Skip to content

release: bump Codex Security to 0.1.10 - #343

Merged
kmbroai merged 7 commits into
mainfrom
mdangelo/codex/release-codex-security-v0.1.10-20260810
Aug 11, 2026
Merged

release: bump Codex Security to 0.1.10#343
kmbroai merged 7 commits into
mainfrom
mdangelo/codex/release-codex-security-v0.1.10-20260810

Conversation

@mldangelo-oai

@mldangelo-oai mldangelo-oai commented Aug 11, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Bump @openai/codex-security from 0.1.9 to 0.1.10.
  • Bump the bundled plugin manifest and matching SDK constant from 0.1.16 to 0.1.17 so existing installations refresh cached plugins.
  • Keep the release scoped to those three version changes; bundled worker binaries, tests, lockfiles, and release workflows are unchanged from main.

Verification

  • Full SDK suite: 997 passed, 11 skipped, 0 failed across 1,008 tests.
  • Focused release and cached-plugin upgrade tests: 9 passed.
  • TypeScript, formatting, and package build checks passed.
  • Packed and installed @openai/codex-security@0.1.10; verified the public import, CLI, all 107 bundled plugin files, and a nested worker.

Release sequencing

Bundled plugin fixes must land on main before this version-bump PR to ship in 0.1.10. Plugin changes merged afterward require a subsequent release that increments both bundled plugin version declarations beyond 0.1.17.

Publication

After merge, successful node-ci on the merged main commit triggers node-release-cut and the protected node-release workflow. Publishing still requires the normal protected npm deployment approval.

@github-actions github-actions Bot added the skip-release-notes Omit internal changes from generated release notes label Aug 11, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 06a2d88edd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread sdk/typescript/package.json
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 06a2d88edd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 06a2d88edd

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

…ep-worker-shutdown-20260810

# Conflicts:
#	sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-000
#	sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-001
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review the exact current head 3c227d4. Verify release 0.1.10 includes both reducer recovery and PR #341 completed-worker lifecycle isolation while preserving protected publication approvals.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: 3c227d496f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 3c227d496f

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@zcrab-oai zcrab-oai left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Validated review findings are attached inline after three independent reviews and a separate source-level verification.

Comment thread sdk/typescript/package.json
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review the exact current head 689b1fd. Check that upgrading to 0.1.10 refreshes the installed plugin while preserving protected release approval.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: 689b1fd6f1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 689b1fd6f1

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review the exact current head fc3dc36. Verify the release diff contains only the npm version and synchronized plugin-cache version changes; no unmerged worker code or unrelated tests are included.

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: fc3dc36ec8

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: fc3dc36ec8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai

mldangelo-oai commented Aug 11, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review the exact current head fc3dc36. Verify this release PR remains limited to its three required version bumps, keeps the SDK and bundled plugin versions aligned, and contains no unrelated dependency or behavior changes.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: fc3dc36ec8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: fc3dc36ec8

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@kmbroai
kmbroai merged commit bf0184d into main Aug 11, 2026
21 checks passed
@kmbroai
kmbroai deleted the mdangelo/codex/release-codex-security-v0.1.10-20260810 branch August 11, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-release-notes Omit internal changes from generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants