build(deps): update openai-agents requirement from <0.18,>=0.12 to >=0.12,<0.19 in /engine

[dependabot]

Updates the requirements on openai-agents to permit the latest version.

Release notes

Sourced from openai-agents's releases.

v0.18.1

What's Changed

• feat: add GPT-5.6 model defaults and migrate examples by @​seratch in openai/openai-agents-python#3774
• fix: support cache-write usage across OpenAI Python versions by @​seratch in openai/openai-agents-python#3773
• fix(realtime): make session cleanup deterministic by @​seratch in openai/openai-agents-python#3767
• fix: preserve nested tool state during restoration by @​seratch in openai/openai-agents-python#3753
• fix: close Chat Completions streams on early exit by @​fallintoplace in openai/openai-agents-python#3689
• fix(sessions): handle list content in AdvancedSQLiteSession browsing helpers by @​anxkhn in openai/openai-agents-python#3761
• fix(models): accumulate streamed logprobs in place to avoid O(n^2) copies by @​anxkhn in openai/openai-agents-python#3762
• fix: send logprobs=True when top_logprobs is set on Chat Completions by @​winklemad in openai/openai-agents-python#3763

Documentation & Other Changes

• docs: updates for v0.18.0 by @​seratch in openai/openai-agents-python#3741
• docs(realtime): fix RealtimeRunner context docstring by @​anxkhn in openai/openai-agents-python#3748
• docs: clarify agent tool state options by @​william-xue in openai/openai-agents-python#3754
• test(items): document refusal None invariant by @​seratch in openai/openai-agents-python#3751
• Release 0.18.1 by @​github-actions[bot] in openai/openai-agents-python#3775

New Contributors

• @​william-xue made their first contribution in openai/openai-agents-python#3754
• @​winklemad made their first contribution in openai/openai-agents-python#3763

Full Changelog: openai/openai-agents-python@v0.18.0...v0.18.1

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

• Bug fixes
• New features
• Changes to private interfaces
• Updates to beta features

Breaking change changelog

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

• Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
from agents.sandbox import Manifest, SandboxPathGrant
from agents.sandbox.entries import Dir, LocalDir
This is an absolute host path outside the SDK process base_dir.
TRUSTED_DOCS_ROOT = Path("/opt/my-app/docs")
manifest = Manifest(
extra_path_grants=(
# This host root is outside the SDK process base_dir, so the manifest must grant it.
SandboxPathGrant(path=str(TRUSTED_DOCS_ROOT), read_only=True),
),
entries={
</tr></table>

... (truncated)

Commits

• 1760f73 Release 0.18.1 (#3775)
• 28026bc docs: stabilize tool guardrail and web search examples
• 574e2f7 docs: update translated pages
• 1332083 feat: add GPT-5.6 model defaults and migrate examples (#3774)
• 8724b1b fix: support cache-write usage across OpenAI Python versions (#3773)
• 70c447e fix(realtime): make session cleanup deterministic (#3767)
• 6bb69bc docs: update readme
• 532acdf fix: send logprobs=True when top_logprobs is set on Chat Completions (#3763)
• 1b0c7c2 fix(models): accumulate streamed logprobs in place to avoid O(n^2) copies (#3...
• 5807751 fix(sessions): handle list content in AdvancedSQLiteSession browsing helpers ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)