Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
openai	>=1.97,<1.98 -> >=1.99,<1.100
semgrep	>=1.130,<1.131 -> >=1.131,<1.132
types-defusedxml (changelog)	==0.7.0.20250708 -> ==0.7.0.20250809
types-wtforms (changelog)	==3.2.1.20250602 -> ==3.2.1.20250809

---

Release Notes

openai/openai-python (openai)

v1.99.6

Compare Source

Full Changelog: v1.99.5...v1.99.6

Bug Fixes

• types: re-export more tool call types (8fe5741)

Chores

• internal: update comment in script (e407bb5)
• update @​stainless-api/prism-cli to v5.15.0 (a1883fc)

v1.99.5

Compare Source

Full Changelog: v1.99.5...v1.99.6

Bug Fixes

• types: re-export more tool call types (8fe5741)

Chores

• internal: update comment in script (e407bb5)
• update @​stainless-api/prism-cli to v5.15.0 (a1883fc)

v1.99.4

Compare Source

Full Changelog: v1.99.4...v1.99.5

Bug Fixes

• client: fix verbosity parameter location in Responses (2764ff4)

v1.99.3

Compare Source

Full Changelog: v1.99.3...v1.99.4

Bug Fixes

• types: rename chat completion tool (8d3bf88)
• types: revert ChatCompletionToolParam to a TypedDict (3f4ae72)

v1.99.2

Compare Source

Full Changelog: v1.99.2...v1.99.3

Bug Fixes

• responses: add output_text back (585a4f1)

v1.99.1

Compare Source

Full Changelog: v1.99.1...v1.99.2

Features

• api: adds GPT-5 and new API features: platform.openai.com/docs/guides/gpt-5 (ed370d8)

Bug Fixes

• types: correct tool types (0c57bd7)

Chores

• tests: bump inline-snapshot dependency (e236fde)

v1.99.0

Compare Source

Full Changelog: v1.99.0...v1.99.1

Bug Fixes

• internal: correct event imports (2a6d143)

v1.98.0

Compare Source

Full Changelog: v1.98.0...v1.99.0

Features

• api: manual updates (d4aa726)
• client: support file upload requests (0772e6e)

Bug Fixes

• add missing prompt_cache_key & prompt_cache_key params (00b49ae)

Chores

• internal: fix ruff target version (aa6b252)

returntocorp/semgrep (semgrep)

v1.131.0

Compare Source

Fixed

• Semgrep diff scans can now query the app for which merge base to use. This fixes the issue where some diff scans on shallow clones would use the wrong merge base, and do a diff scan on commits not in a PR. (better-merge-base)
• Fix a possibility that an empty file be created in place of a missing input file. This bug had been introduced with Semgrep 1.115.0. (dont-create-missing-input-files)
• When processing a target with debug logging enabled, we now only log the target
  path rather than the entire internal structure representation. This allows for
  more succinct log files and no longer introduces mid-entry newlines, which can
  break log-parsing tooling. (gh-4315)
• Language server: Fixed a bug which broke the Sign in command (saf-2151)
• CiScanComplete.dependencies is now populated with parsed dependencies (sc-2468)
• Print error details when a SemgrepError exception is raised and causes semgrep to fail. (silent-semgrep-error)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud