chore(deps): update dependency openai/codex by renovate[bot] · Pull Request #9 · icoretech/codex-docker

renovate · 2026-04-11T01:19:13Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
openai/codex	minor	`0.118.0` → `0.120.0`
openai/codex	minor	`rust-v0.118.0` → `rust-v0.120.0`

Release Notes

openai/codex (openai/codex)

`v0.120.0`: 0.120.0

Compare Source

New Features

Realtime V2 can now stream background agent progress while work is still running and queue follow-up responses until the active response completes (#17264, #17306)
Hook activity in the TUI is easier to scan, with live running hooks shown separately and completed hook output kept only when useful (#17266)
Custom TUI status lines can include the renamed thread title (#17187)
Code-mode tool declarations now include MCP outputSchema details so structured tool results are typed more precisely (#17210)
SessionStart hooks can distinguish sessions created by /clear from fresh startup or resume sessions (#17073)

Bug Fixes

Fixed Windows elevated sandbox handling for split filesystem policies, including read-only carveouts under writable roots (#14568)
Fixed sandbox permission handling for symlinked writable roots and carveouts, preventing failures in shell and apply_patch workflows (#15981)
Fixed codex --remote wss://... panics by installing the Rustls crypto provider before TLS websocket connections (#17288)
Preserved tool search result ordering instead of alphabetically reordering results (#17263)
Fixed live Stop-hook prompts so they appear immediately instead of only after thread history reloads (#17189)
Fixed app-server MCP cleanup on disconnect so unsubscribed threads and resources are torn down correctly (#17223)

Documentation

Documented the elevated vs restricted-token Windows sandbox support split in the core README (#14568)
Updated app-server protocol documentation for the new /clear SessionStart source (#17073)

Chores

Made rollout recording more reliable by retrying failed flushes and surfacing durability failures instead of dropping buffered items (#17214)
Added analytics schemas and metadata wiring for compaction and Guardian review events (#17155, #17055)
Improved Guardian follow-up efficiency by sending transcript deltas instead of repeatedly resending full history (#17269)
Added stable Guardian review IDs across app-server events and internal approval state (#17298)

Changelog

Full Changelog: openai/codex@rust-v0.119.0...rust-v0.120.0

#17268 remove windows gate that disables hooks @iceweasel-oai
#17267 Stop Realtime V2 response.done delegation @aibrahim-oai
#14568 fix: support split carveouts in windows elevated sandbox @viyatb-oai
#17263 preserve search results order in tool_search_output @sayan-oai
#17189 Emit live hook prompts before raw-event filtering @abhinav-oai
#17288 Install rustls provider for remote websocket client @etraut-openai
#16969 Option to Notify Workspace Owner When Usage Limit is Reached @richardopenai
#17278 Rename Realtime V2 tool to background_agent @aibrahim-oai
#17280 Extract realtime input task handlers @aibrahim-oai
#17249 adding parent_thread_id in guardian @won-openai
#17264 Stream Realtime V2 background agent progress @aibrahim-oai
#17210 Add output_schema to code mode render @vivi
#16344 feat: move exec-server ownership @jif-oai
#17214 feat: make rollout recorder reliable against errors @jif-oai
#17223 fix: MCP leaks in app-server @jif-oai
#17338 feat: description multi-agent v2 @jif-oai
#17269 feat(guardian): send only transcript deltas on guardian followups @owenlin0
#17306 Queue Realtime V2 response.create while active @aibrahim-oai
#17352 fix: main @jif-oai
#17363 Strengthen realtime backend delegation prompt @aibrahim-oai
#17155 [codex-analytics] add compaction analytics event @rhan-oai
#17187 Add thread title to configurable TUI status line @canvrno-oai
#17194 add parent-id to guardian context @won-openai
#17266 [codex] Improve hook status rendering @abhinav-oai
#17073 Support clear SessionStart source @abhinav-oai
#17298 fix(guardian, app-server): introduce guardian review ids @owenlin0
#17391 Revert "Option to Notify Workspace Owner When Usage Limit is Reached" @shijie-oai
#17371 app-server: add pipelined config rpc regression test @euroelessar
#15981 fix(permissions): fix symlinked writable roots in sandbox permissions @viyatb-oai
#17055 feat(analytics): add guardian review event schema @owenlin0

