1786 Commits

This Branch

This Branch

All Branches

• chore(deps): bump anyhow from 1.0.99 to 1.0.100 in /codex-rs (#4802)

  Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.99 to
  1.0.100.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/dtolnay/anyhow/releases">anyhow's
  releases</a>.</em></p>
  <blockquote>
  <h2>1.0.100</h2>
  <ul>
  <li>Teach clippy to lint formatting arguments in <code>bail!</code>,
  <code>ensure!</code>, <code>anyhow!</code> (<a
  href="https://redirect.github.com/dtolnay/anyhow/issues/426">#426</a>)</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/18c2598afa0f996f56217ef128aa3a20ea1e9512"><code>18c2598</code></a>
  Release 1.0.100</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/f2719888cb2f4f033c441cf6723cea1c532c0c87"><code>f271988</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/anyhow/issues/426">#426</a>
  from dtolnay/clippyfmt</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/52f2115a1fe22a79110747f19e35f01d52bdd1af"><code>52f2115</code></a>
  Mark macros with clippy::format_args</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/da5fd9d5a33c2949bc3ee3075d8d6f9e224363d5"><code>da5fd9d</code></a>
  Raise minimum tested compiler to rust 1.76</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/211e4092b7e1fb1c6f5d22063474e5b2f8dd0f16"><code>211e409</code></a>
  Opt in to generate-macro-expansion when building on docs.rs</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/b48fc02c327c502a81fcc2b46318eb61fda6b7b3"><code>b48fc02</code></a>
  Enforce trybuild &gt;= 1.0.108</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/d5f59fbd45db00982bc0ea490edbe331ef8cab26"><code>d5f59fb</code></a>
  Update ui test suite to nightly-2025-09-07</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/238415d25b65dcf73ab2e3741d7adc56615af8c3"><code>238415d</code></a>
  Update ui test suite to nightly-2025-08-24</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/3bab0709a347b90de15c5eaaf3779904cfcc1ac6"><code>3bab070</code></a>
  Update actions/checkout@v4 -&gt; v5</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/42492546e3b5510378d0ee32b659fefee1f26158"><code>4249254</code></a>
  Order cap-lints flag in the same order as thiserror build script</li>
  <li>See full diff in <a
  href="https://github.com/dtolnay/anyhow/compare/1.0.99...1.0.100">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anyhow&package-manager=cargo&previous-version=1.0.99&new-version=1.0.100)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Co-authored-by: Eric Traut <etraut@openai.com>

  dependabot[bot] · 2025-10-31 10:15:33 -07:00
  a2fe2f9fb1
• chore(deps): bump actions/checkout from 4 to 5 (#4800)

  Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to
  5.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/checkout/releases">actions/checkout's
  releases</a>.</em></p>
  <blockquote>
  <h2>v5.0.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update actions checkout to use node 24 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
  <li>Prepare v5.0.0 release by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
  </ul>
  <h2>⚠️ Minimum Compatible Runner Version</h2>
  <p><strong>v2.327.1</strong><br />
  <a
  href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
  Notes</a></p>
  <p>Make sure your runner is updated to this version or newer to use this
  release.</p>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
  <h2>v4.3.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>docs: update README.md by <a
  href="https://github.com/motss"><code>@​motss</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li>Add internal repos for checking out multiple repositories by <a
  href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li>Documentation update - add recommended permissions to Readme by <a
  href="https://github.com/benwells"><code>@​benwells</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li>Adjust positioning of user email note and permissions heading by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li>Update CODEOWNERS for actions by <a
  href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
  <li>Update package dependencies by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  <li>Prepare release v4.3.0 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2237">actions/checkout#2237</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/motss"><code>@​motss</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li><a href="https://github.com/mouismail"><code>@​mouismail</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li><a href="https://github.com/benwells"><code>@​benwells</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4...v4.3.0">https://github.com/actions/checkout/compare/v4...v4.3.0</a></p>
  <h2>v4.2.2</h2>
  <h2>What's Changed</h2>
  <ul>
  <li><code>url-helper.ts</code> now leverages well-known environment
  variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
  <li>Expand unit test coverage for <code>isGhes</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
  <h2>v4.2.1</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Check out other refs/* by commit if provided, fall back to ref by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
  changelog</a>.</em></p>
  <blockquote>
  <h1>Changelog</h1>
  <h2>V5.0.0</h2>
  <ul>
  <li>Update actions checkout to use node 24 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
  </ul>
  <h2>V4.3.0</h2>
  <ul>
  <li>docs: update README.md by <a
  href="https://github.com/motss"><code>@​motss</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li>Add internal repos for checking out multiple repositories by <a
  href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li>Documentation update - add recommended permissions to Readme by <a
  href="https://github.com/benwells"><code>@​benwells</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li>Adjust positioning of user email note and permissions heading by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li>Update CODEOWNERS for actions by <a
  href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
  <li>Update package dependencies by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  </ul>
  <h2>v4.2.2</h2>
  <ul>
  <li><code>url-helper.ts</code> now leverages well-known environment
  variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
  <li>Expand unit test coverage for <code>isGhes</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
  </ul>
  <h2>v4.2.1</h2>
  <ul>
  <li>Check out other refs/* by commit if provided, fall back to ref by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
  </ul>
  <h2>v4.2.0</h2>
  <ul>
  <li>Add Ref and Commit outputs by <a
  href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
  <li>Dependency updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
  href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
  <a
  href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
  </ul>
  <h2>v4.1.7</h2>
  <ul>
  <li>Bump the minor-npm-dependencies group across 1 directory with 4
  updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
  <li>Bump actions/checkout from 3 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
  <li>Check out other refs/* by commit by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
  <li>Pin actions/checkout's own workflows to a known, good, stable
  version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
  </ul>
  <h2>v4.1.6</h2>
  <ul>
  <li>Check platform to set archive extension appropriately by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
  </ul>
  <h2>v4.1.5</h2>
  <ul>
  <li>Update NPM dependencies by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
  <li>Bump github/codeql-action from 2 to 3 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
  <li>Bump actions/setup-node from 1 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
  <li>Bump actions/upload-artifact from 2 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
  <li>README: Suggest <code>user.email</code> to be
  <code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
  </ul>
  <h2>v4.1.4</h2>
  <ul>
  <li>Disable <code>extensions.worktreeConfig</code> when disabling
  <code>sparse-checkout</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
  <li>Add dependabot config by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
  <li>Bump the minor-actions-dependencies group with 2 updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
  <li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
  </ul>
  <h2>v4.1.3</h2>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
  Prepare v5.0.0 release (<a
  href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
  <li><a
  href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"><code>9f26565</code></a>
  Update actions checkout to use node 24 (<a
  href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
  <li>See full diff in <a
  href="https://github.com/actions/checkout/compare/v4...v5">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-10-31 09:57:07 -07:00
  01ca2b5df6
• chore(deps): bump actions/github-script from 7 to 8 (#4801)

