chore(release): 0.3.0

[github-actions]

Summary

Keep a release proposal current with changes merged into main.

Changes

Update the package version and draft release notes. The version header and PR title are maintained by automation. Edit the marked note sections in .github/release-notes.md; edited or deleted sections become human-owned. New suggestions appear in subsequent bot comments. The PR description is never regenerated.

Testing

The updater does not run package tests. Check required CI and Codex review on the current head before merging. Request a final Codex review if the last review targets an older head. Record any additional checks here.

Risk and rollout

Merging this PR starts the existing CI and protected release process. Review migration details and complete the public disclosure review before merging.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[github-actions]

Release proposal updated through main commit e0489b00fe07dee041a54260f9d7a5ca33e54ede.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head ad9d0b7.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-15T00:59:23.773314Z	800d12c	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

Release proposal updated through main commit 9c052e6e8ab405feb77bad4b3dec93cab8a9f466.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (#1172)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head 1900313.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit f894f1ff64b1a332001f48593c1622b85701f9f3.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (#1172)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head 26e0219.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit b0773f71f8f703ecaba547ce4e8dfb468861d4d2.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (fix(multiscan): surface run warnings in campaign summaries #1172) (9c3df08)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)
• bump sharp from 0.35.4 to 0.35.5 in /evals/triage-finding (#1337)
• include JSP and ASP.NET templates in scan inventories (#1345)
• close C# raw strings on the matching quote count (#1346)
• simplify usage bookkeeping (#1349)
• simplify command contexts and transactions (#1353)
• derive inputs and consolidate test configuration (#1348)
• simplify publication evidence bookkeeping (#1387)
• reuse datetime validation for saved scan timestamps (#1351)
• share setup for Git diff scan targets (#1411)
• simplify saved scan settings and test setup (#1405)
• simplify Windows credential permission parsing (#1392)
• share CLI cancellation signal handling (#1371)
• simplify saved-coverage and tool-registration helpers (#1363)
• simplify fitting source previews to byte limits (#1350)
• infer helper types instead of duplicating declarations (#1358)
• preserve questions and choice descriptions in input requests (#1050)
• preserve sealed CSV artifacts during export (#1047)
• report worker sessions without model progress markers (#962)
• simplify scan usage and cost accounting (#1377)
• share finding-group logic across scan comparisons (#1364)
• share repeated workflow steps with YAML aliases (#1361)
• simplify inventory checks and build fixtures (#1389)
• simplify command preparation and transactions (#1390)
• share published version history and remove duplicate checks (#1381)
• preserve per-scan runtime and worker settings (#1281)
• unify structured scan failure responses (#1080)
• support custom scan names (#1180)
• simplify artifact schemas and saved-finding handling (#1356)
• share finding formatting and finalization helpers (#1355)
• simplify scan event callback dispatch (#1354)
• reuse validated inputs and simplify preview sizing (#1369)
• share note generation and test setup (#1373)
• update Codex CLI and SDK to 0.162.0-alpha.18 (#1420)
• simplify internal Deep Scan state and finding caches (#1352)
• simplify evidence grouping and parsing (#1368)
• reuse repeated workflow steps (#1385)
• simplify CLI completion and display state (#1384)
• reuse client construction and scan data (#1374)
• simplify report formatting and scan completion (#1366)
• remove duplicate benchmark checks and line collection (#1359)
• inherit null overrides and preserve literal paths (#1290)
• resolve path aliases consistently across scan workflows (#1267)
• include text files in scans regardless of extension (#1347)
• replace language parsers with source previews (#1391)
• include build and test files in scan inputs (#1414)
• load saved feedback and align scan completion instructions (#1264)
• share workbench migration SQL (#1333)
• initialize workbench databases with Node SQLite (#1335)
• move findings and dashboard helpers to Node (#1408)
• avoid saving interrupted pnpm caches (#1419)
• preserve Deep Scan worker context limits (#1417)
• show file scope until scan review progress begins (#464)
• preserve per-scan endpoints in Deep Scan workers (#1326)
• hide expected answers and test the checkout's skill (#1054)
• preserve saved results when scans stop or restart (#1269)
• keep usable bundles after failures and preserve release labels (#1263)
• preserve distinct fixes from merged findings (#905)
• read source excerpts from the scanned target (#1063)
• exclude inherited parent events from saved worker logs (#1060)
• report worker capacity from merged Codex settings (#1055)
• simplify action cleanup and stabilize provider isolation tests (#1421)
• preserve logout across credential imports (#759)
• preserve severity assessments for each scan (#1058)
• show active reviews and result consolidation during Deep Scan (#1253)
• keep bulk-scan knowledge and settings stable on resume (#1059)
• reject plaintext remote login URLs (fix(auth): reject plaintext remote login URLs #1331) (4c1dcbb)
• keep unusable DOCX numeric references as literal text (#123)
• finish cancellation when preflight ignores termination (#1049)
• install MCP dependencies before plugin build (#1285)
• preserve closed stdin when launching helpers (#1329)
• retain recovery guidance on canceled uploads (#680)
• retry container releases without replacing a newer latest tag (#1046)
• read compressed Codex session logs (#1428)
• deduplicate saved scans with local SQLite (#1338)
• preserve manual line breaks (#186)
• preserve saved diff snapshot provenance (#1286)
• cancel inherited pipes after the login process exits (#1068)
• bump napi-derive from 3.6.9 to 3.6.10 in /plugins/codex-security/native (#1437)
• update Docker-in-Docker and Node devcontainer features (#1436)
• bump napi-build from 2.5.0 to 2.6.0 in /plugins/codex-security/native (#1438)
• bump the codex group across 3 directories with 2 updates (#1439)
• bump the third-party group across 2 directories with 3 updates (#1514)
• restore devcontainer pins during cooldown (#1515)
• support optional Cyber access program selection (#1516)
• identify local plugin and knowledge-base failures (#463)
• resume scans when old worker prompts are missing (#900)
• protect saved history when archiving scan output (#1271)
• preserve scan history and publication outcomes (#1270)
• match user context before reusing discovery (#1048)
• report incomplete results as errors and deduplicate log warnings (#977)
• preserve request attribution across CLI, SDK, and Deep Scan (#1424)
• manage the findings service lifecycle (#700)
• reject control characters in remote targets during finalization (#1523)
• validate canonical code-evidence and deferred paths (#1522)
• reject special filesystem path targets before scanning (#1524)
• honor cancellation during PDF knowledge-base extraction (#1529)
• ignore status markers inside Markdown fences (#1525)
• explain pull request labels in agent instructions (#1521)
• filter model schema composition while parsing (#1461)
• compare Deep Scan progress fields directly (#1458)
• load scan contract documents in one sequence (#1481)
• reuse native equality for contract lists (#1457)
• simplify artifact export metadata transport (#1462)
• simplify scan result construction (#1445)
• reuse artifact JSON schema definitions (#1443)
• reject standalone collections inside the target (#1430)
• preserve structured findings API errors (#1081)
• reuse object validation primitives (#1452)
• share MCP response and annotation construction (#1444)
• use Codex 0.162.0 stable (#1533)
• update incur and KaTeX (#1534)
• reuse SDK validation and protocol test helpers (#1498)
• bump napi from 3.13.0 to 3.14.0 in /plugins/codex-security/native (#1532)
• wrap text by terminal display width (#1513)
• group deduplication pairs by existing roots (#1468)
• simplify export and progress delegation (#1478)
• bump ruff from 0.16.9 to 0.16.10 in /plugins/codex-security (#1531)
• share workbench migration repair instructions (#1496)
• use Bun native sharding (#1479)
• reuse scan contract readers and projection helpers (#1480)
• derive value options from command schemas (#1477)
• add cs alias and clarify onboarding (#1415)
• enforce devcontainer cooldown before merge (#1517)
• preserve argument text and typed state failures (#1500)
• share tool registration and annotations (#1485)
• consolidate workbench command handling (#1494)
• reuse workbench finding projection metadata (#1442)
• use native promise and array primitives (#1488)
• simplify validated artifact reconciliation (#1454)
• remove unused artifact declarations (#1483)
• share workflow GitHub API calls (#1466)
• simplify session cost tracking (#1456)
• simplify publication reconciliation (#1455)
• share final scan schema definitions (#1493)
• share Deep Scan retry archiving (#1465)
• reuse repeated workflow configuration (#1464)
• remove redundant dashboard copies (#1451)
• consolidate Deep Scan preflight compatibility coverage (#1482)
• use workbench for parent draft publication (#1487)
• simplify workbench history and usage readers (#1495)
• consolidate GitHub release publication (#1474)
• simplify scan configuration processing (#1459)
• preserve worker settings and executable selection (#1501)
• normalize candidates against selected sources (#1502)
• preserve coordinator ownership and source novelty (fix(deep-scan): preserve coordinator ownership and source novelty #1503) (8ea9763)
• retain underlying artifact and process failures (#1504)
• preserve finding queries and timestamp order (fix(workbench): preserve finding queries and timestamp order #1505) (c0c7f12)
• preserve archived workflows and saved scan replay (fix(scans): preserve archived workflows and saved scan replay #1506) (45b3efb)
• pass payloads in memory and preserve failures (#1507)
• preserve cancellation and child diagnostics (fix(processes): preserve cancellation and child diagnostics #1508) (6f64587)
• preserve filename bytes and Unicode owner evidence (fix(inventory): preserve filename bytes and Unicode owner evidence #1509) (ec4b5b5)
• validate artifact requests at tool boundaries (#1489)
• align Action publication with CLI releases (#1418)
• keep expected answers hidden and preserve each case’s settings (#1261)
• remove the local findings serve command (#1340)
• update Node types and string-width (#1545)
• preserve import and export representations (#1510)
• frame terminal input and skip unused activity (#1511)
• parse complete triage JSON before fenced content (#1512)
• remove legacy message and plugin compatibility (#1548)
• share candidate ledger updates (#1490)
• share Codex response handling across scan modes (#917)
• preserve scoped Git inventories and directory snapshots (#1280)
• keep scan identity visible in results and failures (#1554)
• explain connected repository review workflows (#1553)
• move severity persistence to Node (#1543)
• run API-key and Bedrock Deep Scans directly (#1555)
• preserve original knowledge context when resuming (#1556)
• update Codex CLI and SDK to 0.162.1 (#1563)
• update native libc to 0.2.190 (#1564)
• update MCP SDK to 1.32.0 (#1565)
• bump taiki-e/install-action from 2.87.22 to 2.87.23 (#1562)
• improve policy onboarding for global installs (#1416)
• restore GPT-6 Sol cost estimates and budgets (#1585)
• bump taiki-e/install-action from 2.87.23 to 2.87.24 (#1597)
• update PDF.js to 6.4.299 (#1598)
• update Ink to 8.0.0 (#1599)
• clarify persistent state and credential paths (#1586)
• enforce Deep Scan scope across execution adapters (#1557)
• clarify API-key model and access-program selection (#1037)
• retain requested repository paths in output (#1045)
• keep dashboards responsive and show observed usage (#1276)
• share scan result validation across scan modes (#920)
• preserve process paths and environment values (#1429)
• mark source review complete before custom validation (#1252)
• preserve Git checkout formats and raw POSIX inventory paths (#1288)
• inspect unpacked files for internal references (#618)
• retain fragmented input and final scan activity (#1284)
• prevent replaced coordinators from overwriting scan results (#916)
• remove repeated Python message projections (#1576)
• serialize registrations with archival (#1587)
• preserve pager state in reducer retry guidance (#1589)
• exclude forbidden fields from artifact tool schemas (#1588)
• clarify tool selection and worker follow-ups (#1591)
• derive result interfaces from schemas (#1579)
• include native compaction usage (#1590)
• share persisted finding normalization (#1574)
• preserve Windows process launch behavior (#1601)
• preserve selected scope through recovery (#1602)
• finish saving cancellation before returning to callers (#1260)
• bump napi from 3.14.0 to 3.14.1 in /plugins/codex-security/native (#1617)
• bump the third-party group across 2 directories with 2 updates (#1615)
• bump napi-derive from 3.6.10 to 3.6.11 in /plugins/codex-security/native (#1618)
• define compact artifact contracts in Zod (#1575)
• bump taiki-e/install-action from 2.87.24 to 2.87.26 (#1616)
• reuse runtime message and result handling (#1583)
• resolve workflows through readable plugin paths (#1592)
• share command argument encoding (#1577)
• simplify plugin tests and validation example (#1621)
• correct GitLab patch publication (#817)
• stop --format yaml from cutting off error messages (#1613)
• stop Deep Scan from starting extra reviews during result checks (#1630)
• Python cache files break plugin integrity checks (#1625)
• complete Deep scans with missing optional writeups (#1624)
• fix image pull failures and Windows diagnostic test (#1641)
• stop Deep Scan workers when usage is exhausted (#1638)
• show why configuration files fail to load (#1634)
• prevent generated finding IDs from breaking later draft updates (#1636)

