Codex Security 0.1.6

What's Changed

Features

• feat: Expose deep scan controls by @ianw-oai in #188
• feat: share knowledge bases across bulk scans by @ianw-oai in #237
• feat: add verbose security scan diagnostics by @mldangelo-oai in #63
• feat: Add OpenRouter and Fireworks inference providers by @ianw-oai in #245
• feat: persist scan lifecycle and model metadata by @mldangelo-oai in #264
• feat: measure security scan tokens across workers by @mldangelo-oai in #265
• feat: unify Deep Scan and Standard scan phases by @mldangelo-oai in #267
• feat: support model-native Deep Scan workers by @mldangelo-oai in #270
• feat: show live security scan progress by @ianw-oai in #261
• feat(sdk): surface trusted cyber access status in scans by @mldangelo-oai in #236

Fixes

• fix: handle missing release tags safely by @mldangelo-oai in #182
• fix: reconcile SQLite migrations across plugin and npm releases by @mldangelo-oai in #183
• fix: validate deep-scan claims before taking ownership by @mldangelo-oai in #213
• fix(ci): make production dependency audits advisory by @mldangelo-oai in #242
• fix: coalesce cost polling without changing tracker API by @mldangelo-oai in #198
• fix: preserve findings with list severity conditions by @mldangelo-oai in #184
• fix: reset stale deep-scan runtime configuration by @mldangelo-oai in #214
• fix(cli): render nested scan configuration values as JSON by @mldangelo-oai in #246
• fix: make verbose scan reruns and cost failures actionable by @mldangelo-oai in #253
• fix: forward enterprise proxy and certificate settings by @mldangelo-oai in #263
• fix: repair incomplete deep-scan schema migrations by @mldangelo-oai in #266
• fix: keep active scan context current by @mldangelo-oai in #268
• fix: preserve URLs in security scan context by @mldangelo-oai in #269
• fix: repair legacy workbench migration collisions by @mldangelo-oai in #271
• fix: make diff-scan writeups and hardening optional by @mldangelo-oai in #272
• fix: fail stale-target scans closed in CI by @mldangelo-oai in #273
• fix: harden Deep Scan worker startup and finalization by @mldangelo-oai in #274
• fix: support managed Windows credential authentication by @mldangelo-oai in #280

Documentation

• docs: welcome open-source maintainers and contributors by @mldangelo-oai in #107
• docs: improve vulnerability writeup quality by @mldangelo-oai in #262

Other changes

• Handle quoted authentication URLs by @dipeshbabu in #179
• [codex-security] cut npm releases only after public CI succeeds by @soyeon-oai in #235
• chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /sdk/typescript by @dependabot[bot] in #243
• chore(plugin): sync bundled Codex Security plugin to 0.1.16 by @kmbroai in #281
• chore(plugin): bump bundled plugin version to 0.1.15 by @mldangelo-oai in #279

New Contributors

• @dipeshbabu made their first contribution in #179
• @soyeon-oai made their first contribution in #235
• @dependabot[bot] made their first contribution in #243

Full Changelog: npm-v0.1.5...npm-v0.1.6