  Bumps [actions/github-script](https://github.com/actions/github-script)
  from 7 to 8.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/github-script/releases">actions/github-script's
  releases</a>.</em></p>
  <blockquote>
  <h2>v8.0.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update Node.js version support to 24.x by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li>
  <li>README for updating actions/github-script from v7 to v8 by <a
  href="https://github.com/sneha-krip"><code>@​sneha-krip</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li>
  </ul>
  <h2>⚠️ Minimum Compatible Runner Version</h2>
  <p><strong>v2.327.1</strong><br />
  <a
  href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
  Notes</a></p>
  <p>Make sure your runner is updated to this version or newer to use this
  release.</p>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li>
  <li><a
  href="https://github.com/sneha-krip"><code>@​sneha-krip</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/github-script/compare/v7.1.0...v8.0.0">https://github.com/actions/github-script/compare/v7.1.0...v8.0.0</a></p>
  <h2>v7.1.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Upgrade husky to v9 by <a
  href="https://github.com/benelan"><code>@​benelan</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li>
  <li>Add workflow file for publishing releases to immutable action
  package by <a
  href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li>
  <li>Upgrade IA Publish by <a
  href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/486">actions/github-script#486</a></li>
  <li>Fix workflow status badges by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/497">actions/github-script#497</a></li>
  <li>Update usage of <code>actions/upload-artifact</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/512">actions/github-script#512</a></li>
  <li>Clear up package name confusion by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/514">actions/github-script#514</a></li>
  <li>Update dependencies with <code>npm audit fix</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/515">actions/github-script#515</a></li>
  <li>Specify that the used script is JavaScript by <a
  href="https://github.com/timotk"><code>@​timotk</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li>
  <li>chore: Add Dependabot for NPM and Actions by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/472">actions/github-script#472</a></li>
  <li>Define <code>permissions</code> in workflows and update actions by
  <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in
  <a
  href="https://redirect.github.com/actions/github-script/pull/531">actions/github-script#531</a></li>
  <li>chore: Add Dependabot for .github/actions/install-dependencies by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/532">actions/github-script#532</a></li>
  <li>chore: Remove .vscode settings by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/533">actions/github-script#533</a></li>
  <li>ci: Use github/setup-licensed by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/473">actions/github-script#473</a></li>
  <li>make octokit instance available as octokit on top of github, to make
  it easier to seamlessly copy examples from GitHub rest api or octokit
  documentations by <a
  href="https://github.com/iamstarkov"><code>@​iamstarkov</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li>
  <li>Remove <code>octokit</code> README updates for v7 by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/557">actions/github-script#557</a></li>
  <li>docs: add &quot;exec&quot; usage examples by <a
  href="https://github.com/neilime"><code>@​neilime</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li>
  <li>Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
  in <a
  href="https://redirect.github.com/actions/github-script/pull/563">actions/github-script#563</a></li>
  <li>Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
  in <a
  href="https://redirect.github.com/actions/github-script/pull/575">actions/github-script#575</a></li>
  <li>Clearly document passing inputs to the <code>script</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/603">actions/github-script#603</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/benelan"><code>@​benelan</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li>
  <li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li>
  <li><a href="https://github.com/timotk"><code>@​timotk</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li>
  <li><a
  href="https://github.com/iamstarkov"><code>@​iamstarkov</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li>
  <li><a href="https://github.com/neilime"><code>@​neilime</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li>
  <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/github-script/compare/v7...v7.1.0">https://github.com/actions/github-script/compare/v7...v7.1.0</a></p>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/actions/github-script/commit/ed597411d8f924073f98dfc5c65a23a2325f34cd"><code>ed59741</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/github-script/issues/653">#653</a>
  from actions/sneha-krip/readme-for-v8</li>
  <li><a
  href="https://github.com/actions/github-script/commit/2dc352e4baefd91bec0d06f6ae2f1045d1687ca3"><code>2dc352e</code></a>
  Bold minimum Actions Runner version in README</li>
  <li><a
  href="https://github.com/actions/github-script/commit/01e118c8d0d22115597e46514b5794e7bc3d56f1"><code>01e118c</code></a>
  Update README for Node 24 runtime requirements</li>
  <li><a
  href="https://github.com/actions/github-script/commit/8b222ac82eda86dcad7795c9d49b839f7bf5b18b"><code>8b222ac</code></a>
  Apply suggestion from <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a></li>
  <li><a
  href="https://github.com/actions/github-script/commit/adc0eeac992408a7b276994ca87edde1c8ce4d25"><code>adc0eea</code></a>
  README for updating actions/github-script from v7 to v8</li>
  <li><a
  href="https://github.com/actions/github-script/commit/20fe497b3fe0c7be8aae5c9df711ac716dc9c425"><code>20fe497</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/github-script/issues/637">#637</a>
  from actions/node24</li>
  <li><a
  href="https://github.com/actions/github-script/commit/e7b7f222b11a03e8b695c4c7afba89a02ea20164"><code>e7b7f22</code></a>
  update licenses</li>
  <li><a
  href="https://github.com/actions/github-script/commit/2c81ba05f308415d095291e6eeffe983d822345b"><code>2c81ba0</code></a>
  Update Node.js version support to 24.x</li>
  <li>See full diff in <a
  href="https://github.com/actions/github-script/compare/v7...v8">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=7&new-version=8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-10-31 09:56:33 -07:00
  368f7adfc6
• fix: brew upgrade link (#6045)