`v0.119.0`: 0.119.0

Compare Source

New Features

Realtime voice sessions now default to the v2 WebRTC path, with configurable transport, voice selection, native TUI media support, and app-server coverage for the new flow (#16960, #17057, #17058, #17093, #17097, #17145, #17165, #17176, #17183, #17188).
MCP Apps and custom MCP servers gained richer support, including resource reads, tool-call metadata, custom-server tool search, server-driven elicitations, file-parameter uploads, and more reliable plugin cache refreshes (#16082, #16465, #16944, #17043, #15197, #16191, #16947).
Remote/app-server workflows now support egress websocket transport, remote --cd forwarding, runtime remote-control enablement, sandbox-aware filesystem APIs, and an experimental codex exec-server subcommand (#15951, #16700, #16973, #16751, #17059, #17142, #17162).
The TUI can copy the latest agent response with Ctrl+O, including better clipboard behavior over SSH and across platforms (#16966).
/resume can now jump directly to a session by ID or name from the TUI (#17222).
TUI notifications are more configurable, including Warp OSC 9 support and an opt-in mode for notifications even while the terminal is focused (#17174, #17175).

Bug Fixes

The TUI starts faster by fetching rate limits asynchronously, and /status now refreshes stale limits instead of showing frozen or misleading quota information (#16201, #17039).
Resume flows are more stable: the picker no longer flashes false empty states, uses fresher thread names, stabilizes timestamp labels, preserves resume hints on zero-token exits, and avoids crashing when resuming the current thread (#16591, #16601, #16822, #16987, #17086).
Composer and chat behavior are smoother, including fixed paste teardown, CJK word navigation, stale /copy output, percent-decoded local file links, and clearer truncated exec-output hints (#16202, #16829, #16648, #16810, #17076).
Fast Mode no longer stays stuck on after /fast off in app-server-backed TUI sessions (#16833).
MCP status and startup are less noisy and faster: hyphenated server names list tools correctly, /mcp avoids slow full inventory probes, disabled servers skip auth probing, and residency headers are honored by codex mcp-server (#16674, #16831, #17098, #16952).
Sandbox, network, and platform edge cases were tightened, including clearer read-only apply_patch errors, refreshed network proxy policy after sandbox changes, suppressed irrelevant bubblewrap warnings, a macOS HTTP-client sandbox panic fix, and Windows firewall address handling (#16885, #17040, #16667, #16670, #17053).

Documentation

The README now uses the current ChatGPT Business plan name (#16348).
Developer guidance for argument_comment_lint was updated to favor getting CI started instead of blocking on slow local lint runs (#16375).
Obsolete codex-cli README content was removed to avoid stale setup guidance (#17096).
codex exec --help now shows clearer usage and approval-mode wording (#16881, #16888).

Chores

codex-core was slimmed down through major crate extractions for MCP, tools, config, model management, auth, feedback, protocol, and related ownership boundaries (#15919, #16379, #16508, #16523, #16962).
Rust CI and workspace guardrails were simplified by blocking new crate features and dropping routine --all-features runs (#16455, #16473).
Core compile times were reduced by removing expensive async-trait expansion from hot tool/task abstractions (#16630, #16631).
Bazel diagnostics and dependency wiring improved with compact execution logs, repository-cache persistence, remote downloader support, and several platform-specific build fixes (#16577, #16926, #16928, #16634, #16744).