Upgrade notes

Review migration steps for these breaking changes:

• move findings and dashboard helpers to Node (#1408)
• remove the local findings serve command (#1340)
• remove legacy message and plugin compatibility (#1548)
• move severity persistence to Node (#1543)
• preserve original knowledge context when resuming (#1556)

@codex review the current head 22e4365.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit 0bd8cbd67122dc8cdfcdf5ea1342ee5cd63e2e6a.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (fix(multiscan): surface run warnings in campaign summaries #1172) (9c3df08)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)
• bump sharp from 0.35.4 to 0.35.5 in /evals/triage-finding (#1337)
• include JSP and ASP.NET templates in scan inventories (#1345)
• close C# raw strings on the matching quote count (#1346)
• simplify usage bookkeeping (#1349)
• simplify command contexts and transactions (#1353)
• derive inputs and consolidate test configuration (#1348)
• simplify publication evidence bookkeeping (#1387)
• reuse datetime validation for saved scan timestamps (#1351)
• share setup for Git diff scan targets (#1411)
• simplify saved scan settings and test setup (#1405)
• simplify Windows credential permission parsing (#1392)
• share CLI cancellation signal handling (#1371)
• simplify saved-coverage and tool-registration helpers (#1363)
• simplify fitting source previews to byte limits (#1350)
• infer helper types instead of duplicating declarations (#1358)
• preserve questions and choice descriptions in input requests (#1050)
• preserve sealed CSV artifacts during export (#1047)
• report worker sessions without model progress markers (#962)
• simplify scan usage and cost accounting (#1377)
• share finding-group logic across scan comparisons (#1364)
• share repeated workflow steps with YAML aliases (#1361)
• simplify inventory checks and build fixtures (#1389)
• simplify command preparation and transactions (#1390)
• share published version history and remove duplicate checks (#1381)
• preserve per-scan runtime and worker settings (#1281)
• unify structured scan failure responses (#1080)
• support custom scan names (#1180)
• simplify artifact schemas and saved-finding handling (#1356)
• share finding formatting and finalization helpers (#1355)
• simplify scan event callback dispatch (#1354)
• reuse validated inputs and simplify preview sizing (#1369)
• share note generation and test setup (#1373)
• update Codex CLI and SDK to 0.162.0-alpha.18 (#1420)
• simplify internal Deep Scan state and finding caches (#1352)
• simplify evidence grouping and parsing (#1368)
• reuse repeated workflow steps (#1385)
• simplify CLI completion and display state (#1384)
• reuse client construction and scan data (#1374)
• simplify report formatting and scan completion (#1366)
• remove duplicate benchmark checks and line collection (#1359)
• inherit null overrides and preserve literal paths (#1290)
• resolve path aliases consistently across scan workflows (#1267)
• include text files in scans regardless of extension (#1347)
• replace language parsers with source previews (#1391)
• include build and test files in scan inputs (#1414)
• load saved feedback and align scan completion instructions (#1264)
• share workbench migration SQL (#1333)
• initialize workbench databases with Node SQLite (#1335)
• move findings and dashboard helpers to Node (#1408)
• avoid saving interrupted pnpm caches (#1419)
• preserve Deep Scan worker context limits (#1417)
• show file scope until scan review progress begins (#464)
• preserve per-scan endpoints in Deep Scan workers (#1326)
• hide expected answers and test the checkout's skill (#1054)
• preserve saved results when scans stop or restart (#1269)
• keep usable bundles after failures and preserve release labels (#1263)
• preserve distinct fixes from merged findings (#905)
• read source excerpts from the scanned target (#1063)
• exclude inherited parent events from saved worker logs (#1060)
• report worker capacity from merged Codex settings (#1055)
• simplify action cleanup and stabilize provider isolation tests (#1421)
• preserve logout across credential imports (#759)
• preserve severity assessments for each scan (#1058)
• show active reviews and result consolidation during Deep Scan (#1253)
• keep bulk-scan knowledge and settings stable on resume (#1059)
• reject plaintext remote login URLs (fix(auth): reject plaintext remote login URLs #1331) (4c1dcbb)
• keep unusable DOCX numeric references as literal text (#123)
• finish cancellation when preflight ignores termination (#1049)
• install MCP dependencies before plugin build (#1285)
• preserve closed stdin when launching helpers (#1329)
• retain recovery guidance on canceled uploads (#680)
• retry container releases without replacing a newer latest tag (#1046)
• read compressed Codex session logs (#1428)
• deduplicate saved scans with local SQLite (#1338)
• preserve manual line breaks (#186)
• preserve saved diff snapshot provenance (#1286)
• cancel inherited pipes after the login process exits (#1068)
• bump napi-derive from 3.6.9 to 3.6.10 in /plugins/codex-security/native (#1437)
• update Docker-in-Docker and Node devcontainer features (#1436)
• bump napi-build from 2.5.0 to 2.6.0 in /plugins/codex-security/native (#1438)
• bump the codex group across 3 directories with 2 updates (#1439)
• bump the third-party group across 2 directories with 3 updates (#1514)
• restore devcontainer pins during cooldown (#1515)
• support optional Cyber access program selection (#1516)
• identify local plugin and knowledge-base failures (#463)
• resume scans when old worker prompts are missing (#900)
• protect saved history when archiving scan output (#1271)
• preserve scan history and publication outcomes (#1270)
• match user context before reusing discovery (#1048)
• report incomplete results as errors and deduplicate log warnings (#977)
• preserve request attribution across CLI, SDK, and Deep Scan (#1424)
• manage the findings service lifecycle (#700)
• reject control characters in remote targets during finalization (#1523)
• validate canonical code-evidence and deferred paths (#1522)
• reject special filesystem path targets before scanning (#1524)
• honor cancellation during PDF knowledge-base extraction (#1529)
• ignore status markers inside Markdown fences (#1525)
• explain pull request labels in agent instructions (#1521)
• filter model schema composition while parsing (#1461)
• compare Deep Scan progress fields directly (#1458)
• load scan contract documents in one sequence (#1481)
• reuse native equality for contract lists (#1457)
• simplify artifact export metadata transport (#1462)
• simplify scan result construction (#1445)
• reuse artifact JSON schema definitions (#1443)
• reject standalone collections inside the target (#1430)
• preserve structured findings API errors (#1081)
• reuse object validation primitives (#1452)
• share MCP response and annotation construction (#1444)
• use Codex 0.162.0 stable (#1533)
• update incur and KaTeX (#1534)
• reuse SDK validation and protocol test helpers (#1498)
• bump napi from 3.13.0 to 3.14.0 in /plugins/codex-security/native (#1532)
• wrap text by terminal display width (#1513)
• group deduplication pairs by existing roots (#1468)
• simplify export and progress delegation (#1478)
• bump ruff from 0.16.9 to 0.16.10 in /plugins/codex-security (#1531)
• share workbench migration repair instructions (#1496)
• use Bun native sharding (#1479)
• reuse scan contract readers and projection helpers (#1480)
• derive value options from command schemas (#1477)
• add cs alias and clarify onboarding (#1415)
• enforce devcontainer cooldown before merge (#1517)
• preserve argument text and typed state failures (#1500)
• share tool registration and annotations (#1485)
• consolidate workbench command handling (#1494)
• reuse workbench finding projection metadata (#1442)
• use native promise and array primitives (#1488)
• simplify validated artifact reconciliation (#1454)
• remove unused artifact declarations (#1483)
• share workflow GitHub API calls (#1466)
• simplify session cost tracking (#1456)
• simplify publication reconciliation (#1455)
• share final scan schema definitions (#1493)
• share Deep Scan retry archiving (#1465)
• reuse repeated workflow configuration (#1464)
• remove redundant dashboard copies (#1451)
• consolidate Deep Scan preflight compatibility coverage (#1482)
• use workbench for parent draft publication (#1487)
• simplify workbench history and usage readers (#1495)
• consolidate GitHub release publication (#1474)
• simplify scan configuration processing (#1459)
• preserve worker settings and executable selection (#1501)
• normalize candidates against selected sources (#1502)
• preserve coordinator ownership and source novelty (fix(deep-scan): preserve coordinator ownership and source novelty #1503) (8ea9763)
• retain underlying artifact and process failures (#1504)
• preserve finding queries and timestamp order (fix(workbench): preserve finding queries and timestamp order #1505) (c0c7f12)
• preserve archived workflows and saved scan replay (fix(scans): preserve archived workflows and saved scan replay #1506) (45b3efb)
• pass payloads in memory and preserve failures (#1507)
• preserve cancellation and child diagnostics (fix(processes): preserve cancellation and child diagnostics #1508) (6f64587)
• preserve filename bytes and Unicode owner evidence (fix(inventory): preserve filename bytes and Unicode owner evidence #1509) (ec4b5b5)
• validate artifact requests at tool boundaries (#1489)
• align Action publication with CLI releases (#1418)
• keep expected answers hidden and preserve each case’s settings (#1261)
• remove the local findings serve command (#1340)
• update Node types and string-width (#1545)
• preserve import and export representations (#1510)
• frame terminal input and skip unused activity (#1511)
• parse complete triage JSON before fenced content (#1512)
• remove legacy message and plugin compatibility (#1548)
• share candidate ledger updates (#1490)
• share Codex response handling across scan modes (#917)
• preserve scoped Git inventories and directory snapshots (#1280)
• keep scan identity visible in results and failures (#1554)
• explain connected repository review workflows (#1553)
• move severity persistence to Node (#1543)
• run API-key and Bedrock Deep Scans directly (#1555)
• preserve original knowledge context when resuming (#1556)
• update Codex CLI and SDK to 0.162.1 (#1563)
• update native libc to 0.2.190 (#1564)
• update MCP SDK to 1.32.0 (#1565)
• bump taiki-e/install-action from 2.87.22 to 2.87.23 (#1562)
• improve policy onboarding for global installs (#1416)
• restore GPT-6 Sol cost estimates and budgets (#1585)
• bump taiki-e/install-action from 2.87.23 to 2.87.24 (#1597)
• update PDF.js to 6.4.299 (#1598)
• update Ink to 8.0.0 (#1599)
• clarify persistent state and credential paths (#1586)
• enforce Deep Scan scope across execution adapters (#1557)
• clarify API-key model and access-program selection (#1037)
• retain requested repository paths in output (#1045)
• keep dashboards responsive and show observed usage (#1276)
• share scan result validation across scan modes (#920)
• preserve process paths and environment values (#1429)
• mark source review complete before custom validation (#1252)
• preserve Git checkout formats and raw POSIX inventory paths (#1288)
• inspect unpacked files for internal references (#618)
• retain fragmented input and final scan activity (#1284)
• prevent replaced coordinators from overwriting scan results (#916)
• remove repeated Python message projections (#1576)
• serialize registrations with archival (#1587)
• preserve pager state in reducer retry guidance (#1589)
• exclude forbidden fields from artifact tool schemas (#1588)
• clarify tool selection and worker follow-ups (#1591)
• derive result interfaces from schemas (#1579)
• include native compaction usage (#1590)
• share persisted finding normalization (#1574)
• preserve Windows process launch behavior (#1601)
• preserve selected scope through recovery (#1602)
• finish saving cancellation before returning to callers (#1260)
• bump napi from 3.14.0 to 3.14.1 in /plugins/codex-security/native (#1617)
• bump the third-party group across 2 directories with 2 updates (#1615)
• bump napi-derive from 3.6.10 to 3.6.11 in /plugins/codex-security/native (#1618)
• define compact artifact contracts in Zod (#1575)
• bump taiki-e/install-action from 2.87.24 to 2.87.26 (#1616)
• reuse runtime message and result handling (#1583)
• resolve workflows through readable plugin paths (#1592)
• share command argument encoding (#1577)
• simplify plugin tests and validation example (#1621)
• correct GitLab patch publication (#817)
• stop --format yaml from cutting off error messages (#1613)
• stop Deep Scan from starting extra reviews during result checks (#1630)
• Python cache files break plugin integrity checks (#1625)
• complete Deep scans with missing optional writeups (#1624)
• fix image pull failures and Windows diagnostic test (#1641)
• stop Deep Scan workers when usage is exhausted (#1638)
• show why configuration files fail to load (#1634)
• prevent generated finding IDs from breaking later draft updates (#1636)
• generate patches without managing a CLI process (#1635)