  ### Summary
  Fix brew upgrade FAQ link

  Shijie Rao · 2025-10-31 09:51:33 -07:00
  68731ac74d
• test: undo (#6034)
  jif-oai · 2025-10-31 14:46:24 +00:00
  0508823075
• chore(deps): bump thiserror from 2.0.16 to 2.0.17 in /codex-rs (#4426)

  Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.16 to
  2.0.17.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/dtolnay/thiserror/releases">thiserror's
  releases</a>.</em></p>
  <blockquote>
  <h2>2.0.17</h2>
  <ul>
  <li>Use differently named __private module per patch release (<a
  href="https://redirect.github.com/dtolnay/thiserror/issues/434">#434</a>)</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/72ae716e6d6a7f7fdabdc394018c745b4d39ca45"><code>72ae716</code></a>
  Release 2.0.17</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/599fdce83aee7767eb87b5af7bb30c37f3ed61e5"><code>599fdce</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/thiserror/issues/434">#434</a>
  from dtolnay/private</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/9ec05f6b38041bfe1ff5a274caec6e054a459aca"><code>9ec05f6</code></a>
  Use differently named __private module per patch release</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/d2c492b5498a0134abcc1677101bec876fe0621a"><code>d2c492b</code></a>
  Raise minimum tested compiler to rust 1.76</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/fc3ab9501d4f2b6df2d7e495dc1cb37ab6e68363"><code>fc3ab95</code></a>
  Opt in to generate-macro-expansion when building on docs.rs</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/819fe29dbb6e41bb937e3fef0469917d7c476c60"><code>819fe29</code></a>
  Update ui test suite to nightly-2025-09-12</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/259f48c549a2b49c00d2d58a204c1a3b4d2fb29a"><code>259f48c</code></a>
  Enforce trybuild &gt;= 1.0.108</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/470e6a681c073f12e29daf64dcec724bfd5871a9"><code>470e6a6</code></a>
  Update ui test suite to nightly-2025-08-24</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/544e191e6e7f2e7cc3ac34b77d9165c30d982463"><code>544e191</code></a>
  Update actions/checkout@v4 -&gt; v5</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/cbc1ebad3e91621ee0f94cf56d131f12fee62a3c"><code>cbc1eba</code></a>
  Delete duplicate cap-lints flag from build script</li>
  <li>See full diff in <a
  href="https://github.com/dtolnay/thiserror/compare/2.0.16...2.0.17">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=thiserror&package-manager=cargo&previous-version=2.0.16&new-version=2.0.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  You can trigger a rebase of this PR by commenting `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  > **Note**
  > Automatic rebases have been disabled on this pull request as it has
  been open for over 30 days.
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Co-authored-by: Eric Traut <etraut@openai.com>