Changelog

Full Changelog: openai/codex@rust-v0.118.0...rust-v0.119.0

#16308 fix: one shot end of turn @jif-oai
#16238 fix: ma2 @jif-oai
#16317 chore: clean wait v2 @jif-oai
#16318 nit: update aborted line @jif-oai
#15771 feat: fork pattern v2 @jif-oai
#16322 fix: update fork boundaries computation @jif-oai
#16325 feat: restrict spawn_agent v2 to messages @jif-oai
#16324 chore: drop interrupt from send_message @jif-oai
#16345 fix: fix clippy issue caught by cargo but not bazel @bolinfest
#16184 Route TUI /feedback submission through the app server @etraut-openai
#16330 feat: log db better maintenance @jif-oai
#15690 [codex-analytics] thread events @rhan-oai
#16363 Fix PR babysitter review comment monitoring @etraut-openai
#16356 Refactor external auth to use a single trait @etraut-openai
#16366 Fix Windows external bearer refresh test @bolinfest
#16353 ci: verify codex-rs Cargo manifests inherit workspace settings @bolinfest
#16361 Refactor chatwidget tests into topical modules @etraut-openai
#16201 Fix stale /status rate limits in active TUI sessions @etraut-openai
#16351 ci: sync Bazel clippy lints and fix uncovered violations @bolinfest
#16378 fix: suppress status card expect_used warnings after #16351 @bolinfest
#16406 Use message string in v2 spawn_agent @jif-oai
#16409 Use message string in v2 send_message @jif-oai
#16419 Use message string in v2 assign_task @jif-oai
#16424 feat: tasks can't be assigned to root agent @jif-oai
#16425 nit: update wait v2 desc @jif-oai
#16426 chore: interrupted as state @jif-oai
#16427 nit: deny field v2 @jif-oai
#16433 chore: drop log DB @jif-oai
#16434 feat: auto vaccum state DB @jif-oai
#16422 fix(core) rm execute_exec_request sandbox_policy @dylan-hurd-oai
#16375 docs: update argument_comment_lint instructions in AGENTS.md @bolinfest
#16449 fix: remove unused import @bolinfest
#15772 Make fuzzy file search case insensitive @meyers-oai
#16455 ci: block new workspace crate features @bolinfest
#16456 cloud-tasks: split the mock client out of cloud-tasks-client @bolinfest
#16457 tui: remove debug/test-only crate features @bolinfest
#16467 tui: remove the voice-input crate feature @bolinfest
#16379 Extract tool config into codex-tools @bolinfest
#16469 otel: remove the last workspace crate feature @bolinfest
#16471 Extract tool spec helpers into codex-tools @bolinfest
#16473 ci: stop running rust CI with --all-features @bolinfest
#16477 Extract tool discovery helpers into codex-tools @bolinfest
#16480 login: treat provider auth refresh_interval_ms=0 as no auto-refresh @bolinfest
#16448 fix(guardian): make GuardianAssessmentEvent.action strongly typed @owenlin0
#16481 Extract update_plan tool spec into codex-tools @bolinfest
#15919 Extract MCP into codex-mcp crate @aibrahim-oai
#16482 Remove client_common tool re-exports @bolinfest
#16495 fix: remove unused import @bolinfest
#16493 Extract built-in tool spec constructors into codex-tools @bolinfest
#16273 Fix regression: "not available in TUI" error message @etraut-openai
#16497 Extract tool-search output helpers into codex-tools @bolinfest
#16498 fix: guard guardian_command_source_tool_name with cfg(unix) @bolinfest
#16499 Extract tool-suggest wire helpers into codex-tools @bolinfest
#16284 Fix TUI app-server permission profile conversions @etraut-openai
#16202 Fix paste-driven bottom pane completion teardown @etraut-openai
#16504 core: use codex-tools config types directly @bolinfest
#16503 Extract request_user_input normalization into codex-tools @bolinfest
#16510 core: use codex-mcp APIs directly @bolinfest
#16509 Extract code-mode nested tool collection into codex-tools @bolinfest
#16512 core: remove cross-crate re-exports from lib.rs @bolinfest
