openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-10-28 18:58:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
438cfc55c8411e682db77444af509833c2045eb5
codex/codex-rs
T
History
Charlie Marsh 438cfc55c8 Record reviewed exceptions for zstd security advisories (#57255) 
## What changed

Add four advisory exceptions to `codex-rs/.cargo/audit.toml` and `codex-rs/deny.toml`, documenting the usage constraints and removal criteria:

- `RUSTSEC-2026-0391`: borrowed contexts are not reused across streams; remove after upgrading to `zstd >=0.14.3` on all paths.
- `RUSTSEC-2026-0398`: the affected seekable feature is disabled; remove after upgrading to `zstd-safe >=8.2.0` on all paths.
- `RUSTSEC-2026-0403`: callers use read decoders or initialized output buffers and discard output on error; remove after upgrading to `zstd-safe >=8.2.0` on all paths.
- `RUSTSEC-2026-0410`: the allocator bug affects `wasm32`, while Codex ships native binaries; remove when the lockfile uses `zstd-sys >=2.1.2`.

GitOrigin-RevId: 556e53be961b01191590e2ca4e9f08dd9f017eac
2026-10-26 21:07:09 +00:00
..
.cargo
Record reviewed exceptions for zstd security advisories (#57255)
2026-10-26 21:07:09 +00:00
.config
Isolate daemon package tests to reduce disk contention (#53897)
2026-10-14 07:13:22 +00:00
agent-graph-store
…
agent-identity
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
agent-message-board-client
Add channel upserts to message boards (#56494)
2026-10-23 14:59:40 +00:00
agent-roles
…
analytics
Report turn critical-path timing in analytics (#57209)
2026-10-26 19:35:31 +00:00
ansi-escape
…
app-server
Show native dollar thread usage for ENT26 plans (#57251)
2026-10-26 20:54:35 +00:00
app-server-client
Log app-server WebSocket compression statistics (#57220)
2026-10-26 20:02:45 +00:00
app-server-daemon
Allow slow daemon startup while detecting early process exits (#57253)
2026-10-26 21:05:47 +00:00
app-server-protocol
Show native dollar thread usage for ENT26 plans (#57251)
2026-10-26 20:54:35 +00:00
app-server-protocol-noop-macros
…
app-server-test-client
Expose lifecycle timestamps on app-server thread items (#57172)
2026-10-26 18:13:00 +00:00
app-server-transport
Log app-server WebSocket compression statistics (#57220)
2026-10-26 20:02:45 +00:00
apply-patch
Remove selected protocol, apply-patch, MCP, and TUI tests (#53358)
2026-10-12 11:24:22 +00:00
arg0
Stop dotenv loading on persistent I/O errors (#57233)
2026-10-26 20:26:32 +00:00
async-utils
…
attachment-store
Store generated image items as attachment references (#54398)
2026-10-15 19:51:22 +00:00
aws-auth
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
backend-client
Integrate runtime authentication into model requests (#57171)
2026-10-26 18:06:07 +00:00
build-info
…
bwrap
…
chatgpt
Propagate authentication header failures before sending requests (#55607)
2026-10-20 15:43:19 +00:00
cli
Make the MCP HTTP probe timeout test deterministic (#57239)
2026-10-26 20:37:30 +00:00
cloud-client
Integrate runtime authentication into model requests (#57171)
2026-10-26 18:06:07 +00:00
cloud-config
Integrate config-server policies with startup and authentication (#57175)
2026-10-26 18:14:57 +00:00
cloud-tasks
Propagate authentication header failures before sending requests (#55607)
2026-10-20 15:43:19 +00:00
cloud-tasks-client
…
cloud-tasks-mock-client
…
code-mode
Enable zstd compression for code-mode gRPC responses (#57212)
2026-10-26 19:37:58 +00:00
code-mode-host
Enable zstd compression for code-mode gRPC responses (#57212)
2026-10-26 19:37:58 +00:00
code-mode-protocol
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
code-mode-runtime
Simplify code-mode cell completion delivery (#57229)
2026-10-26 20:18:45 +00:00
codex-api
Consolidate async header authentication in apply_auth_headers (#57179)
2026-10-26 18:22:11 +00:00
codex-backend-openapi-models