  dependabot[bot] · 2025-10-30 19:00:00 -07:00
  2ac14d1145
• Update user instruction message format (#6010)
  pakrym-oai · 2025-10-30 18:44:02 -07:00
  2371d771cc
• fix(tui): propagate errors in insert_history_lines_to_writer (#4266)

  ## What?
  Fixed error handling in `insert_history_lines_to_writer` where all
  terminal operations were silently ignoring errors via `.ok()`.
  
    ## Why?
  Silent I/O failures could leave the terminal in an inconsistent state
  (e.g., scroll region not reset) with no way to debug. This violates Rust
  error handling best practices.
  
    ## How?
    - Changed function signature to return `io::Result<()>`
    - Replaced all `.ok()` calls with `?` operator to propagate errors
  - Added `tracing::warn!` in wrapper function for backward compatibility
    - Updated 15 test call sites to handle Result  with `.expect()`
  
    ## Testing
    - ✅ Pass all tests
  
    ## Type of Change
    - [x] Bug fix (non-breaking change)
  
  ---------
  
  Signed-off-by: Huaiwu Li <lhwzds@gmail.com>
  Co-authored-by: Eric Traut <etraut@openai.com>

  Huaiwu Li · 2025-10-30 18:07:51 -07:00
  9a638dbf4e
• override verbosity for gpt-5-codex (#6007)

  we are seeing [reports](https://github.com/openai/codex/issues/6004) of
  users having verbosity in their config.toml and facing issues.
  gpt-5-codex doesn't accept other values rather than medium for
  verbosity.

  Ahmed Ibrahim · 2025-10-31 00:45:05 +00:00
  dc2aeac21f
• docs: Fix markdown list item spacing in codex-rs/core/review_prompt.md (#4144)

  Fixes a Markdown parsing issue where a list item used `*` without a
  following space (`*Line ranges ...`). Per CommonMark, a space after the
  list marker is required. Updated to `* Line ranges ...` so the guideline
  renders as a standalone bullet. This change improves readability and
  prevents mis-parsing in renderers.
  
  Co-authored-by: Eric Traut <etraut@openai.com>

  Jack · 2025-10-30 17:39:21 -07:00
  f842849bec
• rate limit errors now provide absolute time (#6000)
  zhao-oai · 2025-10-30 20:33:25 -04:00
  dcf73970d2
• feat: add exit slash command alias for quit (#6002)

  ## Summary
  - add the `/exit` slash command alongside `/quit` and reuse shared exit
  handling
  - refactor the chat widget to funnel quit, exit, logout, and shutdown
  flows through a common `request_exit` helper
  - add focused unit tests that confirm both `/quit` and `/exit` send an
  `ExitRequest`
  
  ## Testing
  - `just fmt`
  - `just fix -p codex-tui`
  - `cargo test -p codex-tui`
  
  
  ------
  https://chatgpt.com/codex/tasks/task_i_6903d5a8f47c8321bf180f031f2fa330

  Ahmed Ibrahim · 2025-10-30 17:29:40 -07:00
  e761924dc2
• [app-server] refactor: split API types into v1 and v2 (#6005)

  Makes it easier to figure out which types are defined in the old vs. new
  API schema.

  Owen Lin · 2025-10-30 23:56:55 +00:00
  cdc3df3790
• Remove last turn reasoning filtering (#5986)
  Ahmed Ibrahim · 2025-10-30 23:20:32 +00:00
  a3d3719481
• build: 8mb stacks on win (#5997)

  #5981 seems to be fixing what's actually a call stack overflow, maybe
  this will fix it without disabling a feature?

