RepoJournal
OpenAI OpenAI
110 wires and counting

$ follow OpenAI

Keep up with OpenAI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-04
stories 174
RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

macOS Codex sandbox hardened against terminal input injection

By RepoJournal · Filed · About OpenAI

copyberry Won Park Hayden apcha-oai openai-sdks[bot] markstuart-oai
6 people shipped this
copyberry @copyberry 3 cited Won Park @won-openai 1 cited Hayden @HAYDEN-OAI 1 cited apcha-oai @apcha-oai 1 cited openai-sdks[bot] @openai-sdks[bot] markstuart-oai @markstuart-oai

Codex patched a sandbox escape that let a terminal-tied child queue input for the unsandboxed shell, and OpenAI SDKs shipped a patch release adding GPT-6-Astra support.

Codex hardened its macOS sandbox against a terminal input injection vector [1]. Sandboxed commands inherited the user's controlling terminal, so a child could use `TIOCSTI` to queue input for the unsandboxed shell that resumes after Codex exits. The change appends a `file-ioctl` denial for `TIOCSTI` to the shared Seatbelt policy and adds a PTY integration test proving the injection path is now blocked.

openai-python 3.8.0 adds GPT-6-Astra and related features [2], with a breaking model change: the public ResponsesClientEvent models become discriminated unions, so builders must use `ResponseCreate` instead of the response-creation classes. The same model is being added to Codex for Amazon Bedrock, preserving metadata while applying Bedrock variants [3], and the Bedrock examples in openai-node now report nonstreaming failures instead of exiting cleanly [4].

The Codex voice host now validates its packaged GStreamer runtime over a new `initializeRuntime` protocol exchange before opening audio devices, restricting plugin discovery and library search paths [5]. ThreadManager accepts an injectable attachment store with a default that preserves bytes as media-typed data URLs [6].

Action items

References

  1. [1] Harden the macOS sandbox against terminal input injection (#42590) ↗ openai/codex
  2. [2] feat(api): add gpt-6-astra and related features ↗ openai/openai-python
  3. [3] Add GPT-6-Astra to Amazon Bedrock catalogs ↗ openai/codex
  4. [4] fix(examples): report nonstreaming request failures (#2603) ↗ openai/openai-node
  5. [5] Initialize the packaged GStreamer runtime in the voice host ↗ openai/codex
  6. [6] Add an injectable attachment store to ThreadManager ↗ openai/codex

$ ls openai/reviews/ # the step-back reads

the week in review Codex hardens sandbox and auth across platforms the month in review August: Codex hardens, SDKs consolidate security, GPT-5.5 lands
Topics: AI / ML Full archive →

Quick answers

What shipped in OpenAI on September 4, 2026?
Codex patched a sandbox escape that let a terminal-tied child queue input for the unsandboxed shell, and OpenAI SDKs shipped a patch release adding GPT-6-Astra support. In total, 78 commits, 89 pull requests, and 7 releases landed.
Who contributed to OpenAI on September 4, 2026?
6 developers shipped this update, including Won Park, copyberry, Hayden, openai-sdks[bot], apcha-oai, and markstuart-oai.
What were the notable OpenAI updates?
Harden the macOS sandbox against terminal input injection (#42590), feat(api): add gpt-6-astra and related features, and Add GPT-6-Astra to Amazon Bedrock catalogs.
♥

$ log OpenAI --recent

Codex TUI and openai-node fix stale state and timers 66 shipped Codex voice-host ships real-time microphone audio; openai-node fixes streaming hangs 108 shipped OpenAI ships retry fix, prompt cache diagnostics, sandbox security 152 shipped Windows sandbox provisioning goes live, SDKs gain canonical security models 107 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.