RepoJournal
OpenAI

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Keep up with OpenAI in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 19 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Tue 7 jul
  12. Wed 8 jul
  13. Thu 9 jul
  14. Fri 10 jul
  15. Sat 11 jul
  16. Sun 12 jul
  17. Mon 13 jul
  18. Tue 14 jul
  19. Wed 15 jul
  20. Thu 16 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: AI / ML Full archive →

The Wire · Showcase

CODEX DECOUPLES SKILLS FROM EXECUTOR, NODE AND PYTHON TIGHTEN CI SECURITY

By RepoJournal · Filed · About OpenAI

jbeckwith-oai anp-oai wiltzius-openai
3 people shipped this
jbeckwith-oai @jbeckwith-oai 3 cited anp-oai @anp-oai 2 cited wiltzius-openai @wiltzius-openai 1 cited

Codex shipped a breaking refactor that makes hosted plugin skills invocable without an executor, while both Node and Python SDKs locked down their CI workflows to use scoped API key environments.

The codex team landed three interconnected changes that fundamentally reshape how skills integrate with the runtime. First, backend plugin skills are now invocable without an executor [1], which means app-server can properly surface hosted skills in the model's catalog and load their metadata through the `$skill` interface. Second, the skills catalog now renders locators by authority [2], telling the model whether a skill lives on disk or must be fetched through a remote source. Third, ThreadStore now owns persistence policy application [3], enabling store-specific projections over raw input. In parallel, ExecutorFileSystem is being migrated to PathUri [4] as the canonical internal path representation, with EnvironmentPathRef removed entirely [5]. On the SDK side, both openai-node and openai-python tightened their CI workflows to use scoped GitHub environments for API key access [6] [8], and the Node team bumped CI coverage to Node 20, 22, 24, and 26 [7], moving the default test line to Node 24 LTS. These aren't cosmetic updates: the codex changes fix a real gap where hosted skills were described as local files, and the SDK CI changes prevent API keys from being accessible to untrusted workflow contexts.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] skills: make backend plugin skills invocable without an executor (#27387) openai/codex
  2. [2] skills: render catalog locators by authority (#27591) openai/codex
  3. [3] [codex] Move persistence policy application into ThreadStore ↗ openai/codex
  4. [4] [codex] migrate ExecutorFileSystem paths to PathUri ↗ openai/codex
  5. [5] [codex] remove EnvironmentPathRef ↗ openai/codex
  6. [6] test: Use CI environment for OpenAI API key workflows ↗ openai/openai-node
  7. [7] test: Update CI Node version coverage ↗ openai/openai-node
  8. [8] test: Use CI environment for examples API key ↗ openai/openai-python

Quick answers

What shipped in OpenAI on June 12, 2026?
Codex shipped a breaking refactor that makes hosted plugin skills invocable without an executor, while both Node and Python SDKs locked down their CI workflows to use scoped API key environments. In total, 53 commits, 53 pull requests, and 6 releases landed.
Who contributed to OpenAI on June 12, 2026?
3 developers shipped this update, including wiltzius-openai, anp-oai, and jbeckwith-oai.
What were the notable OpenAI updates?
skills: make backend plugin skills invocable without an executor (#27387), skills: render catalog locators by authority (#27591), and [codex] Move persistence policy application into ThreadStore.

More from OpenAI

OpenAI OpenAI

CODEX FIXES THREAD REPLAY ERRORS AND TIGHTENS SHUTDOWN SEQUENCING

Failed turn completions were being silently restored as successes when replaying conversation history, masking critical errors in the TUI transcript.

copyberry Felipe Coury
ai 10 shipped 1-min read
OpenAI OpenAI

CODEX SHIPS RESPONSIVE UI FIXES AND FRESHENS MENTION SEARCH STATE

Codex tightened its interface handling across four critical flows: responsive keymap menus now adapt to narrow terminals, mention popups purge stale search results, completion events now track item lifecycles, and exec-server network policy decisions move client-side.

copyberry Felipe Coury
ai 15 shipped 1-min read
OpenAI OpenAI

CODEX HARDENS MCP RUNTIME STABILITY ACROSS FIVE CRITICAL FIXES

OpenAI shipped a coordinated hardening of the Model Context Protocol layer across Codex, patching race conditions in thread startup, resource access, and authority management that could leave stale configurations in production.

copyberry Justin Beckwith
ai 66 shipped 1-min read
OpenAI OpenAI

SDK RELEASES LOCK IN PROMPT CACHING AND SPEND CONTROLS

Both Node and Python clients shipped v6.49.0 and v2.48.0 overnight with admin spend limit APIs and relaxed prompt cache validation.

copyberry stainless-app[bot] stainless-app
ai 103 shipped 1-min read

Daily updates, in your inbox

Follow OpenAI

Keep up with OpenAI in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.