chore(deps-dev): bump the development-dependencies group with 3 updates

[dependabot]

Bumps the development-dependencies group with 3 updates: sorbet, sorbet-runtime and webmock.

Updates sorbet from 0.6.12753 to 0.6.13437

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13436.20260821170406-27d856dac

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13436', :group => :development
gem 'sorbet-runtime', '0.6.13436'

sorbet 0.6.13435.20260821154730-a08e45c24

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13435', :group => :development
gem 'sorbet-runtime', '0.6.13435'

sorbet 0.6.13434.20260821150434-857335570

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13434', :group => :development
gem 'sorbet-runtime', '0.6.13434'

sorbet 0.6.13433.20260820221155-e6754cd5e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13433', :group => :development
gem 'sorbet-runtime', '0.6.13433'

sorbet 0.6.13432.20260820170305-05aef5fd2

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13432', :group => :development
gem 'sorbet-runtime', '0.6.13432'

sorbet 0.6.13431.20260820141021-8989a4f33

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13431', :group => :development
gem 'sorbet-runtime', '0.6.13431'

sorbet 0.6.13430.20260820115544-0546350c8

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13430', :group => :development
gem 'sorbet-runtime', '0.6.13430'

sorbet 0.6.13429.20260819180422-749fc96b6

... (truncated)

Commits

• See full diff in compare view

Updates sorbet-runtime from 0.6.13427 to 0.6.13437

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13436.20260821170406-27d856dac

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13436', :group => :development
gem 'sorbet-runtime', '0.6.13436'

sorbet 0.6.13435.20260821154730-a08e45c24

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13435', :group => :development
gem 'sorbet-runtime', '0.6.13435'

sorbet 0.6.13434.20260821150434-857335570

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13434', :group => :development
gem 'sorbet-runtime', '0.6.13434'

sorbet 0.6.13433.20260820221155-e6754cd5e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13433', :group => :development
gem 'sorbet-runtime', '0.6.13433'

sorbet 0.6.13432.20260820170305-05aef5fd2

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13432', :group => :development
gem 'sorbet-runtime', '0.6.13432'

sorbet 0.6.13431.20260820141021-8989a4f33

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13431', :group => :development
gem 'sorbet-runtime', '0.6.13431'

sorbet 0.6.13430.20260820115544-0546350c8

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13430', :group => :development
gem 'sorbet-runtime', '0.6.13430'

sorbet 0.6.13429.20260819180422-749fc96b6

... (truncated)

Commits

• See full diff in compare view

Updates webmock from 3.26.2 to 3.26.3

Release notes

Sourced from webmock's releases.

3.26.3

• Confirm to work with curb 1.3.7

  Thanks to Josch Bockler

• Fix NameError in async-http adapter on protocol-http1 >= 0.40

  Thanks to Leslie Hoare

Changelog

Sourced from webmock's changelog.

3.26.3

• Confirm to work with curb 1.3.7

  Thanks to Josch Bockler

• Fix NameError in async-http adapter on protocol-http1 >= 0.40

  Thanks to Leslie Hoare

Commits

• ee409ac Version 3.26.3
• 2c976d5 Merge pull request #1127 from jbockler/curb-1.3
• 5b40155 Confirm to work with curb 1.3.7
• f685e7e Merge pull request #1130 from lesleh/fix-async-http-status-description
• a50557e Fix NameError in async-http adapter on protocol-http1 >= 0.40
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[openai-sdks]

OkTest Summary

✅ 237/237 SDK tests passed in 10.321s for Ruby SDK PR #560.

Test results — 42 files

Test	Result	Time
tests/chat-completions-complex-body.test.ts	✅ Passed	172ms
tests/chat-completions-create.test.ts	✅ Passed	236ms
tests/chat-completions-stream.test.ts	✅ Passed	134ms
tests/files-content-binary.test.ts	✅ Passed	214ms
tests/files-create-multipart.test.ts	✅ Passed	135ms
tests/files-list-pagination.test.ts	✅ Passed	182ms
tests/initialize-config.test.ts	✅ Passed	221ms
tests/instance-isolation.test.ts	✅ Passed	205ms
tests/models-list.test.ts	✅ Passed	165ms
tests/responses-background-lifecycle.test.ts	✅ Passed	251ms
tests/responses-body-method-errors.test.ts	✅ Passed	428ms
tests/responses-cancel-timeout.test.ts	✅ Passed	312ms
tests/responses-cancel.test.ts	✅ Passed	213ms
tests/responses-compact-retries.test.ts	✅ Passed	249ms
tests/responses-compact.test.ts	✅ Passed	304ms
tests/responses-create-advanced-stream.test.ts	✅ Passed	232ms
tests/responses-create-advanced.test.ts	✅ Passed	174ms
tests/responses-create-disconnect.test.ts	✅ Passed	1.068s
tests/responses-create-errors.test.ts	✅ Passed	349ms
tests/responses-create-malformed-api-responses.test.ts	✅ Passed	213ms
tests/responses-create-retries.test.ts	✅ Passed	299ms
tests/responses-create-stream-failures.test.ts	✅ Passed	156ms
tests/responses-create-stream-timeout.test.ts	✅ Passed	229ms
tests/responses-create-stream-wire.test.ts	✅ Passed	2.452s
tests/responses-create-stream.test.ts	✅ Passed	122ms
tests/responses-create-terminal-states.test.ts	✅ Passed	276ms
tests/responses-create-timeout.test.ts	✅ Passed	263ms
tests/responses-create.test.ts	✅ Passed	283ms
tests/responses-delete.test.ts	✅ Passed	295ms
tests/responses-input-items-errors.test.ts	✅ Passed	182ms
tests/responses-input-items-list.test.ts	✅ Passed	180ms
tests/responses-input-items-options.test.ts	✅ Passed	222ms
tests/responses-input-tokens-count-timeout.test.ts	✅ Passed	322ms
tests/responses-input-tokens-count.test.ts	✅ Passed	233ms
tests/responses-malformed-inputs.test.ts	✅ Passed	2.047s
tests/responses-not-found-errors.test.ts	✅ Passed	420ms
tests/responses-parse.test.ts	✅ Passed	182ms
tests/responses-retrieve-retries.test.ts	✅ Passed	275ms
tests/responses-retrieve.test.ts	✅ Passed	269ms
tests/responses-stored-method-errors.test.ts	✅ Passed	845ms
tests/retry-behavior.test.ts	✅ Passed	3.183s
tests/sdk-error-shape.test.ts	✅ Passed	441ms

