Repository navigation
v1.5.3
Published to npm as @groeponline/opencodex@1.5.3 with dist-tag latest.
What's Changed
New Features
- feat(auth): support public PKCE and ES256 OIDC by OnlineChef (@ChefGroep) in #295
- feat(providers): add nearai, unorouter, chatanywhere, uncloseai, llm7, navy (clean) by MisterWanted in #326
- feat(gui): PostHog telemetry toggle in Settings by OnlineChef (@ChefGroep) in #324
- feat(gui): consolidate provider readiness and component health by MisterWanted in #328
Bug Fixes
- fix(deps): clear 2026-09-29 advisories and close a CI path-filter blind spot by @freebuff-web[bot] in #284
- fix(errors): sanitize Cloudflare edge HTML in client-facing upstream errors by OnlineChef (@ChefGroep) in #279
- fix(cli): make service usage, status summary, and runtime probing host-independent by @freebuff-web[bot] in #287
- fix(release): make tag creation hook-independent by OnlineChef (@ChefGroep) in #289
- fix(codex): keep native GPT models above external OCX routes by MisterWanted in #293
- fix(codex): separate 5h/weekly quotas and expose reauth by OnlineChef (@ChefGroep) in #291
- fix: Windows proxy-only restart/teardown and MCP SDK audit for v1.5.3 by OnlineChef (@ChefGroep) in #331
Documentation
- docs: retire the leftover dev branch and sync branch policy by @freebuff-web[bot] in #285
- docs: refresh OpenCodex roadmap truth by OnlineChef (@ChefGroep) in #290
- docs(security): fix CODEOWNERS and prerelease governance by MisterWanted in #333
Chores
- chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 by Dependabot (@dependabot)[bot] in #281
- chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by Dependabot (@dependabot)[bot] in #282
- chore(deps): bump withastro/action from 6.1.2 to 6.1.3 by Dependabot (@dependabot)[bot] in #283
- chore(ci): remove the retired dev lanes and the dormant promotion exception by @freebuff-web[bot] in #286
- ci(release): remove jan dependency for npm OIDC and GHCR publishing by MisterWanted in #332
Other Changes
- security: separate product docs from private runtime state by OnlineChef (@ChefGroep) in #288
- [stack 1/8] feat: make prompt cache behavior measurable by OnlineChef (@ChefGroep) in #304
- [stack 2/8] feat: make native model discovery account-aware and authoritative by OnlineChef (@ChefGroep) in #305
- [stack 3/8] feat(gui): start auth-inspired OpenCodex redesign by OnlineChef (@ChefGroep) in #306
- Expand prompt-cache regression tests and document analyzer helpers by CodeRabbit (@coderabbitai)[bot] in #312
- [stack 4/8] feat(trace): opt-in trace store linked to usage.jsonl by OnlineChef (@ChefGroep) in #307
- Make clients optional and restore authenticated Desktop sync by MisterWanted in #327
- [stack 6/8] feat(trace): cover compact and response-cache hits by OnlineChef (@ChefGroep) in #309
- [stack 7/8] feat(trace): cover Responses WebSocket turns by OnlineChef (@ChefGroep) in #310
- [stack 8/8] feat(trace): cover live call-create HTTP by OnlineChef (@ChefGroep) in #311
- pr-sweep: convergence lane-g-contracts — 1 unique patch + 4 files by MisterWanted in #322
- release: prepare v1.5.3 and repair pinned npm registry probes by MisterWanted in #329
New Contributors
- CodeRabbit (@coderabbitai)[bot] made their first contribution in #312
Commits
- docs(security): fix CODEOWNERS and prerelease governance (#333) (578fbda)
- ci(release): remove jan dependency for npm OIDC and GHCR publishing (#332) (933e898)
- fix(ci): Windows test/restart flakes and MCP SDK security bump (#331) (85f1434)
- Merge release preparation for v1.5.3 (589dff4)
- release: prepare v1.5.3 with pinned npm registry probes (a644e1b)
- Merge product consolidation for provider and component health (6a451f8)
- fix(gui): key provider health rows by stable issue identity (81b4d77)
- fix(gui): type health uptime locale using the shared contract (777f565)
- fix(gui): simplify health projection and preserve CI diagnostics (fe23c14)
- fix(gui): keep standalone lint rule in JavaScript config (c02797b)
- fix(gui): use existing ESTree types for design lint plugin (3606af9)
- feat(gui): consolidate provider readiness and component health (448d7c4)
- fix(health): enforce OAuth readiness and patch dependency advisories (0d70761)
- fix(deps): patch proxy-addr and source-map-js advisories (e378256)
- fix(health): evaluate credentials by authentication mode (9f278eb)
- fix(health): exclude unusable oauth accounts from credential check (b19fb35)
- chore(server): drop unused existsSync import (7309eaf)
- fix(health): report oauth providers without stored credentials as degraded (5bcdb38)
- feat(trace): cover live call create (#311) (08ed718)
- feat(trace): cover responses websocket turns (#310) (df59491)
- [stack 6/8] feat(trace): cover compact and response-cache hits (#309) (be36cdb)
- Merge pull request #327 from GroepOnline/fix/desktop-sync-capabilities-20261005 (ba6f0e1)
- [stack 4/8] feat(trace): opt-in trace store linked to usage.jsonl (#307) (331213f)
- Merge current main after verified prompt-cache regression landing (872c265)
- Merge pull request #312 from GroepOnline/coderabbit/pull-request-tests/cf83be88 (26a9fd2)
- fix: preserve Desktop settings and configured reasoning boundaries (a73efe5)
- merge: retain landed dashboard styles in prompt-cache branch (f4f3da3)
- merge: include landed OpenCodex dashboard redesign (4b5a038)
- fix: align client contracts and clarify CI failures (ca99fb1)
- [stack 3/8] feat(gui): start auth-inspired OpenCodex redesign (#306) (cfcb11e)
- merge: align prompt-cache regressions with current main (e64fc46)
- merge: retain authoritative native discovery from main (a9a8e39)
- feat: decouple gateway clients and restore Desktop sync (3d37be3)
- [stack 2/8] feat: make native model discovery account-aware and authoritative (#305) (dc7d266)
- feat(gui): PostHog telemetry toggle in Settings (#324) (662200d)
- feat(providers): add nearai, unorouter, chatanywhere, uncloseai, llm7, navy (clean v2) (#326) (1f93693)
- Merge pull request #304 from GroepOnline/stack/20261005-01-prompt-cache (9098e38)
- test: cover prompt cache observability and usage analyzer boundaries (1183278)
- docs: document prompt cache observability and usage analyzer helpers (e9ae3a4)
- Merge PR #296 (fix/prompt-cache-observability-20261003) into stack layer 01-prompt-cache (b90389a)
- fix: harden prompt cache evidence parsing (54e565d)
- refactor: reduce prompt cache analysis complexity (e468b0e)
- refactor: harden prompt cache evidence path (8e13e35)
- feat: add prompt cache observability (85443b6)
- feat(auth): support public PKCE and ES256 OIDC (#295) (30221c5)
- fix(codex): separate 5h/weekly quotas and expose reauth (#291) (1c0e0fb)
- fix(codex): keep native GPT models above external OCX routes (#293) (6edb6ae)
- release: v1.5.2 (c007f59)
- docs: refresh OpenCodex roadmap truth (#290) (2908004)
- fix(release): make tag creation hook-independent (#289) (8ba6470)
- security: separate product docs from private runtime state (#288) (a06e7d8)
- fix(cli): make service usage, status summary, and runtime probing host-independent (#287) (e20bf8a)
- chore(ci): remove the retired dev lanes and the dormant promotion exception (#286) (845d29e)
- docs: retire the leftover dev branch and sync branch policy (#285) (9f58049)
- fix(errors): sanitize Cloudflare edge HTML in client-facing upstream errors (#279) (fcb35f1)
- fix(deps): clear 2026-09-29 advisories and close a CI path-filter blind spot (#284) (5770910)
- chore(deps): bump withastro/action from 6.1.2 to 6.1.3 (#283) (4d90043)
- chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#282) (72532cd)
- chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#281) (99791bf)
Full Changelog: v1.5.1...v1.5.3