Upgrade notes

Review migration steps for these breaking changes:

• move findings and dashboard helpers to Node (#1408)
• remove the local findings serve command (#1340)
• remove legacy message and plugin compatibility (#1548)
• move severity persistence to Node (#1543)
• preserve original knowledge context when resuming (#1556)

@codex review the current head 8380c0c.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit 9d8e8f23dd9e81ceb484d2d0d09aa076cc7a03f7.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (fix(multiscan): surface run warnings in campaign summaries #1172) (9c3df08)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)
• bump sharp from 0.35.4 to 0.35.5 in /evals/triage-finding (#1337)
• include JSP and ASP.NET templates in scan inventories (#1345)
• close C# raw strings on the matching quote count (#1346)
• simplify usage bookkeeping (#1349)
• simplify command contexts and transactions (#1353)
• derive inputs and consolidate test configuration (#1348)
• simplify publication evidence bookkeeping (#1387)
• reuse datetime validation for saved scan timestamps (#1351)
• share setup for Git diff scan targets (#1411)
• simplify saved scan settings and test setup (#1405)
• simplify Windows credential permission parsing (#1392)
• share CLI cancellation signal handling (#1371)
• simplify saved-coverage and tool-registration helpers (#1363)
• simplify fitting source previews to byte limits (#1350)
• infer helper types instead of duplicating declarations (#1358)
• preserve questions and choice descriptions in input requests (#1050)
• preserve sealed CSV artifacts during export (#1047)
• report worker sessions without model progress markers (#962)
• simplify scan usage and cost accounting (#1377)
• share finding-group logic across scan comparisons (#1364)
• share repeated workflow steps with YAML aliases (#1361)
• simplify inventory checks and build fixtures (#1389)
• simplify command preparation and transactions (#1390)
• share published version history and remove duplicate checks (#1381)
• preserve per-scan runtime and worker settings (#1281)
• unify structured scan failure responses (#1080)
• support custom scan names (#1180)
• simplify artifact schemas and saved-finding handling (#1356)
• share finding formatting and finalization helpers (#1355)
• simplify scan event callback dispatch (#1354)
• reuse validated inputs and simplify preview sizing (#1369)
• share note generation and test setup (#1373)
• update Codex CLI and SDK to 0.162.0-alpha.18 (#1420)
• simplify internal Deep Scan state and finding caches (#1352)
• simplify evidence grouping and parsing (#1368)
• reuse repeated workflow steps (#1385)
• simplify CLI completion and display state (#1384)
• reuse client construction and scan data (#1374)
• simplify report formatting and scan completion (#1366)
• remove duplicate benchmark checks and line collection (#1359)
• inherit null overrides and preserve literal paths (#1290)
• resolve path aliases consistently across scan workflows (#1267)
• include text files in scans regardless of extension (#1347)
• replace language parsers with source previews (#1391)
• include build and test files in scan inputs (#1414)
• load saved feedback and align scan completion instructions (#1264)
• share workbench migration SQL (#1333)
• initialize workbench databases with Node SQLite (#1335)
• move findings and dashboard helpers to Node (#1408)
• avoid saving interrupted pnpm caches (#1419)
• preserve Deep Scan worker context limits (#1417)
• show file scope until scan review progress begins (#464)
• preserve per-scan endpoints in Deep Scan workers (#1326)
• hide expected answers and test the checkout's skill (#1054)
• preserve saved results when scans stop or restart (#1269)
• keep usable bundles after failures and preserve release labels (#1263)
• preserve distinct fixes from merged findings (#905)
• read source excerpts from the scanned target (#1063)
• exclude inherited parent events from saved worker logs (#1060)
• report worker capacity from merged Codex settings (#1055)
• simplify action cleanup and stabilize provider isolation tests (#1421)
• preserve logout across credential imports (#759)
• preserve severity assessments for each scan (#1058)
• show active reviews and result consolidation during Deep Scan (#1253)
• keep bulk-scan knowledge and settings stable on resume (#1059)
• reject plaintext remote login URLs (fix(auth): reject plaintext remote login URLs #1331) (4c1dcbb)
• keep unusable DOCX numeric references as literal text (#123)
• finish cancellation when preflight ignores termination (#1049)
• install MCP dependencies before plugin build (#1285)
• preserve closed stdin when launching helpers (#1329)
• retain recovery guidance on canceled uploads (#680)
• retry container releases without replacing a newer latest tag (#1046)
• read compressed Codex session logs (#1428)
• deduplicate saved scans with local SQLite (#1338)
• preserve manual line breaks (#186)
• preserve saved diff snapshot provenance (#1286)
• cancel inherited pipes after the login process exits (#1068)
• bump napi-derive from 3.6.9 to 3.6.10 in /plugins/codex-security/native (#1437)
• update Docker-in-Docker and Node devcontainer features (#1436)
• bump napi-build from 2.5.0 to 2.6.0 in /plugins/codex-security/native (#1438)
• bump the codex group across 3 directories with 2 updates (#1439)
• bump the third-party group across 2 directories with 3 updates (#1514)
• restore devcontainer pins during cooldown (#1515)
• support optional Cyber access program selection (#1516)
• identify local plugin and knowledge-base failures (#463)
• resume scans when old worker prompts are missing (#900)
• protect saved history when archiving scan output (#1271)
• preserve scan history and publication outcomes (#1270)
• match user context before reusing discovery (#1048)
• report incomplete results as errors and deduplicate log warnings (#977)
• preserve request attribution across CLI, SDK, and Deep Scan (#1424)
• manage the findings service lifecycle (#700)
• reject control characters in remote targets during finalization (#1523)
• validate canonical code-evidence and deferred paths (#1522)
• reject special filesystem path targets before scanning (#1524)
• honor cancellation during PDF knowledge-base extraction (#1529)
• ignore status markers inside Markdown fences (#1525)
• explain pull request labels in agent instructions (#1521)
• filter model schema composition while parsing (#1461)
• compare Deep Scan progress fields directly (#1458)
• load scan contract documents in one sequence (#1481)
• reuse native equality for contract lists (#1457)
• simplify artifact export metadata transport (#1462)
• simplify scan result construction (#1445)
• reuse artifact JSON schema definitions (#1443)
• reject standalone collections inside the target (#1430)
• preserve structured findings API errors (#1081)
• reuse object validation primitives (#1452)
• share MCP response and annotation construction (#1444)
• use Codex 0.162.0 stable (#1533)
• update incur and KaTeX (#1534)
• reuse SDK validation and protocol test helpers (#1498)
• bump napi from 3.13.0 to 3.14.0 in /plugins/codex-security/native (#1532)
• wrap text by terminal display width (#1513)
• group deduplication pairs by existing roots (#1468)
• simplify export and progress delegation (#1478)
• bump ruff from 0.16.9 to 0.16.10 in /plugins/codex-security (#1531)
• share workbench migration repair instructions (#1496)
• use Bun native sharding (#1479)
• reuse scan contract readers and projection helpers (#1480)
• derive value options from command schemas (#1477)
• add cs alias and clarify onboarding (#1415)
• enforce devcontainer cooldown before merge (#1517)
• preserve argument text and typed state failures (#1500)
• share tool registration and annotations (#1485)
• consolidate workbench command handling (#1494)
• reuse workbench finding projection metadata (#1442)
• use native promise and array primitives (#1488)
• simplify validated artifact reconciliation (#1454)
• remove unused artifact declarations (#1483)
• share workflow GitHub API calls (#1466)
• simplify session cost tracking (#1456)
• simplify publication reconciliation (#1455)
• share final scan schema definitions (#1493)
• share Deep Scan retry archiving (#1465)
• reuse repeated workflow configuration (#1464)
• remove redundant dashboard copies (#1451)
• consolidate Deep Scan preflight compatibility coverage (#1482)
• use workbench for parent draft publication (#1487)
• simplify workbench history and usage readers (#1495)
• consolidate GitHub release publication (#1474)
• simplify scan configuration processing (#1459)
• preserve worker settings and executable selection (#1501)
• normalize candidates against selected sources (#1502)
• preserve coordinator ownership and source novelty (fix(deep-scan): preserve coordinator ownership and source novelty #1503) (8ea9763)
• retain underlying artifact and process failures (#1504)
• preserve finding queries and timestamp order (fix(workbench): preserve finding queries and timestamp order #1505) (c0c7f12)
• preserve archived workflows and saved scan replay (fix(scans): preserve archived workflows and saved scan replay #1506) (45b3efb)
• pass payloads in memory and preserve failures (#1507)
• preserve cancellation and child diagnostics (fix(processes): preserve cancellation and child diagnostics #1508) (6f64587)
• preserve filename bytes and Unicode owner evidence (fix(inventory): preserve filename bytes and Unicode owner evidence #1509) (ec4b5b5)
• validate artifact requests at tool boundaries (#1489)
• align Action publication with CLI releases (#1418)
• keep expected answers hidden and preserve each case’s settings (#1261)
• remove the local findings serve command (#1340)
• update Node types and string-width (#1545)
• preserve import and export representations (#1510)
• frame terminal input and skip unused activity (#1511)
• parse complete triage JSON before fenced content (#1512)
• remove legacy message and plugin compatibility (#1548)
• share candidate ledger updates (#1490)
• share Codex response handling across scan modes (#917)
• preserve scoped Git inventories and directory snapshots (#1280)
• keep scan identity visible in results and failures (#1554)
• explain connected repository review workflows (#1553)
• move severity persistence to Node (#1543)
• run API-key and Bedrock Deep Scans directly (#1555)
• preserve original knowledge context when resuming (#1556)
• update Codex CLI and SDK to 0.162.1 (#1563)
• update native libc to 0.2.190 (#1564)
• update MCP SDK to 1.32.0 (#1565)
• bump taiki-e/install-action from 2.87.22 to 2.87.23 (#1562)
• improve policy onboarding for global installs (#1416)
• restore GPT-6 Sol cost estimates and budgets (#1585)
• bump taiki-e/install-action from 2.87.23 to 2.87.24 (#1597)
• update PDF.js to 6.4.299 (#1598)
• update Ink to 8.0.0 (#1599)
• clarify persistent state and credential paths (#1586)
• enforce Deep Scan scope across execution adapters (#1557)
• clarify API-key model and access-program selection (#1037)
• retain requested repository paths in output (#1045)
• keep dashboards responsive and show observed usage (#1276)
• share scan result validation across scan modes (#920)
• preserve process paths and environment values (#1429)
• mark source review complete before custom validation (#1252)
• preserve Git checkout formats and raw POSIX inventory paths (#1288)
• inspect unpacked files for internal references (#618)
• retain fragmented input and final scan activity (#1284)
• prevent replaced coordinators from overwriting scan results (#916)
• remove repeated Python message projections (#1576)
• serialize registrations with archival (#1587)
• preserve pager state in reducer retry guidance (#1589)
• exclude forbidden fields from artifact tool schemas (#1588)
• clarify tool selection and worker follow-ups (#1591)
• derive result interfaces from schemas (#1579)
• include native compaction usage (#1590)
• share persisted finding normalization (#1574)
• preserve Windows process launch behavior (#1601)
• preserve selected scope through recovery (#1602)
• finish saving cancellation before returning to callers (#1260)
• bump napi from 3.14.0 to 3.14.1 in /plugins/codex-security/native (#1617)
• bump the third-party group across 2 directories with 2 updates (#1615)
• bump napi-derive from 3.6.10 to 3.6.11 in /plugins/codex-security/native (#1618)
• define compact artifact contracts in Zod (#1575)
• bump taiki-e/install-action from 2.87.24 to 2.87.26 (#1616)
• reuse runtime message and result handling (#1583)
• resolve workflows through readable plugin paths (#1592)
• share command argument encoding (#1577)
• simplify plugin tests and validation example (#1621)
• correct GitLab patch publication (#817)
• stop --format yaml from cutting off error messages (#1613)
• stop Deep Scan from starting extra reviews during result checks (#1630)
• Python cache files break plugin integrity checks (#1625)
• complete Deep scans with missing optional writeups (#1624)
• fix image pull failures and Windows diagnostic test (#1641)
• stop Deep Scan workers when usage is exhausted (#1638)
• show why configuration files fail to load (#1634)
• prevent generated finding IDs from breaking later draft updates (#1636)
• generate patches without managing a CLI process (#1635)
• simplify scan outcomes (#1633)
• bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1647)
• bump actions/setup-node from 7.0.0 to 7.1.0 (#1651)

