Config files OpenAI Codex CLI has changed
Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.
Security advisories
2 published for Codex CLI, from the GitHub Advisory Database.
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025
Release signals
alpha.6
Release 0.153.0-alpha.6Primary source ↗alpha.5
Release 0.153.0-alpha.5Primary source ↗Guardian approval review now honors Node REPL policies provided through model metadata.
Primary source ↗alpha.4
Release 0.153.0-alpha.4Primary source ↗alpha.2
Release 0.153.0-alpha.2Primary source ↗alpha.1
Release 0.153.0-alpha.1Primary source ↗Vim mode supports `/` and `?` searches within drafts, highlighted matches, and repeat navigation with `n` and `N`. (#41586)
- Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
- The terminal UI and `codex exec` show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
- MCP server names can contain `:`, `@`, `/`, and `.`, supporting package-style names throughout CLI commands and authentication. (#41700)
- +101 more changes
Read the full release noteHide the full release note
New Features
-
Vim mode supports
/and?searches within drafts, highlighted matches, and repeat navigation withnandN. (#41586) -
Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
-
The terminal UI and
codex execshow credential-refresh progress, including Amazon Bedrock reauthentication. (#41239) -
MCP server names can contain
:,@,/, and., supporting package-style names throughout CLI commands and authentication. (#41700) -
Individual MCP tools support an
output_token_limitsetting, with consistent truncation across session resumes. (#41421) -
App-server clients can configure
thread/shellCommandtimeouts, including deadlines longer than one hour. (#41384)
Bug Fixes
-
Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)
-
Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)
-
Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)
Excerpt ends here — this release continues at the source ↗.
alpha.7.2
Release 0.152.0-alpha.7.2Primary source ↗alpha.7
Release 0.152.0-alpha.7Primary source ↗alpha.6
Release 0.152.0-alpha.6Primary source ↗alpha.5
Release 0.152.0-alpha.5Primary source ↗alpha.4
Release 0.152.0-alpha.4Primary source ↗alpha.7.2
Release 0.151.0-alpha.7.2Primary source ↗alpha.1
Release 0.152.0-alpha.1Primary source ↗Polled sources
[openai-developers] OpenAI Developers Codex
Product page · not polled
https://developers.openai.com/codex[github-releases] GitHub Releases
GitHub Releases · last read Oct 25, 2026
https://github.com/openai/codex/releases