RepoJournal
OpenAI

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

  1. Fri 29 may
  2. Sat 30 may
  3. Sun 31 may
  4. Mon 1 jun
  5. Mon 8 jun
  6. Tue 9 jun
  7. Wed 10 jun
  8. Thu 11 jun
  9. Fri 12 jun
  10. Sat 13 jun
  11. Sun 14 jun
  12. Mon 15 jun
  13. Tue 16 jun
  14. Wed 17 jun
  15. Thu 18 jun
  16. Fri 19 jun
  17. Sat 27 jun
  18. Sun 28 jun
  19. Mon 29 jun
  20. Tue 30 jun
  21. Wed 1 jul
  22. Thu 2 jul
  23. Fri 3 jul
  24. Sat 4 jul
  25. Sun 5 jul
  26. Tue 7 jul
  27. Wed 8 jul
  28. Thu 9 jul
  29. Fri 10 jul
  30. Today 11 jul

The Wire · Showcase

CODEX HARDENS THREADING AND TIGHTENS CREDENTIAL SYNC

By RepoJournal · Filed · About OpenAI

copyberry
1 person shipped this

Codex locked down concurrent OAuth refreshes and added permission-hook control over auto-review routing in five infrastructure hardening changes.

The centerpiece is a serialization lock for MCP OAuth credential refreshes [1], which prevents concurrent processes from stomping each other's rotating tokens and leaving in-memory state out of sync with persistent storage. That ships alongside a new permission-hook gate that runs before strict auto-review decisions [2], letting you intercept and approve shell commands without invoking the automated reviewer. On the execution side, Codex now supports pending remote environment registration [3], so lazy clients can wait for provisioning to finish and grab the exec-server WebSocket URL instead of failing early. Under the hood, a generic ReverseJsonlScanner [4] extracts reverse session-index lookups into reusable infrastructure that reads JSONL from the end in bounded chunks without breaking on malformed records. Rounding out the batch is tighter WebSocket timing telemetry [5] that preserves fractional-millisecond precision in histograms while keeping trace events opt-in and out of diagnostic uploads.

Action items

References

  1. [1] Serialize MCP OAuth credential refreshes ↗ openai/codex
  2. [2] Let permission hooks resolve strict auto-review requests ↗ openai/codex
  3. [3] Support pending remote environment registration ↗ openai/codex
  4. [4] Extract reverse JSONL scanning from session indexing ↗ openai/codex
  5. [5] Improve Responses WebSocket timing telemetry ↗ openai/codex

More from OpenAI

OpenAI OpenAI

CODEX TIGHTENS PROXY ENFORCEMENT, SDK CLIENTS SHIP GPT-5.6-SOL SUPPORT

Codex closed a proxy bypass hole in file uploads while both Node and Python clients landed new model capabilities overnight.

ai 74 shipped 1-min read
OpenAI OpenAI

CODEX SHIPS CROSS-OS TEST MIGRATION WHILE NODE SDK HARDENS AZURE ASSISTANTS DOCS

Codex closed out a major test infrastructure refactor that consolidates Windows and Unix CI builds through unified cache roots, while openai-node added critical Azure Assistants documentation that was blocking enterprise deployments.

ai 99 shipped 1-min read
OpenAI OpenAI

INTEL MACOS CODEX CRASHES ON V8 STARTUP, SIGNING FIX SHIPS

Code Mode tool calls are crashing on Intel macOS because V8's code range allocation triggers Hardened Runtime rejection without the right entitlement.

ai 66 shipped 2-min read
OpenAI OpenAI

CODEX FIXES PROXY ATTRIBUTION BUG, NODE SDK PATCHES STREAM CORRUPTION

Concurrent network requests in Codex conversations were getting routed to the wrong executors, and the Node SDK was silently corrupting streamed assistant arrays.

ai 84 shipped 2-min read

Daily updates, in your inbox

Follow OpenAI

Codex, the SDKs, and the engine behind ChatGPT We'll email you a link to confirm first.

Free. Confirm via email. Unsubscribe in one click.

— or follow the whole beat:

Elsewhere on the wire

Elixir & Phoenix Elixir & Phoenix

ELIXIR FIXES TIME MATH BUG THAT ROUNDS THE WRONG WAY

NaiveDateTime.diff/3 has been silently rounding elapsed time up instead of down, breaking its documented contract and potentially causing logic errors in any code relying on time-based calculations.

Alexander Gubarev nseaSeb Łukasz Samson SteffenDE
elixir 35 shipped 1-min read
.NET @dotnet

OPERATOR SDK 13.0 BREAKS CONTROLLER ARCHITECTURE, ANDROID TESTS GO LOCAL

The dotnet-operator-sdk ships a major breaking change that fundamentally rewrites how multiple controllers target the same entity, while the Android team closes external test dependencies to fix certificate export failures on macOS.

github-actions[bot] kimpenhaus renovate Weihan Li +7
dotnet 40 shipped 2-min read
Spring @spring-projects

SPRING INTEGRATION FIXES CRITICAL LOCK REGISTRY BUG BLOCKING DISTRIBUTED SYSTEMS

Spring Integration shipped an emergency fix for JdbcLockRegistry that was causing false application hangs when different keys collided on shared locks.

dependabot artembilan Oliver Drotbohm
java 10 shipped 1-min read
FastAPI & Pydantic FastAPI & Pydantic

PYDANTIC ADDS VALIDATION ERROR TROUBLESHOOTING GUIDE

Pydantic just shipped a troubleshooting guide that walks you through reading validation failures in Logfire traces, cutting your debugging time in half.

strawgate
python 2 shipped 1-min read