Who contributed to OpenAI on August 23, 2026?

2 developers shipped this update, including copyberry and Justin Beckwith.

What were the notable OpenAI updates?

Allow exec callers to classify new threads, Add regression coverage for patch approval paging, and Require content kinds for extension prompt fragments.

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CODEX TIGHTENS THREAD CLASSIFICATION, NODE SDK ADDS X.509 TRANSPORT

By RepoJournal · Filed 06:57 UTC on August 23, 2026 · About OpenAI

2 people shipped this

copyberry @copyberry 5 cited

Justin Beckwith @jbeckwith-oai 2 cited

Codex now requires content classification for all thread sources and extension fragments, while the Node SDK introduces caller-attested X.509 transport for hardened auth flows.

Codex shipped five commits hardening thread and fragment handling across its execution layer [1][2][3][4][5]. The most significant change requires all extension prompt fragments and contextual user fragments to declare a stable ContentItemKind, enforcing producer ownership of content classification at the API boundary [3][5]. A new global `codex exec --thread-source` option lets callers tag newly created and forked threads, defaulting to `user` when omitted and exposing the classification as `threadSource` in the TypeScript SDK [1]. The system now properly shuts down resumed descendants when archiving parent thread trees, fixing a bug where collaboration could resurrect archived threads without unarchiving their rollout [4]. Patch approval paging now has full regression coverage for live and replayed approvals recovering their file changes, with verification for scrolling, resizing, and accepting or canceling requests exactly once [2]. In parallel, the Node SDK added a preview `openai/auth/x509-transport` entrypoint for caller-attested X.509 transport using Undici Agent or ProxyAgent, with private branding and runtime validation to prevent unsupported configurations and per-request dispatcher replacement [6][7]. Undici remains optional for ordinary SDK consumers.

Action items

→ Update extension code to provide ContentItemKind for all prompt and contextual fragments openai/codex [plan]
→ Review thread source classification in CLI callers and update TypeScript SDK integrations openai/codex [plan]
→ Evaluate X.509 transport preview for hardened auth scenarios, verify Undici compatibility openai/openai-node [monitor]

References

[1] Allow exec callers to classify new threads ↗ openai/codex
[2] Add regression coverage for patch approval paging ↗ openai/codex
[3] Require content kinds for extension prompt fragments ↗ openai/codex
[4] Shut down resumed descendants when archiving thread trees ↗ openai/codex
[5] Classify contextual fragments with content kinds ↗ openai/codex
[6] feat(auth): add caller-attested X.509 transport capability (#2428) openai/openai-node
[7] feat(auth): add caller-attested X.509 transport capability ↗ openai/openai-node

Quick answers

What shipped in OpenAI on August 23, 2026?: Codex now requires content classification for all thread sources and extension fragments, while the Node SDK introduces caller-attested X.509 transport for hardened auth flows. In total, 12 commits, 12 pull requests, and 2 releases landed.
Who contributed to OpenAI on August 23, 2026?: 2 developers shipped this update, including copyberry and Justin Beckwith.
What were the notable OpenAI updates?: Allow exec callers to classify new threads, Add regression coverage for patch approval paging, and Require content kinds for extension prompt fragments.

OpenAI SDKs Tighten Security and Polling Internals

OpenAI shipped a wave of SDK refactors overnight, moving webhook signature checks and file polling into SDK-owned helpers while Codex expands browser and computer-use policy controls.

ai 121 shipped

OpenAI Aug 21

OPENAI NODE SHIPS FOUR SECURITY FIXES, STREAMING SAFETY AND CREDENTIAL LEAKS PATCHED

If you run the official OpenAI Node SDK, today's security patch train is the one you can't skip.

ai 167 shipped

OpenAI Aug 20

OPENAI-NODE SECURITY BLITZ PATCHES STREAMING EXPOSURES

Five security fixes landed in openai-node overnight, closing unauthenticated proxies, unbounded buffers, and path leaks that could have billed your account or leaked patient data.

ai 155 shipped

OpenAI Aug 19

OPENAI SHIPS SECURITY BLITZ ACROSS SDKs

Overnight, OpenAI hardened its entire client stack, patching WebSocket origin bypasses and credential leaks in node, Python, and Codex sandboxes alike.

ai 162 shipped

Elsewhere on the wire

AI Agents Aug 23

Cline hubs now drain without dropping work

Cline's new hub drain and upgrade flow means you can restart a hub mid-session and lose nothing, thanks to durable event replay.

ai-agents 18 shipped

Local LLMs Aug 23

SGLang Fixes Pixtral 500s as vLLM Cuts TTFT 25%

The biggest news overnight: SGLang is patching a production-breaking Pixtral bug, and vLLM engineers found a way to shave up to 25% off time-to-first-token on Mamba models.

llms 134 shipped

@CachyOS Aug 23

AIRE: ANANICY RULES FIX SESSION LAUNCHER SCHEDULING

ly-dm was being pinned to the idle scheduler, killing your login session's responsiveness.

infra 74 shipped

Elixir & Phoenix Aug 23

JOSE VALIM FIXES THE CLASUE BUG

Jose Valim shipped two refactors plus the actual fix for that `none` clause compiler issue, and a UTC fast path in DateTime could save you a TZ DB lookup.

elixir 6 shipped

Want every project, not just this one?

Follow OpenAI