1.3.9 — Codex updates and clearer Telegram panels

Highlights

• Codex updates from Telegram: find the update button under Tools → Codex Maintenance, below reports and backups. Administrator checks, expiring previews and installation locks guard activation. Updates are staged using the official installer, wait for active work and final replies, preserve queued requests and account/model settings, verify services, and support rollback.
• One update panel: progress and the final success or failure result edit the original message, including after service restarts. Completion no longer adds a separate message or leaves “starting” behind.
• Quiet menu closing: Close deletes the menu message without adding a confirmation message.
• Reliable cleanup: candidates removed after planning are skipped instead of producing missing-file errors.
• Worker startup readiness: bounded handshake retries handle transient socket startup errors before bot activation; genuine failures remain visible.
• Security and dependencies: patched brace-expansion and ip-address, plus refreshed public Codex SDK/CLI and npm packages. Security checks remain enabled.

Verification

• Full local verification: 852 tests passed, 1 skipped; syntax, lint, formatting, types, architecture and localization checks passed.
• Security audit: 0 vulnerabilities.
• GitHub Actions CI: all seven jobs passed on the release commit, including Node.js 18/20/22/24/26, integration coverage and the security audit.
• GitHub Actions Release: passed; the annotated tag matches package version 1.3.9.
• Package contents checked, including executable bot/worker entry points and the update runtime.

What's Changed

• build(deps): bump the npm-dependencies group with 2 updates by @dependabot[bot] in #89
• Update Codex packages by @woosungchoi in #90
• build(deps): bump the npm-dependencies group with 2 updates by @dependabot[bot] in #91
• Update Codex packages by @woosungchoi in #92

Full Changelog: v1.3.8...v1.3.9