codex releases

Details

Expanded Side Chat Support: Added multi-creation of side chat tabs in the terminal workspace and restoration upon restart. Side chat persistence in local workspaces, tab close controls, and keyboard/mouse navigation support.
Custom Model Provider/Gateway Onboarding: Support for creating custom providers and gateway authentication via Device Code Auth. app-server can query the model list without changing the default provider.
Agent Command Center: Added past task search functionality and exposed Etree tree IDs.
Cloud Connection Improvements: Support for image sending and conversation archiving (archive/restore) when connecting to Cloud on macOS/Linux.
Enhanced MCP (MCP) Features: stdio lazy startup opt-in, OAuth metadata discovery, read-only hint compliance, and Code Mode block forwarding support.
Code Mode/Tool Improvements: Support for incremental tool definitions, application of incremental tool declarations for Amazon Bedrock and GCP, and improved handling logic for unfinished tool calls.

Untrusted Context Handling: codex exec keeps project settings and MCP servers disabled in untrusted directories. Goal objectives are treated as untrusted context, and untrusted context tool outputs are enabled by default.
Authentication System Strengthening: Re-authentication before WebSocket reuse, application of thread runtime auth to Guardian Decisions and remote-control/Analytics. Introduction of API workload identity session claims binding and request auth ownership re-verification.
Log and Data Protection: Exclusion of sensitive inputs from spawn trace logs, preservation of macOS clipboard image orientation, and strengthened signing verification.
Windows Sandbox: Sandbox permission recovery and centralization of filesystem overrides.

SQLite Update: Updated bundled SQLite to 3.54 to apply WAL (Journal) related fixes.
Plugin Marketplace Optimization: Reduced download volume by reusing Git objects during upgrades.
Release Optimization: Optimization of x86-64 musl releases and use of hermetic LLVM in Windows MSVC Bazel builds.
Test Infrastructure: Increased Bazel core unit test shards from 8 to 16 to improve test speed.

TUI Improvements: Theme-aware semantic colors, multiline layout, TUI status line integration, and improved Markdown rendering.
Settings and Policies: 512-character limit for plugin starter prompts, explicit project trust requirement for non-interactive execution, and warning display if the CLI model is not in the ChatGPT list.
Other: OpenSSL Rust dependency update, removal of Xcode 26.4 MCP workaround, and support for local-only Claude Code skill migration.

Details

Expanded Side Chat Support: Added multi-creation of side chat tabs in the terminal workspace and restoration upon restart. Side chat persistence in local workspaces, tab close controls, and keyboard/mouse navigation support.
Custom Model Provider/Gateway Onboarding: Support for creating custom providers and gateway authentication via Device Code Auth. app-server can query the model list without changing the default provider.
Agent Command Center: Added past task search functionality and exposed Etree tree IDs.
Cloud Connection Improvements: Support for image sending and conversation archiving (archive/restore) when connecting to Cloud on macOS/Linux.
Enhanced MCP (MCP) Features: stdio lazy startup opt-in, OAuth metadata discovery, read-only hint compliance, and Code Mode block forwarding support.
Code Mode/Tool Improvements: Support for incremental tool definitions, application of incremental tool declarations for Amazon Bedrock and GCP, and improved handling logic for unfinished tool calls.

Untrusted Context Handling: codex exec keeps project settings and MCP servers disabled in untrusted directories. Goal objectives are treated as untrusted context, and untrusted context tool outputs are enabled by default.
Authentication System Strengthening: Re-authentication before WebSocket reuse, application of thread runtime auth to Guardian Decisions and remote-control/Analytics. Introduction of API workload identity session claims binding and request auth ownership re-verification.
Log and Data Protection: Exclusion of sensitive inputs from spawn trace logs, preservation of macOS clipboard image orientation, and strengthened signing verification.
Windows Sandbox: Sandbox permission recovery and centralization of filesystem overrides.

SQLite Update: Updated bundled SQLite to 3.54 to apply WAL (Journal) related fixes.
Plugin Marketplace Optimization: Reduced download volume by reusing Git objects during upgrades.
Release Optimization: Optimization of x86-64 musl releases and use of hermetic LLVM in Windows MSVC Bazel builds.
Test Infrastructure: Increased Bazel core unit test shards from 8 to 16 to improve test speed.

TUI Improvements: Theme-aware semantic colors, multiline layout, TUI status line integration, and improved Markdown rendering.
Settings and Policies: 512-character limit for plugin starter prompts, explicit project trust requirement for non-interactive execution, and warning display if the CLI model is not in the ChatGPT list.
Other: OpenSSL Rust dependency update, removal of Xcode 26.4 MCP workaround, and support for local-only Claude Code skill migration.

codex