Release 0.118.0-cometix · Haleclipse/codex

release: rust-v0.118.0-cometix

New Features

Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (openai#12220)
App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (openai#15525)
codex exec now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (openai#15917)
Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (openai#16286, openai#16287, openai#16288)

Project-local .codex files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (openai#15067)
Linux sandbox launches are more reliable because Codex once again finds a trusted system bwrap on normal multi-entry PATHs. (openai#15791, openai#15973)
The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, /copy and /resume <name> work again, /agent no longer shows stale threads, and the skills picker scrolls past the first page. (openai#16013, openai#16021, openai#16050, openai#16014, openai#16109, openai#16110)
MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (openai#16080, openai#16041)
On Windows, apply_patch is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (openai#16030)