Who contributed to OpenAI on August 10, 2026?

1 developer shipped this update, including copyberry.

What were the notable OpenAI updates?

Use native transparency in the imagegen skill, Add a feature flag to preserve apply_patch line endings, and Add a line-ending preservation mode to `apply_patch`.

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CODEX FIXES IMAGE TRANSPARENCY AND PATH RESOLUTION VULNERABILITIES

By RepoJournal · Filed 06:58 UTC on August 10, 2026 · About OpenAI

1 person shipped this

copyberry @copyberry 5 cited

Codex shipped native transparency support for image generation and patched a directory traversal risk in project path resolution.

The image generation skill now uses built-in transparency requests instead of chroma-key workarounds, with explicit CLI fallback confirmation between model versions [1]. Two separate patches tightened line-ending handling: a feature flag preserves CRLF and mixed endings in apply_patch operations [2], while a new PreserveLineEndings mode offers opt-in protection without breaking existing APIs [3]. Plugin installation tracking improved with the addition of installAttemptId forwarding to remote systems, letting clients correlate requests with specific attempts [5]. The most critical fix bounds Cursor project path resolution to 128 probes instead of recursive directory scanning, closing a potential DoS vector on large filesystem trees [4].

Action items

→ Deploy image generation transparency changes to production openai/codex [plan]
→ Enable apply_patch line-ending preservation for Windows-heavy codebases openai/codex [plan]
→ Verify Cursor project path resolution bounds in high-volume environments openai/codex [monitor]

References

[1] Use native transparency in the imagegen skill ↗ openai/codex
[2] Add a feature flag to preserve apply_patch line endings ↗ openai/codex
[3] Add a line-ending preservation mode to `apply_patch` ↗ openai/codex
[4] Bound Cursor project path resolution ↗ openai/codex
[5] Forward install attempt IDs for remote plugins ↗ openai/codex

Quick answers

What shipped in OpenAI on August 10, 2026?: Codex shipped native transparency support for image generation and patched a directory traversal risk in project path resolution. In total, 8 commits and 8 pull requests landed.
Who contributed to OpenAI on August 10, 2026?: 1 developer shipped this update, including copyberry.
What were the notable OpenAI updates?: Use native transparency in the imagegen skill, Add a feature flag to preserve apply_patch line endings, and Add a line-ending preservation mode to `apply_patch`.

CODEX TIGHTENS MEMORY WITH MOVE-ONLY SUBMISSIONS AS NODE SDK COMPLETES LINTING OVERHAUL

Codex eliminated cloning overhead from submission operations while the Node SDK wrapped up a 185-part linting cleanup that touches every rule in the compatibility matrix.

ai 186 shipped

OpenAI Aug 9

CODEX HARDENS IDENTITY AND AUDIT LAYER ACROSS PLUGIN, HOOK, AND PROCESS EXECUTION

Codex shipped five infrastructure changes overnight that lock down environment isolation, plugin failure tracking, and workload identity token handling across the entire execution stack.

ai 16 shipped

OpenAI Aug 8

CODEX HARDENS STREAMS AND SANDBOXING AS SDK CLEANUP ACCELERATES

Codex shipped resilience for network failures and executor-native sandboxing while the Node SDK continues its oxlint cleanup sprint across five new lint rule enablements.

ai 187 shipped

OpenAI Aug 7

CODEX SHIPS ROLLOUT MIGRATION FRAMEWORK AND CONTEXT WINDOW TRACKING

Codex rolled out a complete migration toolkit for legacy session handling while fixing a critical flaw in how forked subagents track their context windows.

ai 74 shipped

Elsewhere on the wire

AI Agents Aug 11

LANGCHAIN PATCHES TOOL CALLS, OPENHANDS SURFACES HIDDEN INTEGRATIONS

LangChain's OpenAI wrapper shipped a fix for invalid tool calls that were silently dropped, while OpenHands surfaced integrations the automation layer was burying.

ai-agents 44 shipped

Local LLMs Aug 11

OLLAMA PATCHES CRITICAL PARSER BUG, NEMOTRON 3 LANDS WITH SPECULATIVE DECODING

Ollama shipped v0.32.7 with a critical fix for boundary token corruption in model invocation, while full MLX support for Nemotron 3 Nano Omni brings self-draft speculation to inference without a separate draft model.

+11

llms 271 shipped

@CachyOS Aug 11

CACHYOS LINUX 7.1.8 SHIPS WITH VMALLOC OPTIMIZATIONS; NOCTALIA CONFIG UPDATED FOR BETA 8

CachyOS Linux 7.1.8 landed overnight with upstream rebase and performance tuning across memory allocation, while Noctalia configuration hardened for beta 8 stability with direct_scanout gaming support.

infra 83 shipped

Elixir & Phoenix Aug 11

PHOENIX LIVE VIEW PATCHES OPEN REDIRECT VULNERABILITY ACROSS TWO VERSIONS

Phoenix Live View shipped emergency security fixes for CVE-2026-64941 in both v1.1.33 and v1.2.9 to close an open redirect hole via ASCII control characters in the redirect/2 function.