OpenAI Codex CLI vrust-v0.118.0
Summary
New Features - Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (12220) - App-server clients can now start C...
Release Notes
New Features - Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (12220) - App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (15525) - codex exec now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (15917) - Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (16286, 16287, 16288) Bug Fixes - Project-local .codex files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (15067) - Linux sandbox launches are more reliable because Codex once again finds a trusted system bwrap on normal multi-entry PATHs. (15791, 15973) - The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, /copy and /resume <name> work again, /agent no longer shows stale threads, and the skills picker scrolls past the first page. (16013, 16021, 16050, 16014, 16109, 16110) - MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (16080, 16041) - On Windows, applypatch is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (16030) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.117.0...rust-v0.118.0 - 15891 [plugins] Polish tool suggest prompts. @mzeng-openai - 15791 fix: resolve bwrap from trusted PATH entry @viyatb-oai - 15900 skills: remove unused skill permission metadata @bolinfest - 15811 app-server: Split transport module @euroelessar - 15067 Protect first-time project .codex creation across Linux and macOS sandboxes @rreichel3-