123 wires and counting

$ follow OpenAI

Keep up with OpenAI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-12
stories 92

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

codex retires thread/rollback and adds plugin and access-program controls to the app-server API

By RepoJournal · Filed · About OpenAI · Composed from the cited sources · methodology

openai/codex removed its deprecated thread/rollback API and wired disabled-plugin selection plus access-program metadata through the app-server, while openai-node and openai-python both picked up Steady multipart and streaming fixes.

openai/codex removed the deprecated `thread/rollback` API along with its request and response types, generated bindings, and the core `Op::ThreadRollback` operation [1]. Requests to it now take the generic unknown-method rejection path, and the documentation points at `thread/revert` as the alternative for paginated threads. Historical `ThreadRolledBack` markers and legacy error deserialization are kept so existing rollouts still replay and migrate. If you call `thread/rollback`, this is a breaking change: it used to resolve and now fails as an unknown method.

Plugin selection is now part of the app-server surface. `thread/settings/update` and `turn/start` accept `disabledPluginIds`, where a supplied list replaces the saved selection, omission or `null` preserves it, and `[]` clears it [2]. The selection comes back in thread start, resume, and fork responses and in `thread/settings/updated` notifications, with generated schemas and client types updated, and disabled plugin IDs are restored from the history retained at the requested fork boundary.

Model discovery carries optional `available_access_programs` metadata through model information, presets, caches, and the TUI, exposed as `availableAccessPrograms` in app-server `model/list` responses [3]. The distinction between missing metadata and an empty `cyber` list is preserved, and unknown cyber program names are ignored when reading the catalog so new server programs do not break older clients.

Separately, openai-node and openai-python both bumped Steady to the latest `main` revision to pick up the multipart and streaming fixes [4][5].

Action items

References

  1. [1] Remove the deprecated `thread/rollback` API ↗ openai/codex
  2. [2] Expose disabled plugin settings in the app-server API ↗ openai/codex
  3. [3] Expose available access programs in model discovery ↗ openai/codex
  4. [4] ci: bump Steady to latest main (#2723) ↗ openai/openai-node
  5. [5] ci: bump Steady to latest main (#3852) ↗ openai/openai-python

Quick answers

What shipped in OpenAI on September 12, 2026?
openai/codex removed its deprecated thread/rollback API and wired disabled-plugin selection plus access-program metadata through the app-server, while openai-node and openai-python both picked up Steady multipart and streaming fixes. In total, 44 commits, 44 pull requests, and 4 releases landed.
Who contributed to OpenAI on September 12, 2026?
3 developers shipped this update, including iceweasel-oai, copyberry, and Alex Chang.
What were the notable OpenAI updates?
Remove the deprecated `thread/rollback` API, Expose disabled plugin settings in the app-server API, and Expose available access programs in model discovery.