chore(deps): update dependency openai/codex

[renovate]

This PR contains the following updates:

Package	Update	Change
openai/codex	minor	0.150.1 → 0.151.0
openai/codex	minor	rust-v0.150.1 → rust-v0.151.0

---

Release Notes

openai/codex (openai/codex)

v0.151.0: 0.151.0

Compare Source

New Features

• Added a configurable grace period for discovering tools from optional MCP servers. (#​41199)
• Extensions can now inspect or replace MCP tool results before they reach the model. (#​41202)
• Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#​41208)

Bug Fixes

• Preserved restored permission profiles across TUI turns and prevented /cd from weakening sandbox restrictions. (#​41192)
• Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#​41195, #​41206)
• Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#​41196, #​41204, #​41207, #​41209)
• Preserved structured MCP tool and resource errors in app-server responses. (#​41196)
• Counted nested subagent token usage toward root goal budgets. (#​41183)
• Prevented stale Guardian classifications from authorizing actions after permission state changes. (#​41196)

Chores

• Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#​41189, #​41205)
• Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#​41191, #​41194)

Changelog

Full Changelog: openai/codex@rust-v0.150.0...rust-v0.151.0

• #​41183 Account subagent token usage toward root goals @​copyberry
• #​41189 Instrument stdin review size checks @​copyberry
• #​41191 Stabilize Guardian WebSocket tests @​copyberry
• #​41192 Preserve restored permission profiles in TUI sessions @​copyberry
• #​41193 Report affected capabilities from remote plugin syncs @​copyberry
• #​41194 Harden core test fixture startup assertions @​copyberry
• #​41195 Finalize model-specific tool plans in ToolRouter @​copyberry
• #​41196 Improve sandboxing, MCP errors, and cached approvals @​copyberry
• #​41199 Make the optional MCP startup grace configurable @​copyberry
• #​41202 Let extensions process MCP tool results @​copyberry
• #​41204 Propagate executor home directories into sandbox contexts @​copyberry
• #​41205 Track executor MCP discovery telemetry @​copyberry
• #​41206 Make Ultra reasoning fallback model-aware @​copyberry
• #​41207 Propagate executor OS into turn environments @​copyberry
• #​41208 Honor per-repository plugin configuration in catalog requests @​copyberry
• #​41209 Align deny-read matching with executor path semantics @​copyberry

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.