RepoJournal
OpenAI OpenAI
123 wires and counting

$ follow OpenAI

Keep up with OpenAI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-19
stories 140
RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Codex grows a backend-independent agent control contract as the SDKs land vault credentials and deprecate MCP connector_id

By RepoJournal · Filed · About OpenAI · Composed from the cited sources · methodology

jif Anthony Tafoya Justin Beckwith dpiet-oai Mukunda Rao Katta Henry Levy copyberry
10 people shipped this
jif @jif-oai 1 cited Anthony Tafoya @TAFOYA-OAI 1 cited Justin Beckwith @jbeckwith-oai 1 cited dpiet-oai @dpiet-oai 1 cited Mukunda Rao Katta @MukundaKatta 1 cited Henry Levy @hlevy-openai copyberry @copyberry openai-sdks[bot] @openai-sdks[bot] 陈志谦 @simpleqt Mark Stuart @markstuart-oai

A day of infrastructure work: Codex separates agent control from where threads run and pulls plugin catalog discovery out of package resolution, while the Node and Python SDKs add Beta Agents vault credentials and start steering MCP connector users toward server_url or tunnel_id.

Expose a backend-independent agent control contract (#46547) openai/codex

by jif

A public, object-safe AgentControl trait now defines lifecycle operations, message delivery, status observation, execution admission, usage accounting, shared configuration, and guardian evidence independently of where an agent tree's threads run. Shared agent types moved out of the local controller and are exported from codex-core.

feat(api): add environment-variable vault credentials openai/openai-node

by jbeckwith-oai

Beta Agents vaults take environment-variable credentials now: create them with a name, secret value, and destination permissions, and rotate the stored secret without touching the name or permissions. Credential metadata reads use distinct request and response types. Landing in both openai-node and openai-python.

chore(api): deprecate MCP connector_id openai/openai-node

by dpiet-oai

connector_id is deprecated in Responses and Realtime for models released after September 1, 2026, with documented migrations to a remote MCP server via server_url or a Secure MCP Tunnel via tunnel_id. Existing connector values keep working on compatible models, but new integrations should not start on connector_id.

fix(parsing): drop TextFormatT parameterization in parse_response to fix memory leak (#3084) (#3088) openai/openai-python

by Mukunda Rao Katta

AsyncResponses.parse() leaked pydantic schema objects without bound, as the issue author's flame graph showed, because parse_response() parameterized construct_type_unchecked with a free module-level TypeVar and allocated a fresh Rust-backed SchemaValidator/SchemaSerializer per call that was never freed. Dropping the TextFormatT parameterization closes the leak.

Separate plugin catalog listing from package resolution (#46567) openai/codex

by Anthony Tafoya

Catalog types and the PluginProvider listing interface moved into codex-core-plugins behind a PluginListQuery that carries thread, turn, and MCP resource context, and root resolution came out of PluginProvider entirely. Codex also stopped running host skill discovery when recording items into already-initialized threads, keeping full discovery only for initial context creation, startup prewarmi...

$ ls openai/reviews/ # the step-back reads

the week in review openai-python 3.14.0 and WebSocket sessions land the month in review August: Codex hardens, SDKs consolidate security, GPT-5.5 lands
Topics: AI / ML Full archive → Weekly reviews →

Quick answers

What shipped in OpenAI on September 19, 2026?
A day of infrastructure work: Codex separates agent control from where threads run and pulls plugin catalog discovery out of package resolution, while the Node and Python SDKs add Beta Agents vault credentials and start steering MCP connector users toward server_url or tunnel_id. In total, 65 commits, 65 pull requests, and 10 releases landed.
Who contributed to OpenAI on September 19, 2026?
10 developers shipped this update, including Henry Levy, jif, Anthony Tafoya, copyberry, Justin Beckwith, openai-sdks[bot], dpiet-oai, and Mukunda Rao Katta, and 2 more.
What were the notable OpenAI updates?
Expose a backend-independent agent control contract (#46547), feat(api): add environment-variable vault credentials, and chore(api): deprecate MCP connector_id.
♥

$ log OpenAI --recent

Codex consolidates PTY spawning, openai-node restores options-only GET calls 87 shipped openai-node and openai-python ship managed Responses WebSocket sessions 124 shipped Codex enforces managed residency, openai-node fixes streaming and abort paths 142 shipped Codex carries MCP App UI through history, openai-node fixes shared callback credentials 160 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.