#16516 fix: add update to Cargo.lock that was missed in #16512 @bolinfest
#16513 Extract tool registry planning into codex-tools @bolinfest
#16521 Move tool registry plan tests into codex-tools @bolinfest
#16523 [codex] Move config types into codex-config @bolinfest
#16524 fix: move some test utilities out of codex-rs/core/src/tools/spec.rs @bolinfest
#16529 [codex] Remove codex-core config type shim @bolinfest
#16559 chore: memories mini model @jif-oai
#16561 fix: race pending @jif-oai
#16564 nit: lint @jif-oai
#16566 fix: races in end of turn @jif-oai
#16567 chore: rework state machine further @jif-oai
#16569 nit: state machine desc @jif-oai
#16571 chore: rename assign_task for followup_task @jif-oai
#16577 ci: upload compact Bazel execution logs for bazel.yml @bolinfest
#16581 chore: move codex-exec unit tests into sibling files @bolinfest
#16590 Fix non-determinism in rules_rs/crate_git_repository.bzl @tyler-french
#16604 test: deflake external bearer auth token tests on Windows @bolinfest
#16606 fix: add more detail to test assertion @bolinfest
#16608 fix: increase timeout to account for slow PowerShell startup @bolinfest
#16591 Fix resume picker initial loading state @etraut-openai
#16613 fix: increase another startup timeout for PowerShell @bolinfest
#16601 Fix resume picker stale thread names @etraut-openai
#16616 Fixed some existing labels and added a few new ones @etraut-openai
#16588 Fix stale turn steering during TUI review follow-ups @etraut-openai
#16617 fix: add shell fallback paths for pwsh/powershell that work on GitHub Actions Windows runners @bolinfest
#16596 Fix fork source display in /status (expose forked_from_id in app server) @etraut-openai
#16578 fix(tui): handle zellij redraw and composer rendering @fcoury-oai
#16630 core: cut codex-core compile time 63% with native async ToolHandler @bolinfest
#16631 core: cut codex-core compile time 48% with native async SessionTask @bolinfest
#16492 Auto-trust cwd on thread start @aibrahim-oai
#16633 fix: address unused variable on windows @bolinfest
#16635 app-server: make thread/shellCommand tests shell-aware @bolinfest
#16629 test: use cmd.exe for ProviderAuthScript on Windows @bolinfest
#16634 build: fix Bazel lzma-sys wiring @starr-openai
#16658 Fix deprecated login --api-key parsing @etraut-openai
#16508 extract models manager and related ownership from core @aibrahim-oai
#16662 fix: changes to test that should help them pass on Windows under Bazel @bolinfest
#16665 fix: use COMSPEC in Windows unicode shell test @bolinfest
#16668 fix: use cmd.exe in Windows unicode shell test @bolinfest
#16626 remove temporary ownership re-exports @aibrahim-oai
#16648 Fix stale /copy output after commentary-only turns @etraut-openai
#16674 Fix MCP tool listing for hyphenated server names @etraut-openai
#16667 Suppress bwrap warning when sandboxing is bypassed @etraut-openai
#16670 Fix macOS sandbox panic in Codex HTTP client @etraut-openai
#16699 Fix macOS malloc diagnostics leaking into TUI composer @etraut-openai
#16700 Add remote --cd forwarding for app-server sessions @etraut-openai
#16707 fix: preserve platform-specific core shell env vars @bolinfest
#16715 fix: address clippy violations that sneaked in @bolinfest
#16722 fix windows-only clippy lint violation @bolinfest
#16710 fix(tui): sort skill mentions by display name first @fcoury-oai
#16709 Sanitize forked child history @aibrahim-oai
#16711 Fix Windows Bazel app-server trust tests @bolinfest
#16720 Remove OPENAI_BASE_URL config fallback @etraut-openai
#16528 Codex/windows bazel rust test coverage no rs @bolinfest
#16450 bazel: lint rust_test targets in clippy workflow @bolinfest
#16735 [codex] allow disabling prompt instruction blocks @tibo-openai
#16745 [codex] allow disabling environment context injection @tibo-openai
