Config files OpenAI Codex CLI has changed
Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.
Security advisories
2 published for Codex CLI, from the GitHub Advisory Database.
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025
Release signals
alpha.5
Release 0.155.0-alpha.5Primary source ↗alpha.2.4
Release 0.155.0-alpha.2.4Primary source ↗alpha.4
Release 0.155.0-alpha.4Primary source ↗alpha.3.10
Release 0.155.0-alpha.3.10Primary source ↗alpha.3.9
Release 0.155.0-alpha.3.9Primary source ↗alpha.3.8
Release 0.155.0-alpha.3.8Primary source ↗alpha.3.7
Release 0.155.0-alpha.3.7Primary source ↗alpha.3
Release 0.155.0-alpha.3Primary source ↗alpha.6.2
Release 0.154.0-alpha.6.2Primary source ↗alpha.2.3
Release 0.155.0-alpha.2.3Primary source ↗Cygwin build inputs and matching source for Windows voice
CI-only build tools for native Windows voice releases. · These archives are not included in Codex user packages. ·cygwin-build-inputs.tar.gz: 103 pinned Cygwin binary packages and the signed package index used by the offline build installer. · cygwin-build-sources.tar: all 83 corresponding source package archives at the exact versions named by that index. · It includes the upstream source, patches, and build recipes provided in Cygwin's -src packages. · +5 more changesRead the full release noteHide the full release note
CI-only build tools for native Windows voice releases. These archives are not included in Codex user packages.
cygwin-build-inputs.tar.gz: 103 pinned Cygwin binary packages and the signed package index used by the offline build installer.cygwin-build-sources.tar: all 83 corresponding source package archives at the exact versions named by that index. It includes the upstream source, patches, and build recipes provided in Cygwin's-srcpackages.cygwin-source-map.json: each selected binary package mapped to its source archive and the source size and SHA-512 digest from the pinned index.CYGWIN-SOURCE-NOTICE.txt: source access and licensing notice.
The binary and source archive SHA-256 pins live in .github/scripts/voice-cygwin-snapshot.json in the Codex repository. Cygwin describes the licensing terms at https://cygwin.com/licensing.html. Licenses vary by package; consult the corresponding source and binary package archives for their notices.
Python SDK 0.154.0
Install withpip install --upgrade openai-codex==0.154.0 (Python 3.10 or later). · This release includes the matching openai-codex-cli-bin==0.154.0 runtime. · Add max and ultra reasoning-effort values. #39662 · Add ExternalMessage to synchronous and asynchronous run() and turn() calls. · External content can start a turn or join an active regular turn with tool-level authority; it does not grant user authorization. · Consumers receive independent event streams. #44086 · +14 more changesRead the full release noteHide the full release note
Install with pip install --upgrade openai-codex==0.154.0 (Python 3.10 or later). This release includes the matching openai-codex-cli-bin==0.154.0 runtime.
-
Add
maxandultrareasoning-effort values. #39662 -
Add
ExternalMessageto synchronous and asynchronousrun()andturn()calls. External content can start a turn or join an active regular turn with tool-level authority; it does not grant user authorization. Consumers receive independent event streams. #44086 -
Add
include_turnson resume/fork,turn_service_tierfor one newly started turn, andsourcemetadata. History selection changes the returned response, not model context. Existing defaults are preserved when these options are omitted. #44084 -
Refresh generated protocol models and notifications, and preserve completion events that arrive before a turn-start response. #44032, #44400
Check these migrations when upgrading:
Excerpt ends here — this release continues at the source ↗.
alpha.2
Release 0.155.0-alpha.2Primary source ↗alpha.1
Release 0.155.0-alpha.1Primary source ↗Polled sources
[openai-developers] OpenAI Developers Codex
Product page · not polled
https://developers.openai.com/codex[github-releases] GitHub Releases
GitHub Releases · last read Oct 25, 2026
https://github.com/openai/codex/releases