## New Features

- Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (openai#12220)
- App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (openai#15525)
- `codex exec` now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (openai#15917)
- Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (openai#16286, openai#16287, openai#16288)

## Bug Fixes
- Project-local `.codex` files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (openai#15067)
- Linux sandbox launches are more reliable because Codex once again finds a trusted system `bwrap` on normal multi-entry `PATH`s. (openai#15791, openai#15973)
- The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, `/copy` and `/resume <name>` work again, `/agent` no longer shows stale threads, and the skills picker scrolls past the first page. (openai#16013, openai#16021, openai#16050, openai#16014, openai#16109, openai#16110)
- MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (openai#16080, openai#16041)
- On Windows, `apply_patch` is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (openai#16030)

## Changelog

Full Changelog: openai/codex@rust-v0.117.0...rust-v0.118.0

- openai#15891 [plugins] Polish tool suggest prompts. @mzeng-openai
- openai#15791 fix: resolve bwrap from trusted PATH entry @viyatb-oai
- openai#15900 skills: remove unused skill permission metadata @bolinfest
- openai#15811 app-server: Split transport module @euroelessar
- openai#15067 Protect first-time project .codex creation across Linux and macOS sandboxes @rreichel3-oai
- openai#15903 [codex] import token_data from codex-login directly @bolinfest
- openai#15897 sandboxing: use OsString for SandboxCommand.program @bolinfest
- openai#15910 docs: update AGENTS.md to discourage adding code to codex-core @bolinfest
- openai#15898 chore: move bwrap config helpers into dedicated module @viyatb-oai
- openai#15906 chore: remove skill metadata from command approval payloads @bolinfest
- openai#15909 fix(network-proxy): fail closed on network-proxy DNS lookup errors @viyatb-oai
- openai#14495 Preserve bazel repository cache in github actions @siggisim
- openai#15522 bazel: re-organize bazelrc @sluongng
- openai#15923 codex-tools: extract shared tool schema parsing @bolinfest
- openai#15918 permissions: remove macOS seatbelt extension profiles @bolinfest
- openai#12220 feat(windows-sandbox): add network proxy support @viyatb-oai
- openai#15931 fix: make MACOS_DEFAULT_PREFERENCES_POLICY part of MACOS_SEATBELT_BASE_POLICY @bolinfest
- openai#15933 fix: use matrix.target instead of matrix.os for actions/cache build action @bolinfest
- openai#15928 codex-tools: extract MCP schema adapters @bolinfest
- openai#15948 fix: increase timeout for rust-ci to 45 minutes for now @bolinfest
- openai#15921 [app-server-protocol] introduce generic ClientResponse for app-server-protocol @rhan-oai
- openai#15120 chore: refactor network permissions to use explicit domain and unix socket rule maps @celia-oai
- openai#15525 Add ChatGPT device-code login to app server @daniel-oai
- openai#15876 chore: drop useless stuff @jif-oai
- openai#15954 chore: move pty and windows sandbox to Rust 2024 @bolinfest
- openai#15986 feat: spawn v2 make task name as mandatory @jif-oai
- openai#16000 Use codex-utils-template for login error page @jif-oai
- openai#16001 Use codex-utils-template for review prompts @jif-oai
- openai#15998 Use codex-utils-template for sandbox mode prompts @jif-oai
- openai#15995 Use codex-utils-template for collaboration mode presets @jif-oai
- openai#15996 Use codex-utils-template for search tool descriptions @jif-oai
- openai#15999 Use codex-utils-template for review exit XML @jif-oai
- openai#15985 feat: spawn v2 as inter agent communication @jif-oai
- openai#15973 fix(sandbox): fix bwrap lookup for multi-entry PATH @viyatb-oai
- openai#15944 codex-tools: extract dynamic tool adapters @bolinfest
- openai#15955 ci: add Bazel clippy workflow for codex-rs @bolinfest
- openai#15953 codex-tools: introduce named tool definitions @bolinfest
- openai#16027 fix: fix Windows CI regression introduced in openai#15999 @bolinfest
- openai#16036 fix: disable plugins in SDK integration tests @bolinfest
- openai#15946 Normalize /mcp tool grouping for hyphenated server names @pakrym-oai
- openai#16035 plugins: Clean up stale curated plugin sync temp dirs and add sync metrics @xl-openai
- openai#15934 Add usage-based business plan types @bwanner-oai
- openai#16031 codex-tools: extract responses API tool models @bolinfest
- openai#16013 Fix tui_app_server hook notification rendering and replay @etraut-openai
- openai#16021 Fix /copy regression in tui_app_server turn completion @etraut-openai
- openai#16044 [mcp] Bypass read-only tool checks. @mzeng-openai
- openai#16030 don't include redundant write roots in apply_patch @iceweasel-oai
- openai#15922 Remove the legacy TUI split @etraut-openai
- openai#15828 [codex] Pin GitHub Actions workflow references @hintz-openai
- openai#16046 ci: run SDK tests with a Bazel-built codex @bolinfest
- openai#16050 Fix tui_app_server resume-by-name lookup regression @etraut-openai
- openai#16014 Fix tui_app_server agent picker closed-state regression @etraut-openai
- openai#16054 chore: clean up argument-comment lint and roll out all-target CI on macOS @bolinfest
- openai#15917 Support Codex CLI stdin piping for `codex exec` @jliccini
- openai#16057 shell-command: reuse a PowerShell parser process on Windows @bolinfest
- openai#16063 refactor: rewrite argument-comment lint wrappers in Python @bolinfest
- openai#15952 bazel: enable the full Windows gnullvm CI path @bolinfest
- openai#16067 ci: run Bazel clippy on Windows gnullvm @bolinfest
- openai#16071 fix: clean up remaining Windows argument-comment-lint violations @bolinfest
- openai#16072 ci: split fast PR Rust CI from full post-merge Cargo CI @bolinfest
- openai#16074 bazel: add Windows gnullvm stack flags to unit test binaries @bolinfest
- openai#16026 fix(tui): refresh footer on collaboration mode changes @fcoury
- openai#16112 Update PR babysitter skill for review replies and resolution @etraut-openai
- openai#16104 Rename tui_app_server to tui @etraut-openai
- openai#16118 fix: fix comment linter lint violations in Linux-only code @bolinfest
- openai#16106 build: migrate argument-comment-lint to a native Bazel aspect @bolinfest
- openai#16115 Remove remaining custom prompt support @etraut-openai
- openai#16116 Remove the codex-tui app-server originator workaround @etraut-openai
- openai#16047 codex-tools: extract tool spec models @bolinfest
- openai#16128 bazel: refresh the expired macOS SDK pin @bolinfest
- openai#16129 codex-tools: extract configured tool specs @bolinfest
- openai#16130 ci: keep rust-ci-full Windows argument-comment-lint on packaged wrapper @bolinfest
- openai#16126 core: fix stale curated plugin cache refresh races @bolinfest
- openai#16132 codex-tools: extract code mode tool spec adapters @bolinfest
- openai#16136 ci: use BuildBuddy for rust-ci-full non-Windows argument-comment-lint @bolinfest
- openai#16137 exec: make review-policy tests hermetic @bolinfest
- openai#16109 Fix skills picker scrolling in tui app server @etraut-openai
- openai#16138 codex-tools: extract local host tool specs @bolinfest
- openai#16114 Remove TUI voice transcription feature @etraut-openai
- openai#16080 [mcp] Increase MCP startup timeout. @mzeng-openai
- openai#16141 codex-tools: extract collaboration tool specs @bolinfest
- openai#16041 Fix app-server TUI MCP startup warnings regression @etraut-openai
- openai#16110 Fix tui_app_server ghost subagent entries in /agent @etraut-openai
- openai#16154 codex-tools: extract utility tool specs @bolinfest
- openai#16204 [codex] Normalize Windows path in MCP startup snapshot test @etraut-openai
- openai#16010 feat: add mailbox concept for wait @jif-oai
- openai#16237 fix: ma1 @jif-oai
- openai#16193 codex-tools: extract discovery tool specs @bolinfest
- openai#16254 codex-tools: extract discoverable tool models @bolinfest
- openai#16253 fix: close Bazel argument-comment-lint CI gaps @bolinfest
- openai#16225 [codex-analytics] refactor analytics to use reducer architecture @rhan-oai
- openai#16279 Update code mode exec() instructions @andmis
- openai#16120 ci: run Windows argument-comment-lint via native Bazel @bolinfest
- openai#16286 auth: generalize external auth tokens for bearer-only sources @bolinfest
- openai#16287 auth: let AuthManager own external bearer auth @bolinfest
- openai#16288 core: support dynamic auth tokens for model providers @bolinfest

Author: bolinfest

codex-rs/Cargo.toml

@@ -85,7 +85,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.0.0"
+version = "0.118.0"
 # Track the edition for all workspace crates in one place. Individual
 # crates can still override this value, but keeping it here means new
 # crates created with `cargo new -w ...` automatically inherit the 2024