Upgrade notes

Review migration steps for these breaking changes:

• move findings and dashboard helpers to Node (#1408)
• remove the local findings serve command (#1340)
• remove legacy message and plugin compatibility (#1548)
• move severity persistence to Node (#1543)
• preserve original knowledge context when resuming (#1556)
• simplify scan outcomes (#1633)

@codex review the current head 31a62fb.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit 23fa14cc281bd2f1f26b6184e2b4b17fe4710178.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (fix(multiscan): surface run warnings in campaign summaries #1172) (9c3df08)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)
• bump sharp from 0.35.4 to 0.35.5 in /evals/triage-finding (#1337)
• include JSP and ASP.NET templates in scan inventories (#1345)
• close C# raw strings on the matching quote count (#1346)
• simplify usage bookkeeping (#1349)
• simplify command contexts and transactions (#1353)
• derive inputs and consolidate test configuration (#1348)
• simplify publication evidence bookkeeping (#1387)
• reuse datetime validation for saved scan timestamps (#1351)
• share setup for Git diff scan targets (#1411)
• simplify saved scan settings and test setup (#1405)
• simplify Windows credential permission parsing (#1392)
• share CLI cancellation signal handling (#1371)
• simplify saved-coverage and tool-registration helpers (#1363)
• simplify fitting source previews to byte limits (#1350)
• infer helper types instead of duplicating declarations (#1358)
• preserve questions and choice descriptions in input requests (#1050)
• preserve sealed CSV artifacts during export (#1047)
• report worker sessions without model progress markers (#962)
• simplify scan usage and cost accounting (#1377)
• share finding-group logic across scan comparisons (#1364)
• share repeated workflow steps with YAML aliases (#1361)
• simplify inventory checks and build fixtures (#1389)
• simplify command preparation and transactions (#1390)
• share published version history and remove duplicate checks (#1381)
• preserve per-scan runtime and worker settings (#1281)
• unify structured scan failure responses (#1080)
• support custom scan names (#1180)
• simplify artifact schemas and saved-finding handling (#1356)
• share finding formatting and finalization helpers (#1355)
• simplify scan event callback dispatch (#1354)
• reuse validated inputs and simplify preview sizing (#1369)
• share note generation and test setup (#1373)
• update Codex CLI and SDK to 0.162.0-alpha.18 (#1420)
• simplify internal Deep Scan state and finding caches (#1352)
• simplify evidence grouping and parsing (#1368)
• reuse repeated workflow steps (#1385)
• simplify CLI completion and display state (#1384)
• reuse client construction and scan data (#1374)
• simplify report formatting and scan completion (#1366)
• remove duplicate benchmark checks and line collection (#1359)
• inherit null overrides and preserve literal paths (#1290)
• resolve path aliases consistently across scan workflows (#1267)
• include text files in scans regardless of extension (#1347)
• replace language parsers with source previews (#1391)
• include build and test files in scan inputs (#1414)
• load saved feedback and align scan completion instructions (#1264)
• share workbench migration SQL (#1333)
• initialize workbench databases with Node SQLite (#1335)
• move findings and dashboard helpers to Node (#1408)
• avoid saving interrupted pnpm caches (#1419)
• preserve Deep Scan worker context limits (#1417)
• show file scope until scan review progress begins (#464)
• preserve per-scan endpoints in Deep Scan workers (#1326)
• hide expected answers and test the checkout's skill (#1054)
• preserve saved results when scans stop or restart (#1269)
• keep usable bundles after failures and preserve release labels (#1263)
• preserve distinct fixes from merged findings (#905)
• read source excerpts from the scanned target (#1063)
• exclude inherited parent events from saved worker logs (#1060)
• report worker capacity from merged Codex settings (#1055)
• simplify action cleanup and stabilize provider isolation tests (#1421)
• preserve logout across credential imports (#759)
• preserve severity assessments for each scan (#1058)
• show active reviews and result consolidation during Deep Scan (#1253)
• keep bulk-scan knowledge and settings stable on resume (#1059)
• reject plaintext remote login URLs (fix(auth): reject plaintext remote login URLs #1331) (4c1dcbb)
• keep unusable DOCX numeric references as literal text (#123)
• finish cancellation when preflight ignores termination (#1049)
• install MCP dependencies before plugin build (#1285)
• preserve closed stdin when launching helpers (#1329)
• retain recovery guidance on canceled uploads (#680)
• retry container releases without replacing a newer latest tag (#1046)
• read compressed Codex session logs (#1428)
• deduplicate saved scans with local SQLite (#1338)
• preserve manual line breaks (#186)
• preserve saved diff snapshot provenance (#1286)
• cancel inherited pipes after the login process exits (#1068)
• bump napi-derive from 3.6.9 to 3.6.10 in /plugins/codex-security/native (#1437)
• update Docker-in-Docker and Node devcontainer features (#1436)
• bump napi-build from 2.5.0 to 2.6.0 in /plugins/codex-security/native (#1438)
• bump the codex group across 3 directories with 2 updates (#1439)
• bump the third-party group across 2 directories with 3 updates (#1514)
• restore devcontainer pins during cooldown (#1515)
• support optional Cyber access program selection (#1516)
• identify local plugin and knowledge-base failures (#463)
• resume scans when old worker prompts are missing (#900)
• protect saved history when archiving scan output (#1271)
• preserve scan history and publication outcomes (#1270)
• match user context before reusing discovery (#1048)
• report incomplete results as errors and deduplicate log warnings (#977)
• preserve request attribution across CLI, SDK, and Deep Scan (#1424)
• manage the findings service lifecycle (#700)
• reject control characters in remote targets during finalization (#1523)
• validate canonical code-evidence and deferred paths (#1522)
• reject special filesystem path targets before scanning (#1524)
• honor cancellation during PDF knowledge-base extraction (#1529)
• ignore status markers inside Markdown fences (#1525)
• explain pull request labels in agent instructions (#1521)
• filter model schema composition while parsing (#1461)
• compare Deep Scan progress fields directly (#1458)
• load scan contract documents in one sequence (#1481)
• reuse native equality for contract lists (#1457)
• simplify artifact export metadata transport (#1462)
• simplify scan result construction (#1445)
• reuse artifact JSON schema definitions (#1443)
• reject standalone collections inside the target (#1430)
• preserve structured findings API errors (#1081)
• reuse object validation primitives (#1452)
• share MCP response and annotation construction (#1444)
• use Codex 0.162.0 stable (#1533)
• update incur and KaTeX (#1534)
• reuse SDK validation and protocol test helpers (#1498)
• bump napi from 3.13.0 to 3.14.0 in /plugins/codex-security/native (#1532)
• wrap text by terminal display width (#1513)
• group deduplication pairs by existing roots (#1468)
• simplify export and progress delegation (#1478)
• bump ruff from 0.16.9 to 0.16.10 in /plugins/codex-security (#1531)
• share workbench migration repair instructions (#1496)
• use Bun native sharding (#1479)
• reuse scan contract readers and projection helpers (#1480)
• derive value options from command schemas (#1477)
• add cs alias and clarify onboarding (#1415)
• enforce devcontainer cooldown before merge (#1517)
• preserve argument text and typed state failures (#1500)
• share tool registration and annotations (#1485)
• consolidate workbench command handling (#1494)
• reuse workbench finding projection metadata (#1442)
• use native promise and array primitives (#1488)
• simplify validated artifact reconciliation (#1454)
• remove unused artifact declarations (#1483)
• share workflow GitHub API calls (#1466)
• simplify session cost tracking (#1456)
• simplify publication reconciliation (#1455)
• share final scan schema definitions (#1493)
• share Deep Scan retry archiving (#1465)
• reuse repeated workflow configuration (#1464)
• remove redundant dashboard copies (#1451)
• consolidate Deep Scan preflight compatibility coverage (#1482)
• use workbench for parent draft publication (#1487)
• simplify workbench history and usage readers (#1495)
• consolidate GitHub release publication (#1474)
• simplify scan configuration processing (#1459)
• preserve worker settings and executable selection (#1501)
• normalize candidates against selected sources (#1502)
• preserve coordinator ownership and source novelty (fix(deep-scan): preserve coordinator ownership and source novelty #1503) (8ea9763)
• retain underlying artifact and process failures (#1504)
• preserve finding queries and timestamp order (fix(workbench): preserve finding queries and timestamp order #1505) (c0c7f12)
• preserve archived workflows and saved scan replay (fix(scans): preserve archived workflows and saved scan replay #1506) (45b3efb)
• pass payloads in memory and preserve failures (#1507)
• preserve cancellation and child diagnostics (fix(processes): preserve cancellation and child diagnostics #1508) (6f64587)
• preserve filename bytes and Unicode owner evidence (fix(inventory): preserve filename bytes and Unicode owner evidence #1509) (ec4b5b5)
• validate artifact requests at tool boundaries (#1489)
• align Action publication with CLI releases (#1418)
• keep expected answers hidden and preserve each case’s settings (#1261)
• remove the local findings serve command (#1340)
• update Node types and string-width (#1545)
• preserve import and export representations (#1510)
• frame terminal input and skip unused activity (#1511)
• parse complete triage JSON before fenced content (#1512)
• remove legacy message and plugin compatibility (#1548)
• share candidate ledger updates (#1490)
• share Codex response handling across scan modes (#917)
• preserve scoped Git inventories and directory snapshots (#1280)
• keep scan identity visible in results and failures (#1554)
• explain connected repository review workflows (#1553)
• move severity persistence to Node (#1543)
• run API-key and Bedrock Deep Scans directly (#1555)
• preserve original knowledge context when resuming (#1556)
• update Codex CLI and SDK to 0.162.1 (#1563)
• update native libc to 0.2.190 (#1564)
• update MCP SDK to 1.32.0 (#1565)
• bump taiki-e/install-action from 2.87.22 to 2.87.23 (#1562)
• improve policy onboarding for global installs (#1416)
• restore GPT-6 Sol cost estimates and budgets (#1585)
• bump taiki-e/install-action from 2.87.23 to 2.87.24 (#1597)
• update PDF.js to 6.4.299 (#1598)
• update Ink to 8.0.0 (#1599)
• clarify persistent state and credential paths (#1586)
• enforce Deep Scan scope across execution adapters (#1557)
• clarify API-key model and access-program selection (#1037)
• retain requested repository paths in output (#1045)
• keep dashboards responsive and show observed usage (#1276)
• share scan result validation across scan modes (#920)
• preserve process paths and environment values (#1429)
• mark source review complete before custom validation (#1252)
• preserve Git checkout formats and raw POSIX inventory paths (#1288)
• inspect unpacked files for internal references (#618)
• retain fragmented input and final scan activity (#1284)
• prevent replaced coordinators from overwriting scan results (#916)
• remove repeated Python message projections (#1576)
• serialize registrations with archival (#1587)
• preserve pager state in reducer retry guidance (#1589)
• exclude forbidden fields from artifact tool schemas (#1588)
• clarify tool selection and worker follow-ups (#1591)
• derive result interfaces from schemas (#1579)
• include native compaction usage (#1590)
• share persisted finding normalization (#1574)
• preserve Windows process launch behavior (#1601)
• preserve selected scope through recovery (#1602)
• finish saving cancellation before returning to callers (#1260)
• bump napi from 3.14.0 to 3.14.1 in /plugins/codex-security/native (#1617)
• bump the third-party group across 2 directories with 2 updates (#1615)
• bump napi-derive from 3.6.10 to 3.6.11 in /plugins/codex-security/native (#1618)
• define compact artifact contracts in Zod (#1575)
• bump taiki-e/install-action from 2.87.24 to 2.87.26 (#1616)
• reuse runtime message and result handling (#1583)
• resolve workflows through readable plugin paths (#1592)
• share command argument encoding (#1577)
• simplify plugin tests and validation example (#1621)
• correct GitLab patch publication (#817)
• stop --format yaml from cutting off error messages (#1613)
• stop Deep Scan from starting extra reviews during result checks (#1630)
• Python cache files break plugin integrity checks (#1625)
• complete Deep scans with missing optional writeups (#1624)
• fix image pull failures and Windows diagnostic test (#1641)
• stop Deep Scan workers when usage is exhausted (#1638)
• show why configuration files fail to load (#1634)
• prevent generated finding IDs from breaking later draft updates (#1636)
• generate patches without managing a CLI process (#1635)
• simplify scan outcomes (#1633)
• bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1647)
• bump actions/setup-node from 7.0.0 to 7.1.0 (#1651)
• bump actions/download-artifact from 8.0.1 to 8.0.2 (#1650)
• update Docker-in-Docker and Node devcontainer features (#1530)
• bump the third-party group across 2 directories with 2 updates (#1652)

