Who contributed to OpenAI on May 7, 2026?

2 developers shipped this update, including cd-oai and stainless-app[bot].

What were the notable OpenAI updates?

[codex] Fix Windows sandbox git safe.directory for worktrees (#21409), vendor: update bubblewrap to 0.11.2 (#21389), and Revert state DB injection and agent graph store (#21481).

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CODEX PATCHES WINDOWS SANDBOX BUG WHILE PYTHON SDK SHIPS IMAGE API FIX

By RepoJournal · Filed 06:03 UTC on May 7, 2026 · About OpenAI

2 people shipped this

cd-oai @cd-oai 1 cited

stainless-app[bot] @stainless-app[bot] 1 cited

Codex fixed a critical Windows sandbox git vulnerability that broke worktree handling, and the Python SDK is already on its second patch in hours after an imagegen regression slipped through.

Codex's Windows sandbox was silently failing on git worktrees because the safe.directory injection followed symlinks to internal `.git/worktrees/` paths that the dubious-ownership check rejected [1]. That's now fixed. In parallel, the vendored Bubblewrap dependency got yanked forward to 0.11.2 to pull in a setuid security update [2], though the real story is upstream is deprecating setuid builds entirely—expect that to ripple through sandbox initialization soon. On the app-server side, two architectural shifts landed: the skills watcher moved out of codex-core to let app-server own cache invalidation and change notifications [4], and MCP elicitations now route through Guardian approval when opted-in [5], closing the gap Browser Use prompts were exploiting. A state DB revert [3] keeps the newer session/thread identity tracking but restores optional plumbing—no impact for most deployments. The Python SDK shipped 2.35.0 with image API updates [6], then immediately hotfixed 2.35.1 because the imagegen size enum regressed [7]—if you pulled 2.35.0 in the last few hours, upgrade now.

Action items

→ Upgrade openai-python to 2.35.1 if you deployed 2.35.0 in the last 4 hours openai/openai-python [immediate]
→ Pull Codex with Windows sandbox worktree fix before next production deploy openai/codex [plan]
→ Monitor for Bubblewrap setuid deprecation breaking changes in next quarter openai/codex [monitor]

References

[1] [codex] Fix Windows sandbox git safe.directory for worktrees (#21409) openai/codex
[2] vendor: update bubblewrap to 0.11.2 (#21389) openai/codex
[3] Revert state DB injection and agent graph store (#21481) openai/codex
[4] Move skills watcher to app-server (#21287) openai/codex
[5] Route opted-in MCP elicitations through Guardian ↗ openai/codex
[6] v2.35.0 ↗ openai/openai-python
[7] release: 2.35.1 ↗ openai/openai-python

Quick answers

What shipped in OpenAI on May 7, 2026?: Codex fixed a critical Windows sandbox git vulnerability that broke worktree handling, and the Python SDK is already on its second patch in hours after an imagegen regression slipped through. In total, 54 commits, 45 pull requests, and 7 releases landed.
Who contributed to OpenAI on May 7, 2026?: 2 developers shipped this update, including cd-oai and stainless-app[bot].
What were the notable OpenAI updates?: [codex] Fix Windows sandbox git safe.directory for worktrees (#21409), vendor: update bubblewrap to 0.11.2 (#21389), and Revert state DB injection and agent graph store (#21481).

CODEX HARDENS MCP RUNTIME STABILITY ACROSS FIVE CRITICAL FIXES

OpenAI shipped a coordinated hardening of the Model Context Protocol layer across Codex, patching race conditions in thread startup, resource access, and authority management that could leave stale configurations in production.

ai 66 shipped 1-min read

OpenAI 1 day ago

SDK RELEASES LOCK IN PROMPT CACHING AND SPEND CONTROLS

Both Node and Python clients shipped v6.49.0 and v2.48.0 overnight with admin spend limit APIs and relaxed prompt cache validation.

ai 103 shipped 1-min read

OpenAI 2 days ago

CODEX CONSOLIDATES THREAD STARTUP, NODE SDK ADDS REALTIME AND STANDARD SCHEMA SUPPORT

Codex refactored its threading and database layer for consistency while the Node SDK ships four new schema helpers and fixes audio streaming in a single release push.

ai 120 shipped 1-min read

OpenAI 3 days ago

CODEX FIXES WINDOWS EXECUTION BUGS WHILE TIGHTENING SECURITY REVIEW GATES

Codex shipped critical fixes for Windows process management and terminal navigation that were silently breaking execution sessions on Windows machines.

ai 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.