  Jeremy Rose · 2025-10-30 16:12:50 -07:00
  11e5327770
• Windows Sandbox - Alpha version (#4905)

  - Added the new codex-windows-sandbox crate that builds both a library
  entry point (run_windows_sandbox_capture) and a CLI executable to launch
  commands inside a Windows restricted-token sandbox, including ACL
  management, capability SID provisioning, network lockdown, and output
  capture
  (windows-sandbox-rs/src/lib.rs:167, windows-sandbox-rs/src/main.rs:54).
  - Introduced the experimental WindowsSandbox feature flag and wiring so
  Windows builds can opt into the sandbox:
  SandboxType::WindowsRestrictedToken, the in-process execution path, and
  platform sandbox selection now honor the flag (core/src/features.rs:47,
  core/src/config.rs:1224, core/src/safety.rs:19,
  core/src/sandboxing/mod.rs:69, core/src/exec.rs:79,
  core/src/exec.rs:172).
  - Updated workspace metadata to include the new crate and its
  Windows-specific dependencies so the core crate can link against it
  (codex-rs/
      Cargo.toml:91, core/Cargo.toml:86).
  - Added a PowerShell bootstrap script that installs the Windows
  toolchain, required CLI utilities, and builds the workspace to ease
  development
      on the platform (scripts/setup-windows.ps1:1).
  - Landed a Python smoke-test suite that exercises
  read-only/workspace-write policies, ACL behavior, and network denial for
  the Windows sandbox
      binary (windows-sandbox-rs/sandbox_smoketests.py:1).

  iceweasel-oai · 2025-10-30 15:51:57 -07:00
  87cce88f48
• fix: Update seatbelt policy for java on macOS (#3987)

  # Summary
  
  This PR is related to the Issue #3978 and contains a fix to the seatbelt
  profile for macOS that allows to run java/jdk tooling from the sandbox.
  I have found that the included change is the minimum change to make it
  run on my machine.
  
  There is a unit test added by codex when making this fix. I wonder if it
  is useful since you need java installed on the target machine for it to
  be relevant. I can remove it it is better.
  
  Fixes #3978

  Bernard Niset · 2025-10-30 14:25:04 -07:00
  ff6d4cec6b
• [Hygiene] Remove include_view_image_tool config (#5976)

  There's still some debate about whether we want to expose
  `tools.view_image` or `feature.view_image` so those are left unchanged
  for now, but this old `include_view_image_tool` config is good-to-go.
  Also updated the doc to reflect that `view_image` tool is now by default
  true.

  Celia Chen · 2025-10-30 13:23:24 -07:00
  6ef658a9f9
• Documentation improvement: add missing period (#3754)

  Pull request template, minimal:
  
  ---
  
  ### **What?**
  
  Minor change (low-hanging fruit).
  
  ### **Why?**
  
  To improve code quality or documentation with minimal risk and effort.
  
  ### **How?**
  
  Edited directly via VSCode Editor.
  
  ---
  
  **Checklist (pre-PR):**
  
  * [x] I have read the CLA Document and hereby sign the CLA.
  * [x] I reviewed the “Contributing” markdown file for this project.
  
  *This template meets standard external (non-OpenAI) PR requirements and
  signals compliance for maintainers.*
  
  Co-authored-by: Eric Traut <etraut@openai.com>

  Brad M. Harris · 2025-10-30 13:01:33 -07:00
  8b8be343a7
• [app-server] remove serde(skip_serializing_if = "Option::is_none") annotations (#5939)

  We had this annotation everywhere in app-server APIs which made it so
  that fields get serialized as `field?: T`, meaning if the field as
  `None` we would omit the field in the payload. Removing this annotation
  changes it so that we return `field: T | null` instead, which makes
  codex app-server's API more aligned with the convention of public OpenAI
  APIs like Responses.
  
  Separately, remove the `#[ts(optional_fields = nullable)]` annotations
  that were recently added which made all the TS types become `field?: T |
  null` which is not great since clients need to handle undefined and
  null.
  
  I think generally it'll be best to have optional types be either:
  - `field: T | null` (preferred, aligned with public OpenAI APIs)
  - `field?: T` where we have to, such as types generated from the MCP
  schema:
  https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/schema/2025-06-18/schema.ts
  (see changes to `mcp-types/`)
  
  I updated @etraut-openai's unit test to check that all generated TS
  types are one or the other, not both (so will error if we have a type
  that has `field?: T | null`). I don't think there's currently a good use
  case for that - but we can always revisit.

  Owen Lin · 2025-10-30 18:18:53 +00:00
  89c00611c2
• [codex] add developer instructions (#5897)

  we are using developer instructions for code reviews, we need to pass
  them in cli as well.

  Anton Panasenko · 2025-10-30 11:18:31 -07:00
  9572cfc782
• chore: testing on freeform apply_patch (#5952)

  ## Summary
  Duplicates the tests in `apply_patch_cli.rs`, but tests the freeform
  apply_patch tool as opposed to the function call path. The good news is
  that all the tests pass with zero logical tests, with the exception of
  the heredoc, which doesn't really make sense in the freeform tool
  context anyway.
  
