New Runtime data

Codex CLI: what changed

OpenAI's open-source coding agent; stable releases only, alpha builds are skipped. Entries are quoted from Codex CLI's own GitHub releases; a week groups what shipped in it. Updated 2026-10-28.

2 this week3 in 30 daysJSON Markdown Atom All tools

Week of Oct 26 – Nov 1, 2026

1 entry

Oct 27, 20260.165.0#

Codex CLI 0.165.0

New Features · Bug Fixes

Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp".
Added GPT-6.1 Terra to the model catalogs.
Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees.
Added experimental attached thread forks to the app-server API.
Enabled reasoning effort changes during a conversation by default for supported models.
Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it. (#56211, #56414)
Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided.
Kept TUI preferences editable and immediately applicable when execution settings are invalid.

22 more

Cancelled remote MCP tool requests when their local response futures are dropped.
Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode.
Stopped retrying when a provider reports that a model was not found, preserving its error message.
Closed a marketplace URL validation gap that could allow Git to connect to a different host than the one checked against allowed patterns.
#56081 Cache decrypted Codex auth and managed secrets @celia-oai
#56090 Honor server approval reviewer defaults on fresh TUI startup @etraut-openai
#56091 Keep TUI preferences editable when execution settings are invalid @etraut-openai
#56097 Prepare TUI startup to accept multiple backend sessions @bc-openai
#56124 Forward Guardian reviewer events to parent raw-event subscribers @jif-oai
#56127 Avoid blocking EMA auth status checks on account refresh @jif-oai
#56132 Cancel MCP tool requests when response futures are dropped @rhan-oai
#56133 Defer agent mail after empty final answers @eknight-oai
#56139 Fix the MCP auth status test's IdP OAuth configuration @jif-oai
#56153 Preserve safe enterprise MCP authentication error details @jif-oai
#56154 Add managed network review domains before allow rules @olliem-oai
#56163 Enable reasoning effort overrides by default @felixxia-oai
#56182 Add AWS SigV4 signing to network proxy MITM hooks @viyatb-oai
#56210 Stabilize the marketplace staging cleanup test @felixxia-oai
#56211 Default fresh memory profiles to v2 @jif-oai
#56214 Remove the u64 cast from WSL DrvFS detection @felixxia-oai
#56220 Use cargo_bin in the Windows sandbox manifest test @felixxia-oai
#56222 Consolidate Bazel CI setup into prepare-bazel-ci @anp-oai

Codex CLI's own notes

Week of Oct 19–25, 2026

1 entry

Oct 23, 20260.164.0#

Codex CLI 0.164.0

New Features · Bug Fixes · Chores

Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381)
Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments. (#54378, #54383)
Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics.
Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)
Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)

22 more

Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
CLI configuration overrides are preserved when -c or --config appears at multiple subcommand levels.
Queued prompts now wait for pending permission selections to resolve before continuing.
Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)
Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
Updated the embedded JavaScript runtime with safety checks for optimized Array.sort operations.
#53725 Render Markdown web links as labels in Rex @bc-openai
#53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai
#53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai
#53733 Default Guardian v2 async classification to conversation mode @felixxia-oai
#53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI
#53745 Remove modelSlug from the latest-model resolver output @kkahadze-oai
#53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai
#53751 Apply feature overrides when restarting the app-server daemon @jif-oai
#53753 Extend copy-on-select to composer text @fcoury-oai
#53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai
#53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI
#53780 Remove redundant Codex manual cache directory check @kkahadze-oai
#53781 Remove the product-gating TODO from SkillPolicy @kkahadze-oai
#53784 Forward client voice session IDs in realtime requests @chrisdong-oai
#53790 Fix cancellation of macOS user-verification prompts @bz-openai
#53794 Retain rollout migration locks across worker cancellation @jif-oai

Codex CLI's own notes

Week of Oct 12–18, 2026

1 entry

Oct 15, 20260.163.0#

Codex CLI 0.163.0

New Features · Bug Fixes · Documentation · Chores

Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)
Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
Configure a leader key in /keymap. The default is Ctrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves to F9.
Restart a managed background server from /daemon. Codex warns about work the restart could interrupt, then reconnects automatically.
Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups.
Daybreak is enabled by default for eligible accounts. codex exec can also select it with an OpenAI API key when the server offers access. (#53701, #53717)
Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)

22 more

Return to an existing side conversation with /side after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)
On Windows, Ctrl+V and Shift+Insert paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)
Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
codex exec no longer prints the same file diff again after an unrelated command.
Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations.
Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering.
Codex now uses its standard shell executor and no longer bundles a patched zsh. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)
Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs.
#51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai
#51547 Add a Windows MXC sandbox opt-out @iceweasel-oai
#51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai
#51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest
#51595 Add thread ID exclusions to thread/list @btraut-openai
#51602 Distinguish thread listing failures from exhausted history @btraut-openai
#51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai
#51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai
#51642 Fix retained context handling for typed section content @jif-oai
#51650 Require hostname authorization before proxy DNS lookups @jif-oai
#51651 Persist Guardian review failures for reports across restarts @jif-oai
#51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai
#51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai
#51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai

Codex CLI's own notes