What shipped in OpenAI on August 25, 2026?

OpenAI's SDKs shipped two security-critical patches overnight, and neither can wait. In total, 54 commits, 54 pull requests, and 1 releases landed.

Who contributed to OpenAI on August 25, 2026?

5 developers shipped this update, including rhan-oai, pmccrary-oai, copyberry, Hayden, and Alex Chang.

What were the notable OpenAI updates?

fix(security): redact invalid Bedrock bearer credentials (#2419), Enforce subagent ownership across app-server inputs (#40464), and fix(security): stop delayed and additional tool callbacks after cancellation (#2430).

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

Two security patches land across OpenAI SDKs

By RepoJournal · Filed 06:58 UTC on August 25, 2026 · About OpenAI

5 people shipped this

copyberry @copyberry 3 cited

Hayden @HAYDEN-OAI 3 cited

rhan-oai @rhan-oai 1 cited

Alex Chang @apcha-oai 1 cited

pmccrary-oai @pmccrary-oai

OpenAI's SDKs shipped two security-critical patches overnight, and neither can wait.

Both openai-node and codex closed holes that could leak credentials or let canceled tool calls keep running. openai-node redacts invalid Bedrock bearer credentials from HTTP-header errors and logs [1], while codex enforces subagent ownership across app-server inputs so parent-owned agents can't be mutated directly [2]. The tool-callback fix [3] is the one to drop everything for: it stops privileged parsed callbacks from firing after cancellation, closing a real exploit window in runTools(). Meanwhile codex honors response budgets when reading skill resources [4], hardening project config during credential brokering [5], and respecting disabled managed network config [6]. On the compatibility front, openai-python locks in support for large HTTP payloads with a 32 MiB+ contract test [8], so security fixes can't silently break big responses. The Node team also tightened Zod structured outputs to a fail-closed JSON-native subset [7], rejecting Date, BigInt, and other non-JSON types.

Action items

→ Upgrade openai-node to the latest patched release before your next deploy openai/openai-node [immediate]
→ Review and update your codex usage to ensure subagent ownership is enforced openai/codex [immediate]
→ Verify your openai-python version passes the large payload contract test openai/openai-python [plan]

References

[1] fix(security): redact invalid Bedrock bearer credentials (#2419) openai/openai-node
[2] Enforce subagent ownership across app-server inputs (#40464) openai/codex
[3] fix(security): stop delayed and additional tool callbacks after cancellation (#2430) openai/openai-node
[4] Honor response budgets when reading skill resources ↗ openai/codex
[5] Harden project config when credential brokering is active ↗ openai/codex
[6] Honor disabled managed network configuration ↗ openai/codex
[7] fix(zod): support only provably JSON-native structured outputs ↗ openai/openai-node
[8] test: protect large HTTP payload compatibility (#3721) openai/openai-python

Quick answers

What shipped in OpenAI on August 25, 2026?: OpenAI's SDKs shipped two security-critical patches overnight, and neither can wait. In total, 54 commits, 54 pull requests, and 1 releases landed.
Who contributed to OpenAI on August 25, 2026?: 5 developers shipped this update, including rhan-oai, pmccrary-oai, copyberry, Hayden, and Alex Chang.
What were the notable OpenAI updates?: fix(security): redact invalid Bedrock bearer credentials (#2419), Enforce subagent ownership across app-server inputs (#40464), and fix(security): stop delayed and additional tool callbacks after cancellation (#2430).

Codex Drops the 'Plan' Nudge

OpenAI rolled back the Plan mode prompt in Codex, quietly removing the 'Create a plan?' nudge from the composer and the friction it brought to drafting.

ai 46 shipped

OpenAI Aug 23

CODEX TIGHTENS THREAD CLASSIFICATION, NODE SDK ADDS X.509 TRANSPORT

Codex now requires content classification for all thread sources and extension fragments, while the Node SDK introduces caller-attested X.509 transport for hardened auth flows.

ai 26 shipped

OpenAI Aug 22

OpenAI SDKs Tighten Security and Polling Internals

OpenAI shipped a wave of SDK refactors overnight, moving webhook signature checks and file polling into SDK-owned helpers while Codex expands browser and computer-use policy controls.