build(deps): update openai-agents requirement from <0.15,>=0.12 to >=0.12,<0.18 in /engine

[dependabot]

Updates the requirements on openai-agents to permit the latest version.

Release notes

Sourced from openai-agents's releases.

v0.17.2

What's Changed

• fix: #3268 fix OpenAI Conversations reasoning persistence by @​seratch in openai/openai-agents-python#3352
• fix: avoid auto response for unknown realtime tools (ref: #3287) by @​seratch in openai/openai-agents-python#3366
• fix: #3354 interrupt tracing retry backoff on shutdown by @​Aphroq in openai/openai-agents-python#3355
• fix: #3359 preserve local approval rejection reasons by @​Aphroq in openai/openai-agents-python#3360
• fix: #3361 honor session settings in AsyncSQLiteSession by @​Aphroq in openai/openai-agents-python#3362
• fix: #3310 avoid empty chat tool outputs by @​Aphroq in openai/openai-agents-python#3312

Documentation & Other Changes

• docs: clarify max_delay for retries works by @​seratch in openai/openai-agents-python#3350
• docs: update translated document pages by @​github-actions[bot] in openai/openai-agents-python#3351
• docs: normalize memory docstring cross-references by @​seratch in openai/openai-agents-python#3370
• docs: document sandbox archive limits after #3278 release by @​Aphroq in openai/openai-agents-python#3311
• docs: update translated document pages by @​github-actions[bot] in openai/openai-agents-python#3371
• Release 0.17.2 by @​github-actions[bot] in openai/openai-agents-python#3368

Full Changelog: openai/openai-agents-python@v0.17.1...v0.17.2

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

• Bug fixes
• New features
• Changes to private interfaces
• Updates to beta features

Breaking change changelog

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
from agents.sandbox import Manifest, SandboxPathGrant
from agents.sandbox.entries import Dir, LocalDir
This is an absolute host path outside the SDK process base_dir.
TRUSTED_DOCS_ROOT = Path("/opt/my-app/docs")
manifest = Manifest(
extra_path_grants=(
# This host root is outside the SDK process base_dir, so the manifest must grant it.
SandboxPathGrant(path=str(TRUSTED_DOCS_ROOT), read_only=True),
),
entries={
# No grant is needed for local sources that stay under the SDK process base_dir.
"fixtures": LocalDir(src=Path("fixtures"), description="Local test fixtures."),
# This entry reads from the granted host root and copies it into the sandbox workspace.
"docs": LocalDir(src=TRUSTED_DOCS_ROOT, description="Trusted local documents."),
# Dir creates a sandbox workspace directory; it does not read from the host filesystem.
"output": Dir(description="Generated artifacts."),
},
)
</tr></table>

... (truncated)

Commits

• 55e4a85 Release 0.17.2 (#3368)
• 5594fb4 docs: update translated document pages (#3371)
• 64de1cb fix: #3310 avoid empty chat tool outputs (#3312)
• 1d3df7f docs: document sandbox archive limits after #3278 release (#3311)
• ae3263b docs: normalize memory docstring cross-references (#3370)
• e3c99d9 fix: #3361 honor session settings in AsyncSQLiteSession (#3362)
• b2bd821 fix: #3359 preserve local approval rejection reasons (#3360)
• 8715a05 fix: avoid auto response for unknown realtime tools (ref: #3287) (#3366)
• 4a95659 fix: #3354 interrupt tracing retry backoff on shutdown (#3355)
• 5635fab fix: #3268 fix OpenAI Conversations reasoning persistence (#3352)
• Additional commits viewable in compare view

[study8677]

@dependabot rebase

[study8677]

Superseded by #78 — Dependabot rebase conflicted with the scanner 3.10 fix (#77). Replayed the same one-line bump manually on top of fresh main.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.