Add support for Academic Researchers plans (#55387)
2026-10-19 21:43:19 +00:00
codex-client
…
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Share eligible local stdio MCP connections across chats (#57211)
2026-10-26 19:37:32 +00:00
collaboration-mode-templates
…
config
Reduce the default thread unload delay to one minute (#57242)
2026-10-26 20:44:30 +00:00
config-schema
…
connectors
Preserve MCP tool-list metadata in server status (#54686)
2026-10-16 19:26:46 +00:00
context-fragments
Support typed content in contextual prompt fragments (#54776)
2026-10-17 04:02:21 +00:00
core
Allow disabling plugin discovery prefetch at app-server startup (#57249)
2026-10-26 20:54:08 +00:00
core-api
Allow callers to control prompt cache keys independently of session IDs (#55587)
2026-10-20 14:14:59 +00:00
core-plugin-common
Reconcile V2 executor plugins with cloud catalogs (#55301)
2026-10-19 15:15:17 +00:00
core-plugins
Allow disabling plugin discovery prefetch at app-server startup (#57249)
2026-10-26 20:54:08 +00:00
diagnostics
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
direct-tool-timing
Capture direct-tool critical paths behind a feature flag (#57201)
2026-10-26 19:19:10 +00:00
docs
Normalize formatting in docs, web assets, and sample scripts (#52256)
2026-10-08 20:11:43 +00:00
exec
Integrate config-server policies with startup and authentication (#57175)
2026-10-26 18:14:57 +00:00
exec-server
Prevent credential collisions in registry auth test fixtures (#57234)
2026-10-26 20:26:59 +00:00
exec-server-protocol
Add managed network review domains before allow rules (#56154)
2026-10-22 11:52:34 +00:00
execpolicy
…
ext
Stabilize the rejected queue message test (#57245)
2026-10-26 20:46:46 +00:00
external-agent-migration
Expose lifecycle timestamps on app-server thread items (#57172)
2026-10-26 18:13:00 +00:00
features
Allow disabling plugin discovery prefetch at app-server startup (#57249)
2026-10-26 20:54:08 +00:00
feedback
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
file-search
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
file-system
Route SQLite logs to an explicitly configured log_dir (#55978)
2026-10-21 19:53:00 +00:00
file-watcher
Wire V2 capability discovery through exec-server RPC (#53723)
2026-10-13 17:22:34 +00:00
git-utils
Bound memory baseline files and recover incomplete snapshots (#57240)
2026-10-26 20:40:53 +00:00
guardian-context
Honor configured message limits for encrypted guardian transcripts (#57241)
2026-10-26 20:41:16 +00:00
history
Box session metadata and compaction payloads in RolloutItem (#55733)
2026-10-21 02:41:05 +00:00
hooks
Preserve command cwd in permission and post-tool hooks (#57203)
2026-10-26 19:21:08 +00:00
http-client
Integrate runtime authentication into model requests (#57171)
2026-10-26 18:06:07 +00:00
install-context
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
keyring-store
…
linux-sandbox
Fail closed on unreadable glob search root metadata errors (#57186)
2026-10-26 18:31:21 +00:00
lmstudio
…
login
Make login token-refresh tests wait for auth publication (#57248)
2026-10-26 20:53:10 +00:00
memories
Bound memory baseline files and recover incomplete snapshots (#57240)
2026-10-26 20:40:53 +00:00
mermaid
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
message-board
Add paginated channel subscription queries to the local message board (#56495)
2026-10-23 15:00:06 +00:00
message-history
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
model-provider
Add a credential file override for GCP provider authentication (#57188)
2026-10-26 18:33:05 +00:00
model-provider-info
Add a credential file override for GCP provider authentication (#57188)
2026-10-26 18:33:05 +00:00
models-manager
Support model-specific writable-root permission wording (#56309)
2026-10-23 00:40:04 +00:00
mxc-sandbox