  @jif-oai since you wrote the original tests in #5557, I'd love your
  opinion on the right way to DRY these test cases between the two. Happy
  to set up a more sophisticated harness, but didn't want to go down the
  rabbit hole until we agreed on the right pattern
  
  ## Testing
  - [x] These are tests

  Dylan Hurd · 2025-10-30 10:40:48 -07:00
  4a55646a02
• nit: log rmcp_client (#5978)
  jif-oai · 2025-10-30 17:40:38 +00:00
  209af68611
• feat: compaction prompt configurable (#5959)

  ```
   codex -c compact_prompt="Summarize in bullet points"
   ```

  jif-oai · 2025-10-30 14:24:24 +00:00
  f4f9695978
• Pass initial history as an optional to codex delegate (#5950)

  This will give us more freedom on controlling the delegation. i.e we can
  fork our history and run `compact`.

  Ahmed Ibrahim · 2025-10-30 07:22:42 -07:00
  5fcc380bd9
• chore: unify config crates (#5958)
  jif-oai · 2025-10-30 10:28:32 +00:00
  aa76003e28
• Send delegate header (#5942)

  Send delegate type header

  Ahmed Ibrahim · 2025-10-30 09:49:40 +00:00
  fac548e430
• Add debug-only slash command for rollout path (#5936)

  ## Summary
  - add a debug-only `/rollout` slash command that prints the rollout file
  path or reports when none is known
  - surface the new command in the slash command metadata and cover it
  with unit tests
  
  <img width="539" height="99" alt="image"
  src="https://github.com/user-attachments/assets/688e1334-8a06-4576-abb8-ada33b458661"
  />

  Ahmed Ibrahim · 2025-10-30 03:51:00 +00:00
  9bd3453592
• asdf (#5940)

  .

  zhao-oai · 2025-10-30 01:10:41 +00:00
  b34efde2f3
• ignore agent message deltas for the review mode (#5937)

  The deltas produce the whole json output. ignore them.

  Ahmed Ibrahim · 2025-10-30 00:47:55 +00:00
  7aa46ab5fc
• Re-enable SDK image forwarding test (#5934)

  ## Summary
  - re-enable the TypeScript SDK test that verifies local images are
  forwarded to `codex exec`
  
  ## Testing
  - `pnpm test` *(fails: unable to download pnpm 10.8.1 because external
  network access is blocked in the sandbox)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_690289cb861083209fd006867e2adfb1

  pakrym-oai · 2025-10-29 23:18:26 +00:00
  bf35105af6
• Add item streaming events (#5546)

  Adds AgentMessageContentDelta, ReasoningContentDelta,
  ReasoningRawContentDelta item streaming events while maintaining
  compatibility for old events.
  
  ---------
  
  Co-authored-by: Owen Lin <owen@openai.com>

  pakrym-oai · 2025-10-29 22:33:57 +00:00
  3429e82e45
• [exec] Add MCP tool arguments and results (#5899)

  Extends mcp_tool_call item to include arguments and results.

  pakrym-oai · 2025-10-29 14:23:57 -07:00
  815ae4164a
• Delegate review to codex instance (#5572)

  In this PR, I am exploring migrating task kind to an invocation of
  Codex. The main reason would be getting rid off multiple
  `ConversationHistory` state and streamlining our context/history
  management.
  
  This approach depends on opening a channel between the sub-codex and
  codex. This channel is responsible for forwarding `interactive`
  (`approvals`) and `non-interactive` events. The `task` is responsible
  for handling those events.
  
  This opens the door for implementing `codex as a tool`, replacing
  `compact` and `review`, and potentially subagents.
  
  One consideration is this code is very similar to `app-server` specially
  in the approval part. If in the future we wanted an interactive
  `sub-codex` we should consider using `codex-mcp`

  Ahmed Ibrahim · 2025-10-29 21:04:25 +00:00
  13e1d0362d
• chore: config editor (#5878)

  The goal is to have a single place where we actually write files
  
  In a follow-up PR, will move everything config related in a dedicated
  module and move the helpers in a dedicated file

  jif-oai · 2025-10-29 20:52:46 +00:00
  db31f6966d
• fix: icu_decimal version (#5919)
  jif-oai · 2025-10-29 20:46:45 +00:00
  2b20cd66af
• Add a wrapper around raw response items (#5923)

  We currently have nested enums when sending raw response items in the
  app-server protocol. This makes downstream schemas confusing because we
  need to embed `type`-discriminated enums within each other.
  
  This PR adds a small wrapper around the response item so we can keep the
  schemas separate

  Rasmus Rygaard · 2025-10-29 20:32:40 +00:00
  39e09c289d
• Add missing "nullable" macro to protocol structs that contain optional fields (#5901)

  This PR addresses a current hole in the TypeScript code generation for
  the API server protocol. Fields that are marked as "Optional<>" in the
  Rust code are serialized such that the value is omitted when it is
  deserialized — appearing as `undefined`, but the TS type indicates
  (incorrectly) that it is always defined but possibly `null`. This can
  lead to subtle errors that the TypeScript compiler doesn't catch. The
  fix is to include the `#[ts(optional_fields = nullable)]` macro for all
  protocol structs that contain one or more `Optional<>` fields.
  
