Who contributed to OpenAI on May 3, 2026?

1 developer shipped this update, including pakrym-oai.

What were the notable OpenAI updates?

Bound websocket request sends with idle timeout.

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CODEX WEBSOCKET TIMEOUT BUG LEAVES STALLED REQUESTS HANGING

By RepoJournal · Filed 06:01 UTC on May 3, 2026 · About OpenAI

1 person shipped this

pakrym-oai @pakrym-oai 1 cited

A write-side timeout vulnerability in Codex websocket handling lets client requests sit indefinitely when the socket pump stalls, even after the server has already disconnected.

Codex has a timing gap in its websocket implementation that creates asymmetric timeouts [1]. The connection itself is properly bounded by `websocket_connect_timeout_ms`, but once established, the first request send reuses only the receive-side idle timeout—leaving the write path unprotected if the socket pump stalls. This means a client calling `ws_stream.send(...)` can hang indefinitely while the server logs the session as already dead [1]. The fix adds a send-side timeout boundary to match the receive path, ensuring both directions of communication respect the same idle window. This is a quiet but real reliability issue for any service using Codex over websockets under network stress.

Action items

→ Review websocket timeout configuration in production Codex deployments; apply PR #20751 openai/codex [plan]
→ Monitor websocket session logs for stalled send operations before upgrading openai/codex [monitor]

References

[1] Bound websocket request sends with idle timeout ↗ openai/codex

Quick answers

What shipped in OpenAI on May 3, 2026?: A write-side timeout vulnerability in Codex websocket handling lets client requests sit indefinitely when the socket pump stalls, even after the server has already disconnected. In total, 1 commits and 1 pull requests landed.
Who contributed to OpenAI on May 3, 2026?: 1 developer shipped this update, including pakrym-oai.
What were the notable OpenAI updates?: Bound websocket request sends with idle timeout.

CODEX HARDENS MCP RUNTIME STABILITY ACROSS FIVE CRITICAL FIXES

OpenAI shipped a coordinated hardening of the Model Context Protocol layer across Codex, patching race conditions in thread startup, resource access, and authority management that could leave stale configurations in production.

ai 66 shipped 1-min read

OpenAI 1 day ago

SDK RELEASES LOCK IN PROMPT CACHING AND SPEND CONTROLS

Both Node and Python clients shipped v6.49.0 and v2.48.0 overnight with admin spend limit APIs and relaxed prompt cache validation.

ai 103 shipped 1-min read

OpenAI 2 days ago

CODEX CONSOLIDATES THREAD STARTUP, NODE SDK ADDS REALTIME AND STANDARD SCHEMA SUPPORT

Codex refactored its threading and database layer for consistency while the Node SDK ships four new schema helpers and fixes audio streaming in a single release push.

ai 120 shipped 1-min read

OpenAI 3 days ago

CODEX FIXES WINDOWS EXECUTION BUGS WHILE TIGHTENING SECURITY REVIEW GATES

Codex shipped critical fixes for Windows process management and terminal navigation that were silently breaking execution sessions on Windows machines.

ai 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.