Config files OpenAI Codex CLI has changed
Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.
Security advisories
2 published for Codex CLI, from the GitHub Advisory Database.
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025
Release signals
alpha.2
Release 0.150.0-alpha.2Primary source ↗alpha.4.1
Release 0.149.0-alpha.4.1Primary source ↗alpha.1
Release 0.150.0-alpha.1Primary source ↗Added an interactive `codex agents` dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142)
- Added `/cd`, `/pwd`, and `/cwd` commands for managing the working directory in TUI sessions. (#38894)
- Added `codex queue` for sending messages to existing local or remote sessions. (#39092)
- Expanded Vim editing with character replacement and more change motions such as `cw`, `c$`, and `cc`. (#39661)
- +159 more changes
Read the full release noteHide the full release note
New Features
-
Added an interactive
codex agentsdashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142) -
Added
/cd,/pwd, and/cwdcommands for managing the working directory in TUI sessions. (#38894) -
Added
codex queuefor sending messages to existing local or remote sessions. (#39092) -
Expanded Vim editing with character replacement and more change motions such as
cw,c$, andcc. (#39661) -
codex doctornow diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074) -
SDK users can now pass exact CLI config overrides and select
maxorultrareasoning effort. (#38817, #39662)
Bug Fixes
-
Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604)
-
Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153)
Excerpt ends here — this release continues at the source ↗.
alpha.7
Release 0.149.0-alpha.7Primary source ↗alpha.4
Release 0.149.0-alpha.4Primary source ↗alpha.3
Release 0.149.0-alpha.3Primary source ↗alpha.2
Release 0.149.0-alpha.2Primary source ↗alpha.1
Release 0.149.0-alpha.1Primary source ↗Export complete TUI conversations to Markdown with `/export`, either to the clipboard or a new file. (#37358)
- Fork sessions with `codex exec fork`, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371)
- Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
- View estimated thread credits or cost in `/status`, status lines, and terminal titles for eligible workspaces. (#38281, #38282)
- Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
- +160 more changes
Read the full release noteHide the full release note
New Features
-
Export complete TUI conversations to Markdown with
/export, either to the clipboard or a new file. (#37358) -
Fork sessions with
codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371) -
Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
-
View estimated thread credits or cost in
/status, status lines, and terminal titles for eligible workspaces. (#38281, #38282) -
Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
-
Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)
Bug Fixes
-
Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
-
Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
-
Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
Excerpt ends here — this release continues at the source ↗.
alpha.23
Release 0.148.0-alpha.23Primary source ↗alpha.22
Release 0.148.0-alpha.22Primary source ↗alpha.21
Release 0.148.0-alpha.21Primary source ↗alpha.20
Release 0.148.0-alpha.20Primary source ↗Polled sources
[openai-developers] OpenAI Developers Codex
Product page · not polled
https://developers.openai.com/codex[github-releases] GitHub Releases
GitHub Releases · last read Oct 25, 2026
https://github.com/openai/codex/releases