Migrate the Windows MXC sandbox to mxc-sdk (#55378)
2026-10-19 20:54:41 +00:00
network-proxy
Add constraint-aware standalone network proxy configuration (#57180)
2026-10-26 18:22:40 +00:00
ollama
…
otel
Tag tool registration metrics with effective incremental tools mode (#55692)
2026-10-20 22:34:40 +00:00
otel-trace-websocket
…
plugin
…
process-hardening
…
prompts
Apply model catalog overrides to history, notes, and context tools (#56313)
2026-10-23 00:46:28 +00:00
protocol
Add optional names to untrusted additional context (#57181)
2026-10-26 18:23:07 +00:00
realtime-webrtc
Classify voice session failures and record terminal outcomes (#52756)
2026-10-10 02:54:59 +00:00
response-debug-context
Treat model-not-found provider errors as terminal failures (#56445)
2026-10-23 11:43:14 +00:00
responses-api-proxy
Enable GitHub Actions OIDC authentication in the Responses API proxy (#55320)
2026-10-19 16:56:42 +00:00
rmcp-client
Share eligible local stdio MCP connections across chats (#57211)
2026-10-26 19:37:32 +00:00
rollout
Release the rollout maintenance lock when its guard is dropped (#57247)
2026-10-26 20:52:45 +00:00
rollout-trace
Truncate rollout JSON summaries at UTF-8 character boundaries (#57199)
2026-10-26 19:11:53 +00:00
runtime-agent-instance
Consolidate async header authentication in apply_auth_headers (#57179)
2026-10-26 18:22:11 +00:00
sandboxing
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
scripts
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
secrets
Cache decrypted Codex auth and managed secrets (#56081)
2026-10-22 04:59:19 +00:00
shell-command
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
skills
Handle response body failures in OpenAI docs downloads (#55379)
2026-10-19 21:01:44 +00:00
state
Allow NFS database migration with shared file permissions (#57226)
2026-10-26 20:16:30 +00:00
stdio-to-uds
…
tcp-tunnel
Limit decoded HTTP/3 response headers in the TCP tunnel (#56024)
2026-10-22 00:19:02 +00:00
terminal-detection
Stop identifying Apple Terminal from TERM_SESSION_ID (#53438)
2026-10-12 17:52:12 +00:00
test-binary-support
…
thread-manager-sample
Reduce the default thread unload delay to one minute (#57242)
2026-10-26 20:44:30 +00:00
thread-store
Expose lifecycle timestamps on app-server thread items (#57172)
2026-10-26 18:13:00 +00:00
tools
Preserve command cwd in permission and post-tool hooks (#57203)
2026-10-26 19:21:08 +00:00
tui
Show native dollar thread usage for ENT26 plans (#57251)
2026-10-26 20:54:35 +00:00
uds
…
user-verification
Fix cancellation of macOS user-verification prompts (#53790)
2026-10-13 22:40:57 +00:00
utils
Add opt-in protocol discovery for local stdio MCP servers (#57210)
2026-10-26 19:37:06 +00:00
v8-poc
Upgrade V8 to 152.2.0 and backport Array.sort safety guards (#54519)
2026-10-16 06:06:54 +00:00
vendor
…
voice-host
Make Opus encoder test timestamps follow sample time (#56233)
2026-10-22 17:42:21 +00:00
websocket-auth
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
websocket-client
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
windows-sandbox-rs
Use cargo_bin in the Windows sandbox manifest test (#56220)
2026-10-22 17:02:32 +00:00
windows-sandbox-service
Clarify config loader APIs and share interactive login setup (#57169)
2026-10-26 18:05:05 +00:00
workload-identity
…
worktree
…
.gitignore
…
BUILD.bazel
…
Cargo.lock
Allow NFS database migration with shared file permissions (#57226)
2026-10-26 20:16:30 +00:00
Cargo.toml
Capture direct-tool critical paths behind a feature flag (#57201)
2026-10-26 19:19:10 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
Record reviewed exceptions for zstd security advisories (#57255)
2026-10-26 21:07:09 +00:00
README.md
…
rust-toolchain.toml
Upgrade the Rust toolchain to 1.99.1 (#55677)
2026-10-20 21:28:45 +00:00
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink