Codex Changelog

Improved dangerous-command detection now recognizes more forced rm forms and provides clearer rejection reasons when commands are denied.

Chores

• No user-facing changes in this patch release.

Changelog

Full Changelog: rust-v0.144.3...rust-v0.144.4

Chores

• Published a version-only release with no merged pull request changes since rust-v0.144.2.

Changelog

Full Changelog: rust-v0.144.2...rust-v0.144.3

Codex tasks now support inline visualizations. Improved task creation from conversations with reliable links, and fixed autocomplete backgrounds becoming unresponsive during swipe gestures.

Restored the previous Guardian auto-review policy, request format, and tool behavior after rolling back a prompting regression.

Added a writes app-approval mode that allows declared read-only actions while prompting for writes, and MCP tools can now request authentication interactively without an experimental opt-in. Fixed Code Mode crashes in Intel macOS release binaries, Windows sandbox file deletion and runtime access, terminal control sequence corruption, and expired authentication refresh for hosted app sessions.

Codex is now part of the ChatGPT desktop app on macOS and Windows, with existing users able to update while keeping their projects, settings, and workflows. New capabilities include inline Markdown and code editing with revision requests, GitHub pull request review in the sidebar with feedback alongside diffs, and cross-repository project support. Computer Use is faster with GPT-5.6, task activity tracking improved, plugin management simplified, and mobile connection reliability and SSH video rendering fixed.

Fixed standalone installs failing when GitHub returns compact or reordered release metadata, ensured macOS package installs expose the code-mode host alongside the codex executable, and kept code mode working when the companion host binary is unavailable by falling back to the embedded runtime.

Remote plugins are now enabled by default with richer catalog rows, npm marketplace sources, and visible remote/local version indicators. Codex can now route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. Also added Amazon Bedrock GPT-5.6 models with reasoning effort support, manual pairing codes via codex remote-control pair, MCP tool search by default, and app-server environment inspection and thread forking capabilities. Several bug fixes include Windows ConPTY input handling, stale TUI prompts, exec server offline recovery, and remote-control token refresh storms.

ChatGPT for iOS now supports creating, searching, opening, forking, and managing Codex tasks directly from conversations, with filters for staged, unstaged, and branch changes. Added support for SSH hosts using private keys or no credentials, inline photo and camera pickers, and previews for image and file attachments before sending. Also improved task loading, autocomplete, settings persistence, and fixed thread-list loading and prompt mode deadlocks.

Prevented full Responses WebSocket request payloads from being written to trace logs, fixing a potential information exposure in logged data.

Chores

• No user-facing changes were identified for this release.

Changelog

Full Changelog: rust-v0.142.3...rust-v0.142.4

Chores

• Maintenance-only patch release with no user-facing changes since 0.142.2.

Changelog

Full Changelog: rust-v0.142.2...rust-v0.142.3

Added opt-in Windows system proxy support for authentication, including PAC, WPAD, static proxies, and bypass rules.

MCP tools now use tool search by default for improved discovery. macOS authentication can respect system proxy, PAC, and WPAD settings. Fixes include actionable Amazon Bedrock credential recovery, remote stdio MCP path support, and PowerShell AST safety checks.

Codex Remote is now generally available, allowing Codex to be used from the ChatGPT mobile app on a connected Mac or Windows host. Remote Control uses authenticated one-to-one QR pairing; connections older than June 8, 2026 need to re-pair. A new DigitalOcean plugin lets Codex provision a Droplet and connect it as a remote workspace.

Configurable rollout token budgets now track usage across agent threads and abort turns when exhausted. An indexed web-search mode restricts direct page access to server-approved URLs. Fixed Linux TUI rendering after Ctrl+Z suspension and exec-server process survival through transient disconnects. Parent agents now receive terminal subagent errors instead of empty successful completions.

Added per-host personality settings with Friendly and Pragmatic options, goal editing directly in the composer, and links from forked conversations back to the original thread. Improved side chat visibility, composer autocomplete, and workspace file search.

Remote executors now use authenticated, end-to-end encrypted Noise relay channels, and bundled SQLite is pinned to a version containing the WAL-reset corruption fix. Plus cross-platform remote execution, per-thread executor plugin MCP servers, and auto-resolving TUI prompts.

Record & Replay lets macOS users turn a demonstrated workflow into a reusable skill, initially available outside the EEA, UK, and Switzerland with Computer Use enabled. Bulk actions for automation run history, deep links for SSH connections, and improved Browser Use session persistence are also included.