Releases: bproject07/Codex-Source
Releases · bproject07/Codex-Source
Release list
codex-raw 0.1.1
Immutable
release. Only release title and notes can be modified.
Added
- A release-bound benchmark report with sanitized per-sample data and exact
release, commit, archive, binary, harness, environment, and methodology
provenance.
Changed
- The README now explains the removed Codex agent layer and the retained
ChatGPT/Codex account controls near the top of the page. - Future release archives include
BENCHMARKS.md. - Draft release verification now resolves the draft's numeric GitHub release
ID before using the REST API, whose tag endpoint does not expose drafts.
Security
- Updated the shipped dependency closure to patched releases of
gix,
gix-fs,gix-pack,jsonwebtoken,opentelemetry_sdk,serde_with,
tar, and, on Linux, OpenSSL. - Moved the OpenTelemetry HTTP exporter to its matching
reqwest0.13 client
while preserving custom-CA-only TLS behavior. - The inherited Hickory 0.25 resolver remains pinned by Rama
0.3.0-alpha.4. The high-severity NSEC3 issue requires DNSSEC features that
Codex Raw does not enable; this release does not claim to fix the remaining
Hickory advisories. Moving to stable Rama is a separate breaking API and
Rust-toolchain migration.
codex-raw 0.1.0
Immutable
release. Only release title and notes can be modified.
Added
- A separate
codex-rawexecutable with isolated local state. - Stateless one-shot, persistent JSONL, and OpenAI-compatible local HTTP modes.
- Responses, Chat Completions, image generation, streaming, and function tools.
codex-raw update --checkand a user-triggered self-update implementation.- Prebuilt release automation for Windows x64, Linux x64, Linux ARM64, and
macOS Intel. - Focused tests, OpenAI Python SDK smoke checks, and cross-platform validation.
Security
- Loopback-only default for the HTTP server.
- Optional bearer-token protection and mandatory protection for non-loopback
listeners. - Explicit credential exclusions and separate Raw authentication storage.
- Immutable-release enforcement, exact asset selection, dual SHA-256
verification, bounded archive extraction, and staged binary version checks. - Exact-process restart handling on Windows and guarded systemd
stop/restart/health-check with best-effort rollback handling on Linux.