v17.0.0

What's Changed

Breaking Changes

• Codex CLI permissions: edit / write rules with ask or deny now generate read instead of deny. Codex has no path-level write-approval state, so both non-allow write actions now preserve read access without write access (with a warning) for exact paths and trailing /** patterns. Previously the same rules cut off read access entirely. An explicit read: deny on the same pattern still wins and emits deny. Review the regenerated .codex/config.toml if you relied on the old deny output. by @besdar in #3136

Bug Fixes

• Codex CLI: handle filesystem globs that Codex does not support. Codex accepts read / write only for exact paths or subtree patterns ending in /**, and Codex Desktop rejected the invalid configurations Rulesync generated for globs such as src/*.ts. Rulesync now skips grant-derived read / write entries for such globs with a warning so the baseline applies, and emits deny for write-side ask / deny restrictions instead of generating an invalid profile. by @besdar in #3136

Other Changes

• CI: trace the release and secret-bearing jobs with cicd-sensor (Takumi Runner), with the agent verified against its sigstore bundle and pinned digests before it runs. This affects only the repository's own workflows, not the published package. by @saitota in #3067
• Update the Homebrew formula to v16.39.1 in #3135

Contributors

• @besdar
• @saitota
• @dyoshikawa

Full Changelog

v16.39.1...v17.0.0