  This PR also includes a new test that validates that all TS protocol
  code containing "| null" in its type is marked optional ("?") to catch
  cases where `#[ts(optional_fields = nullable)]` is omitted.

  Eric Traut · 2025-10-29 12:09:47 -07:00
  069a38a06c
• feat: add output even in sandbox denied (#5908)
  jif-oai · 2025-10-29 18:21:18 +00:00
  3183935bd7
• feat: deprecation warning (#5825)

  <img width="955" height="311" alt="Screenshot 2025-10-28 at 14 26 25"
  src="https://github.com/user-attachments/assets/99729b3d-3bc9-4503-aab3-8dc919220ab4"
  />

  jif-oai · 2025-10-29 12:29:28 +00:00
  060637b4d4
• chore: merge git crates (#5909)

  Merge `git-apply` and `git-tooling` into `utils/`

  jif-oai · 2025-10-29 12:11:44 +00:00
  fa92cd92fa
• feature: Add "!cmd" user shell execution (#2471)

  feature: Add "!cmd" user shell execution
  
  This change lets users run local shell commands directly from the TUI by
  prefixing their input with ! (e.g. !ls). Output is truncated to keep the
  exec cell usable, and Ctrl-C cleanly
    interrupts long-running commands (e.g. !sleep 10000).
  
  **Summary of changes**
  
  - Route Op::RunUserShellCommand through a dedicated UserShellCommandTask
  (core/src/tasks/user_shell.rs), keeping the task logic out of codex.rs.
  - Reuse the existing tool router: the task constructs a ToolCall for the
  local_shell tool and relies on ShellHandler, so no manual MCP tool
  lookup is required.
  - Emit exec lifecycle events (ExecCommandBegin/ExecCommandEnd) so the
  TUI can show command metadata, live output, and exit status.
  
  **End-to-end flow**
  
    **TUI handling**
  
  1. ChatWidget::submit_user_message (TUI) intercepts messages starting
  with !.
  2. Non-empty commands dispatch Op::RunUserShellCommand { command };
  empty commands surface a help hint.
  3. No UserInput items are created, so nothing is enqueued for the model.
  
    **Core submission loop**
  4. The submission loop routes the op to handlers::run_user_shell_command
  (core/src/codex.rs).
  5. A fresh TurnContext is created and Session::spawn_user_shell_command
  enqueues UserShellCommandTask.
  
    **Task execution**
  6. UserShellCommandTask::run emits TaskStartedEvent, formats the
  command, and prepares a ToolCall targeting local_shell.
    7. ToolCallRuntime::handle_tool_call dispatches to ShellHandler.
  
    **Shell tool runtime**
  8. ShellHandler::run_exec_like launches the process via the unified exec
  runtime, honoring sandbox and shell policies, and emits
  ExecCommandBegin/End.
  9. Stdout/stderr are captured for the UI, but the task does not turn the
  resulting ToolOutput into a model response.
  
    **Completion**
  10. After ExecCommandEnd, the task finishes without an assistant
  message; the session marks it complete and the exec cell displays the
  final output.
  
    **Conversation context**
  
  - The command and its output never enter the conversation history or the
  model prompt; the flow is local-only.
    - Only exec/task events are emitted for UI rendering.
  
  **Demo video**
  
  
  https://github.com/user-attachments/assets/fcd114b0-4304-4448-a367-a04c43e0b996

  Abhishek Bhardwaj · 2025-10-29 00:31:20 -07:00
  89591e4246
• Fix bash detection failure in VS Code Codex extension on Windows under certain conditions (#3421)

  Found that the VS Code Codex extension throws “Error starting
  conversation” when initializing a conversation with Git for Windows’
  bash on PATH.
  Debugging showed the bash-detection logic did not return as expected;
  this change makes it reliable in that scenario.
  Possibly related to issue #2841.

  Axojhf · 2025-10-28 21:29:16 -07:00
  802d2440b4
• fix(windows-path): preserve PATH order; include core env vars (#5579)

  # Preserve PATH precedence & fix Windows MCP env propagation
  
  ## Problem & intent
  
  Preserve user PATH precedence and reduce Windows setup friction for MCP
  servers by avoiding PATH reordering and ensuring Windows child processes
  receive essential env vars.
  
  - Addresses: #4180 #5225 #2945 #3245 #3385 #2892 #3310 #3457 #4370  
  - Supersedes: #4182, #3866, #3828 (overlapping/inferior once this
  merges)
  - Notes: #2626 / #2646 are the original PATH-mutation sources being
  corrected.
  
  ---
  
  ## Before / After
  
  **Before**  
  - PATH was **prepended** with an `apply_patch` helper dir (Rust + Node
  wrapper), reordering tools and breaking virtualenvs/shims on
  macOS/Linux.
  - On Windows, MCP servers missed core env vars and often failed to start
  without explicit per-server env blocks.
  