#16725 Preempt mailbox mail after reasoning/commentary items @aibrahim-oai
#16755 Use Node 24 for npm publish @aibrahim-oai
#16753 [codex] add responses proxy JSON dumps @tibo-openai
#16746 Add spawn context for MultiAgentV2 children @aibrahim-oai
#16757 Back out "bazel: lint rust_test targets in clippy workflow (#16450)" @bolinfest
#16737 test: avoid PowerShell startup in Windows auth fixture @bolinfest
#16740 ci: align Bazel repo cache and Windows clippy target handling @bolinfest
#16758 [codex] add context-window lineage headers @tibo-openai
#16763 Add CODEX_SKIP_VENDORED_BWRAP @andmis
#15915 [codex-analytics] subagent analytics @rhan-oai
#16823 Fix flaky test relating to metadata remote URL @etraut-openai
#16825 Fix flaky permissions escalation test on Windows @etraut-openai
#16881 Fix misleading codex exec help usage @etraut-openai
#16888 Clarify codex exec approval help @etraut-openai
#16876 [codex] add response proxy subagent header test @tibo-openai
#16829 Fix CJK word navigation in the TUI composer @etraut-openai
#16833 Fix TUI fast mode toggle regression @etraut-openai
#16795 [regression] Fix ephemeral turn backfill in exec @etraut-openai
#16822 Fix resume picker timestamp labels and stability @etraut-openai
#16813 Annotate skill doc reads with skill names @etraut-openai
#16810 (tui): Decode percent-escaped bare local file links @etraut-openai
#16877 [codex-backend] Make thread metadata updates tolerate pending backfill @joeytrasatti-openai
#16701 feat(requirements): support allowed_approval_reviewers @owenlin0
#16925 fix(bazel): fix simdutf @owenlin0
#16926 bazel: Always save bazel repository cache @euroelessar
#16928 bazel: Enable --experimental_remote_downloader @euroelessar
#16462 fix(guardian): fix ordering of guardian events @owenlin0
#16924 fix(sqlite): don't hard fail migrator if DB is newer @owenlin0
#16744 build: restore lzma-sys Bazel wiring for devbox codex run @starr-openai
#16764 app-server: centralize AuthManager initialization @euroelessar
#16939 Fix clippy warning @mzeng-openai
#16923 Revert "[codex-backend] Make thread metadata updates tolerate pending backfill" @joeytrasatti-openai
#15951 app-server: Add egress websocket transport @euroelessar
#16945 [codex] Allow PyTorch libomp shm in Seatbelt @viyatb-oai
#16947 feat: fallback curated plugin download from backend endpint. @xl-openai
#16191 feat: refresh non-curated cache from plugin list. @xl-openai
#16952 Respect residency requirements in mcp-server @etraut-openai
#16827 tui: route device-code auth through app server @etraut-openai
#16638 [codex-analytics] add protocol-native turn timestamps @rhan-oai
#16831 Speed up /mcp inventory listing @etraut-openai
#16349 Disable env-bound tools when exec server is none @starr-openai
#16957 Promote image_detail_original to experimental @fjord-oai
#16962 Refactor config types into a separate crate @pakrym-oai
#16153 Add setTimeout support to code mode @pakrym-oai
#16961 app-server: Unify config changes handling a bit @euroelessar
#16890 Validate exec input before starting app-server @etraut-openai
#16082 [mcp] Support MCP Apps part 1. @mzeng-openai
#15893 fix: warn when bwrap cannot create user namespaces @viyatb-oai
#16946 [codex] Add danger-full-access denylist-only network mode @viyatb-oai
#16972 app-server: Fix compilation of a test in mcp_resource @euroelessar
#15826 Make AGENTS.md discovery FS-aware @pakrym-oai
#16964 Honor null thread instructions @aibrahim-oai
#16988 collapse dev message into one @won-openai
#16724 [codex] ez - rename env=>request in codex-rs/core/src/unified_exec/process_manager.rs @starr-openai
#16999 feat: empty role ok @jif-oai
#17002 chore: debug flag to hide some parameters @jif-oai