Upgrade notes

Review migration steps for these breaking changes:

• move findings and dashboard helpers to Node (#1408)
• remove the local findings serve command (#1340)
• remove legacy message and plugin compatibility (#1548)
• move severity persistence to Node (#1543)
• preserve original knowledge context when resuming (#1556)
• simplify scan outcomes (#1633)

@codex review the current head b512157.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit 756ad1cb0311694c25694f65f350d18c12b57164.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• update vulnerable dependencies after cooldown (#1318)
• add Codex Security GitHub Action (#1015)
• clarify READMEs and separate SDK reference guides (#1307)
• preserve bounded source and finding details (#1275)
• share common tool annotations (#1258)
• preserve trailing whitespace in Git paths (#1135)
• reject a destination that aliases the source database (#1138)
• surface run warnings in campaign summaries (fix(multiscan): surface run warnings in campaign summaries #1172) (9c3df08)
• align sealed scan reader compatibility (#1175)
• run consistent checks for Markdown changes (#1257)
• align triage graders with supported behavior (#1245)
• recover incomplete staging and preserve bundles (#1255)
• preserve canonical parent IDs for scan reruns (#1244)
• keep workbench-derived fields out of worker draft guidance (#1177)
• reject SQL injection without an execution sink (#1053)
• update Codex CLI and SDK to 0.162.0-alpha.16 (#1321)
• migrate Atlassian app and simplify finding workflows (#1039)
• restore formatting and concurrent plugin repairs (#1328)
• preserve carriage-return inventory filenames (#1327)
• update tsx and yaml tooling (#1322)
• update Action Node.js type definitions (#1323)
• update Action TypeScript compiler (#1324)
• port patch-risk validation to TypeScript (#838)
• port deep-review input to TypeScript (refactor(plugin): port deep-review input to TypeScript #839) (ae4fff7)
• migrate rank shard helpers to TypeScript (refactor(plugin): migrate rank shard helpers to TypeScript #841) (c19ca96)
• migrate rank pool helpers to TypeScript (refactor(plugin): migrate rank pool helpers to TypeScript #842) (fecbe05)
• migrate repository scope binding to TypeScript (refactor(plugin): migrate repository scope binding to TypeScript #843) (a7b3618)
• bump napi from 3.12.2 to 3.13.0 in /plugins/codex-security/native (#1320)
• add Cyber pricing and hide unavailable costs (#1336)
• update Action CLI runtime (#1325)
• bump sharp from 0.35.4 to 0.35.5 in /evals/triage-finding (#1337)
• include JSP and ASP.NET templates in scan inventories (#1345)
• close C# raw strings on the matching quote count (#1346)
• simplify usage bookkeeping (#1349)
• simplify command contexts and transactions (#1353)
• derive inputs and consolidate test configuration (#1348)
• simplify publication evidence bookkeeping (#1387)
• reuse datetime validation for saved scan timestamps (#1351)
• share setup for Git diff scan targets (#1411)
• simplify saved scan settings and test setup (#1405)
• simplify Windows credential permission parsing (#1392)
• share CLI cancellation signal handling (#1371)
• simplify saved-coverage and tool-registration helpers (#1363)
• simplify fitting source previews to byte limits (#1350)
• infer helper types instead of duplicating declarations (#1358)
• preserve questions and choice descriptions in input requests (#1050)
• preserve sealed CSV artifacts during export (#1047)
• report worker sessions without model progress markers (#962)
• simplify scan usage and cost accounting (#1377)
• share finding-group logic across scan comparisons (#1364)
• share repeated workflow steps with YAML aliases (#1361)
• simplify inventory checks and build fixtures (#1389)
• simplify command preparation and transactions (#1390)
• share published version history and remove duplicate checks (#1381)
• preserve per-scan runtime and worker settings (#1281)
• unify structured scan failure responses (#1080)
• support custom scan names (#1180)
• simplify artifact schemas and saved-finding handling (#1356)
• share finding formatting and finalization helpers (#1355)
• simplify scan event callback dispatch (#1354)
• reuse validated inputs and simplify preview sizing (#1369)
• share note generation and test setup (#1373)
• update Codex CLI and SDK to 0.162.0-alpha.18 (#1420)
• simplify internal Deep Scan state and finding caches (#1352)
• simplify evidence grouping and parsing (#1368)
• reuse repeated workflow steps (#1385)
• simplify CLI completion and display state (#1384)
• reuse client construction and scan data (#1374)
• simplify report formatting and scan completion (#1366)
• remove duplicate benchmark checks and line collection (#1359)
• inherit null overrides and preserve literal paths (#1290)
• resolve path aliases consistently across scan workflows (#1267)
• include text files in scans regardless of extension (#1347)
• replace language parsers with source previews (#1391)
• include build and test files in scan inputs (#1414)
• load saved feedback and align scan completion instructions (#1264)
• share workbench migration SQL (#1333)
• initialize workbench databases with Node SQLite (#1335)
• move findings and dashboard helpers to Node (#1408)
• avoid saving interrupted pnpm caches (#1419)
• preserve Deep Scan worker context limits (#1417)
• show file scope until scan review progress begins (#464)
• preserve per-scan endpoints in Deep Scan workers (#1326)
• hide expected answers and test the checkout's skill (#1054)
• preserve saved results when scans stop or restart (#1269)
• keep usable bundles after failures and preserve release labels (#1263)
• preserve distinct fixes from merged findings (#905)
• read source excerpts from the scanned target (#1063)
• exclude inherited parent events from saved worker logs (#1060)
• report worker capacity from merged Codex settings (#1055)
• simplify action cleanup and stabilize provider isolation tests (#1421)
• preserve logout across credential imports (#759)
• preserve severity assessments for each scan (#1058)
• show active reviews and result consolidation during Deep Scan (#1253)
• keep bulk-scan knowledge and settings stable on resume (#1059)
• reject plaintext remote login URLs (fix(auth): reject plaintext remote login URLs #1331) (4c1dcbb)
• keep unusable DOCX numeric references as literal text (#123)
• finish cancellation when preflight ignores termination (#1049)
• install MCP dependencies before plugin build (#1285)
• preserve closed stdin when launching helpers (#1329)
• retain recovery guidance on canceled uploads (#680)
• retry container releases without replacing a newer latest tag (#1046)
• read compressed Codex session logs (#1428)
• deduplicate saved scans with local SQLite (#1338)
• preserve manual line breaks (#186)
• preserve saved diff snapshot provenance (#1286)
• cancel inherited pipes after the login process exits (#1068)
• bump napi-derive from 3.6.9 to 3.6.10 in /plugins/codex-security/native (#1437)
• update Docker-in-Docker and Node devcontainer features (#1436)
• bump napi-build from 2.5.0 to 2.6.0 in /plugins/codex-security/native (#1438)
• bump the codex group across 3 directories with 2 updates (#1439)
• bump the third-party group across 2 directories with 3 updates (#1514)
• restore devcontainer pins during cooldown (#1515)
• support optional Cyber access program selection (#1516)
• identify local plugin and knowledge-base failures (#463)
• resume scans when old worker prompts are missing (#900)
• protect saved history when archiving scan output (#1271)
• preserve scan history and publication outcomes (#1270)
• match user context before reusing discovery (#1048)
• report incomplete results as errors and deduplicate log warnings (#977)
• preserve request attribution across CLI, SDK, and Deep Scan (#1424)
• manage the findings service lifecycle (#700)
• reject control characters in remote targets during finalization (#1523)
• validate canonical code-evidence and deferred paths (#1522)
• reject special filesystem path targets before scanning (#1524)
• honor cancellation during PDF knowledge-base extraction (#1529)
• ignore status markers inside Markdown fences (#1525)
• explain pull request labels in agent instructions (#1521)
• filter model schema composition while parsing (#1461)
• compare Deep Scan progress fields directly (#1458)
• load scan contract documents in one sequence (#1481)
• reuse native equality for contract lists (#1457)
• simplify artifact export metadata transport (#1462)
• simplify scan result construction (#1445)
• reuse artifact JSON schema definitions (#1443)
• reject standalone collections inside the target (#1430)
• preserve structured findings API errors (#1081)
• reuse object validation primitives (#1452)
• share MCP response and annotation construction (#1444)
• use Codex 0.162.0 stable (#1533)
• update incur and KaTeX (#1534)
• reuse SDK validation and protocol test helpers (#1498)
• bump napi from 3.13.0 to 3.14.0 in /plugins/codex-security/native (#1532)
• wrap text by terminal display width (#1513)
• group deduplication pairs by existing roots (#1468)
• simplify export and progress delegation (#1478)
• bump ruff from 0.16.9 to 0.16.10 in /plugins/codex-security (#1531)
• share workbench migration repair instructions (#1496)
• use Bun native sharding (#1479)
• reuse scan contract readers and projection helpers (#1480)
• derive value options from command schemas (#1477)
• add cs alias and clarify onboarding (#1415)
• enforce devcontainer cooldown before merge (#1517)
• preserve argument text and typed state failures (#1500)
• share tool registration and annotations (#1485)
• consolidate workbench command handling (#1494)
• reuse workbench finding projection metadata (#1442)
• use native promise and array primitives (#1488)
• simplify validated artifact reconciliation (#1454)
• remove unused artifact declarations (#1483)
• share workflow GitHub API calls (#1466)
• simplify session cost tracking (#1456)
• simplify publication reconciliation (#1455)
• share final scan schema definitions (#1493)
• share Deep Scan retry archiving (#1465)
• reuse repeated workflow configuration (#1464)
• remove redundant dashboard copies (#1451)
• consolidate Deep Scan preflight compatibility coverage (#1482)
• use workbench for parent draft publication (#1487)
• simplify workbench history and usage readers (#1495)
• consolidate GitHub release publication (#1474)
• simplify scan configuration processing (#1459)
• preserve worker settings and executable selection (#1501)
• normalize candidates against selected sources (#1502)
• preserve coordinator ownership and source novelty (fix(deep-scan): preserve coordinator ownership and source novelty #1503) (8ea9763)
• retain underlying artifact and process failures (#1504)
• preserve finding queries and timestamp order (fix(workbench): preserve finding queries and timestamp order #1505) (c0c7f12)
• preserve archived workflows and saved scan replay (fix(scans): preserve archived workflows and saved scan replay #1506) (45b3efb)
• pass payloads in memory and preserve failures (#1507)
• preserve cancellation and child diagnostics (fix(processes): preserve cancellation and child diagnostics #1508) (6f64587)
• preserve filename bytes and Unicode owner evidence (fix(inventory): preserve filename bytes and Unicode owner evidence #1509) (ec4b5b5)
• validate artifact requests at tool boundaries (#1489)
• align Action publication with CLI releases (#1418)
• keep expected answers hidden and preserve each case’s settings (#1261)
• remove the local findings serve command (#1340)
• update Node types and string-width (#1545)
• preserve import and export representations (#1510)
• frame terminal input and skip unused activity (#1511)
• parse complete triage JSON before fenced content (#1512)
• remove legacy message and plugin compatibility (#1548)
• share candidate ledger updates (#1490)
• share Codex response handling across scan modes (#917)
• preserve scoped Git inventories and directory snapshots (#1280)
• keep scan identity visible in results and failures (#1554)
• explain connected repository review workflows (#1553)
• move severity persistence to Node (#1543)
• run API-key and Bedrock Deep Scans directly (#1555)
• preserve original knowledge context when resuming (#1556)
• update Codex CLI and SDK to 0.162.1 (#1563)
• update native libc to 0.2.190 (#1564)
• update MCP SDK to 1.32.0 (#1565)
• bump taiki-e/install-action from 2.87.22 to 2.87.23 (#1562)
• improve policy onboarding for global installs (#1416)
• restore GPT-6 Sol cost estimates and budgets (#1585)
• bump taiki-e/install-action from 2.87.23 to 2.87.24 (#1597)
• update PDF.js to 6.4.299 (#1598)
• update Ink to 8.0.0 (#1599)
• clarify persistent state and credential paths (#1586)
• enforce Deep Scan scope across execution adapters (#1557)
• clarify API-key model and access-program selection (#1037)
• retain requested repository paths in output (#1045)
• keep dashboards responsive and show observed usage (#1276)
• share scan result validation across scan modes (#920)
• preserve process paths and environment values (#1429)
• mark source review complete before custom validation (#1252)
• preserve Git checkout formats and raw POSIX inventory paths (#1288)
• inspect unpacked files for internal references (#618)
• retain fragmented input and final scan activity (#1284)
• prevent replaced coordinators from overwriting scan results (#916)
• remove repeated Python message projections (#1576)
• serialize registrations with archival (#1587)
• preserve pager state in reducer retry guidance (#1589)
• exclude forbidden fields from artifact tool schemas (#1588)
• clarify tool selection and worker follow-ups (#1591)
• derive result interfaces from schemas (#1579)
• include native compaction usage (#1590)
• share persisted finding normalization (#1574)
• preserve Windows process launch behavior (#1601)
• preserve selected scope through recovery (#1602)
• finish saving cancellation before returning to callers (#1260)
• bump napi from 3.14.0 to 3.14.1 in /plugins/codex-security/native (#1617)
• bump the third-party group across 2 directories with 2 updates (#1615)
• bump napi-derive from 3.6.10 to 3.6.11 in /plugins/codex-security/native (#1618)
• define compact artifact contracts in Zod (#1575)
• bump taiki-e/install-action from 2.87.24 to 2.87.26 (#1616)
• reuse runtime message and result handling (#1583)
• resolve workflows through readable plugin paths (#1592)
• share command argument encoding (#1577)
• simplify plugin tests and validation example (#1621)
• correct GitLab patch publication (#817)
• stop --format yaml from cutting off error messages (#1613)
• stop Deep Scan from starting extra reviews during result checks (#1630)
• Python cache files break plugin integrity checks (#1625)
• complete Deep scans with missing optional writeups (#1624)
• fix image pull failures and Windows diagnostic test (#1641)
• stop Deep Scan workers when usage is exhausted (#1638)
• show why configuration files fail to load (#1634)
• prevent generated finding IDs from breaking later draft updates (#1636)
• generate patches without managing a CLI process (#1635)
• simplify scan outcomes (#1633)
• bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1647)
• bump actions/setup-node from 7.0.0 to 7.1.0 (#1651)
• bump actions/download-artifact from 8.0.1 to 8.0.2 (#1650)
• update Docker-in-Docker and Node devcontainer features (#1530)
• bump the third-party group across 2 directories with 2 updates (#1652)
• open read-only SQLite databases from Windows UNC paths (#1648)
• prioritize CODEOWNERS in owner suggestions (#1519)
• rename display surfaces to Codex Security Local (#1644)
• update napi and napi-derive native dependencies (#1646)

Upgrade notes

Review migration steps for these breaking changes:

• move findings and dashboard helpers to Node (#1408)
• remove the local findings serve command (#1340)
• remove legacy message and plugin compatibility (#1548)
• move severity persistence to Node (#1543)
• preserve original knowledge context when resuming (#1556)
• simplify scan outcomes (#1633)
• prioritize CODEOWNERS in owner suggestions (#1519)

@codex review the current head d8b1356.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.