Skip to content

chore(deps): update dependency aqua:openai/codex to v0.125.0#924

Merged
ryo246912 merged 1 commit intomainfrom
renovate/aqua-openai-codex-0.x
May 2, 2026
Merged

chore(deps): update dependency aqua:openai/codex to v0.125.0#924
ryo246912 merged 1 commit intomainfrom
renovate/aqua-openai-codex-0.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 2, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change Pending
aqua:openai/codex minor 0.110.0 → 0.125.0 0.128.0 (+2)

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

openai/codex (aqua:openai/codex)

v0.125.0: 0.125.0

Compare Source

New Features
  • App-server integrations now support Unix socket transport, pagination-friendly resume/fork, sticky environments, and remote thread config/store plumbing. (#​18255, #​18892, #​18897, #​18908, #​19008, #​19014)
  • App-server plugin management can install remote plugins and upgrade configured marketplaces. (#​18917, #​19074)
  • Permission profiles now round-trip across TUI sessions, user turns, MCP sandbox state, shell escalation, and app-server APIs. (#​18284, #​18285, #​18286, #​18287, #​19231)
  • Model providers now own model discovery, with AWS/Bedrock account state exposed to app clients. (#​18950, #​19048)
  • codex exec --json now reports reasoning-token usage for programmatic consumers. (#​19308)
  • Rollout tracing now records tool, code-mode, session, and multi-agent relationships, with a debug reducer command for inspection. (#​18878, #​18879, #​18880)
Bug Fixes
  • Interrupting /review and exiting the TUI no longer leaves the interface wedged on delegate startup or unsubscribe. (#​18921)
  • Exec-server no longer drops buffered output after process exit and now waits correctly for stream closure. (#​18946, #​19130)
  • App-server now respects explicitly untrusted project config instead of auto-persisting trust. (#​18626)
  • WebSocket app-server clients are less likely to disconnect during bursts of turn and tool-output notifications. (#​19246)
  • Windows sandbox startup handles multiple CLI versions and installed app directories better, and background Start-Process calls avoid visible PowerShell windows. (#​19044, #​19180, #​19214)
  • Config/schema handling now rejects conflicting MultiAgentV2 thread limits, resolves relative agent-role config paths, hides unsupported MCP bearer-token fields, and rejects invalid js_repl image MIME types. (#​19129, #​19261, #​19294, #​19292)
Documentation
  • App-server docs and generated schemas were refreshed for the new transport, thread, marketplace, sticky environment, and permission-profile APIs. (#​18255, #​18897, #​19014, #​19074, #​19231)
  • Rollout-trace documentation now covers the debug trace reduction workflow. (#​18880)
Chores
  • Refreshed models.json and related core, app-server, SDK, and TUI fixtures for the latest model catalog and reasoning defaults. (#​19323)
  • Windows Bazel CI now uses a stable PATH and shared query startup path for better cache reuse. (#​19161, #​19232)
  • Plugin marketplace add/remove/startup-sync internals moved out of codex-core, and curated plugin cache versions now use short SHAs. (#​19099, #​19095)
  • Reverted a macOS signing entitlement change after it caused alpha startup failures. (#​19167, #​19350)
  • Stabilized flaky approval-popup and plugin MCP tool-discovery tests. (#​19178, #​19191)
Changelog

Full Changelog: openai/codex@rust-v0.124.0...rust-v0.125.0

v0.124.0: 0.124.0

Compare Source

New Features
  • The TUI now has quick reasoning controls: Alt+, lowers reasoning, Alt+. raises it, and accepted model upgrades now reset reasoning to the new model’s default instead of carrying over stale settings. (#​18866, #​19085)
  • App-server sessions can now manage multiple environments and choose an environment and working directory per turn, which makes multi-workspace and remote setups easier to target precisely. (#​18401, #​18416)
  • Added first-class Amazon Bedrock support for OpenAI-compatible providers, including AWS SigV4 signing and AWS credential-based auth. (#​17820)
  • Remote plugin marketplaces can now be listed and read directly, with more reliable detail lookups and larger result pages. (#​18452, #​19079)
  • Hooks are now stable, can be configured inline in config.toml and managed requirements.toml, and can observe MCP tools as well as apply_patch and long-running Bash sessions. (#​18893, #​18385, #​18391, #​18888, #​19012)
  • Eligible ChatGPT plans now default to the Fast service tier unless you explicitly opt out. (#​19053)
Bug Fixes
  • Preserved Cloudflare cookies across approved ChatGPT hosts, reducing auth breakage in HTTP-backed ChatGPT flows. (#​17783)
  • Fixed remote app-server reliability issues so websocket events keep draining under load and shutdown no longer fails when the remote worker exits during cleanup. (#​18932, #​18936)
  • Fixed permission-mode drift so /permissions changes survive side conversations and updated Full Access state is correctly reflected in MCP approval handling. (#​18924, #​19033)
  • Fixed wait_agent so it returns promptly when mailbox work is already queued instead of waiting for a fresh notification or timing out. (#​18968)
  • Fixed local stdio MCP launches for relative commands without an explicit cwd, bringing fallback path resolution in line with CLI behavior. (#​19031)
  • Startup now fails less often on managed config edge cases: unknown feature requirements warn instead of aborting, and cloud-requirements errors are clearer about what failed. (#​19038, #​19078)
Changelog

Full Changelog: openai/codex@rust-v0.123.0...rust-v0.124.0

v0.123.0: 0.123.0

Compare Source

New Features
  • Added a built-in amazon-bedrock model provider with configurable AWS profile support (#​18744).
  • Added /mcp verbose for full MCP server diagnostics, resources, and resource templates while keeping plain /mcp fast (#​18610).
  • Made plugin MCP loading accept both mcpServers and top-level server maps in .mcp.json (#​18780).
  • Improved realtime handoffs so background agents receive transcript deltas and can explicitly stay silent when appropriate (#​18597, #​18761, #​18635).
  • Added host-specific remote_sandbox_config requirements for remote environments (#​18763).
  • Refreshed bundled model metadata, including the current gpt-5.4 default (#​18586, #​18388, #​18719).
Bug Fixes
  • Fixed /copy after rollback so it copies the latest visible assistant response, not a pre-rollback response (#​18739).
  • Queued normal follow-up text submitted while a manual shell command is running, preventing stuck Working states (#​18820).
  • Fixed Unicode/dead-key input in VS Code WSL terminals by disabling the enhanced keyboard mode there (#​18741).
  • Prevented stale proxy environment variables from being restored from shell snapshots (#​17271).
  • Made codex exec inherit root-level shared flags such as sandbox and model options (#​18630).
  • Removed leaked review prompts from TUI transcripts (#​18659).
Documentation
  • Added and tightened the Code Review skill instructions used by Codex-driven reviews (#​18746, #​18818).
  • Documented intentional await-across-lock cases and enabled Clippy linting for them (#​18423, #​18698).
  • Updated app-server protocol docs for threadless MCP resource reads and namespaced dynamic tools (#​18292, #​18413).
Chores
  • Fixed high-severity dependency alerts by pinning patched JS and Rust dependencies (#​18167).
  • Reduced Rust dev build debug-info overhead while preserving useful backtraces (#​18844).
  • Refreshed generated Python app-server SDK types from the current schema (#​18862).
Changelog

Full Changelog: openai/codex@rust-v0.122.0...rust-v0.123.0

v0.122.0: 0.122.0

Compare Source

New Features
  • Standalone installs are more self-contained, and codex app now opens or installs Desktop correctly on Windows and Intel Macs (#​17022, #​18500).
  • The TUI can open /side conversations for quick side questions, and queued input now supports slash commands and ! shell prompts while work is running (#​18190, #​18542).
  • Plan Mode can start implementation in a fresh context, with context-usage shown before deciding whether to carry the planning thread forward (#​17499, #​18573).
  • Plugin workflows now include tabbed browsing, inline enable/disable toggles, marketplace removal, and remote, cross-repo, or local marketplace sources (#​18222, #​18395, #​17752, #​17751, #​17277, #​18017, #​18246).
  • Filesystem permissions now support deny-read glob policies, managed deny-read requirements, platform sandbox enforcement, and isolated codex exec runs that ignore user config or rules (#​15979, #​17740, #​18096, #​18646).
  • Tool discovery and image generation are now enabled by default, with higher-detail image handling and original-detail metadata support for MCP and js_repl image outputs (#​17854, #​17153, #​17714, #​18386).
Bug Fixes
  • App-server approvals, user-input prompts, and MCP elicitations now disappear from the TUI when another client resolves them, instead of leaving stale prompts behind (#​15134).
  • Remote-control startup now tolerates missing ChatGPT auth, and MCP startup cancellation works again through app-server sessions (#​18117, #​18078).
  • Resumed and forked app-server threads now replay token usage immediately so context/status UI starts with the restored state (#​18023).
  • Security-sensitive flows were tightened: logout revokes managed ChatGPT tokens, project hooks and exec policies require trusted workspaces, and Windows sandbox setup avoids broad user-profile and SSH-root grants (#​17825, #​14718, #​18443, #​18493).
  • Sandboxed apply_patch writes work correctly with split filesystem policies, and file watchers now notice files created after watching begins (#​18296, #​18492).
  • Several TUI rough edges were fixed, including fatal skills-list failures, invalid resume hints, duplicate context statusline entries, /model menu loops, redundant memory notices, and terminal t

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label May 2, 2026
@ryo246912 ryo246912 merged commit ff2cf34 into main May 2, 2026
2 checks passed
@ryo246912 ryo246912 deleted the renovate/aqua-openai-codex-0.x branch May 2, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ryo246912