)
• webhooks: honor request-scoped verification options (#814) (da53088)
• webhooks: validate prefixed signing secrets (#824) (c88e19a)

Chores

• api: Add file header comments to source files (#809) (557cc1c)
• api: Clarify image background transparency docs (#831) (6dfcd9b)
• api: Document allowed image generation model values (#816) (c70532e)
• api: update generation metadata (#842) (ceb67ae)
• set a 2,000-line custom-code budget (#840) (31ce143)
• shared: restore generated alias placement (#830) (7d0e09e)

Documentation

• add Markdown-only Go SDK review skill (#795) (3e82f23)
• add recurring improvement skill (#818) (cb08fd8)
• clean up changelog release notes (#696) (5ba3879)
• improve webhook request handling examples (#817) (c152406)
• migrate structured outputs example to Responses API (#804) (dd30934), closes #482
• strengthen Go SDK security contribution guidance (#797) (b4ca1a7)

Refactors

• chat: isolate message conversion (#836) (3175b15)
• chat: reuse generated assistant constructor (#834) (7a8f196)
• responses: isolate output text aggregation (#838) (d38d045)
• vector-stores: isolate batch orchestration (#833) (a2fa6c1)
• vector-stores: isolate file orchestration (#832) (803983f)
• webhooks: isolate verification helpers (#837) (401eaf3)

Build System

• deps: bump actions/checkout from 6.0.2 to 7.0.1 (#848) (fbddc21)
• deps: bump actions/github-script from 7.1.0 to 9.0.0 (#849) (9d7c09e)
• deps: bump github.com/aws/aws-sdk-go-v2/config in / (#850) (a5fedc0)
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#845) (f0079ac)
• deps: bump github.com/ebitengine/oto/v3 in /examples (#851) (65e8a8f)
• deps: bump the codeql group with 2 updates (#847) (29b2a11)