Codex Security 0.1.29

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)
• bound source preview reads (#947)
• align filter controls and dropdown carets (#949)
• match filter control borders (#957)
• make dashboard tables sortable (#958)
• bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript (#955)
• tolerate transient setup failures and slow Windows runners (#953)
• reject line breaks in inventory paths. (#961)
• bump the third-party group across 3 directories with 7 updates (#954)
• keep model-authored runtime status out of finalized reports (#703)
• show progress while patching findings (#931)
• deduplicate string-form openQuestions in merge_saved_results (#951)
• emit structured JSON errors for failed scans (#709)
• preserve undecided findings after model refusals (#960)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

What's Changed

Features

• feat(cli): support custom patch validation prompts by @kmbroai in #940
• feat(serve): make dashboard tables sortable by @mluck-openai in #958

Fixes

• fix(logs): stream large saved scan JSON output by @mldangelo-oai in #932
• fix(logs): prefer complete saved rollout copies by @mldangelo-oai in #933
• fix: seal drafts with empty artifact lists by @ianw-oai in #941
• fix(plugin): include Terraform files in scan inventories by @mluck-openai in #944
• fix(targets): resolve Git metadata outside its config by @mldangelo-oai in #935
• fix: redirect findings service root to dashboard by @mluck-openai in #948
• fix(plugin): bound source preview reads by @mluck-openai in #947
• fix(dashboard): align filter controls and dropdown carets by @mluck-openai in #949
• fix(dashboard): match filter control borders by @mluck-openai in #957
• fix(ci): tolerate transient setup failures and slow Windows runners by @mldangelo-oai in #953
• fix: reject line breaks in inventory paths. by @mluck-openai in #961
• fix(plugin): keep model-authored runtime status out of finalized reports by @russlan23 in #703
• fix(cli): show progress while patching findings by @ianw-oai in #931
• fix(workbench): deduplicate string-form openQuestions in merge_saved_results by @Ultron09 in #951
• fix(cli): emit structured JSON errors for failed scans by @Hughhhhcoder in #709
• fix(dedupe): preserve undecided findings after model refusals by @milan-oai in #960

Documentation

• docs: run README CLI commands with npx by @mluck-openai in #945

Other changes

• chore(deps): bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory by @dependabot[bot] in #936
• chore(deps): bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript by @dependabot[bot] in #937
• chore(deps): bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript by @dependabot[bot] in #955
• chore(deps): bump the third-party group across 3 directories with 7 updates by @dependabot[bot] in #954

New Contributors

• @mluck-openai made their first contribution in #944
• @russlan23 made their first contribution in #703
• @milan-oai made their first contribution in #960

Full Changelog: npm-v0.1.28...npm-v0.1.29