Config files OpenAI Codex CLI has changed
Config you own — hooks, permission rules, MCP servers, settings — that releases below state a change to. Counted from the release notes we track, newest change first. How a harness is layered.
Security advisories
2 published for Codex CLI, from the GitHub Advisory Database.
Affects up to 0.23.0 · CVE-2025-61260 · Apr 14, 2026
Fixed in 0.39.0 · CVE-2025-59532 · Sep 19, 2025
Release signals
alpha.2
Release 0.148.0-alpha.2Primary source ↗alpha.1
Release 0.148.0-alpha.1Primary source ↗Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
- Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
- Enable automatically reviewed approvals with the new `--approve-for-me` CLI flag. (#36373)
- Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
- +155 more changes
Read the full release noteHide the full release note
New Features
-
Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
-
Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
-
Enable automatically reviewed approvals with the new
--approve-for-meCLI flag. (#36373) -
Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
-
Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
-
Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)
Bug Fixes
-
Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
-
Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)
Excerpt ends here — this release continues at the source ↗.
alpha.13
Release 0.147.0-alpha.13Primary source ↗alpha.12
Release 0.147.0-alpha.12Primary source ↗alpha.6.5
Release 0.147.0-alpha.6.5Primary source ↗alpha.11
Release 0.147.0-alpha.11Primary source ↗Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057)
- #37057 [0.146] Backport safer cyber-model auto-review defaults @anp-oai
alpha.10
Release 0.147.0-alpha.10Primary source ↗alpha.6.4
Release 0.147.0-alpha.6.4Primary source ↗alpha.6.3
Release 0.147.0-alpha.6.3Primary source ↗alpha.6.1
Release 0.147.0-alpha.6.1Primary source ↗alpha.7
Release 0.147.0-alpha.7Primary source ↗alpha.6
Release 0.147.0-alpha.6Primary source ↗Polled sources
[openai-developers] OpenAI Developers Codex
Product page · not polled
https://developers.openai.com/codex[github-releases] GitHub Releases
GitHub Releases · last read Oct 24, 2026
https://github.com/openai/codex/releases