release: bump Codex Security to 0.1.25

[mldangelo-oai]

Summary

Prepare @openai/codex-security 0.1.25 with release notes covering all 40 commits merged since npm-v0.1.24 through main at 3f3aa8e97b520df56b6edb66a908ca132fe02885 on September 1, 2026.

Changes

• Bump the package version from 0.1.24 to 0.1.25 and refresh the reviewed release summary.
• Cover cross-scan finding identities and relationships, batched comparisons, deduplication validation and diagnostics, and the sealed-scan-directory SDK API.
• Include mock scans, interactive budget increases, native command authentication, renewable embeddings credentials, and the configurable embeddings endpoint.
• Retain Windows, PowerShell, UTF-16, scoped inventory, and container metadata fixes; add streamed snapshot hashing and summarize build, CI, and documentation updates.
• Correct the previous claim that this release adds no CLI or SDK surface, and document defaults, opt-in behavior, and the automatic history index migration.

This PR changes release metadata and documentation only. The implementations are already on main; GitHub's generated release section supplies the individual PR inventory.

Testing

For this notes refresh:

• Pulled current main in an isolated checkout and reviewed all 40 commits since npm-v0.1.24 against current source and documentation.
• git diff --check passed.
• Prettier: --check .github/release-notes.md sdk/typescript/package.json passed.
• Verified that the release-note marker matches package version 0.1.25 and all five versioned documentation links resolve to files and headings in current main.

Runtime suites were not rerun for this documentation-only refresh. Required hosted CI and review must pass on the updated head.

Risk and rollout

Merging the bump starts the existing release process after node-ci succeeds for the exact merged commit; npm publication uses the protected environment. Before merging, confirm 0.1.25 remains unpublished and refresh the notes if more changes reach main. Container publication remains separate, and existing stable container tags are not updated in place.

Public disclosure review

Reviewed the existing PR artifacts and this update; the added content contains only public technical behavior and public repository links. No logs, screenshots, or attachments are added.

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[mldangelo-oai]

@codex review

Please review the release bump and notes at c6616be.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-30T06:35:43.597860Z	c6616be	Manual request
🔒 Security Review	✅ Completed 2026-09-01T23:43:10.748690Z	e6068f8	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: c6616be91d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".