#17005 feat: drop agent ID from v2 @jif-oai
#17008 chore: send_message and followup_task do not return anything @jif-oai
#17007 chore: hide nickname for debug flag @jif-oai
#16442 feat: /feedback cascade @jif-oai
#16978 [codex] reduce module visibility @pakrym-oai
#17009 chore: keep request_user_input tool to persist cache on multi-agents @jif-oai
#16739 Stabilize flaky multi-agent followup interrupt test @etraut-openai
#16885 Fix read-only apply_patch rejection message @etraut-openai
#16882 Fix nested exec thread ID restore @etraut-openai
#16976 Preserve null developer instructions @aibrahim-oai
#16987 Fix missing resume hint on zero-token exits @etraut-openai
#16912 feat(analytics): generate an installation_id and pass it in responsesapi client_metadata @owenlin0
#16956 fix(guardian): don't throw away transcript when over budget @owenlin0
#16981 [codex] Make AbsolutePathBuf joins infallible @pakrym-oai
#16348 Update README @romainhuet
#16977 [codex] Make unified exec tests remote aware @pakrym-oai
#16465 [mcp] Support MCP Apps part 2 - Add meta to mcp tool call result. @mzeng-openai
#17026 app-server: Move watch_id to request of fs/watch @euroelessar
#16980 Add full-ci branch trigger @pakrym-oai
#16973 app-server: Allow enabling remote control in runtime @euroelessar
#17032 [codex] Fix unified exec test build @pakrym-oai
#17031 fix(core) revert Command line in unified exec output @dylan-hurd-oai
#17027 [codex] Migrate apply_patch to executor filesystem @pakrym-oai
#17044 [app-server-protocol] introduce generic ServerResponse for app-server-protocol @rhan-oai
#17047 fix(app-server) revert null instructions changes @dylan-hurd-oai
#16960 Add WebRTC transport to realtime start @aibrahim-oai
#17053 Fix remote address format to work with Windows Firewall rules. @iceweasel-oai
#17048 [codex] Apply patches through executor filesystem @pakrym-oai
#16949 Use model metadata for Fast Mode status @pash-openai
#17039 fix(tui): reduce startup and new-session latency @fcoury-oai
#17052 Add regression tests for JsonSchema @vivi
#17059 Add remote exec start script @pakrym-oai
#17064 Add project-local codex bug triage skill @etraut-openai
#17040 fix: refresh network proxy settings when sandbox mode changes @viyatb-oai
#16698 Remove expired April 2nd tooltip copy @etraut-openai
#17096 Remove obsolete codex-cli README @etraut-openai
#16875 Support anyOf and enum in JsonSchema @vivi
#16880 Render function attribute descriptions @vivi
#16879 Render namespace description for tools @vivi
#16582 feat: single app-server bootstrap in TUI @jif-oai
#17117 codex debug 1 (guardian approved) @jif-oai
#17119 codex debug 3 (guardian approved) @jif-oai
#17121 codex debug 5 (guardian approved) @jif-oai
#17123 codex debug 7 (guardian approved) @jif-oai
#17125 codex debug 9 (guardian appr

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label Apr 11, 2026

chore(deps): update dependency openai/codex

548155a

renovate Bot force-pushed the renovate/openai-codex-0.x branch from 57f3dab to 548155a Compare April 11, 2026 05:31

renovate Bot merged commit ab62ae5 into main Apr 11, 2026
1 check passed

renovate Bot deleted the renovate/openai-codex-0.x branch April 11, 2026 09:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency openai/codex#9

chore(deps): update dependency openai/codex#9
renovate[bot] merged 1 commit intomainfrom
renovate/openai-codex-0.x

renovate Bot commented Apr 11, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.120.0: 0.120.0

New Features

Bug Fixes

Documentation

Chores

Changelog

v0.119.0: 0.119.0

New Features

Bug Fixes

Documentation

Chores

Changelog

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 11, 2026 •

edited

Loading

`v0.120.0`: 0.120.0

`v0.119.0`: 0.119.0