Codex Security 0.1.12

What's Changed

Features

• feat(cli): support maximum reasoning effort by @mldangelo-oai in #428
• feat(bulk-scan): enforce a cost limit for each repository by @ianw-oai in #379

Fixes

• fix: restore Codex Security attribution and completed scans by @mldangelo-oai in #371
• fix: keep bulk-scan progress observer failures nonfatal by @mldangelo-oai in #390
• fix: recover cleanly when the scan dashboard cannot start by @mldangelo-oai in #391
• fix: paginate GitHub organizations in bulk-scan discovery by @mldangelo-oai in #392
• fix: route explicit scan cancellation through its lifecycle tool by @mldangelo-oai in #393
• fix: keep optional preflight capability checks advisory by @mldangelo-oai in #394
• fix(triage): honor explicitly selected GitHub connectors by @mldangelo-oai in #415
• fix(skills): align compact diff validation and attack paths by @mldangelo-oai in #414
• fix(preflight): accept valid Unicode progress issues by @mldangelo-oai in #413
• fix(scan): keep diff previews inside the repository by @mldangelo-oai in #372
• fix(cli): keep terminal reporting failures nonfatal by @mldangelo-oai in #412
• fix(sdk): cancel recursive knowledge-base discovery by @mldangelo-oai in #424
• fix(plugin): scope runtime checks to selected preflight profile by @mldangelo-oai in #425
• fix(git): preserve safe user Git configuration by @mldangelo-oai in #410
• fix(multiscan): keep campaign directories user-owned by @mldangelo-oai in #420
• fix(runtime): allow safe relative executable PATH entries by @mldangelo-oai in #408
• fix(scan): keep state and output paths disjoint by @mldangelo-oai in #418
• fix(cli): keep optional update notices nonblocking by @mldangelo-oai in #409
• fix(cli): include scan-owned Deep worker session logs by @mldangelo-oai in #426
• fix(cli): hide unavailable Deep scan stage and file progress by @daneschneider-oai in #437
• fix(plugin): disambiguate duplicate coverage surface identifiers by @daneschneider-oai in #438
• fix(cli): read only regular prompt and finding files by @mldangelo-oai in #419
• fix(plugin): retain remediation guidance in finding previews by @mldangelo-oai in #423
• fix(scan): keep committed diff inventories consistent by @mldangelo-oai in #370
• fix: make scans and bulk scans work reliably on Windows by @mldangelo-oai in #429
• fix(runtime): enforce strict scan approval boundaries by @mldangelo-oai in #430
• fix(sdk): allow parallel ChatGPT scans by @soyeon-oai in #440

Documentation

• docs: correct runtime and scan guidance by @mldangelo-oai in #358
• docs: add public pull request disclosure safeguards by @kmbroai in #384
• docs: align container and completed-scan examples by @mldangelo-oai in #385
• docs: align scan write-up filenames with the findings schema by @mldangelo-oai in #357

Other changes

• refactor: remove unused scan finalization helpers by @mldangelo-oai in #389
• ci: remove redundant package builds and unreachable setup by @mldangelo-oai in #397
• refactor(release): remove unreachable DER parser guards by @mldangelo-oai in #399
• chore: remove stale comments and redundant test indirection by @mldangelo-oai in #402
• refactor(runtime): remove unused plugin projection path by @mldangelo-oai in #395
• refactor(workbench): share safe source path validation by @mldangelo-oai in #396
• refactor(workbench): remove duplicate migration relocation by @mldangelo-oai in #400
• perf(workbench): reuse ordinary scan context results by @mldangelo-oai in #416
• ci: skip Bun setup for Windows package verification by @mldangelo-oai in #404
• refactor(plugin): stream normalized candidate rows by @mldangelo-oai in #422
• chore: ignore internal-only directories by @kmbroai in #433
• refactor(plugin): simplify Deep scans with complete Standard workers by @daneschneider-oai in #434

Full Changelog: npm-v0.1.11...npm-v0.1.12