Summary
Version 7.16 adds per-iterator limits for incoming WebSocket events and improves buffering and handling of malformed WebSocket messages. The release also bounds fallback abort subscriptions and keeps callback credentials local to individual HTTP requests.
Why it matters
Applications using realtime or streaming OpenAI APIs gain stronger protection against malformed input, unbounded event consumption and credential-scope errors.
Related coverage
- Claude Code v2.1.273 adds gateway telemetry hints and safer agent-session recovery
- Gemini CLI 0.60 hardens MCP OAuth, sandboxing and extension boundaries
- Mastra 1.67 adds persisted workflow authoring and platform-backed agent tools