View OkTest run #33433982603

_{SDK merge (4f853e4c8acf) · head (36a80a1ace24) · base (8d32aa1764ec) · OkTest (2b1bdfd25e98)}

[github-actions]

Castiron custom code

✅ No new custom-code files detected.

47 mixed files remain; 0 existing customizations changed.

Compared 8d32aa1764ec → 36a80a1ace24. Generated baselines verified.

47 existing customizations unchanged

• lib/openai.rb
• lib/openai/client.rb
• lib/openai/models/chat/chat_completion_message.rb
• lib/openai/models/chat/chat_completion_message_function_tool_call.rb
• lib/openai/models/chat/completion_create_params.rb
• lib/openai/models/response_format_json_schema.rb
• lib/openai/models/responses/function_tool.rb
• lib/openai/models/responses/response.rb
• lib/openai/models/responses/response_create_params.rb
• lib/openai/models/responses/response_format_text_config.rb
• lib/openai/models/responses/response_format_text_json_schema_config.rb
• lib/openai/models/responses/response_function_tool_call.rb
• lib/openai/models/responses/response_function_web_search.rb
• lib/openai/models/responses/response_output_text.rb
• lib/openai/models/responses/tool.rb
• lib/openai/resources/beta/threads.rb
• lib/openai/resources/chat/completions.rb
• lib/openai/resources/files.rb
• lib/openai/resources/responses.rb
• lib/openai/resources/vector_stores/file_batches.rb
• lib/openai/resources/vector_stores/files.rb
• lib/openai/resources/webhooks.rb
• rbi/openai/client.rbi
• rbi/openai/models/chat/chat_completion_message.rbi
• rbi/openai/models/chat/chat_completion_message_function_tool_call.rbi
• rbi/openai/models/chat/completion_create_params.rbi
• rbi/openai/models/response_format_json_schema.rbi
• rbi/openai/models/responses/response.rbi
• rbi/openai/models/responses/response_create_params.rbi
• rbi/openai/models/responses/response_function_tool_call.rbi
• rbi/openai/models/responses/response_function_web_search.rbi
• rbi/openai/models/responses/response_output_text.rbi
• rbi/openai/resources/chat/completions.rbi
• rbi/openai/resources/files.rbi
• rbi/openai/resources/responses.rbi
• rbi/openai/resources/vector_stores/file_batches.rbi
• rbi/openai/resources/vector_stores/files.rbi
• scripts/castiron/README.md
• scripts/castiron/custom_code_report.py
• scripts/castiron/test_custom_code_report.py

7 more in the full report.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 33434015340 --repo openai/openai-ruby \
  --name castiron-custom-code-33434015340-1 --dir /tmp/castiron-custom-code-33434015340-1
git apply --stat /tmp/castiron-custom-code-33434015340-1/custom-code.patch
cat /tmp/castiron-custom-code-33434015340-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 8d32aa1764ecff22d2cb3114fa1a4b6f7faa309b 36a80a1ace248d44583bdd8092e6a2ba5cd063f9
python3 scripts/castiron/custom_code_report.py report \
  --base 8d32aa1764ecff22d2cb3114fa1a4b6f7faa309b \
  --head 36a80a1ace248d44583bdd8092e6a2ba5cd063f9 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-36a80a1ace24
cat /tmp/castiron-custom-code-36a80a1ace24/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c5d529ed7b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-31T20:05:39.191313Z	36a80a1	New commits
🔒 Security Review	✅ Completed 2026-08-31T20:07:37.939263Z	36a80a1	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[HAYDEN-OAI]

Reviewed 36a80a1. No substantive introduced issues found. The Sorbet compiler ceiling remains intact; the updated Sorbet runtime tags have identical runtime source, and the WebMock adapter changes are compatible with the locked protocol libraries. The separate Bedrock lock still satisfies its unchanged declarations.

Static source review only; no tests, builds, CI or mergeability assessed.