  **After**  
  - Helper dir is **appended** to PATH (preserves user/tool precedence).  
  - Windows MCP child env now includes common core variables and mirrors
  `PATH` → `Path`, so typical CLIs/plugins work **without** per-server env
  blocks.
  
  ---
  
  ## Scope of change
  
  ### `codex-rs/arg0/src/lib.rs`
  - Append temp/helper dir to `PATH` instead of prepending.
  
  ### `codex-cli/bin/codex.js`
  - Mirror the same append behavior for the Node wrapper.
  
  ### `codex-rs/rmcp-client/src/utils.rs`
  - Expand Windows `DEFAULT_ENV_VARS` (e.g., `COMSPEC`, `SYSTEMROOT`,
  `PROGRAMFILES*`, `APPDATA`, etc.).
  - Mirror `PATH` → `Path` for Windows child processes.  
  - Small unit test; conditional `mut` + `clippy` cleanup.
  
  ---
  
  ## Security effects
  
  No broadened privileges. Only environment propagation for well-known
  Windows keys on stdio MCP child processes. No sandbox policy changes and
  no network additions.
  
  ---
  
  ## Testing evidence
  
  **Static**  
  - `cargo fmt`  
  - `cargo clippy -p codex-arg0 -D warnings` → **clean**  
  - `cargo clippy -p codex-rmcp-client -D warnings` → **clean**  
  - `cargo test -p codex-rmcp-client` → **13 passed**
  
  **Manual**  
  - Local verification on Windows PowerShell 5/7 and WSL (no `unused_mut`
  warnings on non-Windows targets).
  
  ---
  
  ## Checklist
  
  - [x] Append (not prepend) helper dir to PATH in Rust and Node wrappers
  - [x] Windows MCP child inherits core env vars; `PATH` mirrored to
  `Path`
  - [x] `cargo fmt` / `clippy` clean across touched crates  
  - [x] Unit tests updated/passing where applicable  
  - [x] Cross-platform behavior preserved (macOS/Linux PATH precedence
  intact)

  Curt · 2025-10-28 21:06:39 -07:00
  e9135fa7c5
• Refresh tokens more often and log a better message when both auth and token refresh fails (#5655)

  <img width="784" height="153" alt="image"
  src="https://github.com/user-attachments/assets/c44b0eb2-d65c-4fc2-8b54-b34f7e1c4d95"
  />

  pakrym-oai · 2025-10-28 18:55:53 -07:00
  ef3e075ad6
• [codex][app-server] resume conversation from history (#5893)
  Anton Panasenko · 2025-10-28 18:18:03 -07:00
  149e198ce8
• [App Server] Allow fetching or resuming a conversation summary from the conversation id (#5890)

  This PR adds an option to app server to allow conversation summaries to
  be fetched from just the conversation id rather than rollout path for
  convenience at the cost of some latency to discover the rollout path.
  
  This convenience is non-trivial as it allows app servers to simply
  maintain conversation ids rather than rollout paths and the associated
  platform (Windows) handling associated with storing and encoding them
  correctly.

  Gabriel Peal · 2025-10-28 20:17:22 -04:00
  1d76ba5ebe
• [app-server] Annotate more exported types with a title (#5879)

  Follow-up to https://github.com/openai/codex/pull/5063
  
  Refined the app-server export pipeline so JSON Schema variants and
  discriminator fields are annotated with descriptive, stable titles
  before writing the bundle. This eliminates anonymous enum names in the
  generated Pydantic models (goodbye Type7) while keeping downstream
  tooling simple. Added shared helpers to derive titles and literals, and
  reused them across the traversal logic for clarity. Running just fix -p
  codex-app-server-protocol, just fmt, and cargo test -p
  codex-app-server-protocol validates the change.

  Rasmus Rygaard · 2025-10-28 16:35:12 -07:00
  a1635eea25
• verify mime type of images (#5888)

  solves: https://github.com/openai/codex/issues/5675
  
  Block non-image uploads in the view_image workflow. We now confirm the
  file’s MIME is image/* before building the data URL; otherwise we emit a
  “unsupported MIME type” error to the model. This stops the agent from
  sending application/json blobs that the Responses API rejects with 400s.
  
  <img width="409" height="556" alt="Screenshot 2025-10-28 at 1 15 10 PM"
  src="https://github.com/user-attachments/assets/a92199e8-2769-4b1d-8e33-92d9238c90fe"
  />

  zhao-oai · 2025-10-28 14:52:51 -07:00
  36113509f2
• Fixed bug that results in a sporadic hang when attaching images (#5891)

  Addresses https://github.com/openai/codex/issues/5773
  
  Testing: I tested that images work (regardless of order that they are
  associated with the task prompt) in both the CLI and Extension. Also
  verified that conversations in CLI and extension with images can be
  resumed.

  Eric Traut · 2025-10-28 14:42:46 -07:00
  ba95d9862c